$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NQ0ndGLbXl50bCsiGOMg_ss4_is.roa File: NQ0ndGLbXl50bCsiGOMg_ss4_is.roa (raw, json) Hash identifier: haQrl/0YIDk6ldG/c6sv/ILZwQn0TccHwcsBrqA8fF8= Subject key identifier: 35:0D:27:74:62:DB:5E:5E:74:6C:2B:22:18:E3:20:FE:CB:38:FE:2B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 053C Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NQ0ndGLbXl50bCsiGOMg_ss4_is.roa Signing time: Tue 31 Mar 2026 08:19:41 +0000 ROA not before: Tue 31 Mar 2026 08:19:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 61.44.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=350D277462DB5E5E746C2B2218E320FECB38FE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:03:0c:78:ed:44:3e:79:7c:fd:1f:d8:0c: 3c:ce:f3:b4:f2:2a:01:e4:68:8c:84:47:37:57:6f: a1:d2:c2:be:ad:1a:68:2e:8c:13:aa:b4:bb:1f:b5: a2:31:ea:89:ad:4c:6b:dd:83:39:c2:a7:52:bc:ea: 78:38:7c:d0:6e:24:8b:66:fc:3a:a6:1c:53:18:85: a4:1f:bf:91:85:d5:c4:6f:6b:62:bd:c0:9c:87:e3: 69:3b:02:a4:15:ac:5c:63:a2:cb:19:a6:b3:29:b6: 9c:d6:ba:38:a1:83:cd:8c:08:74:da:8f:35:9c:af: 46:42:be:a7:7d:ed:e0:af:f7:df:5a:25:88:bc:d6: 48:36:7d:06:4a:62:4b:1d:53:1b:1f:e8:5f:ee:6c: ba:d6:d5:54:6b:56:d5:ec:a4:5b:f4:94:fb:99:65: a9:62:29:2f:ee:e7:b3:94:4f:90:dc:47:3f:b3:78: df:6d:e3:4b:21:bf:1f:d6:97:40:71:57:40:46:07: bf:66:41:8b:e4:3c:b5:49:37:cc:93:8a:a5:21:e8: 48:10:46:9e:3f:1a:aa:68:33:0d:56:14:77:43:e5: 3f:24:02:33:9e:00:85:0f:a5:30:d2:8b:52:3c:0d: c6:dd:8a:d0:18:23:9e:dd:b9:36:93:5e:b7:9d:6e: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:27:74:62:DB:5E:5E:74:6C:2B:22:18:E3:20:FE:CB:38:FE:2B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NQ0ndGLbXl50bCsiGOMg_ss4_is.roa sbgp-ipAddrBlock: critical IPv4: 61.44.68.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:0d:16:58:6f:7d:5c:94:ec:72:25:ca:0d:79:42:1e:f1:d2: b5:10:b1:50:f8:4c:08:11:94:97:54:e9:1b:90:92:06:e8:44: c4:1e:03:4c:63:46:b1:04:8e:3a:68:fd:ce:8d:e6:d1:76:ce: 4d:26:15:35:49:e2:c9:c5:3c:ef:7b:e2:a5:25:b5:b9:42:bc: 45:b6:66:70:25:d3:17:81:67:fd:2a:c9:4e:a9:ce:2d:38:b7: 0e:36:43:c2:1f:3a:11:19:4c:97:76:3e:7d:80:2a:27:28:03: 28:52:8e:4b:f2:0d:98:9c:28:fc:ae:67:41:01:81:f4:81:61: 6f:0e:70:51:64:08:a8:23:d0:e5:42:b9:b5:a4:21:0f:e0:5f: a7:0b:c2:9a:a8:ba:2d:7a:29:de:6b:7e:bb:cd:68:d1:c9:e7: e8:bd:5f:d0:9d:fa:06:14:26:0c:69:fb:51:92:87:34:6f:ef: 3f:f4:58:d7:cd:b4:fc:91:b3:fd:54:41:b4:54:04:b0:8f:6b: 0e:80:b7:4f:1a:31:a4:5a:d4:00:8f:7c:3e:75:f8:bc:e1:b2: 6b:bc:da:53:a4:21:0f:f5:86:89:ad:51:be:d9:c0:46:14:7f: 45:97:af:c3:70:c6:5f:ae:e6:a2:4d:78:97:bc:1a:44:69:46: 38:d9:12:36 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM1MEQyNzc0NjJEQjVF NUU3NDZDMkIyMjE4RTMyMEZFQ0IzOEZFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKMwMMeO1EPnl8/R/YDDzO87TyKgHkaIyERzdXb6HSwr6tGmgu jBOqtLsftaIx6omtTGvdgznCp1K86ng4fNBuJItm/DqmHFMYhaQfv5GF1cRva2K9 wJyH42k7AqQVrFxjossZprMptpzWujihg82MCHTajzWcr0ZCvqd97eCv999aJYi8 1kg2fQZKYksdUxsf6F/ubLrW1VRrVtXspFv0lPuZZaliKS/u57OUT5DcRz+zeN9t 40shvx/Wl0BxV0BGB79mQYvkPLVJN8yTiqUh6EgQRp4/GqpoMw1WFHdD5T8kAjOe AIUPpTDSi1I8DcbditAYI57duTaTXredbmd/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUNQ0ndGLbXl50bCsiGOMg/ss4/iswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L05RMG5kR0xiWGw1MGJDc2lHT01nX3NzNF9pcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9LEQwDQYJKoZIhvcNAQELBQADggEB AH0NFlhvfVyU7HIlyg15Qh7x0rUQsVD4TAgRlJdU6RuQkgboRMQeA0xjRrEEjjpo /c6N5tF2zk0mFTVJ4snFPO974qUltblCvEW2ZnAl0xeBZ/0qyU6pzi04tw42Q8If OhEZTJd2Pn2AKicoAyhSjkvyDZicKPyuZ0EBgfSBYW8OcFFkCKgj0OVCubWkIQ/g X6cLwpqoui16Kd5rfrvNaNHJ5+i9X9Cd+gYUJgxp+1GShzRv7z/0WNfNtPyRs/1U QbRUBLCPaw6At08aMaRa1ACPfD51+Lzhsmu82lOkIQ/1homtUb7ZwEYUf0WXr8Nw xl+u5qJNeJe8GkRpRjjZEjY= -----END CERTIFICATE-----Generated at Sun Apr 19 12:39:30 2026 by rpki-client