$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CK3WPPmxLKrcS5vWwVIiruKq6Vw.roa File: CK3WPPmxLKrcS5vWwVIiruKq6Vw.roa (raw, json) Hash identifier: UZ+ySnNpZiJb4FwdfdbdG5i7e7/U/kiIqSE0q99oLvI= Subject key identifier: 08:AD:D6:3C:F9:B1:2C:AA:DC:4B:9B:D6:C1:52:22:AE:E2:AA:E9:5C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 04D7 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CK3WPPmxLKrcS5vWwVIiruKq6Vw.roa Signing time: Tue 31 Mar 2026 08:18:54 +0000 ROA not before: Tue 31 Mar 2026 08:18:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 27.132.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:18:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=08ADD63CF9B12CAADC4B9BD6C15222AEE2AAE95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:15:f1:b0:29:d7:80:b9:8a:fb:3f:c2:2e: 3b:54:77:8b:1c:11:3c:c0:fb:8a:3b:23:61:b6:0a: 2d:f4:c3:61:65:43:71:fd:8b:ab:59:10:e2:73:d9: a2:3e:74:9a:8d:e8:86:26:f1:47:03:45:c0:01:7b: 17:58:46:e3:31:be:f6:8b:21:4b:46:5b:2d:3a:99: bf:56:51:55:b5:6e:cc:c6:4d:52:54:88:3b:7e:9a: e8:c3:5a:bf:5f:e8:f7:9a:99:d4:74:2d:7b:8b:1c: 6a:5e:43:49:30:a5:ea:36:78:39:e9:fa:2a:63:79: 56:80:b2:42:0f:34:54:8a:20:4d:23:4b:c3:b5:32: 92:bb:27:fd:a1:a0:61:cd:2d:3b:4b:91:64:f8:2c: e0:dd:b2:e7:f6:30:27:7e:98:02:dd:1a:b8:8d:cc: 45:76:f1:9c:78:a7:38:21:ce:ed:10:ec:1f:28:55: ea:0c:33:87:61:2f:31:e0:b4:c8:51:82:dd:2a:2b: f0:71:4e:cb:fe:f5:6c:45:f7:69:5a:4d:7f:4c:c8: 61:c0:31:3c:d0:05:4b:47:a1:46:75:63:0d:a1:ee: c7:48:83:a4:88:66:b4:3e:41:ef:8c:67:35:83:94: 21:d9:94:0f:27:69:27:72:61:d7:27:46:e9:60:3a: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:D6:3C:F9:B1:2C:AA:DC:4B:9B:D6:C1:52:22:AE:E2:AA:E9:5C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CK3WPPmxLKrcS5vWwVIiruKq6Vw.roa sbgp-ipAddrBlock: critical IPv4: 27.132.160.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:32:fd:4d:f8:92:03:81:e2:82:c9:a7:49:aa:66:95:9b:3a: b7:01:4d:81:ee:4a:d7:c6:d8:f5:07:17:b4:52:9d:ab:44:36: 59:4d:12:00:80:27:77:75:13:64:fc:48:48:d7:76:bd:bf:43: f2:f4:25:4b:31:84:a4:59:83:a5:de:87:5b:20:51:66:ae:75: 3b:09:d2:d4:84:4e:9f:6a:f2:9b:57:9d:58:99:6c:01:69:70: 75:d9:6e:8d:44:b9:ea:24:5c:a9:49:61:c3:ac:0d:5f:67:e8: ee:0e:18:e0:89:21:47:b7:2f:6a:1a:0a:2c:8e:1b:99:69:e1: 34:7a:d9:01:08:b1:5a:85:54:33:ad:a2:15:49:bd:30:fd:80: 56:e7:c9:bd:21:d1:75:c5:e7:5c:d5:54:18:46:8e:0a:a6:93: 93:0b:88:73:ed:d3:3c:f6:48:e8:17:82:af:66:5c:36:f1:f9: 7a:e0:87:69:d8:09:40:5a:f9:24:4d:7e:96:39:ea:5a:d5:22: 33:bf:fa:d8:5b:b4:d5:6e:a8:ab:90:f1:f1:e1:59:db:79:36: 64:76:1c:81:8d:09:8f:a2:c9:28:d8:70:d9:79:cb:76:1c:f1: 6e:32:cb:98:65:bb:09:71:39:f8:8a:b8:7f:7a:80:a4:d5:7c: 56:87:a4:fa -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE4NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4QURENjNDRjlCMTJD QUFEQzRCOUJENkMxNTIyMkFFRTJBQUU5NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcQhXxsCnXgLmK+z/CLjtUd4scETzA+4o7I2G2Ci30w2FlQ3H9 i6tZEOJz2aI+dJqN6IYm8UcDRcABexdYRuMxvvaLIUtGWy06mb9WUVW1bszGTVJU iDt+mujDWr9f6PeamdR0LXuLHGpeQ0kwpeo2eDnp+ipjeVaAskIPNFSKIE0jS8O1 MpK7J/2hoGHNLTtLkWT4LODdsuf2MCd+mALdGriNzEV28Zx4pzghzu0Q7B8oVeoM M4dhLzHgtMhRgt0qK/BxTsv+9WxF92laTX9MyGHAMTzQBUtHoUZ1Yw2h7sdIg6SI ZrQ+Qe+MZzWDlCHZlA8naSdyYdcnRulgOuv5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUCK3WPPmxLKrcS5vWwVIiruKq6VwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0NLM1dQUG14TEtyY1M1dld3VklpcnVLcTZWdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQbhKAwDQYJKoZIhvcNAQELBQADggEB AIwy/U34kgOB4oLJp0mqZpWbOrcBTYHuStfG2PUHF7RSnatENllNEgCAJ3d1E2T8 SEjXdr2/Q/L0JUsxhKRZg6Xeh1sgUWaudTsJ0tSETp9q8ptXnViZbAFpcHXZbo1E ueokXKlJYcOsDV9n6O4OGOCJIUe3L2oaCiyOG5lp4TR62QEIsVqFVDOtohVJvTD9 gFbnyb0h0XXF51zVVBhGjgqmk5MLiHPt0zz2SOgXgq9mXDbx+Xrgh2nYCUBa+SRN fpY56lrVIjO/+thbtNVuqKuQ8fHhWdt5NmR2HIGNCY+iySjYcNl5y3Yc8W4yy5hl uwlxOfiKuH96gKTVfFaHpPo= -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:45 2026 by rpki-client