$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/8qQCz5nx7TbpdsjlAAiPven4law.roa File: 8qQCz5nx7TbpdsjlAAiPven4law.roa (raw, json) Hash identifier: bSO6YPzirhxa0ryOw1hVXmmOFuHJCM+6xk1UzDAY4xM= Subject key identifier: F2:A4:02:CF:99:F1:ED:36:E9:76:C8:E5:00:08:8F:BD:E9:F8:95:AC Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 0128 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/8qQCz5nx7TbpdsjlAAiPven4law.roa Signing time: Tue 31 Mar 2026 07:36:40 +0000 ROA not before: Tue 31 Mar 2026 07:36:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9370 IP address blocks: 112.109.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: Mar 31 07:36:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F2A402CF99F1ED36E976C8E500088FBDE9F895AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:f7:3a:f1:ea:c2:f4:dc:5f:21:5d:24:79: f8:6e:12:f7:a0:56:28:81:44:14:04:c0:69:f4:fc: a4:9c:f7:40:83:cf:56:f1:7f:86:73:54:5c:f8:93: 96:c2:1a:5b:e2:73:e8:cf:7a:4a:ce:5a:3d:fc:8b: 55:fe:72:c0:30:da:19:46:c1:2c:46:68:9e:76:11: 86:de:18:ff:58:9d:9a:77:18:9c:33:b5:b1:29:2e: af:6f:59:bc:db:7f:6c:57:6c:68:1b:84:01:bd:c4: 8a:e9:1f:44:28:ff:70:b0:75:b5:6f:ba:6f:2c:d2: 83:c2:19:bb:f1:2d:3c:69:29:96:16:c9:dc:a0:af: 71:2b:62:30:16:88:55:02:83:3b:cf:e3:20:02:7b: d5:71:93:53:1e:a7:27:e4:78:62:9d:c6:6b:5b:0e: 80:30:7a:8c:1e:9a:ac:fa:a9:95:4d:77:ca:11:67: 90:58:13:eb:28:1a:93:2f:bd:20:db:6b:a5:fc:28: 00:8a:70:88:38:a5:df:ba:67:64:df:82:4a:75:a7: de:7c:2b:5b:dc:b4:26:58:c9:73:dc:95:ad:84:3d: d5:ff:43:ee:1a:e1:63:71:ee:19:d1:d3:de:ff:6f: 1e:5f:55:b7:1e:64:9e:44:f8:72:af:10:e4:4d:14: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:02:CF:99:F1:ED:36:E9:76:C8:E5:00:08:8F:BD:E9:F8:95:AC X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/8qQCz5nx7TbpdsjlAAiPven4law.roa sbgp-ipAddrBlock: critical IPv4: 112.109.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:8b:66:c9:82:9f:56:2a:87:be:bf:a5:42:c1:51:c1:79:e3: 66:83:66:06:5a:1b:82:4b:54:12:cb:81:2d:ce:aa:11:33:e9: 05:1e:2e:1d:15:7b:77:15:cf:c9:8e:14:dd:e1:b2:51:d1:8d: 51:ba:56:8d:2c:d8:07:de:40:53:41:5f:9f:05:eb:77:76:64: 92:77:cf:f6:d7:19:6c:27:52:af:58:68:e1:54:7d:20:19:18: c9:9d:86:c2:ab:94:95:b7:a9:d4:f1:39:e6:9a:78:74:95:b4: 28:94:5a:e0:2c:f2:d1:c9:40:74:05:91:e2:fe:3d:6e:b0:34: a4:c8:0e:36:9a:5a:48:73:17:ee:33:b4:5d:28:bc:99:13:19: 9a:0a:15:1a:44:4f:32:d8:ab:ef:90:c8:f8:e0:68:36:a3:f6: 80:c8:6d:df:39:40:71:39:56:a0:2d:c0:79:bf:a7:bb:82:d2: 84:64:56:be:39:09:ff:fc:1f:11:a0:e1:7d:e8:25:7f:22:89: 47:71:f2:5e:c6:fa:1c:2e:c8:73:f3:3c:b7:42:29:bd:43:29: f6:a7:1c:d0:dc:f5:82:8e:57:49:52:e8:4b:37:70:e1:3d:5e: 84:a1:8b:97:68:af:4a:97:44:8f:af:2f:ab:34:e6:da:e9:15: 94:4f:e3:31 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNjAzMzEw NzM2NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyQTQwMkNGOTlGMUVE MzZFOTc2QzhFNTAwMDg4RkJERTlGODk1QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAUvc68erC9NxfIV0kefhuEvegViiBRBQEwGn0/KSc90CDz1bx f4ZzVFz4k5bCGlvic+jPekrOWj38i1X+csAw2hlGwSxGaJ52EYbeGP9YnZp3GJwz tbEpLq9vWbzbf2xXbGgbhAG9xIrpH0Qo/3CwdbVvum8s0oPCGbvxLTxpKZYWydyg r3ErYjAWiFUCgzvP4yACe9Vxk1MepyfkeGKdxmtbDoAweowemqz6qZVNd8oRZ5BY E+soGpMvvSDba6X8KACKcIg4pd+6Z2Tfgkp1p958K1vctCZYyXPcla2EPdX/Q+4a 4WNx7hnR097/bx5fVbceZJ5E+HKvEORNFBZZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU8qQCz5nx7TbpdsjlAAiPven4lawwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjQ3LzhxUUN6NW54N1RicGRzamxBQWlQdmVuNGxhdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARwbQAwDQYJKoZIhvcNAQELBQADggEB ACqLZsmCn1Yqh76/pULBUcF542aDZgZaG4JLVBLLgS3OqhEz6QUeLh0Ve3cVz8mO FN3hslHRjVG6Vo0s2AfeQFNBX58F63d2ZJJ3z/bXGWwnUq9YaOFUfSAZGMmdhsKr lJW3qdTxOeaaeHSVtCiUWuAs8tHJQHQFkeL+PW6wNKTIDjaaWkhzF+4ztF0ovJkT GZoKFRpETzLYq++QyPjgaDaj9oDIbd85QHE5VqAtwHm/p7uC0oRkVr45Cf/8HxGg 4X3oJX8iiUdx8l7G+hwuyHPzPLdCKb1DKfanHNDc9YKOV0lS6Es3cOE9XoShi5do r0qXRI+vL6s05trpFZRP4zE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:15 2026 by rpki-client