$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/5VSsnq_Tp0m85fQ4zg0dHbqS-e8.roa File: 5VSsnq_Tp0m85fQ4zg0dHbqS-e8.roa (raw, json) Hash identifier: 1Y5nYuEnBsxFllHDpWW/HtdFxLp2CA9Jv4lwZZkFuN8= Subject key identifier: E5:54:AC:9E:AF:D3:A7:49:BC:E5:F4:38:CE:0D:1D:1D:BA:92:F9:EF Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: A5 Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/5VSsnq_Tp0m85fQ4zg0dHbqS-e8.roa Signing time: Tue 31 Mar 2026 07:46:42 +0000 ROA not before: Tue 31 Mar 2026 07:46:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9622 IP address blocks: 202.171.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Mar 31 07:46:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E554AC9EAFD3A749BCE5F438CE0D1D1DBA92F9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bc:d6:b0:30:60:4e:98:df:a5:73:b0:a8:08: 55:e1:26:89:37:ec:c9:34:1d:24:c7:3f:34:08:a5: 8b:ff:c5:37:69:02:39:8d:1a:a9:32:e9:e3:65:0f: 53:1a:95:70:59:4b:6c:0b:fa:8f:62:fb:dd:13:99: 21:82:85:24:33:68:35:04:19:3c:44:e3:4d:ae:a4: 39:a7:a4:c0:b3:ba:ce:73:e9:e7:6d:1e:e3:2d:53: cd:be:91:cc:dd:61:66:84:65:ea:bc:b9:94:62:1f: 2e:8d:aa:a7:9f:2e:d8:a2:cd:4a:be:c8:f7:96:d3: 27:d6:92:5c:be:81:d0:17:2e:94:7f:b7:f9:e3:91: 70:f4:0c:ca:98:8d:0a:0d:ae:f1:51:36:04:dd:fb: 5a:b4:19:e2:d6:56:26:8c:ca:0f:50:65:89:de:2d: cb:7d:f3:38:3a:e5:0d:20:64:ed:49:f4:b1:64:69: 83:df:ba:88:09:2f:9e:ee:0f:05:e7:9f:9e:0e:2f: e3:2b:83:51:9c:55:d7:c6:57:6b:78:e8:d0:66:70: b2:72:ae:06:bd:29:6c:08:89:2f:b8:23:fd:aa:4d: e4:8d:3c:5e:61:5a:03:8e:a5:56:26:04:d1:f7:ae: 0e:7d:22:cb:8e:03:cd:87:0c:e7:40:22:8f:bb:70: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:AC:9E:AF:D3:A7:49:BC:E5:F4:38:CE:0D:1D:1D:BA:92:F9:EF X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/5VSsnq_Tp0m85fQ4zg0dHbqS-e8.roa sbgp-ipAddrBlock: critical IPv4: 202.171.112.0/20 Signature Algorithm: sha256WithRSAEncryption 00:59:ea:ab:d6:f5:3d:94:b8:09:c5:48:66:84:ca:c1:79:51: 82:b5:b1:a8:30:c2:5d:87:6e:a9:88:cd:b9:cf:c6:80:d1:0f: 74:36:64:57:55:0e:ec:4c:2b:86:17:94:e6:bc:45:f9:d8:d9: 27:7f:63:62:31:f6:d8:ee:af:98:4e:6c:5a:5e:83:a1:83:ed: 0d:b2:06:80:15:41:e6:eb:56:93:2d:ff:51:6b:ab:80:f7:5a: 24:f2:7a:49:3c:20:3d:c0:3b:41:58:75:b5:c2:a7:b1:e6:81: 6f:99:11:e6:a4:14:48:59:fb:69:f3:af:4c:55:4a:ad:13:64: a3:9d:7e:6c:4e:86:8d:1f:72:de:d9:2d:23:4d:06:8a:5c:1a: e5:08:e0:9d:ed:79:72:1e:24:ab:87:bc:fc:d4:c5:c4:d7:78: e9:17:8c:a5:77:79:9f:85:e0:c4:82:24:61:52:6e:02:91:93: 2e:f8:4a:fd:34:b3:cb:81:54:e5:64:11:9b:34:94:c3:1c:53: 3c:7a:1d:fc:cc:92:60:8f:c7:4d:cd:12:52:4e:db:86:51:08: dd:96:2f:38:37:9e:f0:ea:68:54:b9:85:60:ba:27:da:15:5b: e3:70:5c:db:9a:a8:f5:30:8f:94:83:cc:c7:87:6e:e6:52:a8: 1c:42:bc:e9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjAzMzEw NzQ2NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1NTRBQzlFQUZEM0E3 NDlCQ0U1RjQzOENFMEQxRDFEQkE5MkY5RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDivNawMGBOmN+lc7CoCFXhJok37Mk0HSTHPzQIpYv/xTdpAjmN Gqky6eNlD1MalXBZS2wL+o9i+90TmSGChSQzaDUEGTxE402upDmnpMCzus5z6edt HuMtU82+kczdYWaEZeq8uZRiHy6NqqefLtiizUq+yPeW0yfWkly+gdAXLpR/t/nj kXD0DMqYjQoNrvFRNgTd+1q0GeLWViaMyg9QZYneLct98zg65Q0gZO1J9LFkaYPf uogJL57uDwXnn54OL+Mrg1GcVdfGV2t46NBmcLJyrga9KWwIiS+4I/2qTeSNPF5h WgOOpVYmBNH3rg59IsuOA82HDOdAIo+7cG0bAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU5VSsnq/Tp0m85fQ4zg0dHbqS+e8wHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzLzVWU3NucV9UcDBtODVmUTR6ZzBkSGJxUy1lOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKq3AwDQYJKoZIhvcNAQELBQADggEB AABZ6qvW9T2UuAnFSGaEysF5UYK1sagwwl2HbqmIzbnPxoDRD3Q2ZFdVDuxMK4YX lOa8RfnY2Sd/Y2Ix9tjur5hObFpeg6GD7Q2yBoAVQebrVpMt/1Frq4D3WiTyekk8 ID3AO0FYdbXCp7HmgW+ZEeakFEhZ+2nzr0xVSq0TZKOdfmxOho0fct7ZLSNNBopc GuUI4J3teXIeJKuHvPzUxcTXeOkXjKV3eZ+F4MSCJGFSbgKRky74Sv00s8uBVOVk EZs0lMMcUzx6HfzMkmCPx03NElJO24ZRCN2WLzg3nvDqaFS5hWC6J9oVW+NwXNua qPUwj5SDzMeHbuZSqBxCvOk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:30 2026 by rpki-client