$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4sm1-0Ti-GYKxFWeFW8xcrPzfWI.roa File: 4sm1-0Ti-GYKxFWeFW8xcrPzfWI.roa (raw, json) Hash identifier: 7jisBFYAzSsB54LwSYIOv2IP1I71kEe1tA9BSYdVpK0= Subject key identifier: E2:C9:B5:FB:44:E2:F8:66:0A:C4:55:9E:15:6F:31:72:B3:F3:7D:62 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 04E1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4sm1-0Ti-GYKxFWeFW8xcrPzfWI.roa Signing time: Tue 31 Mar 2026 08:18:58 +0000 ROA not before: Tue 31 Mar 2026 08:18:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 119.150.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:18:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E2C9B5FB44E2F8660AC4559E156F3172B3F37D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:dd:53:79:fa:81:33:62:04:97:00:c4:59:ab: 89:5e:66:6d:a3:43:82:c1:14:9b:68:d0:e1:07:41: b3:c0:06:55:4e:6d:64:99:f0:9d:2c:96:a1:e2:1f: da:d0:fb:a4:56:a5:78:2a:27:f9:08:79:0e:d9:f0: 8f:4c:0d:f7:58:9f:d7:9b:b9:2c:7d:af:e9:92:ce: ba:71:9d:91:a7:f5:ae:0f:ee:36:e7:e6:a9:0d:eb: c3:43:ea:bb:42:50:77:df:09:b5:ac:7a:89:41:39: 80:58:34:6f:1d:74:8d:64:02:73:a5:c3:a4:0e:a2: cf:61:91:43:32:5c:a6:e4:47:99:b7:6d:d7:d7:da: 0a:7d:f5:60:53:9c:23:1f:f7:d7:d4:4e:81:0e:f3: 6e:d0:75:ce:13:c5:4f:b4:d6:cc:64:4a:af:27:40: 04:a4:9b:08:98:86:ff:0f:cc:ca:af:6a:7e:6f:2e: 96:f1:69:d6:10:ff:3e:76:10:79:ac:2f:3a:16:85: 66:bb:db:f6:16:bd:ac:ff:6b:3b:15:a8:ac:fc:d9: 40:25:85:ae:aa:0c:07:04:94:94:79:cb:c6:51:62: 49:63:d0:3c:d6:c2:f2:e5:e0:47:ce:cc:a2:46:ea: 0b:03:1f:8b:3d:23:57:62:9d:4c:9c:aa:7c:47:8a: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:B5:FB:44:E2:F8:66:0A:C4:55:9E:15:6F:31:72:B3:F3:7D:62 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4sm1-0Ti-GYKxFWeFW8xcrPzfWI.roa sbgp-ipAddrBlock: critical IPv4: 119.150.239.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ae:b3:3a:30:17:37:68:54:7d:c8:2a:be:af:49:4e:c9:44: 8d:41:dd:88:18:c8:c6:95:5f:06:ff:a4:07:aa:f7:61:98:99: 62:59:9d:8b:c0:56:4c:71:7c:e3:9f:e8:e2:fc:ba:dd:93:87: d1:4a:8c:7f:eb:4e:4e:9b:49:7e:14:0d:80:70:da:83:a3:7a: 3b:3a:e0:c7:4d:34:16:ff:24:53:b1:b9:e6:89:30:b8:ff:74: ce:7c:ed:09:2d:be:08:c7:fb:23:c8:53:46:97:e0:90:28:e9: e2:48:35:a0:af:57:36:d6:01:72:6b:82:12:fe:4a:c3:06:03: 83:97:be:73:f9:88:af:60:a8:e6:f1:07:1f:56:9a:8d:ee:7a: 26:2e:7f:72:c1:65:13:b4:f7:a3:5e:f9:f7:ae:6e:14:77:de: 9d:e8:50:74:0e:60:16:18:b5:b0:43:07:0d:d9:91:c4:46:a5: b6:8e:3e:91:3f:f3:aa:df:df:36:91:1f:86:5f:1b:35:b9:9e: 1c:56:4f:a7:89:d8:65:35:35:19:da:d2:0b:be:61:bc:a9:80: d6:b9:50:bc:84:4d:8a:28:f4:50:77:5c:bf:9e:b0:87:92:ca: ee:0f:03:3a:b7:4c:5b:f6:20:8f:eb:b5:04:f8:a3:94:b5:f9: 60:c4:56:df -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE4NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyQzlCNUZCNDRFMkY4 NjYwQUM0NTU5RTE1NkYzMTcyQjNGMzdENjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD03VN5+oEzYgSXAMRZq4leZm2jQ4LBFJto0OEHQbPABlVObWSZ 8J0slqHiH9rQ+6RWpXgqJ/kIeQ7Z8I9MDfdYn9ebuSx9r+mSzrpxnZGn9a4P7jbn 5qkN68ND6rtCUHffCbWseolBOYBYNG8ddI1kAnOlw6QOos9hkUMyXKbkR5m3bdfX 2gp99WBTnCMf99fUToEO827Qdc4TxU+01sxkSq8nQASkmwiYhv8PzMqvan5vLpbx adYQ/z52EHmsLzoWhWa72/YWvaz/azsVqKz82UAlha6qDAcElJR5y8ZRYklj0DzW wvLl4EfOzKJG6gsDH4s9I1dinUycqnxHitRDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4sm1+0Ti+GYKxFWeFW8xcrPzfWIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0LzRzbTEtMFRpLUdZS3hGV2VGVzh4Y3JQemZXSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3lu8wDQYJKoZIhvcNAQELBQADggEB AJSuszowFzdoVH3IKr6vSU7JRI1B3YgYyMaVXwb/pAeq92GYmWJZnYvAVkxxfOOf 6OL8ut2Th9FKjH/rTk6bSX4UDYBw2oOjejs64MdNNBb/JFOxueaJMLj/dM587Qkt vgjH+yPIU0aX4JAo6eJINaCvVzbWAXJrghL+SsMGA4OXvnP5iK9gqObxBx9Wmo3u eiYuf3LBZRO096Ne+feubhR33p3oUHQOYBYYtbBDBw3ZkcRGpbaOPpE/86rf3zaR H4ZfGzW5nhxWT6eJ2GU1NRna0gu+YbypgNa5ULyETYoo9FB3XL+esIeSyu4PAzq3 TFv2II/rtQT4o5S1+WDEVt8= -----END CERTIFICATE-----Generated at Fri Apr 17 02:19:33 2026 by rpki-client