$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/LRKGOKaSDjJfOPbL8jvdZV4TxKY.roa File: LRKGOKaSDjJfOPbL8jvdZV4TxKY.roa (raw, json) Hash identifier: abIUpZuXAmhUmutUMf/GPD9UN+UHCLbiSQ5obX7/96Y= Subject key identifier: 2D:12:86:38:A6:92:0E:32:5F:38:F6:CB:F2:3B:DD:65:5E:13:C4:A6 Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: A3 Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/LRKGOKaSDjJfOPbL8jvdZV4TxKY.roa Signing time: Tue 31 Mar 2026 07:46:40 +0000 ROA not before: Tue 31 Mar 2026 07:46:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9622 IP address blocks: 124.47.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Mar 31 07:46:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2D128638A6920E325F38F6CBF23BDD655E13C4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:ee:06:ff:d3:6e:b3:ef:09:2b:d6:d5:2f: 68:51:e9:2f:2e:27:4e:28:00:e5:8c:c4:05:5d:70: e7:0b:51:f2:13:2a:94:2a:b1:e3:92:7f:60:38:ec: aa:94:a8:7d:2b:ec:34:30:a4:74:74:c1:c6:48:4c: 05:f8:c7:15:94:a1:6a:e6:5e:10:83:48:b0:4f:60: f0:7e:b5:34:3c:65:a3:41:a3:bf:f7:20:f0:8f:d4: 04:d1:4c:1a:cf:cd:bc:8a:da:d3:87:e1:3e:e1:65: 10:81:ab:fb:48:e1:f9:f9:d4:95:8e:34:65:90:09: 3f:67:e4:78:fc:e8:d0:1d:ed:76:f8:fd:92:8a:73: 72:6c:e6:11:47:3f:cd:f3:f8:dd:f9:61:46:e5:21: f2:9c:f6:7a:06:ca:94:7e:15:d7:9b:8e:29:73:94: 65:9f:5c:2d:0b:a5:39:f4:6a:96:2c:a5:ca:b1:05: 4a:2a:ab:af:47:66:99:32:f8:6e:71:7a:ff:11:0a: cd:35:df:b3:fa:17:01:e7:dd:43:5f:12:ac:fc:44: 7c:ee:6b:e8:7a:be:62:0a:cd:2d:69:01:a1:27:03: 51:9c:08:98:1b:45:ca:bd:6d:e8:c8:3c:2a:02:49: 36:2e:e6:2d:1f:92:44:5a:2d:0c:8a:90:c4:13:d5: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:12:86:38:A6:92:0E:32:5F:38:F6:CB:F2:3B:DD:65:5E:13:C4:A6 X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/LRKGOKaSDjJfOPbL8jvdZV4TxKY.roa sbgp-ipAddrBlock: critical IPv4: 124.47.64.0/18 Signature Algorithm: sha256WithRSAEncryption 48:5f:3f:a8:a2:1d:4b:80:44:33:e0:46:83:0e:02:1e:44:35: 0c:72:c2:fb:31:5d:4a:02:93:65:64:1b:8c:c8:98:3f:d8:d5: 99:4d:cd:19:88:dc:a7:53:65:0c:90:b6:5d:a8:c5:6e:31:43: 86:a5:87:2f:43:e9:fd:ba:95:b7:7b:90:89:cc:20:54:d8:0c: 1f:20:7e:54:5c:f9:c6:a0:d1:1c:2c:c3:7d:d7:fc:ac:48:40: 24:4f:50:61:d3:b3:5b:b2:f4:92:74:a7:40:e5:da:96:1d:02: bc:4a:75:8e:8b:f4:e7:87:7b:89:91:39:61:7a:84:a2:21:7c: 0e:39:35:16:9b:8f:b3:a5:eb:02:a4:f1:09:2a:30:28:bb:84: a6:19:00:ab:21:ba:9a:b3:b3:7c:55:60:1c:a3:fe:87:95:91: 3a:07:79:2d:8f:6f:1c:e8:72:c3:3c:8e:c3:c7:3c:19:bc:6d: 17:55:22:b0:f4:ba:5b:f1:f6:ea:29:37:85:28:49:53:34:b8: 69:73:06:59:c7:ff:c9:9d:71:5b:ce:fc:79:ae:8a:8a:23:47: cf:12:09:a8:39:f4:e7:db:df:3d:78:82:0b:1c:84:9a:76:46: 3c:e0:85:81:18:81:e1:98:fa:51:03:7f:77:be:25:df:10:22: e4:2e:e2:68 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjAzMzEw NzQ2NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJEMTI4NjM4QTY5MjBF MzI1RjM4RjZDQkYyM0JERDY1NUUxM0M0QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCirO4G/9Nus+8JK9bVL2hR6S8uJ04oAOWMxAVdcOcLUfITKpQq seOSf2A47KqUqH0r7DQwpHR0wcZITAX4xxWUoWrmXhCDSLBPYPB+tTQ8ZaNBo7/3 IPCP1ATRTBrPzbyK2tOH4T7hZRCBq/tI4fn51JWONGWQCT9n5Hj86NAd7Xb4/ZKK c3Js5hFHP83z+N35YUblIfKc9noGypR+FdebjilzlGWfXC0LpTn0apYspcqxBUoq q69HZpky+G5xev8RCs0137P6FwHn3UNfEqz8RHzua+h6vmIKzS1pAaEnA1GcCJgb Rcq9bejIPCoCSTYu5i0fkkRaLQyKkMQT1ZCjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQULRKGOKaSDjJfOPbL8jvdZV4TxKYwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzL0xSS0dPS2FTRGpKZk9QYkw4anZkWlY0VHhLWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ8L0AwDQYJKoZIhvcNAQELBQADggEB AEhfP6iiHUuARDPgRoMOAh5ENQxywvsxXUoCk2VkG4zImD/Y1ZlNzRmI3KdTZQyQ tl2oxW4xQ4alhy9D6f26lbd7kInMIFTYDB8gflRc+cag0Rwsw33X/KxIQCRPUGHT s1uy9JJ0p0Dl2pYdArxKdY6L9OeHe4mROWF6hKIhfA45NRabj7Ol6wKk8QkqMCi7 hKYZAKshupqzs3xVYByj/oeVkToHeS2PbxzocsM8jsPHPBm8bRdVIrD0ulvx9uop N4UoSVM0uGlzBlnH/8mdcVvO/HmuioojR88SCag59Ofb3z14ggschJp2RjzghYEY geGY+lEDf3e+Jd8QIuQu4mg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:24 2026 by rpki-client