$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/49S5Em8yrCgslxFe4IYiKbdn42Y.roa File: 49S5Em8yrCgslxFe4IYiKbdn42Y.roa (raw, json) Hash identifier: dwHTkJ+r5I419h6pajyRVJ/GY1HxAv/7Vmx+K+0791Q= Subject key identifier: E3:D4:B9:12:6F:32:AC:28:2C:97:11:5E:E0:86:22:29:B7:67:E3:66 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 057C Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/49S5Em8yrCgslxFe4IYiKbdn42Y.roa Signing time: Tue 31 Mar 2026 08:20:16 +0000 ROA not before: Tue 31 Mar 2026 08:20:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 153.120.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E3D4B9126F32AC282C97115EE0862229B767E366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:0c:5a:9b:c3:b9:39:b1:22:3e:7e:00:23: ae:08:88:91:ee:d0:aa:60:0c:35:19:1b:49:81:0b: 2a:3f:4a:25:aa:f8:fb:b0:2e:1f:96:0a:0f:1d:3b: d2:3f:8d:01:e4:f0:88:d3:a0:79:8e:ce:98:6b:4e: 17:c9:b2:99:16:d1:8b:5b:98:1d:6a:5b:92:53:04: c6:9f:3c:fd:db:fb:2d:36:48:14:f9:79:82:78:39: 7c:ae:83:82:22:16:14:d3:1e:9e:43:6f:c6:37:25: 04:20:94:09:85:96:74:52:ae:ca:a1:80:52:ca:d1: 3a:fa:4a:14:b4:c3:2c:1a:c3:0c:c8:9b:25:d0:b5: ac:b8:1a:60:06:5b:86:a5:48:28:7a:85:da:a1:98: 69:ca:d4:3d:63:6e:86:b8:5b:c8:35:22:2f:a4:bf: b7:c0:50:c7:10:8e:1d:cc:be:21:9f:22:3f:1e:df: f1:fa:07:1e:d6:c2:e2:fe:72:a3:36:1e:83:2d:71: 53:a4:a4:32:44:03:aa:91:03:bc:fa:5e:1f:cb:e4: 4f:7e:ae:aa:8b:21:ef:28:92:c4:a7:d8:66:5a:5a: 95:0f:9a:65:71:c7:fd:a7:4e:c9:cd:da:aa:9d:e2: 65:c8:20:44:86:11:9b:70:c3:7e:6e:2d:20:99:f8: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D4:B9:12:6F:32:AC:28:2C:97:11:5E:E0:86:22:29:B7:67:E3:66 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/49S5Em8yrCgslxFe4IYiKbdn42Y.roa sbgp-ipAddrBlock: critical IPv4: 153.120.192.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:b7:44:af:22:b7:de:54:61:e0:93:12:1a:1c:3b:a8:1a:9a: 3b:6d:10:0b:6c:e2:fa:ce:6f:3c:8a:c8:d7:1a:f6:c8:92:e6: 4e:e1:d6:e9:54:19:62:08:82:70:da:13:db:da:84:5c:6c:da: 63:bc:16:3e:00:24:7c:31:bf:42:16:eb:9e:9a:a0:78:6d:71: 01:1c:ba:62:75:ef:1b:9d:e8:79:ea:63:3e:36:f0:fc:84:21: 61:2f:3e:f1:bc:2b:64:09:61:9b:18:ba:87:9c:bd:17:4b:c7: 38:c0:54:a9:1c:db:20:64:9f:0b:d3:42:0c:9a:4e:ff:02:89: 62:29:c9:79:77:5d:dd:cd:59:08:bb:f7:17:ce:12:62:bf:d6: f4:cc:28:e4:f5:f2:08:1d:14:2b:33:e3:ce:6d:35:76:04:ce: bf:6a:8e:cf:36:d4:b4:84:11:ef:d5:4d:7b:43:66:e4:c6:6f: ab:76:f9:41:1f:68:3f:2a:4c:3b:3e:16:66:46:7e:03:63:63: 63:62:9b:b2:61:4f:ad:ff:ce:46:1a:68:1f:37:89:86:ab:0c: 2e:16:56:54:55:25:9e:82:cf:d2:8a:50:db:04:72:31:71:22: 77:41:d8:68:46:82:a7:9c:7a:9f:b7:4e:60:14:79:8b:07:c9: 98:8f:5a:73 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwMTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUzRDRCOTEyNkYzMkFD MjgyQzk3MTE1RUUwODYyMjI5Qjc2N0UzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8+gxam8O5ObEiPn4AI64IiJHu0KpgDDUZG0mBCyo/SiWq+Puw Lh+WCg8dO9I/jQHk8IjToHmOzphrThfJspkW0YtbmB1qW5JTBMafPP3b+y02SBT5 eYJ4OXyug4IiFhTTHp5Db8Y3JQQglAmFlnRSrsqhgFLK0Tr6ShS0wywawwzImyXQ tay4GmAGW4alSCh6hdqhmGnK1D1jboa4W8g1Ii+kv7fAUMcQjh3MviGfIj8e3/H6 Bx7WwuL+cqM2HoMtcVOkpDJEA6qRA7z6Xh/L5E9+rqqLIe8oksSn2GZaWpUPmmVx x/2nTsnN2qqd4mXIIESGEZtww35uLSCZ+O8hAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU49S5Em8yrCgslxFe4IYiKbdn42YwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0LzQ5UzVFbTh5ckNnc2x4RmU0SVlpS2JkbjQyWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASZeMAwDQYJKoZIhvcNAQELBQADggEB AGu3RK8it95UYeCTEhocO6gamjttEAts4vrObzyKyNca9siS5k7h1ulUGWIIgnDa E9vahFxs2mO8Fj4AJHwxv0IW656aoHhtcQEcumJ17xud6HnqYz428PyEIWEvPvG8 K2QJYZsYuoecvRdLxzjAVKkc2yBknwvTQgyaTv8CiWIpyXl3Xd3NWQi79xfOEmK/ 1vTMKOT18ggdFCsz485tNXYEzr9qjs821LSEEe/VTXtDZuTGb6t2+UEfaD8qTDs+ FmZGfgNjY2Nim7JhT63/zkYaaB83iYarDC4WVlRVJZ6Cz9KKUNsEcjFxIndB2GhG gqecep+3TmAUeYsHyZiPWnM= -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:42 2026 by rpki-client