$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/253L1Qqtpzsw1nBI-n1_Ehw6wrw.roa File: 253L1Qqtpzsw1nBI-n1_Ehw6wrw.roa (raw, json) Hash identifier: CBYLJBiZ1P1fciz34GSPK0dKYvo+73Oa1OzIbkmxGvI= Subject key identifier: DB:9D:CB:D5:0A:AD:A7:3B:30:D6:70:48:FA:7D:7F:12:1C:3A:C2:BC Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 013E Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/253L1Qqtpzsw1nBI-n1_Ehw6wrw.roa Signing time: Tue 31 Mar 2026 07:47:47 +0000 ROA not before: Tue 31 Mar 2026 07:47:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 399077 IP address blocks: 153.254.103.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DB9DCBD50AADA73B30D67048FA7D7F121C3AC2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:93:72:58:eb:dc:05:6e:6c:7f:72:d7:4c: 9d:4d:78:b8:a6:b8:1b:a9:c2:c9:75:6e:50:d1:a6: ef:32:41:6d:f2:e9:38:e0:b0:ad:fb:08:81:2d:f7: 17:d9:42:57:25:75:a5:46:96:22:17:a8:e3:5b:40: 4d:66:39:fd:b2:ab:68:18:c0:80:15:2d:b1:09:db: 20:e6:d1:c5:88:81:b4:c6:e1:0b:29:d7:10:a1:c2: b0:59:42:30:1b:16:17:36:e8:62:31:a2:bd:64:8b: 9f:89:3d:88:69:8c:1d:51:96:6f:c7:17:9a:f0:1a: e2:7e:ae:a3:79:86:98:ad:b5:1a:1c:28:31:fd:37: 6c:53:4e:76:a3:29:26:76:9f:71:10:64:44:43:ea: 47:dd:70:2d:f8:a1:8a:c5:0c:d8:af:cb:af:bd:20: 8a:eb:0b:91:36:93:54:4a:68:39:5d:8f:e8:cc:1a: bc:b1:84:6f:b4:47:2a:88:57:b2:a5:b3:33:31:f8: b2:23:da:a2:d1:ab:43:dc:ae:80:cc:e8:c3:f4:4f: c7:cf:97:b4:0b:70:fc:92:24:de:1c:af:8a:5d:9b: ed:ec:c3:16:dc:99:fd:96:7d:57:39:fd:6a:20:1a: 63:c2:4d:62:f4:68:c3:e7:a2:83:ee:d6:3d:9a:24: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:CB:D5:0A:AD:A7:3B:30:D6:70:48:FA:7D:7F:12:1C:3A:C2:BC X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/253L1Qqtpzsw1nBI-n1_Ehw6wrw.roa sbgp-ipAddrBlock: critical IPv4: 153.254.103.0/25 Signature Algorithm: sha256WithRSAEncryption 5a:78:d2:cc:4c:b5:7c:1e:48:9a:09:7e:51:0c:0f:ef:27:c6: 6b:7a:ec:85:44:8b:1f:c7:12:d4:de:19:3e:64:4e:37:5c:4a: 00:a7:9a:d6:66:d4:d1:71:ad:a1:c9:9a:c3:be:b2:93:64:54: c1:b1:f3:7f:63:18:ff:70:2e:86:87:09:a7:00:3d:95:ab:63: e2:7f:84:d1:22:1d:b5:51:04:39:97:49:f3:e4:d4:60:c3:e8: 64:c8:16:09:ca:9d:14:06:d0:0a:ad:89:93:a7:d8:9d:a6:e6: 7c:58:34:72:d4:83:9f:7a:11:f1:2c:a7:60:46:7a:fb:46:57: 37:84:21:f9:64:6e:ab:11:3e:fa:46:88:8e:a5:49:54:a6:12: 9e:8b:1f:bc:db:5b:e1:5a:0c:24:44:b3:86:c7:07:f0:fb:a9: 14:09:bf:1a:eb:eb:3c:9e:ca:6e:b0:53:47:1e:93:47:5c:1c: 4e:52:5d:6c:3f:59:37:8b:4d:bb:d1:91:29:7d:1a:a7:fe:e6: 55:e1:b8:50:b5:94:58:59:9c:7d:09:8e:ea:c6:69:65:0e:46: e5:41:a1:75:7a:e9:a5:d1:fa:fe:ad:a6:10:d5:30:78:35:66: 9d:94:c6:6d:1f:b5:19:b1:d6:2a:32:dc:ab:ed:d2:94:c2:99: a5:eb:30:3f -----BEGIN CERTIFICATE----- MIIEwjCCA6qgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERCOURDQkQ1MEFBREE3 M0IzMEQ2NzA0OEZBN0Q3RjEyMUMzQUMyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOWZNyWOvcBW5sf3LXTJ1NeLimuBupwsl1blDRpu8yQW3y6Tjg sK37CIEt9xfZQlcldaVGliIXqONbQE1mOf2yq2gYwIAVLbEJ2yDm0cWIgbTG4Qsp 1xChwrBZQjAbFhc26GIxor1ki5+JPYhpjB1Rlm/HF5rwGuJ+rqN5hpittRocKDH9 N2xTTnajKSZ2n3EQZERD6kfdcC34oYrFDNivy6+9IIrrC5E2k1RKaDldj+jMGryx hG+0RyqIV7KlszMx+LIj2qLRq0PcroDM6MP0T8fPl7QLcPySJN4cr4pdm+3swxbc mf2WfVc5/WogGmPCTWL0aMPnooPu1j2aJAQnAgMBAAGjggHeMIIB2jAdBgNVHQ4E FgQU253L1Qqtpzsw1nBI+n1/Ehw6wrwwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC8yNTNMMVFxdHB6c3cxbkJJLW4xX0VodzZ3cncucm9h MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHmf5nADANBgkqhkiG9w0BAQsF AAOCAQEAWnjSzEy1fB5Imgl+UQwP7yfGa3rshUSLH8cS1N4ZPmRON1xKAKea1mbU 0XGtocmaw76yk2RUwbHzf2MY/3AuhocJpwA9latj4n+E0SIdtVEEOZdJ8+TUYMPo ZMgWCcqdFAbQCq2Jk6fYnabmfFg0ctSDn3oR8SynYEZ6+0ZXN4Qh+WRuqxE++kaI jqVJVKYSnosfvNtb4VoMJESzhscH8PupFAm/GuvrPJ7KbrBTRx6TR1wcTlJdbD9Z N4tNu9GRKX0ap/7mVeG4ULWUWFmcfQmO6sZpZQ5G5UGhdXrppdH6/q2mENUweDVm nZTGbR+1GbHWKjLcq+3SlMKZpeswPw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:19:38 2026 by rpki-client