$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIt7A5_W0lHtUNq8FlSW37RZSjo.roa File: CIt7A5_W0lHtUNq8FlSW37RZSjo.roa (raw, json) Hash identifier: L9ltacrksZAhEyrfl6QBTh2dmZHMqUOT4doYxlZqmvs= Subject key identifier: 08:8B:7B:03:9F:D6:D2:51:ED:50:DA:BC:16:54:96:DF:B4:59:4A:3A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 04D2 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIt7A5_W0lHtUNq8FlSW37RZSjo.roa Signing time: Tue 31 Mar 2026 08:18:52 +0000 ROA not before: Tue 31 Mar 2026 08:18:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 27.120.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:18:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=088B7B039FD6D251ED50DABC165496DFB4594A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:bd:f3:9f:98:50:50:1e:10:4b:33:35:74: c4:85:b1:5c:86:09:24:88:02:1e:a9:25:bd:f9:7c: 31:0c:51:a0:3f:51:db:3f:49:df:ec:42:9e:dd:7e: d5:8f:ae:bc:22:e0:7e:ab:51:f3:eb:ec:ca:62:10: d4:85:ad:5a:a0:33:8f:f8:7d:38:2c:64:0b:77:8d: e2:27:cb:c3:05:56:94:3b:fb:d1:6c:54:63:a1:6c: c9:99:73:da:67:67:e2:b3:68:d9:98:97:d6:9f:f1: 91:c2:13:ae:55:99:08:93:ef:ce:63:f2:51:f1:08: a3:7f:16:e1:a8:27:16:d4:e1:a4:df:1e:1f:8a:a7: e2:b0:74:ea:cf:4b:75:ec:e0:df:c9:41:f9:38:09: ba:4e:cc:08:bb:d4:63:f0:7b:a8:b7:01:df:99:f3: 75:1a:65:8b:bb:7a:87:e3:d5:1b:3e:55:14:11:b2: 5a:70:18:0d:39:a1:11:76:d7:df:9e:69:71:6e:99: cb:98:e7:bc:9d:77:31:81:ae:b1:1b:20:be:f5:58: 88:1e:10:9b:f2:2a:c9:44:93:03:61:67:40:b0:e3: 22:a1:2a:90:d8:b5:19:5a:0c:0e:51:95:f5:2e:0b: 4c:f6:90:6d:a3:33:b1:0d:c5:4e:eb:16:6f:bc:6e: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8B:7B:03:9F:D6:D2:51:ED:50:DA:BC:16:54:96:DF:B4:59:4A:3A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CIt7A5_W0lHtUNq8FlSW37RZSjo.roa sbgp-ipAddrBlock: critical IPv4: 27.120.192.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:95:e5:7c:2d:a3:e8:9a:9e:55:85:98:a0:2b:69:ab:8f:c4: b3:df:1a:ee:41:8e:d9:df:ec:9c:45:01:5a:88:b3:9d:4a:7d: 05:af:96:3f:1c:f7:04:18:cc:a7:16:99:07:f0:9e:42:99:3b: b6:4b:cf:86:2a:82:c0:ef:25:34:95:e8:c2:44:08:c5:5d:69: dd:d0:59:e4:53:8d:be:d7:82:11:83:d2:58:43:2c:b5:f3:14: d5:55:9b:d1:2e:b7:e5:04:45:cf:e8:33:2a:01:c1:4b:d6:12: 6c:2b:ba:f6:d0:24:a5:bb:58:be:d3:ab:71:09:bc:04:22:a5: de:f5:69:c8:e8:24:c5:de:9b:de:ce:b3:09:11:44:b2:3e:d0: 31:b9:d9:d3:09:b6:3d:7b:06:98:54:f1:48:b0:83:24:44:f2: 81:33:54:23:89:7b:ff:c3:0c:31:6d:4d:1e:46:fe:f8:99:85: fd:24:86:63:cf:c9:41:d7:e4:71:bb:5c:0e:21:52:2b:5b:ec: 02:5c:3a:42:70:c6:de:ec:d0:13:34:1f:48:17:d8:71:9b:63: 96:f4:e4:f8:b7:42:c5:4e:f6:f2:c1:b1:33:f9:ad:9e:fd:ce: 3c:8e:10:b3:d6:37:92:8f:3c:fb:3b:ae:69:1b:d4:68:0e:6c: ed:b7:45:d6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE4NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4OEI3QjAzOUZENkQy NTFFRDUwREFCQzE2NTQ5NkRGQjQ1OTRBM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFTL3zn5hQUB4QSzM1dMSFsVyGCSSIAh6pJb35fDEMUaA/Uds/ Sd/sQp7dftWPrrwi4H6rUfPr7MpiENSFrVqgM4/4fTgsZAt3jeIny8MFVpQ7+9Fs VGOhbMmZc9pnZ+KzaNmYl9af8ZHCE65VmQiT785j8lHxCKN/FuGoJxbU4aTfHh+K p+KwdOrPS3Xs4N/JQfk4CbpOzAi71GPwe6i3Ad+Z83UaZYu7eofj1Rs+VRQRslpw GA05oRF219+eaXFumcuY57yddzGBrrEbIL71WIgeEJvyKslEkwNhZ0Cw4yKhKpDY tRlaDA5RlfUuC0z2kG2jM7ENxU7rFm+8bhfpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUCIt7A5/W0lHtUNq8FlSW37RZSjowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0NJdDdBNV9XMGxIdFVOcThGbFNXMzdSWlNqby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYbeMAwDQYJKoZIhvcNAQELBQADggEB AA6V5Xwto+ianlWFmKAraauPxLPfGu5Bjtnf7JxFAVqIs51KfQWvlj8c9wQYzKcW mQfwnkKZO7ZLz4YqgsDvJTSV6MJECMVdad3QWeRTjb7XghGD0lhDLLXzFNVVm9Eu t+UERc/oMyoBwUvWEmwruvbQJKW7WL7Tq3EJvAQipd71acjoJMXem97OswkRRLI+ 0DG52dMJtj17BphU8UiwgyRE8oEzVCOJe//DDDFtTR5G/viZhf0khmPPyUHX5HG7 XA4hUitb7AJcOkJwxt7s0BM0H0gX2HGbY5b05Pi3QsVO9vLBsTP5rZ79zjyOELPW N5KPPPs7rmkb1GgObO23RdY= -----END CERTIFICATE-----Generated at Fri Apr 17 02:19:38 2026 by rpki-client