$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fi7C1glyfDxjr-7cz3RA98Hp3BQ.roa File: Fi7C1glyfDxjr-7cz3RA98Hp3BQ.roa (raw, json) Hash identifier: HYa8kenS5ZrtxRP8tqIuhQ/SdF1ydsiI1r55ScYv30k= Subject key identifier: 16:2E:C2:D6:09:72:7C:3C:63:AF:EE:DC:CF:74:40:F7:C1:E9:DC:14 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05C8 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fi7C1glyfDxjr-7cz3RA98Hp3BQ.roa Signing time: Tue 31 Mar 2026 08:20:48 +0000 ROA not before: Tue 31 Mar 2026 08:20:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 110.74.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=162EC2D609727C3C63AFEEDCCF7440F7C1E9DC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:28:df:62:6d:a2:9a:62:3b:f9:ef:34:89: 0b:cc:38:95:b8:9b:61:98:eb:b2:a9:44:c0:1b:0f: 28:33:fc:be:2e:7d:6b:86:09:74:88:9f:6a:da:04: cd:a1:eb:d2:42:2c:40:7f:83:2c:e2:40:78:59:74: c6:80:99:7d:6e:1d:c1:a5:80:3e:67:12:67:35:f0: 30:3d:26:8f:3d:99:5c:f7:f7:57:71:8f:30:3b:c5: 5e:97:13:d4:5b:20:e0:7c:0d:e5:0c:cf:61:60:7d: 2c:cf:ed:37:68:cf:40:89:c9:f8:e6:7c:c5:f2:8b: bb:8f:f3:c4:8c:f1:b4:48:98:63:82:48:d5:cb:8c: 80:f9:04:8f:22:c8:d1:be:d6:a4:ae:ca:97:e9:44: 6b:e3:40:97:a2:43:6e:6d:0f:13:4a:ab:d3:40:6d: 68:33:6b:2f:1e:ec:a5:73:47:3c:65:b5:9f:a2:ba: 93:5e:74:d2:29:55:cf:64:86:aa:7f:fe:c2:f0:0f: 5c:89:88:31:12:38:9a:60:75:89:f6:e8:78:4f:c7: 84:0d:80:20:6c:ef:28:1b:b6:2f:b0:b5:8e:92:2c: 78:bb:f8:b7:d5:66:8c:85:21:3f:d0:ce:92:c4:5c: ec:de:d3:ac:8d:bd:a8:cb:61:0f:28:c8:57:9e:33: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:C2:D6:09:72:7C:3C:63:AF:EE:DC:CF:74:40:F7:C1:E9:DC:14 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Fi7C1glyfDxjr-7cz3RA98Hp3BQ.roa sbgp-ipAddrBlock: critical IPv4: 110.74.121.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:df:da:c6:c8:0c:5a:c8:d0:e7:dc:f4:1b:c6:cb:55:4a:2a: 22:c0:0a:df:c7:56:ff:86:36:44:c0:3c:93:9c:4e:57:3c:d1: c7:43:04:f3:e1:0f:08:d1:17:69:45:7d:28:cf:c4:55:14:35: 17:52:13:27:9d:fd:e9:3a:b1:c5:fd:24:10:c2:f9:6d:fc:8f: 3f:96:a0:cc:48:2c:02:5f:73:f0:12:50:40:ee:c4:50:b5:95: 12:96:9f:09:1f:f9:47:49:2a:bf:76:0a:55:97:a6:63:bb:55: 45:51:4a:4a:33:26:d3:c3:2a:29:40:b5:6b:8c:fa:d3:ef:a4: 2d:4b:1f:40:01:6f:ae:44:f2:5d:d3:43:5e:9d:0f:34:59:43: 2b:cc:43:53:ae:80:b4:bd:37:10:39:18:f2:9b:c1:a6:9c:e2: 43:ee:53:f4:d0:e4:2e:73:c3:63:a0:67:27:40:0b:40:b0:5b: 32:71:be:7f:06:b5:24:31:e7:d7:5e:f5:11:e0:53:e4:98:a1: 4a:8b:23:a7:04:ee:33:12:17:0b:a0:63:22:4a:c7:f1:51:dd: 39:05:22:e2:fa:2d:95:4e:af:b9:11:20:96:48:83:28:0a:0d: cf:de:4c:c7:5b:0e:bb:08:e1:ba:1a:07:10:cc:46:d7:fa:35: e9:e8:86:38 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwNDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE2MkVDMkQ2MDk3MjdD M0M2M0FGRUVEQ0NGNzQ0MEY3QzFFOURDMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvQijfYm2immI7+e80iQvMOJW4m2GY67KpRMAbDygz/L4ufWuG CXSIn2raBM2h69JCLEB/gyziQHhZdMaAmX1uHcGlgD5nEmc18DA9Jo89mVz391dx jzA7xV6XE9RbIOB8DeUMz2FgfSzP7Tdoz0CJyfjmfMXyi7uP88SM8bRImGOCSNXL jID5BI8iyNG+1qSuypfpRGvjQJeiQ25tDxNKq9NAbWgzay8e7KVzRzxltZ+iupNe dNIpVc9khqp//sLwD1yJiDESOJpgdYn26HhPx4QNgCBs7ygbti+wtY6SLHi7+LfV ZoyFIT/QzpLEXOze06yNvajLYQ8oyFeeM3BrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUFi7C1glyfDxjr+7cz3RA98Hp3BQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0ZpN0MxZ2x5ZkR4anItN2N6M1JBOThIcDNCUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuSnkwDQYJKoZIhvcNAQELBQADggEB ACvf2sbIDFrI0Ofc9BvGy1VKKiLACt/HVv+GNkTAPJOcTlc80cdDBPPhDwjRF2lF fSjPxFUUNRdSEyed/ek6scX9JBDC+W38jz+WoMxILAJfc/ASUEDuxFC1lRKWnwkf +UdJKr92ClWXpmO7VUVRSkozJtPDKilAtWuM+tPvpC1LH0ABb65E8l3TQ16dDzRZ QyvMQ1OugLS9NxA5GPKbwaac4kPuU/TQ5C5zw2OgZydAC0CwWzJxvn8GtSQx59de 9RHgU+SYoUqLI6cE7jMSFwugYyJKx/FR3TkFIuL6LZVOr7kRIJZIgygKDc/eTMdb DrsI4boaBxDMRtf6Nenohjg= -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:47 2026 by rpki-client