$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2JhDTXTUxR9Q4zYdScXfAiedBSg.roa File: 2JhDTXTUxR9Q4zYdScXfAiedBSg.roa (raw, json) Hash identifier: WvskDYz1ZtLIplhGQnbtAzNuhmcVun2HUCuuPSYshPg= Subject key identifier: D8:98:43:4D:74:D4:C5:1F:50:E3:36:1D:49:C5:DF:02:27:9D:05:28 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 016B Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2JhDTXTUxR9Q4zYdScXfAiedBSg.roa Signing time: Tue 31 Mar 2026 07:48:12 +0000 ROA not before: Tue 31 Mar 2026 07:48:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 3949 IP address blocks: 61.213.187.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:48:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D898434D74D4C51F50E3361D49C5DF02279D0528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:9f:db:5e:7d:30:b7:81:a0:27:40:0f:66: 68:77:d0:a8:ed:ac:5c:80:83:55:02:16:b5:46:d2: 6c:ac:93:4a:e3:bb:02:3b:af:9d:92:ad:29:fb:d3: 9c:b7:a1:41:80:d2:2b:89:32:41:55:09:8c:29:ea: a3:1b:4e:9f:56:e0:28:9d:c8:13:c5:0b:ab:82:85: de:a8:32:8b:72:c7:56:0d:21:6d:96:4f:48:2d:ad: 27:fd:f6:74:e8:f8:c2:11:a0:f4:a9:d9:be:0f:0c: 17:23:58:7a:9b:16:d2:f0:5c:00:51:eb:46:32:bc: 7c:24:e5:7f:14:07:8f:e6:e9:c6:f2:c0:47:6e:fe: 9a:71:74:6a:9b:f4:7f:3a:43:23:19:13:37:1b:75: f7:c1:c9:66:79:cc:68:4a:65:08:b0:9f:ea:1d:c0: 94:1d:8a:77:2a:7a:a6:92:90:d1:31:b3:dd:48:ac: 7f:9a:d2:58:b9:e1:48:28:81:10:e0:07:65:e6:e8: 8e:c4:b3:4d:33:e7:fa:cc:8d:c7:54:23:26:dc:0d: 42:ad:8d:4b:1f:90:9e:4e:b2:c7:7e:58:2b:b7:0d: 6f:a2:68:dd:10:a7:26:5e:39:a2:b9:e0:7b:78:6d: 32:e5:d6:cf:68:92:6c:fd:40:4a:e0:e8:df:b9:eb: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:43:4D:74:D4:C5:1F:50:E3:36:1D:49:C5:DF:02:27:9D:05:28 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2JhDTXTUxR9Q4zYdScXfAiedBSg.roa sbgp-ipAddrBlock: critical IPv4: 61.213.187.0/26 Signature Algorithm: sha256WithRSAEncryption 7e:bb:d6:ac:c4:ca:c2:03:76:a5:b4:29:ea:af:33:4b:42:2a: 0b:26:d3:fb:11:28:62:32:3e:cf:8f:7b:38:e3:ef:22:49:d0: 6e:00:9a:fb:08:9b:d6:06:d5:c6:10:96:fa:c2:5c:ca:17:7e: 06:68:6c:10:eb:df:08:19:6e:35:19:fc:c7:c4:b6:1b:54:4c: 6f:82:fc:29:32:9e:d4:45:ea:49:5f:2d:49:d9:aa:df:d9:33: ce:ac:57:41:c2:48:1d:d0:04:ee:0a:6f:59:80:41:d9:1c:dc: 7e:3f:3d:2f:bb:4a:4d:4e:eb:74:c0:7c:c6:90:32:fa:71:95: 1f:cf:0a:8a:b0:d5:16:cc:f1:ed:da:f8:6c:6b:70:e4:ce:1a: 80:3f:fc:b0:0f:e3:4d:9f:f8:99:59:84:8a:3d:f7:b6:94:94: 43:2d:6d:1f:21:dc:76:ac:58:75:c9:1c:45:fa:33:fd:be:51: 6c:07:d8:b9:6b:e1:3d:0d:8b:90:a3:a9:32:95:ab:04:bf:34: 5d:ae:4a:82:4c:7e:54:ca:34:29:b2:22:c0:40:e5:a2:63:e0: 4b:d8:ac:2d:7d:03:85:b1:e6:de:44:ad:33:c5:9b:c0:af:14: e4:f3:3f:8b:cb:04:0b:85:cf:f2:f1:8b:37:2d:7f:b2:ee:26: 87:e0:b7:ab -----BEGIN CERTIFICATE----- MIIEwjCCA6qgAwIBAgICAWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ4MTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4OTg0MzRENzRENEM1 MUY1MEUzMzYxRDQ5QzVERjAyMjc5RDA1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9CZ/bXn0wt4GgJ0APZmh30KjtrFyAg1UCFrVG0mysk0rjuwI7 r52SrSn705y3oUGA0iuJMkFVCYwp6qMbTp9W4CidyBPFC6uChd6oMotyx1YNIW2W T0gtrSf99nTo+MIRoPSp2b4PDBcjWHqbFtLwXABR60YyvHwk5X8UB4/m6cbywEdu /ppxdGqb9H86QyMZEzcbdffByWZ5zGhKZQiwn+odwJQdincqeqaSkNExs91IrH+a 0li54UgogRDgB2Xm6I7Es00z5/rMjcdUIybcDUKtjUsfkJ5Ossd+WCu3DW+iaN0Q pyZeOaK54Ht4bTLl1s9okmz9QErg6N+563bdAgMBAAGjggHeMIIB2jAdBgNVHQ4E FgQU2JhDTXTUxR9Q4zYdScXfAiedBSgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC8ySmhEVFhUVXhSOVE0ellkU2NYZkFpZWRCU2cucm9h MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPdW7ADANBgkqhkiG9w0BAQsF AAOCAQEAfrvWrMTKwgN2pbQp6q8zS0IqCybT+xEoYjI+z497OOPvIknQbgCa+wib 1gbVxhCW+sJcyhd+BmhsEOvfCBluNRn8x8S2G1RMb4L8KTKe1EXqSV8tSdmq39kz zqxXQcJIHdAE7gpvWYBB2Rzcfj89L7tKTU7rdMB8xpAy+nGVH88KirDVFszx7dr4 bGtw5M4agD/8sA/jTZ/4mVmEij33tpSUQy1tHyHcdqxYdckcRfoz/b5RbAfYuWvh PQ2LkKOpMpWrBL80Xa5Kgkx+VMo0KbIiwEDlomPgS9isLX0DhbHm3kStM8WbwK8U 5PM/i8sEC4XP8vGLNy1/su4mh+C3qw== -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:42 2026 by rpki-client