$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XMs-yo9OmYjT6Eg__32ecTBaRZE.roa File: XMs-yo9OmYjT6Eg__32ecTBaRZE.roa (raw, json) Hash identifier: yXjkfks6OODFlUAeMwuMDJrlAH1tIUvOqBMRY8ZlP3o= Subject key identifier: 5C:CB:3E:CA:8F:4E:99:88:D3:E8:48:3F:FF:7D:9E:71:30:5A:45:91 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0514 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XMs-yo9OmYjT6Eg__32ecTBaRZE.roa Signing time: Tue 31 Mar 2026 08:19:24 +0000 ROA not before: Tue 31 Mar 2026 08:19:24 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 61.205.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1300 (0x514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:24 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5CCB3ECA8F4E9988D3E8483FFF7D9E71305A4591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:6a:a5:48:36:53:01:73:ef:15:a6:d0:6e: 44:3b:d0:cc:32:17:8b:49:80:24:a7:42:19:b1:14: db:39:6a:58:b2:25:4e:7d:8a:08:b6:e0:f3:f4:45: 75:c9:6e:88:b0:77:aa:db:92:f5:17:74:df:5b:76: c7:77:ed:c5:da:34:8b:c4:00:f0:72:18:e8:f4:cd: 7e:03:f2:4c:6b:cf:57:29:03:bc:bd:5b:20:93:5d: 5a:1d:ee:d2:aa:68:98:42:5b:e9:9c:b6:f9:6d:b9: 06:59:a5:dd:6b:85:db:4a:84:d4:06:d7:40:31:a3: 43:da:63:23:f9:c3:da:f8:8f:44:5c:f0:38:16:78: 92:2b:f3:e3:0c:56:6c:e8:f3:bb:2b:bb:2a:6f:81: 59:0d:fc:61:20:16:4d:66:3e:df:8e:f2:5b:14:45: e6:23:9b:4d:64:b6:5e:26:13:f8:cd:93:9c:83:c0: 8a:cb:b7:57:c7:e6:c7:91:37:26:c8:33:8e:fc:3d: fa:ea:77:10:90:b4:11:16:4a:f5:02:41:ec:7d:f7: 25:f4:dd:aa:e1:c4:66:09:34:7c:1d:e7:aa:b2:a3: 95:d7:16:20:ca:97:a6:77:d3:9d:9f:7f:9c:00:ce: 4b:7f:d6:b9:c3:e9:49:ae:b7:60:6c:d0:f8:07:5d: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CB:3E:CA:8F:4E:99:88:D3:E8:48:3F:FF:7D:9E:71:30:5A:45:91 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XMs-yo9OmYjT6Eg__32ecTBaRZE.roa sbgp-ipAddrBlock: critical IPv4: 61.205.60.0/22 Signature Algorithm: sha256WithRSAEncryption 44:e7:27:6f:5f:2e:34:d7:90:5e:7b:2f:32:38:64:be:c1:bd: a9:82:14:cb:16:ea:5f:89:70:25:56:91:98:3d:89:b1:02:92: d5:58:13:0e:fa:3c:f3:9c:b7:76:54:f7:14:14:c0:c9:f8:a4: 6a:fe:be:dc:fa:b9:9a:79:6c:16:10:39:b9:bb:73:93:71:ec: 8c:57:79:b9:12:10:89:8c:ef:6a:29:ca:93:3c:84:a5:bf:3e: 62:da:ea:0f:c1:54:11:fe:77:59:21:42:90:36:6d:e2:7e:11: d7:6c:87:18:f9:ef:da:53:62:62:12:c3:a9:87:b0:f9:02:e2: 8c:48:1f:9e:7d:7d:91:76:23:30:64:37:ea:ea:48:f0:14:78: 41:4a:ac:6b:9c:ff:ea:5c:76:0a:a9:e5:20:41:57:11:4f:0e: 18:be:a1:88:b0:61:c7:70:cb:fa:ed:bb:8b:ee:ff:e2:b5:be: 50:de:f7:aa:a0:d7:8c:da:0c:31:15:61:9b:9c:8c:af:02:29: 3c:af:a1:6e:57:8f:13:41:92:4a:13:57:0a:e8:9b:a3:fd:52: 5c:26:99:0b:b0:ca:55:70:59:01:83:71:86:9a:95:68:f8:1f: 46:7e:13:d3:b9:83:e3:2e:82:18:94:e8:93:46:a9:a8:79:1b: 6e:c7:5c:c2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5MjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDQ0IzRUNBOEY0RTk5 ODhEM0U4NDgzRkZGN0Q5RTcxMzA1QTQ1OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKa2qlSDZTAXPvFabQbkQ70MwyF4tJgCSnQhmxFNs5aliyJU59 igi24PP0RXXJboiwd6rbkvUXdN9bdsd37cXaNIvEAPByGOj0zX4D8kxrz1cpA7y9 WyCTXVod7tKqaJhCW+mctvltuQZZpd1rhdtKhNQG10Axo0PaYyP5w9r4j0Rc8DgW eJIr8+MMVmzo87sruypvgVkN/GEgFk1mPt+O8lsUReYjm01ktl4mE/jNk5yDwIrL t1fH5seRNybIM478PfrqdxCQtBEWSvUCQex99yX03arhxGYJNHwd56qyo5XXFiDK l6Z3052ff5wAzkt/1rnD6Umut2Bs0PgHXcqxAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXMs+yo9OmYjT6Eg//32ecTBaRZEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L1hNcy15bzlPbVlqVDZFZ19fMzJlY1RCYVJaRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9zTwwDQYJKoZIhvcNAQELBQADggEB AETnJ29fLjTXkF57LzI4ZL7BvamCFMsW6l+JcCVWkZg9ibECktVYEw76PPOct3ZU 9xQUwMn4pGr+vtz6uZp5bBYQObm7c5Nx7IxXebkSEImM72opypM8hKW/PmLa6g/B VBH+d1khQpA2beJ+Eddshxj579pTYmISw6mHsPkC4oxIH559fZF2IzBkN+rqSPAU eEFKrGuc/+pcdgqp5SBBVxFPDhi+oYiwYcdwy/rtu4vu/+K1vlDe96qg14zaDDEV YZucjK8CKTyvoW5XjxNBkkoTVwrom6P9UlwmmQuwylVwWQGDcYaalWj4H0Z+E9O5 g+MughiU6JNGqah5G27HXMI= -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:30 2026 by rpki-client