$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/TBEl3HURKUyxJ-u1BAtAr_jaTQw.roa File: TBEl3HURKUyxJ-u1BAtAr_jaTQw.roa (raw, json) Hash identifier: Avekt2tJFRx8PZXhnvsFQMEER9haEQunjn7eLKYb0zY= Subject key identifier: 4C:11:25:DC:75:11:29:4C:B1:27:EB:B5:04:0B:40:AF:F8:DA:4D:0C Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0143 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/TBEl3HURKUyxJ-u1BAtAr_jaTQw.roa Signing time: Tue 31 Mar 2026 07:47:50 +0000 ROA not before: Tue 31 Mar 2026 07:47:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 3949 IP address blocks: 153.254.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4C1125DC7511294CB127EBB5040B40AFF8DA4D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a5:b3:18:5e:68:89:50:13:dc:7f:72:37:97: 63:d3:f5:3f:cb:34:d7:d2:1e:c3:53:f5:e9:6b:0a: 69:53:1d:ce:fd:10:c9:ed:68:ea:d2:5e:f9:67:d3: 69:f9:12:a4:95:26:12:9e:32:96:6b:08:40:3b:b9: 26:3e:1e:a7:f5:84:39:cd:f5:2e:28:de:11:a8:8b: d7:ab:8b:33:5e:fd:9d:94:74:7a:2c:57:29:ac:0e: 95:07:9f:c4:e1:6c:08:d2:99:03:ef:4c:cc:3b:12: 5f:d8:65:c0:e7:be:fc:59:c3:fd:db:90:33:13:83: a4:66:c9:8c:8b:2a:32:a4:83:e1:6a:0e:b7:74:d8: 2d:57:5e:27:50:4a:99:fb:1b:82:6a:91:4d:60:d6: c0:1a:56:7a:8d:87:49:1d:9c:7b:4e:6c:c2:41:84: b5:8f:e4:28:8a:f7:18:13:08:6c:55:9d:38:72:2e: 83:e6:82:e7:b3:b6:ec:fa:0a:b7:23:38:44:63:37: d5:06:ac:3a:93:9b:3c:ab:d0:53:b7:c8:58:84:f4: 0d:4a:86:f4:18:44:71:e0:15:17:c2:05:e2:32:9d: d7:62:4e:f3:01:e6:df:8a:46:35:b3:0c:96:ca:18: 46:bb:43:7e:ed:ec:78:ab:0a:23:ae:03:66:d0:d6: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:11:25:DC:75:11:29:4C:B1:27:EB:B5:04:0B:40:AF:F8:DA:4D:0C X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/TBEl3HURKUyxJ-u1BAtAr_jaTQw.roa sbgp-ipAddrBlock: critical IPv4: 153.254.172.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7f:f3:15:93:f6:07:c8:5d:83:bf:16:ef:78:52:19:e9:35: 37:ba:71:81:38:1d:28:21:13:ae:59:7d:35:24:fe:42:a8:9d: d5:58:1e:d0:58:c4:07:ec:ab:f9:b3:d0:a1:11:95:aa:32:6d: e5:8d:47:65:83:60:5d:8d:df:1d:09:29:a2:99:57:73:81:0a: 7b:6e:9d:29:c4:eb:e0:51:fb:2d:82:d0:22:5d:0e:e4:d2:9b: a1:c9:dd:79:24:35:64:18:2f:ee:68:6b:4a:07:c5:a3:e8:fd: 55:f9:43:78:4e:66:43:d3:f2:96:94:f7:80:a7:67:64:96:b7: 9f:19:cc:cb:31:77:15:48:3d:57:aa:ad:27:b7:1a:19:ff:42: 67:88:3c:1e:66:e2:43:fb:a0:ec:04:73:30:d8:58:bb:d7:82: b3:36:c3:5f:55:55:18:9d:d6:71:21:ec:40:87:48:b6:9a:fd: f2:cd:1f:82:d5:b3:a9:10:41:9f:31:2e:60:a8:60:67:70:ca: cd:ae:a3:10:50:f6:16:72:93:bf:be:4d:64:84:bf:ed:88:78: 41:da:c7:cc:fa:d3:64:ad:a4:99:8b:de:4e:a2:7e:59:d3:33: 68:8f:e8:5d:e5:e8:c3:6f:92:3b:a0:bd:89:4a:0e:a5:d2:9c: e6:af:c6:e5 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDMTEyNURDNzUxMTI5 NENCMTI3RUJCNTA0MEI0MEFGRjhEQTREMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxpbMYXmiJUBPcf3I3l2PT9T/LNNfSHsNT9elrCmlTHc79EMnt aOrSXvln02n5EqSVJhKeMpZrCEA7uSY+Hqf1hDnN9S4o3hGoi9erizNe/Z2UdHos VymsDpUHn8ThbAjSmQPvTMw7El/YZcDnvvxZw/3bkDMTg6RmyYyLKjKkg+FqDrd0 2C1XXidQSpn7G4JqkU1g1sAaVnqNh0kdnHtObMJBhLWP5CiK9xgTCGxVnThyLoPm gueztuz6CrcjOERjN9UGrDqTmzyr0FO3yFiE9A1KhvQYRHHgFRfCBeIynddiTvMB 5t+KRjWzDJbKGEa7Q37t7HirCiOuA2bQ1g4pAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUTBEl3HURKUyxJ+u1BAtAr/jaTQwwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9UQkVsM0hVUktVeXhKLXUxQkF0QXJfamFUUXcucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmf6sMA0GCSqGSIb3DQEBCwUA A4IBAQAuf/MVk/YHyF2DvxbveFIZ6TU3unGBOB0oIROuWX01JP5CqJ3VWB7QWMQH 7Kv5s9ChEZWqMm3ljUdlg2Bdjd8dCSmimVdzgQp7bp0pxOvgUfstgtAiXQ7k0puh yd15JDVkGC/uaGtKB8Wj6P1V+UN4TmZD0/KWlPeAp2dklrefGczLMXcVSD1Xqq0n txoZ/0JniDweZuJD+6DsBHMw2Fi714KzNsNfVVUYndZxIexAh0i2mv3yzR+C1bOp EEGfMS5gqGBncMrNrqMQUPYWcpO/vk1khL/tiHhB2sfM+tNkraSZi95Oon5Z0zNo j+hd5ejDb5I7oL2JSg6l0pzmr8bl -----END CERTIFICATE-----Generated at Fri Apr 17 06:51:49 2026 by rpki-client