$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GaRwe2Q3zQyfYJCy-64ycQf1pI0.roa File: GaRwe2Q3zQyfYJCy-64ycQf1pI0.roa (raw, json) Hash identifier: e5LhTEsEudWb5WQPeLtV4iGd90c3g/z/n/NOWhgRKt4= Subject key identifier: 19:A4:70:7B:64:37:CD:0C:9F:60:90:B2:FB:AE:32:71:07:F5:A4:8D Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05BF Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GaRwe2Q3zQyfYJCy-64ycQf1pI0.roa Signing time: Tue 31 Mar 2026 08:20:44 +0000 ROA not before: Tue 31 Mar 2026 08:20:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 59.157.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=19A4707B6437CD0C9F6090B2FBAE327107F5A48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:56:61:89:dd:03:f4:86:79:20:a0:87:e5: ce:20:c8:5f:79:30:b0:22:ca:bf:60:c0:44:98:bf: 7c:e4:e1:09:fe:1c:64:2b:37:a3:e3:ed:d2:ce:46: 32:37:7a:4a:2e:e4:d8:08:39:40:e9:41:6c:72:1a: 1c:ab:88:3a:f4:1f:ab:5f:03:a4:f2:62:18:44:33: 53:16:1c:0d:15:9b:43:23:49:5c:6e:a0:f8:70:0a: 63:ea:36:6f:62:6a:3d:45:c1:bd:17:b6:82:84:1b: 1e:c0:4a:e9:b8:fb:c9:ae:87:e8:03:b1:cf:0e:f8: 2c:fc:ed:1e:5c:15:2a:58:fd:9d:50:9f:02:5c:e0: fb:16:0b:a6:a9:2a:1d:a1:b9:e6:9f:c7:c6:13:0d: 4e:9e:bc:a7:6f:4d:92:65:ed:73:37:ef:e5:db:39: 5e:06:69:63:03:80:32:3a:ed:d7:c1:98:74:a5:19: 50:4b:cd:ba:5f:fd:5d:f0:11:14:3a:4f:84:fa:b5: 2c:e7:e9:68:79:e4:c0:73:8f:20:dc:3c:f6:8f:d1: fb:ae:a9:5d:64:79:36:8b:e2:32:00:1b:01:14:f0: b8:f1:02:07:38:6d:73:1a:63:e8:f2:37:96:98:b8: 8f:19:1a:c9:0f:75:de:cd:e4:a1:fc:07:b1:f8:9f: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A4:70:7B:64:37:CD:0C:9F:60:90:B2:FB:AE:32:71:07:F5:A4:8D X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GaRwe2Q3zQyfYJCy-64ycQf1pI0.roa sbgp-ipAddrBlock: critical IPv4: 59.157.192.0/20 Signature Algorithm: sha256WithRSAEncryption 14:1f:52:fa:91:53:d2:df:0b:76:a1:71:67:5d:e5:1a:77:fd: cc:35:95:72:1e:20:9c:bf:9f:5e:d8:c9:3f:70:83:35:4d:5b: 31:49:97:b6:92:c4:da:a4:8c:8c:43:11:af:99:a9:55:e7:f9: a0:8b:ba:4f:c2:a4:63:d2:af:8d:77:d5:86:86:74:d1:5e:ad: 3f:d5:67:aa:9f:60:a6:b2:49:4e:eb:4d:6d:eb:44:2d:8b:48: 26:b1:34:77:34:22:9d:0a:71:52:7c:90:ac:77:ab:6a:d0:da: 7e:d5:2c:e5:bb:11:27:0a:df:e6:f7:60:22:cb:54:d8:84:64: 55:58:da:63:93:fc:81:f0:91:ca:30:53:de:aa:d3:0f:1f:da: 59:8e:b3:65:5d:c2:87:bb:be:53:02:37:c8:3d:cb:5a:84:73: 38:af:58:a4:7d:50:45:fb:a3:db:22:d5:da:24:41:7f:80:97: 98:46:77:fb:3f:1d:03:7a:3d:e8:56:32:1f:0c:aa:55:cb:a5: 5b:65:54:56:8f:89:be:8b:13:15:80:05:01:79:72:41:32:64: 34:d8:b3:f3:fe:cf:0e:25:80:23:01:bf:77:2e:f0:00:41:07: fb:33:77:a1:a6:8d:4b:ec:7c:52:cb:2d:ee:76:66:d3:dc:ed: e9:fd:80:21 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5QTQ3MDdCNjQzN0NE MEM5RjYwOTBCMkZCQUUzMjcxMDdGNUE0OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpolZhid0D9IZ5IKCH5c4gyF95MLAiyr9gwESYv3zk4Qn+HGQr N6Pj7dLORjI3ekou5NgIOUDpQWxyGhyriDr0H6tfA6TyYhhEM1MWHA0Vm0MjSVxu oPhwCmPqNm9iaj1Fwb0XtoKEGx7ASum4+8muh+gDsc8O+Cz87R5cFSpY/Z1QnwJc 4PsWC6apKh2hueafx8YTDU6evKdvTZJl7XM37+XbOV4GaWMDgDI67dfBmHSlGVBL zbpf/V3wERQ6T4T6tSzn6Wh55MBzjyDcPPaP0fuuqV1keTaL4jIAGwEU8LjxAgc4 bXMaY+jyN5aYuI8ZGskPdd7N5KH8B7H4n1vBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUGaRwe2Q3zQyfYJCy+64ycQf1pI0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0dhUndlMlEzelF5ZllKQ3ktNjR5Y1FmMXBJMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ7ncAwDQYJKoZIhvcNAQELBQADggEB ABQfUvqRU9LfC3ahcWdd5Rp3/cw1lXIeIJy/n17YyT9wgzVNWzFJl7aSxNqkjIxD Ea+ZqVXn+aCLuk/CpGPSr4131YaGdNFerT/VZ6qfYKaySU7rTW3rRC2LSCaxNHc0 Ip0KcVJ8kKx3q2rQ2n7VLOW7EScK3+b3YCLLVNiEZFVY2mOT/IHwkcowU96q0w8f 2lmOs2Vdwoe7vlMCN8g9y1qEczivWKR9UEX7o9si1dokQX+Al5hGd/s/HQN6PehW Mh8MqlXLpVtlVFaPib6LExWABQF5ckEyZDTYs/P+zw4lgCMBv3cu8ABBB/szd6Gm jUvsfFLLLe52ZtPc7en9gCE= -----END CERTIFICATE-----Generated at Fri Apr 17 05:25:56 2026 by rpki-client