$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qId9ZVsWb7nJ_TMmlq1Ikq-R-Mk.roa File: qId9ZVsWb7nJ_TMmlq1Ikq-R-Mk.roa (raw, json) Hash identifier: Q6jKhpMswYiNCeua49Spwd5XYNcL8iKQbbgyHUg1zZk= Subject key identifier: A8:87:7D:65:5B:16:6F:B9:C9:FD:33:26:96:AD:48:92:AF:91:F8:C9 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 0120 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qId9ZVsWb7nJ_TMmlq1Ikq-R-Mk.roa Signing time: Tue 31 Mar 2026 08:17:25 +0000 ROA not before: Tue 31 Mar 2026 08:17:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 128.53.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A8877D655B166FB9C9FD332696AD4892AF91F8C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:e2:66:89:3d:81:86:c7:f5:cd:46:a5:70: b7:04:e1:9d:13:bd:70:44:6f:f5:f1:b9:1e:15:f4: 19:a5:fa:5b:c5:8d:7d:40:67:7f:9f:69:9a:d6:8d: 62:19:74:80:c1:6e:42:be:ac:b5:4b:8e:d4:37:53: d7:37:ae:d1:cf:40:cd:50:3b:82:f4:32:c4:34:aa: 1a:0b:f4:b7:ae:08:91:7e:34:f3:47:9b:df:6d:a6: b3:3a:12:13:b5:21:75:98:92:30:08:4b:60:67:d3: ae:1f:02:62:97:95:57:76:fb:80:79:e3:d3:3f:62: 8a:8a:70:7d:bd:1d:9a:b9:d6:65:c1:d3:34:73:6b: e7:0a:85:d8:1c:d1:65:a1:0f:4b:43:a3:e1:c6:5f: 2d:8a:3c:07:d4:de:77:da:bc:a1:68:cf:29:21:06: 02:ea:57:92:5d:96:07:e7:cd:a6:2b:2a:3f:0d:ac: f1:fb:4d:7d:3c:1a:72:cd:58:8f:ee:78:10:90:6f: c0:ee:2d:00:02:cf:4c:ce:a3:95:cc:9e:50:fe:1b: 5b:db:cf:05:fc:8c:15:dd:f5:15:f7:a7:1e:92:b0: 60:b6:d6:f7:bd:00:fa:b7:33:87:74:e1:f7:1c:7b: f8:ad:43:2b:65:24:da:75:82:25:fe:8a:7f:26:3c: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:87:7D:65:5B:16:6F:B9:C9:FD:33:26:96:AD:48:92:AF:91:F8:C9 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qId9ZVsWb7nJ_TMmlq1Ikq-R-Mk.roa sbgp-ipAddrBlock: critical IPv4: 128.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:c1:ae:29:23:9a:c2:27:74:71:0d:50:3e:59:98:ca:1d:92: 3c:77:33:27:2c:1e:5a:35:89:c0:3c:1a:a1:3e:8b:84:82:71: d7:b0:20:90:cd:ee:c2:60:1e:34:84:30:05:5a:d4:4a:07:2f: b9:f1:1d:15:79:cb:8a:2a:21:ea:01:0a:0f:c9:ab:72:0e:df: 54:9d:fc:7d:14:f2:ea:6a:5e:fd:17:de:21:e3:15:a7:e1:1b: 96:45:a2:93:a2:75:e7:b9:c2:78:e8:82:44:72:d2:05:c7:d7: ba:e4:b7:77:42:b4:1a:29:cf:8b:37:8b:08:08:29:82:d2:63: 56:2b:cc:ba:6c:77:7c:89:4f:0f:ad:dc:6c:7e:b5:9d:c3:9c: eb:4c:d4:ed:59:f2:43:ca:6d:33:4b:7a:8a:9d:44:8f:19:c3: 85:62:42:9b:08:e5:c9:4e:e3:7c:0d:3d:b9:36:4c:12:31:b1: 62:59:45:33:98:7f:af:e2:f9:b5:38:53:e8:5f:19:64:95:7d: e0:9e:e4:16:19:fc:c6:41:55:6e:ec:1f:0b:e3:4c:9f:11:d3: 80:e0:6b:7d:5c:7a:50:54:7b:c6:63:c0:0c:9a:21:a0:f1:b7: 41:7b:78:2b:c7:74:38:25:fd:62:94:f7:da:d1:d1:87:56:ac: c1:3d:64:d2 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4ODc3RDY1NUIxNjZG QjlDOUZEMzMyNjk2QUQ0ODkyQUY5MUY4QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZOJmiT2Bhsf1zUalcLcE4Z0TvXBEb/XxuR4V9Bml+lvFjX1A Z3+faZrWjWIZdIDBbkK+rLVLjtQ3U9c3rtHPQM1QO4L0MsQ0qhoL9LeuCJF+NPNH m99tprM6EhO1IXWYkjAIS2Bn064fAmKXlVd2+4B549M/YoqKcH29HZq51mXB0zRz a+cKhdgc0WWhD0tDo+HGXy2KPAfU3nfavKFozykhBgLqV5JdlgfnzaYrKj8NrPH7 TX08GnLNWI/ueBCQb8DuLQACz0zOo5XMnlD+G1vbzwX8jBXd9RX3px6SsGC21ve9 APq3M4d04fcce/itQytlJNp1giX+in8mPNjFAgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUqId9ZVsWb7nJ/TMmlq1Ikq+R+MkwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9xSWQ5WlZzV2I3bkpfVE1tbHExSWtxLVItTWsucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgDUwDQYJKoZIhvcNAQELBQADggEBAILB rikjmsIndHENUD5ZmModkjx3MycsHlo1icA8GqE+i4SCcdewIJDN7sJgHjSEMAVa 1EoHL7nxHRV5y4oqIeoBCg/Jq3IO31Sd/H0U8upqXv0X3iHjFafhG5ZFopOidee5 wnjogkRy0gXH17rkt3dCtBopz4s3iwgIKYLSY1YrzLpsd3yJTw+t3Gx+tZ3DnOtM 1O1Z8kPKbTNLeoqdRI8Zw4ViQpsI5clO43wNPbk2TBIxsWJZRTOYf6/i+bU4U+hf GWSVfeCe5BYZ/MZBVW7sHwvjTJ8R04Dga31celBUe8ZjwAyaIaDxt0F7eCvHdDgl /WKU99rR0YdWrME9ZNI= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:27 2026 by rpki-client