$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ncay3b8p5-Hl3JCRFPC1nc6zmKc.roa File: ncay3b8p5-Hl3JCRFPC1nc6zmKc.roa (raw, json) Hash identifier: 0PUOtopRYweHMtTLkw2vxQzZcXmcO7xbe3+7cx5WtjU= Subject key identifier: 9D:C6:B2:DD:BF:29:E7:E1:E5:DC:90:91:14:F0:B5:9D:CE:B3:98:A7 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 013D Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ncay3b8p5-Hl3JCRFPC1nc6zmKc.roa Signing time: Tue 31 Mar 2026 07:47:47 +0000 ROA not before: Tue 31 Mar 2026 07:47:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 203849 IP address blocks: 153.254.102.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9DC6B2DDBF29E7E1E5DC909114F0B59DCEB398A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:56:cf:d4:db:5d:f3:6e:6b:02:9e:9f:ed: 98:08:f0:ec:5c:01:1d:87:35:d1:16:d6:ea:69:4b: 58:f6:d1:91:89:99:21:16:8f:41:0c:77:bc:8c:ef: f6:77:8f:74:e5:03:16:40:15:22:10:20:21:b8:d2: c7:b8:9e:49:0d:eb:9c:f7:99:ad:66:e4:6d:b6:65: 32:6b:b8:12:92:39:28:48:18:af:63:5e:0d:79:7b: a6:f7:aa:5f:8e:a6:8b:7b:11:d1:e2:48:07:cc:6e: a7:c0:c5:76:93:2e:db:d3:59:64:11:b0:b0:6c:9d: e6:f2:e1:7d:9e:15:87:1b:58:56:7b:c0:73:13:fb: 71:d1:40:48:21:ee:0b:c9:59:27:3a:e2:40:57:b9: 28:4c:3c:95:dc:90:78:28:f9:fe:6d:00:6c:5f:fc: fc:15:e2:62:a9:e4:7f:12:b9:78:7e:2a:b5:bc:c8: e5:82:59:54:68:ad:f7:98:29:e8:89:80:29:ba:f7: dd:6d:6f:b1:56:36:32:44:4f:6a:a9:4d:f5:68:71: 2a:d2:0d:75:6f:73:23:87:25:8a:e8:1b:16:05:c9: 69:d4:66:14:3a:fa:c4:43:cb:ea:7f:95:d5:e5:99: 34:16:d2:8b:c4:b2:b1:cb:a3:66:d8:c3:b7:97:58: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C6:B2:DD:BF:29:E7:E1:E5:DC:90:91:14:F0:B5:9D:CE:B3:98:A7 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ncay3b8p5-Hl3JCRFPC1nc6zmKc.roa sbgp-ipAddrBlock: critical IPv4: 153.254.102.0/26 Signature Algorithm: sha256WithRSAEncryption 20:d0:a3:29:0c:45:ca:d8:da:4c:7e:2a:5c:90:2e:7d:06:22: 73:07:32:1d:92:5a:b8:fc:94:4f:6b:37:17:72:fc:7e:a9:67: 44:2f:e7:7a:87:74:54:62:5b:2c:67:62:82:24:18:37:20:ab: f5:43:40:f1:3a:1a:34:50:ee:fe:50:6c:9d:b4:0c:a4:59:8b: 42:0e:9c:da:6b:db:d7:12:5a:9d:8f:de:e7:e2:9e:3b:00:f2: 1c:66:f7:3a:1d:30:4c:2d:a9:02:d1:96:95:3a:2c:58:27:24: 3c:24:10:2b:83:0e:b9:12:51:b2:e2:e4:bc:fc:9a:a1:e7:2f: bb:2f:a4:94:25:61:26:bb:a6:0b:85:18:b3:3b:65:f0:46:7c: 1d:57:a7:43:2f:f6:ba:6d:bc:a9:2d:0a:f6:af:6b:4f:18:41: b5:76:a6:7a:4a:16:93:a7:b6:30:28:af:1e:37:ca:55:86:c1: c5:42:6e:ff:22:62:f8:06:86:0b:e9:af:c6:9f:5e:50:65:b2: c3:fe:02:d1:80:0f:2f:45:e6:07:da:23:5e:f0:98:0b:42:e5: 11:07:8f:71:3e:a3:3b:ee:0a:24:c1:91:8b:14:09:45:a5:c0: c7:e5:13:0e:77:48:c4:e7:01:2b:6b:68:b2:8e:ee:2f:aa:8e: 88:1c:ab:55 -----BEGIN CERTIFICATE----- MIIEwjCCA6qgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEQzZCMkREQkYyOUU3 RTFFNURDOTA5MTE0RjBCNTlEQ0VCMzk4QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvtVbP1Ntd825rAp6f7ZgI8OxcAR2HNdEW1uppS1j20ZGJmSEW j0EMd7yM7/Z3j3TlAxZAFSIQICG40se4nkkN65z3ma1m5G22ZTJruBKSOShIGK9j Xg15e6b3ql+Opot7EdHiSAfMbqfAxXaTLtvTWWQRsLBsneby4X2eFYcbWFZ7wHMT +3HRQEgh7gvJWSc64kBXuShMPJXckHgo+f5tAGxf/PwV4mKp5H8SuXh+KrW8yOWC WVRorfeYKeiJgCm6991tb7FWNjJET2qpTfVocSrSDXVvcyOHJYroGxYFyWnUZhQ6 +sRDy+p/ldXlmTQW0ovEsrHLo2bYw7eXWP3tAgMBAAGjggHeMIIB2jAdBgNVHQ4E FgQUncay3b8p5+Hl3JCRFPC1nc6zmKcwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9uY2F5M2I4cDUtSGwzSkNSRlBDMW5jNnptS2Mucm9h MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGmf5mADANBgkqhkiG9w0BAQsF AAOCAQEAINCjKQxFytjaTH4qXJAufQYicwcyHZJauPyUT2s3F3L8fqlnRC/neod0 VGJbLGdigiQYNyCr9UNA8ToaNFDu/lBsnbQMpFmLQg6c2mvb1xJanY/e5+KeOwDy HGb3Oh0wTC2pAtGWlTosWCckPCQQK4MOuRJRsuLkvPyaoecvuy+klCVhJrumC4UY sztl8EZ8HVenQy/2um28qS0K9q9rTxhBtXamekoWk6e2MCivHjfKVYbBxUJu/yJi +AaGC+mvxp9eUGWyw/4C0YAPL0XmB9ojXvCYC0LlEQePcT6jO+4KJMGRixQJRaXA x+UTDndIxOcBK2toso7uL6qOiByrVQ== -----END CERTIFICATE-----Generated at Sun Apr 19 09:42:33 2026 by rpki-client