$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/czb41Msko_eoZa9YhHe4-w_x5Xc.roa File: czb41Msko_eoZa9YhHe4-w_x5Xc.roa (raw, json) Hash identifier: jB8luk/N5wE+ZTTriXdfN+GSMqhPtr626rHwvpbOU6Q= Subject key identifier: 73:36:F8:D4:CB:24:A3:F7:A8:65:AF:58:84:77:B8:FB:0F:F1:E5:77 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05CE Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/czb41Msko_eoZa9YhHe4-w_x5Xc.roa Signing time: Tue 31 Mar 2026 08:20:51 +0000 ROA not before: Tue 31 Mar 2026 08:20:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 111.234.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1486 (0x5ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7336F8D4CB24A3F7A865AF588477B8FB0FF1E577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:50:6d:2c:ed:0a:32:1e:81:7b:c0:7a:2e: 47:51:54:a1:3a:17:b7:94:0a:f7:2c:29:54:b4:20: 59:b0:76:f2:f5:bc:57:0a:63:3a:14:5f:26:c8:3d: bc:e2:75:df:39:b5:74:59:85:37:7c:22:69:a4:62: f5:cf:6f:a7:40:d7:5a:63:d3:37:71:ac:d0:01:d4: fc:1f:8b:5e:1f:0e:94:f5:3d:b0:41:74:3b:4d:bb: 4f:77:5a:7d:ac:03:7f:8d:f5:68:7a:8c:4e:05:26: a6:d2:13:84:9b:dc:04:b6:a4:16:bb:c8:73:66:66: 1f:ad:0c:9b:c1:9b:2f:65:b2:83:f9:e4:05:67:3f: 2c:86:29:1d:1c:f1:39:12:c7:e6:65:44:98:57:5e: 87:54:70:6e:aa:ef:a7:d2:98:71:f9:be:8c:5a:a5: ae:17:06:b4:58:80:ec:cc:41:82:56:6d:22:32:d7: 47:8c:b2:40:25:77:39:5c:f5:84:77:85:df:37:57: f4:83:da:15:f4:a5:5b:42:87:f1:ba:6a:a3:ba:f8: 3e:55:98:02:56:72:70:e5:6a:d4:4d:cf:de:0a:e8: 0b:2c:49:ea:6d:4f:8a:19:4f:13:59:1f:e5:9b:cb: 1c:6e:43:f4:78:4c:db:93:f7:49:8d:ba:dc:34:42: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:36:F8:D4:CB:24:A3:F7:A8:65:AF:58:84:77:B8:FB:0F:F1:E5:77 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/czb41Msko_eoZa9YhHe4-w_x5Xc.roa sbgp-ipAddrBlock: critical IPv4: 111.234.244.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:9b:32:44:78:c4:98:dd:59:c4:75:db:85:0f:57:cc:cf:3d: be:b2:91:ad:5a:b9:de:1a:e4:48:49:f9:dc:0d:92:f1:67:68: 8b:2b:e8:43:22:4e:53:27:75:ce:a4:7d:3e:d1:60:0c:82:79: 09:7b:e2:d5:3a:16:8d:34:d6:0c:db:a4:e0:50:e8:e6:d4:79: d0:5a:91:12:48:20:f4:b1:a1:73:25:2c:db:0a:76:95:89:1d: 4c:33:48:2b:bc:37:4d:19:3a:90:75:f1:62:19:29:7d:ba:55: 86:96:ea:ac:ea:68:24:fa:cc:ec:79:9a:5d:67:c7:fc:5f:1f: 85:fd:a2:93:0d:c1:14:ce:df:43:46:d9:bd:ea:56:eb:10:99: 37:43:9a:c5:f6:ac:7c:8e:cc:3a:6b:44:0b:4d:47:3a:e1:a8: 54:75:eb:d8:54:15:5a:ae:4c:48:dd:0f:d4:d7:60:f7:c0:f9: 9b:ea:e9:bf:0e:c1:03:3f:b6:7d:16:1c:2c:5b:54:09:f0:ba: 29:ae:64:bc:b6:ba:31:f9:c3:fc:53:76:26:fd:fc:6c:38:e0: 91:6f:d7:dd:fd:6a:ce:95:f5:7d:0f:f6:25:74:a7:66:a2:25: 34:c6:4d:b6:19:f1:d8:47:63:41:c4:b0:e8:0f:20:14:f6:1a: c8:0d:98:de -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwNTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczMzZGOEQ0Q0IyNEEz RjdBODY1QUY1ODg0NzdCOEZCMEZGMUU1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0LlBtLO0KMh6Be8B6LkdRVKE6F7eUCvcsKVS0IFmwdvL1vFcK YzoUXybIPbzidd85tXRZhTd8ImmkYvXPb6dA11pj0zdxrNAB1Pwfi14fDpT1PbBB dDtNu093Wn2sA3+N9Wh6jE4FJqbSE4Sb3AS2pBa7yHNmZh+tDJvBmy9lsoP55AVn PyyGKR0c8TkSx+ZlRJhXXodUcG6q76fSmHH5voxapa4XBrRYgOzMQYJWbSIy10eM skAldzlc9YR3hd83V/SD2hX0pVtCh/G6aqO6+D5VmAJWcnDlatRNz94K6AssSept T4oZTxNZH+WbyxxuQ/R4TNuT90mNutw0QjFZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUczb41Msko/eoZa9YhHe4+w/x5XcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L2N6YjQxTXNrb19lb1phOVloSGU0LXdfeDVYYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFv6vQwDQYJKoZIhvcNAQELBQADggEB AE2bMkR4xJjdWcR124UPV8zPPb6yka1aud4a5EhJ+dwNkvFnaIsr6EMiTlMndc6k fT7RYAyCeQl74tU6Fo001gzbpOBQ6ObUedBakRJIIPSxoXMlLNsKdpWJHUwzSCu8 N00ZOpB18WIZKX26VYaW6qzqaCT6zOx5ml1nx/xfH4X9opMNwRTO30NG2b3qVusQ mTdDmsX2rHyOzDprRAtNRzrhqFR169hUFVquTEjdD9TXYPfA+Zvq6b8OwQM/tn0W HCxbVAnwuimuZLy2ujH5w/xTdib9/Gw44JFv1939as6V9X0P9iV0p2aiJTTGTbYZ 8dhHY0HEsOgPIBT2GsgNmN4= -----END CERTIFICATE-----Generated at Sun Apr 19 08:47:42 2026 by rpki-client