$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/ZUlbOzA4yg2JzaI0A9UBmhzTFXE.roa File: ZUlbOzA4yg2JzaI0A9UBmhzTFXE.roa (raw, json) Hash identifier: TLZ4ANsk9VB0PsDPggdYkPSsuQ4M3lizvCtgqplH67s= Subject key identifier: 65:49:5B:3B:30:38:CA:0D:89:CD:A2:34:03:D5:01:9A:1C:D3:15:71 Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Certificate serial: 41 Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/ZUlbOzA4yg2JzaI0A9UBmhzTFXE.roa Signing time: Tue 31 Mar 2026 08:44:49 +0000 ROA not before: Tue 31 Mar 2026 08:44:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 59108 IP address blocks: 219.121.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Validity Not Before: Mar 31 08:44:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=65495B3B3038CA0D89CDA23403D5019A1CD31571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:62:bd:6f:f2:03:eb:7b:ae:a5:6f:80:ec:c7: ec:71:ae:80:d3:bc:46:a5:71:56:52:13:b8:9b:69: 9b:ef:42:1f:a6:77:43:8b:bb:38:0f:c2:cd:b1:e8: 5c:61:2e:a6:45:b6:f0:a6:ef:86:a6:57:88:45:25: c1:3f:38:65:3e:ad:de:7a:61:5e:09:47:61:c8:d6: ae:7a:47:35:37:09:26:32:0f:4f:7d:8b:e7:1d:10: 55:a0:66:5e:3d:93:9e:f0:9f:63:02:92:09:36:e7: f0:a7:51:a9:48:ec:50:f8:bd:b8:a9:9d:08:35:76: 2a:3f:70:ec:e0:d2:0e:aa:eb:b4:70:29:5a:b4:5b: 96:d4:2a:df:d9:1b:c7:10:6c:f7:9c:59:6d:2c:8d: 22:63:07:57:ac:02:04:f9:7f:cc:de:89:15:d3:9b: 89:e3:f1:25:e4:9e:1a:fd:03:c7:16:da:d4:ab:f1: 14:02:7c:94:fe:25:57:32:02:39:a9:54:8e:21:23: 80:15:8f:63:dc:71:eb:62:0e:c6:fb:ca:a3:1b:c5: 7a:d8:13:bd:94:75:18:f1:0f:9c:06:df:6b:89:42: 69:97:03:81:88:b5:e0:7d:b6:7e:cb:01:45:3d:f5: c7:7f:e0:4f:f5:10:d2:b6:c7:86:e3:f4:ad:89:ad: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:49:5B:3B:30:38:CA:0D:89:CD:A2:34:03:D5:01:9A:1C:D3:15:71 X509v3 Authority Key Identifier: keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/ZUlbOzA4yg2JzaI0A9UBmhzTFXE.roa sbgp-ipAddrBlock: critical IPv4: 219.121.128.0/19 Signature Algorithm: sha256WithRSAEncryption 36:8c:a5:54:77:ea:99:bf:0d:5c:4f:42:c9:7b:21:9f:af:cd: 7f:af:d6:12:ec:16:0f:a1:19:28:78:9e:88:6d:a7:81:20:be: 08:74:9f:16:1e:6a:b0:6e:59:93:3f:26:f0:db:89:2b:45:5c: 1a:f1:98:93:01:38:81:ba:98:63:ec:87:d7:fa:8f:2f:09:d0: d4:e6:86:11:fe:26:9b:60:a9:22:78:91:47:3a:de:43:db:40: 96:2e:12:a7:35:12:4d:fe:ff:c1:da:6b:bf:7c:de:2c:17:40: d2:a6:a7:51:e1:3b:18:46:b7:37:6c:e7:6e:d9:3f:e9:15:49: fc:d6:1c:eb:c2:53:92:c2:51:b9:8b:dc:46:43:ed:6a:36:4d: b4:04:74:4a:48:34:74:3c:31:6e:4e:4f:87:66:df:90:44:74: 5b:7f:53:5c:09:c0:ba:76:48:db:9b:7e:72:51:17:c5:6c:91: 5d:44:d3:69:2c:da:79:6d:18:22:0b:9c:a1:51:92:c1:28:08: 30:b9:a2:96:a0:ac:6d:b3:f4:b1:fd:0e:72:20:a1:72:6a:24: de:af:a8:95:17:8a:f7:2b:88:1f:f6:3f:1b:6c:fb:c2:03:12: 8a:23:48:1d:96:5e:d1:d6:6f:95:39:c9:76:97:cd:74:42:22: 73:b5:20:28 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI2MDMzMTA4 NDQ0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjU0OTVCM0IzMDM4Q0Ew RDg5Q0RBMjM0MDNENTAxOUExQ0QzMTU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOdivW/yA+t7rqVvgOzH7HGugNO8RqVxVlITuJtpm+9CH6Z3Q4u7 OA/CzbHoXGEupkW28KbvhqZXiEUlwT84ZT6t3nphXglHYcjWrnpHNTcJJjIPT32L 5x0QVaBmXj2TnvCfYwKSCTbn8KdRqUjsUPi9uKmdCDV2Kj9w7ODSDqrrtHApWrRb ltQq39kbxxBs95xZbSyNImMHV6wCBPl/zN6JFdObiePxJeSeGv0Dxxba1KvxFAJ8 lP4lVzICOalUjiEjgBWPY9xx62IOxvvKoxvFetgTvZR1GPEPnAbfa4lCaZcDgYi1 4H22fssBRT31x3/gT/UQ0rbHhuP0rYmtDxcCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRlSVs7MDjKDYnNojQD1QGaHNMVcTAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac 2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1 YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yNzEvWlVsYk96QTR5ZzJKemFJMEE5VUJtaHpURlhFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdt5gDANBgkqhkiG9w0BAQsFAAOCAQEA NoylVHfqmb8NXE9CyXshn6/Nf6/WEuwWD6EZKHieiG2ngSC+CHSfFh5qsG5Zkz8m 8NuJK0VcGvGYkwE4gbqYY+yH1/qPLwnQ1OaGEf4mm2CpIniRRzreQ9tAli4SpzUS Tf7/wdprv3zeLBdA0qanUeE7GEa3N2znbtk/6RVJ/NYc68JTksJRuYvcRkPtajZN tAR0Skg0dDwxbk5Ph2bfkER0W39TXAnAunZI25t+clEXxWyRXUTTaSzaeW0YIguc oVGSwSgIMLmilqCsbbP0sf0OciChcmok3q+olReK9yuIH/Y/G2z7wgMSiiNIHZZe 0dZvlTnJdpfNdEIic7UgKA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:25:24 2026 by rpki-client