$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/4Cst6stWcbyEHJqv_iJyoD2TeR8.roa File: 4Cst6stWcbyEHJqv_iJyoD2TeR8.roa (raw, json) Hash identifier: O4bbEc+zM/MfboEzdUhX53GpOVqRCwRl7H/GnPipaoA= Subject key identifier: E0:2B:2D:EA:CB:56:71:BC:84:1C:9A:AF:FE:22:72:A0:3D:93:79:1F Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 32 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/4Cst6stWcbyEHJqv_iJyoD2TeR8.roa Signing time: Tue 31 Mar 2026 08:43:15 +0000 ROA not before: Tue 31 Mar 2026 08:43:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2907 IP address blocks: 192.153.96.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Mar 31 08:43:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E02B2DEACB5671BC841C9AAFFE2272A03D93791F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:04:1c:6a:e5:8c:f7:bf:41:5a:f0:26:4c:ec: 5e:4d:6d:b7:76:ee:3b:cb:1d:f0:06:d6:8f:76:de: 70:74:49:90:b1:17:6f:71:3b:5d:44:c8:ac:b6:39: 07:47:70:11:e9:d7:b3:db:5d:5b:15:bc:f7:27:44: 5d:24:39:99:30:69:89:a5:26:88:71:0e:ac:4b:82: 9e:84:b5:3b:eb:46:fe:f2:42:3f:20:50:16:32:33: e0:e0:4f:33:b8:e5:63:87:d1:f0:3e:2a:04:fb:94: af:09:e9:0d:f6:36:4a:27:4b:0c:b4:a4:55:aa:34: 6e:61:58:9a:cd:d5:b9:de:69:ef:8d:d8:9e:94:e2: 25:45:3e:ea:d0:3a:ab:8b:a2:80:fe:55:69:e8:f3: b1:3c:58:37:ae:76:c1:0a:9b:69:a4:ce:53:a1:46: 55:b8:bc:2f:f8:ec:8c:82:04:91:e3:8e:fe:de:5c: 94:ab:e3:64:58:b8:a8:37:6d:a0:ce:cb:29:66:0a: b0:88:8f:6d:7a:a8:68:2b:f6:a2:75:ba:08:73:c1: 9f:8c:c9:a8:3b:76:0d:83:59:d9:63:38:73:97:46: 9b:15:0c:f5:eb:4f:ec:a0:f8:71:e9:4d:95:c7:f2: 93:ed:19:16:5c:33:c1:3d:2b:53:69:8b:93:8d:41: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2B:2D:EA:CB:56:71:BC:84:1C:9A:AF:FE:22:72:A0:3D:93:79:1F X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/4Cst6stWcbyEHJqv_iJyoD2TeR8.roa sbgp-ipAddrBlock: critical IPv4: 192.153.96.0/21 Signature Algorithm: sha256WithRSAEncryption 88:43:e7:f2:42:84:06:74:9c:73:59:cc:52:aa:70:d8:87:e2: 03:2c:e7:39:fc:8e:e9:df:e6:da:29:fd:2e:16:ce:e8:f1:5d: f6:39:1a:08:e9:92:1f:e1:87:55:dc:3a:e0:45:74:61:ac:a2: 6a:93:e6:42:aa:3f:3e:d3:03:23:e2:54:91:13:4b:aa:5d:9a: 7e:6c:59:e1:d6:3a:fa:81:ae:85:61:5d:75:e4:37:1d:0d:f9: 9e:e4:8b:29:71:df:fc:a6:e3:ff:d2:f9:2d:50:29:5e:a6:a6: b8:45:9c:29:4d:88:65:b0:61:e6:11:f4:25:d5:22:4d:02:d7: 13:90:5c:46:10:9d:18:11:49:3e:bd:27:b8:4b:be:80:16:a5: 9c:d9:4b:5e:ee:73:d7:df:bb:8a:1d:8e:66:61:50:a4:db:d8: c9:9d:f8:d0:9b:4a:2a:e2:8a:6d:e5:a1:7e:1f:2a:55:40:53: f9:2d:6e:68:75:be:21:26:37:5e:fa:25:d6:ba:f9:60:7f:c3: 13:fb:44:06:3f:8f:f3:57:4a:83:38:2c:f9:e0:01:29:b5:0c: f6:29:50:27:83:fd:69:30:78:4f:86:f0:05:47:88:b0:75:d4: 33:83:d4:5e:34:f0:30:51:e9:63:66:e6:0e:fc:1c:c5:40:e8: ee:10:2f:04 -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI2MDMzMTA4 NDMxNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTAyQjJERUFDQjU2NzFC Qzg0MUM5QUFGRkUyMjcyQTAzRDkzNzkxRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOQEHGrljPe/QVrwJkzsXk1tt3buO8sd8AbWj3becHRJkLEXb3E7 XUTIrLY5B0dwEenXs9tdWxW89ydEXSQ5mTBpiaUmiHEOrEuCnoS1O+tG/vJCPyBQ FjIz4OBPM7jlY4fR8D4qBPuUrwnpDfY2SidLDLSkVao0bmFYms3Vud5p743YnpTi JUU+6tA6q4uigP5VaejzsTxYN652wQqbaaTOU6FGVbi8L/jsjIIEkeOO/t5clKvj ZFi4qDdtoM7LKWYKsIiPbXqoaCv2onW6CHPBn4zJqDt2DYNZ2WM4c5dGmxUM9etP 7KD4celNlcfyk+0ZFlwzwT0rU2mLk41BY2kCAwEAAaOCAdswggHXMB0GA1UdDgQW BBTgKy3qy1ZxvIQcmq/+InKgPZN5HzAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjE2Ni80Q3N0NnN0V2NieUVISnF2X2lKeW9EMlRlUjgucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJlgMA0GCSqGSIb3DQEBCwUAA4IB AQCIQ+fyQoQGdJxzWcxSqnDYh+IDLOc5/I7p3+baKf0uFs7o8V32ORoI6ZIf4YdV 3DrgRXRhrKJqk+ZCqj8+0wMj4lSRE0uqXZp+bFnh1jr6ga6FYV115DcdDfme5Isp cd/8puP/0vktUClepqa4RZwpTYhlsGHmEfQl1SJNAtcTkFxGEJ0YEUk+vSe4S76A FqWc2Ute7nPX37uKHY5mYVCk29jJnfjQm0oq4opt5aF+HypVQFP5LW5odb4hJjde +iXWuvlgf8MT+0QGP4/zV0qDOCz54AEptQz2KVAng/1pMHhPhvAFR4iwddQzg9Re NPAwUeljZuYO/BzFQOjuEC8E -----END CERTIFICATE-----Generated at Fri Apr 17 16:53:22 2026 by rpki-client