$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/imTpNLuCrlD46rHk1jqesp4JdOI.roa File: imTpNLuCrlD46rHk1jqesp4JdOI.roa (raw, json) Hash identifier: tP04z7tLwYsPuOvUs6VlMr0d70LCofIsbPBjlCJNwTE= Subject key identifier: 8A:64:E9:34:BB:82:AE:50:F8:EA:B1:E4:D6:3A:9E:B2:9E:09:74:E2 Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18 Certificate serial: B2 Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/imTpNLuCrlD46rHk1jqesp4JdOI.roa Signing time: Tue 31 Mar 2026 08:17:38 +0000 ROA not before: Tue 31 Mar 2026 08:17:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 202.17.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18 Validity Not Before: Mar 31 08:17:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8A64E934BB82AE50F8EAB1E4D63A9EB29E0974E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:cd:e2:5e:07:52:08:aa:05:7c:b7:83:90: 9a:44:b2:79:85:4b:ea:1d:a2:c4:05:f1:fd:aa:c0: 27:ce:92:bd:2a:fa:88:20:fa:06:59:91:b6:57:c5: 48:8b:a6:9d:a5:69:a7:44:e5:ea:1a:23:f2:01:fd: ea:4c:25:0d:6c:08:28:0b:50:d0:75:d4:d3:be:35: db:5b:10:dd:aa:2e:ca:6a:95:1d:b6:57:39:bb:c1: a7:ac:a4:b2:68:aa:47:78:ab:9d:3f:9f:e7:47:e9: 90:84:26:c3:03:04:8d:b7:8d:f5:3d:c6:72:16:67: c8:6f:48:19:aa:77:cf:1f:38:25:b8:fa:e5:d9:51: ef:9c:8a:1a:2d:da:db:68:29:9b:4c:02:a4:8a:51: 2f:97:28:b9:c8:ce:7d:dd:3b:dd:b1:d5:65:51:5a: ae:bf:69:23:8a:78:cf:67:3a:42:f6:9a:34:57:66: f5:ed:4e:62:83:cc:2e:f6:a7:b9:43:c5:69:21:a6: 77:c4:c0:d3:99:23:90:ff:4d:a0:eb:9c:81:0f:33: 92:88:a4:47:4b:9a:9f:c7:a1:09:b8:47:f3:e9:e3: 31:47:70:73:77:16:f6:6b:32:67:b6:4f:19:5f:fc: c9:94:13:fe:fa:6b:d7:6a:1c:0f:e9:cf:2a:2d:5f: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:64:E9:34:BB:82:AE:50:F8:EA:B1:E4:D6:3A:9E:B2:9E:09:74:E2 X509v3 Authority Key Identifier: keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/imTpNLuCrlD46rHk1jqesp4JdOI.roa sbgp-ipAddrBlock: critical IPv4: 202.17.128.0/19 Signature Algorithm: sha256WithRSAEncryption 07:52:82:9f:89:a9:05:be:8f:28:ed:71:f4:63:d2:49:c2:f7: c7:0f:06:ff:7e:48:45:22:2f:99:19:59:fd:11:8c:5a:82:b7: a1:11:11:fb:ea:d0:f1:6c:c5:1c:67:ed:b8:1b:22:67:12:2a: 99:da:e7:32:00:2c:79:fd:c5:7b:3e:be:87:2e:b5:b4:da:15: ce:cd:7d:29:d5:e3:99:be:bf:a4:12:e1:0c:73:7f:02:25:fb: 3e:99:26:d2:ac:89:92:0d:d7:24:9a:32:72:76:d6:ab:9e:97: 87:f8:3f:0e:9f:bf:33:d8:63:67:a2:45:38:04:6d:06:2e:79: a2:ed:6f:a9:b8:94:24:8e:21:76:bf:cd:2b:6c:b2:9d:88:3e: e9:8f:e4:35:bf:07:20:55:1e:3c:13:a7:74:c7:d8:fc:d0:9d: 74:3d:d7:9d:9f:08:2e:b9:72:8d:f7:63:d6:2b:5b:68:97:19: ca:fa:d8:77:75:f2:9c:84:26:b7:9c:3c:11:a0:28:97:b5:0b: 83:c2:1e:53:2b:85:8b:bd:86:b7:6e:c6:94:03:2e:37:40:94: 9d:c0:46:39:f8:ef:53:08:2d:69:b0:9e:42:9a:39:f3:7d:db: 56:52:b5:1b:f5:a3:2a:28:5f:ab:0f:fb:71:cb:8b:0f:be:3d: 16:36:64:29 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw ODE3MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBNjRFOTM0QkI4MkFF NTBGOEVBQjFFNEQ2M0E5RUIyOUUwOTc0RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlTc3iXgdSCKoFfLeDkJpEsnmFS+odosQF8f2qwCfOkr0q+ogg +gZZkbZXxUiLpp2laadE5eoaI/IB/epMJQ1sCCgLUNB11NO+NdtbEN2qLspqlR22 Vzm7waespLJoqkd4q50/n+dH6ZCEJsMDBI23jfU9xnIWZ8hvSBmqd88fOCW4+uXZ Ue+cihot2ttoKZtMAqSKUS+XKLnIzn3dO92x1WVRWq6/aSOKeM9nOkL2mjRXZvXt TmKDzC72p7lDxWkhpnfEwNOZI5D/TaDrnIEPM5KIpEdLmp/HoQm4R/Pp4zFHcHN3 FvZrMme2Txlf/MmUE/76a9dqHA/pzyotX6UpAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUimTpNLuCrlD46rHk1jqesp4JdOIwHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9pbVRwTkx1Q3JsRDQ2ckhrMWpxZXNwNEpkT0kucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyhGAMA0GCSqGSIb3DQEBCwUAA4IBAQAH UoKfiakFvo8o7XH0Y9JJwvfHDwb/fkhFIi+ZGVn9EYxagrehERH76tDxbMUcZ+24 GyJnEiqZ2ucyACx5/cV7Pr6HLrW02hXOzX0p1eOZvr+kEuEMc38CJfs+mSbSrImS DdckmjJydtarnpeH+D8On78z2GNnokU4BG0GLnmi7W+puJQkjiF2v80rbLKdiD7p j+Q1vwcgVR48E6d0x9j80J10PdednwguuXKN92PWK1tolxnK+th3dfKchCa3nDwR oCiXtQuDwh5TK4WLvYa3bsaUAy43QJSdwEY5+O9TCC1psJ5CmjnzfdtWUrUb9aMq KF+rD/txy4sPvj0WNmQp -----END CERTIFICATE-----Generated at Fri Apr 17 18:49:22 2026 by rpki-client