$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UNgQd2Jk3KkkqzHf4kD8XctrbTo.roa File: UNgQd2Jk3KkkqzHf4kD8XctrbTo.roa (raw, json) Hash identifier: Q4a32ddX84l6M0KOkxVcgyRmSpkB9GiqoFEv0rjbNQ4= Subject key identifier: 50:D8:10:77:62:64:DC:A9:24:AB:31:DF:E2:40:FC:5D:CB:6B:6D:3A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0543 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UNgQd2Jk3KkkqzHf4kD8XctrbTo.roa Signing time: Tue 31 Mar 2026 08:19:44 +0000 ROA not before: Tue 31 Mar 2026 08:19:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 61.5.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=50D810776264DCA924AB31DFE240FC5DCB6B6D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:18:d7:9f:dc:8a:e5:ae:67:b3:98:5c:32: 25:af:94:e6:aa:00:e5:4f:40:44:4c:b6:bf:c4:d5: ce:65:e2:2b:18:04:b8:2f:7b:e7:ba:88:96:51:4e: 92:54:d8:4b:c1:06:65:75:29:2c:61:48:7d:72:81: 19:bc:ca:f8:40:7a:81:cf:82:44:4a:c6:7a:3b:66: 31:ab:29:98:0b:34:62:62:2c:1c:b0:a5:e9:c1:d0: da:0d:06:56:cf:10:54:e0:3e:56:c6:67:c6:fa:7e: b3:75:dd:4a:70:5b:56:cf:4e:f4:c7:9a:63:95:01: 7c:6e:95:ad:1c:9c:7d:3a:65:41:fc:d8:9c:cb:0a: 98:b6:09:da:90:58:02:9c:50:ff:bf:be:bb:7d:7e: b3:68:81:07:b8:8d:17:c1:b8:c6:08:27:29:6f:cd: d8:46:6a:ce:d3:de:7a:f5:58:f8:15:10:8c:35:b7: 47:14:c5:ce:fe:a5:f7:a5:9c:c2:2d:96:16:4f:d1: 88:7d:41:67:6c:0c:ee:54:fa:1d:21:bf:02:8c:5b: 4a:8e:ac:75:91:4c:11:49:af:51:38:3c:7e:cb:47: 01:84:19:b7:64:30:c5:31:dd:4d:03:68:0f:d0:eb: 4d:13:c3:7f:da:39:3d:84:32:5b:a6:f1:8e:d2:38: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D8:10:77:62:64:DC:A9:24:AB:31:DF:E2:40:FC:5D:CB:6B:6D:3A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UNgQd2Jk3KkkqzHf4kD8XctrbTo.roa sbgp-ipAddrBlock: critical IPv4: 61.5.248.0/21 Signature Algorithm: sha256WithRSAEncryption 86:9a:cf:16:10:a8:bc:d3:ae:3f:f9:00:a8:41:b9:9c:d9:2d: 10:c2:87:62:ce:61:50:fd:d5:f3:4e:c4:fb:de:7b:67:f3:49: 18:c4:69:6a:71:3d:bf:2b:49:ee:7e:ba:0a:6e:82:e8:56:7b: 29:3a:db:ca:35:4f:06:66:8e:2a:7d:17:f1:72:bd:5f:21:e3: 03:4a:78:61:64:ee:01:94:49:a7:ac:da:3d:4d:74:ba:ec:78: 36:eb:c9:5e:3b:6c:b0:21:35:4c:c8:27:18:a8:f1:38:35:43: 0c:4f:d9:3c:fd:f3:93:25:20:e9:cb:54:2e:68:53:50:b7:aa: 03:aa:5b:91:fe:6c:89:a6:c1:61:bb:a5:cb:d4:df:4b:00:19: 93:90:74:5f:04:26:db:3a:da:41:e6:1c:cd:f0:9d:e1:82:7a: 3b:ee:89:d8:67:f8:92:38:01:fa:86:bc:49:3b:cc:3a:6a:00: df:c4:cf:f4:bc:25:32:42:d9:f7:17:b6:ac:6d:84:78:b4:35: e3:41:fd:09:69:c3:02:ad:c6:3c:41:71:f9:d8:77:b6:2e:45: 69:74:6b:7d:4e:fd:d7:73:f9:80:01:e7:78:f9:84:17:aa:74: 58:b0:cb:f0:be:4d:84:7e:c8:4c:2d:ac:b8:fb:17:e3:ff:2b: c0:87:1f:d8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUwRDgxMDc3NjI2NERD QTkyNEFCMzFERkUyNDBGQzVEQ0I2QjZEM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJXxjXn9yK5a5ns5hcMiWvlOaqAOVPQERMtr/E1c5l4isYBLgv e+e6iJZRTpJU2EvBBmV1KSxhSH1ygRm8yvhAeoHPgkRKxno7ZjGrKZgLNGJiLByw penB0NoNBlbPEFTgPlbGZ8b6frN13UpwW1bPTvTHmmOVAXxula0cnH06ZUH82JzL Cpi2CdqQWAKcUP+/vrt9frNogQe4jRfBuMYIJylvzdhGas7T3nr1WPgVEIw1t0cU xc7+pfelnMItlhZP0Yh9QWdsDO5U+h0hvwKMW0qOrHWRTBFJr1E4PH7LRwGEGbdk MMUx3U0DaA/Q600Tw3/aOT2EMlum8Y7SOLp1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUUNgQd2Jk3KkkqzHf4kD8XctrbTowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L1VOZ1FkMkprM0tra3F6SGY0a0Q4WGN0cmJUby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9BfgwDQYJKoZIhvcNAQELBQADggEB AIaazxYQqLzTrj/5AKhBuZzZLRDCh2LOYVD91fNOxPvee2fzSRjEaWpxPb8rSe5+ ugpuguhWeyk628o1TwZmjip9F/FyvV8h4wNKeGFk7gGUSaes2j1NdLrseDbryV47 bLAhNUzIJxio8Tg1QwxP2Tz985MlIOnLVC5oU1C3qgOqW5H+bImmwWG7pcvU30sA GZOQdF8EJts62kHmHM3wneGCejvuidhn+JI4AfqGvEk7zDpqAN/Ez/S8JTJC2fcX tqxthHi0NeNB/QlpwwKtxjxBcfnYd7YuRWl0a31O/ddz+YAB53j5hBeqdFiwy/C+ TYR+yEwtrLj7F+P/K8CHH9g= -----END CERTIFICATE-----Generated at Fri Apr 17 06:08:16 2026 by rpki-client