$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gKB-SrDXswFus2hWREJDDm2KOcw.roa File: gKB-SrDXswFus2hWREJDDm2KOcw.roa (raw, json) Hash identifier: WmT599MX9KkobqDFJUHegGupGwbbiEzopr+HTxf3Usk= Subject key identifier: 80:A0:7E:4A:B0:D7:B3:01:6E:B3:68:56:44:42:43:0E:6D:8A:39:CC Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0140 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gKB-SrDXswFus2hWREJDDm2KOcw.roa Signing time: Tue 31 Mar 2026 07:47:48 +0000 ROA not before: Tue 31 Mar 2026 07:47:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 14821 IP address blocks: 153.254.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=80A07E4AB0D7B3016EB368564442430E6D8A39CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:7e:10:1e:cb:27:c5:3b:af:c2:20:3a:bd: cc:8c:8f:65:b6:3e:78:8d:86:c6:ea:c9:bf:08:eb: 90:4c:2d:f8:59:db:cd:fc:61:28:1b:c0:c9:36:e5: ae:50:80:6b:d2:6c:e9:ef:46:df:15:33:cb:bf:55: 90:8d:d4:04:8f:c9:25:f1:f0:47:bc:72:37:cb:0f: 43:03:04:33:f1:79:d2:61:e9:76:8d:5e:5b:af:5b: a8:a4:19:39:7b:bf:f9:c8:e8:b9:de:c8:2a:69:90: c3:3c:0a:6d:c5:9c:bd:bf:2f:f3:c1:fb:8c:be:bb: 34:14:38:53:26:21:b3:12:f2:98:b3:01:53:a3:d0: 8a:0d:fd:37:5d:3c:f3:76:68:e3:4b:a8:fa:3c:15: 3c:23:be:c9:f5:7e:00:82:1f:f8:b6:c3:34:12:1a: 11:6b:32:7f:79:6d:44:ed:c4:66:46:77:4c:d9:79: 86:b5:0b:de:35:26:b3:d8:fb:3b:b5:b3:86:a5:b5: 69:21:7a:a8:46:ba:84:4f:14:97:07:79:9c:5a:a1: 40:a9:c1:c7:0d:3d:1d:d9:6b:42:25:d4:41:cc:56: d1:4c:26:9e:50:57:08:b6:a3:e5:a2:ac:80:c0:90: 53:39:97:3f:15:34:be:78:4a:ed:89:d1:45:9d:dc: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A0:7E:4A:B0:D7:B3:01:6E:B3:68:56:44:42:43:0E:6D:8A:39:CC X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gKB-SrDXswFus2hWREJDDm2KOcw.roa sbgp-ipAddrBlock: critical IPv4: 153.254.111.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:16:88:cf:a4:2d:ef:8f:35:1e:ff:f9:79:5f:56:48:0c:01: 8a:14:08:cf:25:fb:c6:32:e1:f8:2a:ae:67:63:ad:44:48:e8: 94:d3:06:ca:22:74:c2:06:79:f7:56:e4:0a:3d:6a:49:69:dd: 53:f3:d3:ad:a6:0d:bc:3c:70:08:36:91:42:6b:d4:cb:fc:84: 20:95:de:54:8a:12:9a:20:ed:e5:08:9a:04:40:2d:ec:1b:e3: ef:d7:46:82:7d:50:47:65:ed:43:3b:61:27:f0:22:5e:4d:25: 3e:fa:12:ee:c8:6d:b3:a3:f1:63:a9:b9:1e:c5:1a:21:1c:12: 34:62:c3:ad:9e:bd:38:0d:15:50:41:ec:10:a7:03:a5:0a:72: 87:d3:a1:76:47:c5:67:5e:0e:26:18:f5:0d:de:bb:4f:fd:09: 76:92:26:12:9f:aa:d4:a3:ba:97:12:58:e2:6c:f5:48:59:96: 6b:ab:03:d9:0d:4b:20:a1:09:92:18:0d:d5:f2:6e:b6:6a:3e: 2a:3c:29:27:f7:02:f3:44:a2:f9:2a:26:35:a0:e2:f5:10:14: 29:50:51:32:b6:cb:6c:1b:09:20:e3:c3:4c:4b:4a:f7:40:2b: a8:dc:69:47:9a:ed:01:f1:ee:56:46:db:39:ff:7c:4b:8f:35: 7b:07:70:39 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwQTA3RTRBQjBEN0Iz MDE2RUIzNjg1NjQ0NDI0MzBFNkQ4QTM5Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQGX4QHssnxTuvwiA6vcyMj2W2PniNhsbqyb8I65BMLfhZ2838 YSgbwMk25a5QgGvSbOnvRt8VM8u/VZCN1ASPySXx8Ee8cjfLD0MDBDPxedJh6XaN XluvW6ikGTl7v/nI6LneyCppkMM8Cm3FnL2/L/PB+4y+uzQUOFMmIbMS8pizAVOj 0IoN/TddPPN2aONLqPo8FTwjvsn1fgCCH/i2wzQSGhFrMn95bUTtxGZGd0zZeYa1 C941JrPY+zu1s4altWkheqhGuoRPFJcHeZxaoUCpwccNPR3Za0Il1EHMVtFMJp5Q Vwi2o+WirIDAkFM5lz8VNL54Su2J0UWd3CdbAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUgKB+SrDXswFus2hWREJDDm2KOcwwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9nS0ItU3JEWHN3RnVzMmhXUkVKRERtMktPY3cucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmf5vMA0GCSqGSIb3DQEBCwUA A4IBAQAtFojPpC3vjzUe//l5X1ZIDAGKFAjPJfvGMuH4Kq5nY61ESOiU0wbKInTC Bnn3VuQKPWpJad1T89Otpg28PHAINpFCa9TL/IQgld5UihKaIO3lCJoEQC3sG+Pv 10aCfVBHZe1DO2En8CJeTSU++hLuyG2zo/FjqbkexRohHBI0YsOtnr04DRVQQewQ pwOlCnKH06F2R8VnXg4mGPUN3rtP/Ql2kiYSn6rUo7qXEljibPVIWZZrqwPZDUsg oQmSGA3V8m62aj4qPCkn9wLzRKL5KiY1oOL1EBQpUFEytstsGwkg48NMS0r3QCuo 3GlHmu0B8e5WRts5/3xLjzV7B3A5 -----END CERTIFICATE-----Generated at Sun Apr 19 11:28:08 2026 by rpki-client