$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cnxa-8qaH16qSL17ssPmQ1WDJDA.roa File: cnxa-8qaH16qSL17ssPmQ1WDJDA.roa (raw, json) Hash identifier: lFa5W+FrhJQlc8YqdBsBpBbJpHQSa7X3bJVBUJll48g= Subject key identifier: 72:7C:5A:FB:CA:9A:1F:5E:AA:48:BD:7B:B2:C3:E6:43:55:83:24:30 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0587 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cnxa-8qaH16qSL17ssPmQ1WDJDA.roa Signing time: Tue 31 Mar 2026 08:20:20 +0000 ROA not before: Tue 31 Mar 2026 08:20:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 183.181.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=727C5AFBCA9A1F5EAA48BD7BB2C3E64355832430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:e2:b1:ee:d6:30:c1:ba:63:45:8a:ac:eb: df:e1:1e:43:47:aa:7e:cc:c5:a4:fa:5f:43:98:35: 6d:b5:45:c0:d5:5e:91:6b:35:e0:ee:bf:c0:12:e8: 1a:69:53:29:59:eb:ff:27:35:69:97:79:bd:5f:4a: 04:4f:4b:19:d3:d9:f2:4c:4a:4b:95:3b:03:77:9c: 1b:01:b8:c5:45:8d:e3:13:c1:18:44:a3:44:a9:8a: b6:ca:f4:4d:13:28:b2:ef:03:b8:d0:23:9a:3a:39: 99:97:02:50:41:87:91:1c:cf:9d:0e:2c:70:08:2b: bc:05:17:90:77:0a:cc:a0:6e:e6:63:9c:fe:37:bc: 27:f7:39:8f:dc:bb:b9:4e:52:2c:ed:cc:e2:66:48: 51:c4:5d:5d:e8:b8:2d:c1:9a:cc:dd:8c:ba:9e:3b: 88:3a:cb:b1:95:0d:11:bf:6b:76:c0:26:2b:dc:97: 85:c2:15:64:39:b7:50:1b:e6:2e:24:5a:f5:db:42: 2d:a2:26:07:58:eb:ba:d9:0a:7b:f9:6d:b0:23:fa: 19:55:52:24:4c:ec:e0:ca:26:a4:2c:72:e3:b3:b7: 12:84:7b:79:9e:4a:57:34:8f:e9:a6:f7:25:ce:f7: f6:d1:3a:a9:1b:39:7e:4d:40:c5:0f:cc:56:d3:2b: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7C:5A:FB:CA:9A:1F:5E:AA:48:BD:7B:B2:C3:E6:43:55:83:24:30 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cnxa-8qaH16qSL17ssPmQ1WDJDA.roa sbgp-ipAddrBlock: critical IPv4: 183.181.104.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:51:d9:f1:20:26:c0:fd:3d:97:28:e3:bb:b3:24:0e:67:23: 46:45:73:be:35:83:17:a4:e8:04:1d:cf:d4:ee:5e:0b:77:ce: 35:7d:77:df:35:ab:71:a3:12:b1:b2:24:e1:6f:ec:df:b2:76: 70:44:40:dc:19:55:62:4d:63:8c:53:75:2a:9d:ad:72:a3:17: 8f:9a:26:9d:a2:79:43:f8:95:bb:48:17:6f:e9:55:02:5e:05: 10:d6:47:4c:df:be:01:d4:09:ba:b4:1c:49:ea:96:cc:65:6e: 44:71:fc:97:67:70:a7:f9:07:88:2c:58:b9:75:1a:6c:fb:5f: 39:14:91:1f:49:d2:89:f6:7f:71:74:e1:77:a6:3f:e4:ea:19: fa:1c:fa:85:82:cb:da:d8:7f:13:9e:73:8b:6b:e2:ab:5b:c2: 80:77:b0:ca:de:25:0f:ca:f2:1c:f8:ca:27:1e:cc:60:13:0e: 75:b9:31:5b:26:f2:9d:65:8e:a0:ae:ad:30:4c:78:f4:69:70: 8c:b6:83:c5:3f:9b:90:37:3b:b0:ca:14:c2:d5:b1:cd:b3:cc: e6:91:74:32:26:a0:d9:8a:8b:6b:2c:23:3f:3f:26:6f:e6:56: 83:b6:dc:6a:5f:82:a4:c0:85:b2:b6:1c:eb:2b:23:e2:3e:67: 4a:57:53:40 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyN0M1QUZCQ0E5QTFG NUVBQTQ4QkQ3QkIyQzNFNjQzNTU4MzI0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDby+Kx7tYwwbpjRYqs69/hHkNHqn7MxaT6X0OYNW21RcDVXpFr NeDuv8AS6BppUylZ6/8nNWmXeb1fSgRPSxnT2fJMSkuVOwN3nBsBuMVFjeMTwRhE o0SpirbK9E0TKLLvA7jQI5o6OZmXAlBBh5Ecz50OLHAIK7wFF5B3CsygbuZjnP43 vCf3OY/cu7lOUiztzOJmSFHEXV3ouC3BmszdjLqeO4g6y7GVDRG/a3bAJivcl4XC FWQ5t1Ab5i4kWvXbQi2iJgdY67rZCnv5bbAj+hlVUiRM7ODKJqQscuOztxKEe3me Slc0j+mm9yXO9/bROqkbOX5NQMUPzFbTK16zAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcnxa+8qaH16qSL17ssPmQ1WDJDAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L2NueGEtOHFhSDE2cVNMMTdzc1BtUTFXREpEQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO3tWgwDQYJKoZIhvcNAQELBQADggEB ADtR2fEgJsD9PZco47uzJA5nI0ZFc741gxek6AQdz9TuXgt3zjV9d981q3GjErGy JOFv7N+ydnBEQNwZVWJNY4xTdSqdrXKjF4+aJp2ieUP4lbtIF2/pVQJeBRDWR0zf vgHUCbq0HEnqlsxlbkRx/JdncKf5B4gsWLl1Gmz7XzkUkR9J0on2f3F04XemP+Tq Gfoc+oWCy9rYfxOec4tr4qtbwoB3sMreJQ/K8hz4yicezGATDnW5MVsm8p1ljqCu rTBMePRpcIy2g8U/m5A3O7DKFMLVsc2zzOaRdDImoNmKi2ssIz8/Jm/mVoO23Gpf gqTAhbK2HOsrI+I+Z0pXU0A= -----END CERTIFICATE-----Generated at Fri Apr 17 02:19:30 2026 by rpki-client