$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/Ax5N2_evLpUmrQ0Jb3z1nIJoDl0.roa File: Ax5N2_evLpUmrQ0Jb3z1nIJoDl0.roa (raw, json) Hash identifier: f3jlUa+A6/H8dSvuEtCCq2G0taT2KyGV0oeDVtTOUFc= Subject key identifier: 03:1E:4D:DB:F7:AF:2E:95:26:AD:0D:09:6F:7C:F5:9C:82:68:0E:5D Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C Certificate serial: 35 Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Ax5N2_evLpUmrQ0Jb3z1nIJoDl0.roa Signing time: Tue 31 Mar 2026 08:42:26 +0000 ROA not before: Tue 31 Mar 2026 08:42:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9354 IP address blocks: 125.2.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Validity Not Before: Mar 31 08:42:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=031E4DDBF7AF2E9526AD0D096F7CF59C82680E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:de:93:57:ae:04:a1:bc:9d:e0:2f:8f:e6: 9d:67:02:aa:a6:e0:8d:32:a9:42:58:7c:4d:7b:78: cc:11:11:43:09:6c:d0:6b:61:b9:ab:a7:56:e2:6b: 7c:9c:6b:d4:86:84:13:99:f9:02:62:08:cf:1a:5c: 28:42:eb:ef:8d:20:28:69:4c:85:34:9d:42:96:73: 9d:8d:06:1f:4a:fa:15:22:5b:6d:17:7f:8e:c7:fd: e3:a7:d7:c4:b3:4e:12:62:ba:ad:6e:f9:02:29:50: af:31:71:bb:3c:9a:19:ab:7b:08:c6:e1:74:04:ab: 35:c2:83:0d:6b:ba:ee:69:82:ed:99:63:4d:42:95: 48:35:d2:9c:00:b4:22:68:06:43:ba:7a:fd:00:a3: 78:83:95:26:6d:39:19:8f:e6:f9:e7:ac:01:73:2e: 62:32:9e:0d:9a:e5:bf:c1:60:ab:01:96:f2:b2:49: 9f:42:35:e0:bc:9b:06:26:94:75:7e:c5:d8:18:a4: cf:ae:1d:55:9e:09:7e:78:27:38:c1:a9:d4:92:a4: e8:a4:98:8f:66:28:7f:92:70:9c:61:f8:d0:47:c5: 70:f0:72:16:ef:8c:34:e3:3b:a6:55:30:2a:d3:98: 87:5b:b0:1b:62:dd:75:2e:75:81:e0:a6:86:95:43: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1E:4D:DB:F7:AF:2E:95:26:AD:0D:09:6F:7C:F5:9C:82:68:0E:5D X509v3 Authority Key Identifier: keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Ax5N2_evLpUmrQ0Jb3z1nIJoDl0.roa sbgp-ipAddrBlock: critical IPv4: 125.2.192.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:97:52:67:4b:da:f9:79:64:b7:ff:e2:d1:ef:53:95:d9:c0: e8:db:e1:db:50:36:93:f1:4d:53:6b:e3:3a:97:b9:88:60:d8: 85:b2:1b:b6:f1:18:6b:46:58:35:45:d7:6c:f9:58:0a:c8:bd: 79:7c:dd:c2:06:f7:28:df:93:31:f3:41:94:5f:c1:95:51:41: 09:68:43:61:dd:fa:b5:8f:99:e8:f3:95:58:85:20:cb:a8:5a: ae:34:38:e8:2d:34:6b:23:ea:bf:10:6d:15:bd:4f:0f:e0:79: 87:42:8b:c4:36:d4:d9:f1:d0:75:b6:91:32:69:c1:ee:27:87: 44:53:27:a2:5f:76:2a:18:01:53:c1:b5:ae:ae:a1:83:32:7d: 94:7c:ec:c8:38:24:01:b9:b4:2f:e7:6c:84:62:f0:d0:cb:84: 30:70:5e:b0:96:be:76:04:30:3a:55:ad:7f:72:54:c0:e9:79: ca:fb:60:11:61:94:3e:55:ec:0a:da:c5:90:69:ca:41:b6:6f: 37:8a:d3:5a:f1:e5:dc:97:d8:d7:fb:8e:40:b9:28:24:b7:22: 39:5d:ff:ff:f3:34:07:2c:da:69:ed:a7:d2:42:14:ce:3f:46: 56:52:c3:9f:49:11:0c:29:ea:2a:d4:d3:02:51:c9:7a:97:90: 92:15:1c:05 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI2MDMzMTA4 NDIyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDMxRTREREJGN0FGMkU5 NTI2QUQwRDA5NkY3Q0Y1OUM4MjY4MEU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANJD3pNXrgShvJ3gL4/mnWcCqqbgjTKpQlh8TXt4zBERQwls0Gth uaunVuJrfJxr1IaEE5n5AmIIzxpcKELr740gKGlMhTSdQpZznY0GH0r6FSJbbRd/ jsf946fXxLNOEmK6rW75AilQrzFxuzyaGat7CMbhdASrNcKDDWu67mmC7ZljTUKV SDXSnAC0ImgGQ7p6/QCjeIOVJm05GY/m+eesAXMuYjKeDZrlv8FgqwGW8rJJn0I1 4LybBiaUdX7F2Bikz64dVZ4JfngnOMGp1JKk6KSYj2Yof5JwnGH40EfFcPByFu+M NOM7plUwKtOYh1uwG2LddS51geCmhpVDGVsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQDHk3b968ulSatDQlvfPWcgmgOXTAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD +TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8zMTEvQXg1TjJfZXZMcFVtclEwSmIzejFuSUpvRGwwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBH0CwDANBgkqhkiG9w0BAQsFAAOCAQEA O5dSZ0va+Xlkt//i0e9TldnA6Nvh21A2k/FNU2vjOpe5iGDYhbIbtvEYa0ZYNUXX bPlYCsi9eXzdwgb3KN+TMfNBlF/BlVFBCWhDYd36tY+Z6POVWIUgy6harjQ46C00 ayPqvxBtFb1PD+B5h0KLxDbU2fHQdbaRMmnB7ieHRFMnol92KhgBU8G1rq6hgzJ9 lHzsyDgkAbm0L+dshGLw0MuEMHBesJa+dgQwOlWtf3JUwOl5yvtgEWGUPlXsCtrF kGnKQbZvN4rTWvHl3JfY1/uOQLkoJLciOV3///M0Byzaae2n0kIUzj9GVlLDn0kR DCnqKtTTAlHJepeQkhUcBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:07:15 2026 by rpki-client