$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qNXE5txqFIU7E0c-ldauPY8096U.roa File: qNXE5txqFIU7E0c-ldauPY8096U.roa (raw, json) Hash identifier: r9QODTadS7IE+KauVDGYhNkdtCBNWu0RwH00Q7ERoSs= Subject key identifier: A8:D5:C4:E6:DC:6A:14:85:3B:13:47:3E:95:D6:AE:3D:8F:34:F7:A5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 053F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qNXE5txqFIU7E0c-ldauPY8096U.roa Signing time: Tue 31 Mar 2026 08:19:42 +0000 ROA not before: Tue 31 Mar 2026 08:19:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 61.44.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A8D5C4E6DC6A14853B13473E95D6AE3D8F34F7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:94:8f:f5:ab:7c:be:1d:f1:fe:3e:70:86: d3:13:7e:15:b9:8c:d0:1c:08:ce:88:bb:ba:04:23: f8:b5:aa:a7:55:7d:6b:16:db:65:d3:0f:62:e6:d4: 43:4d:5c:20:aa:b7:68:55:f2:b8:12:a0:55:d6:bf: 44:e9:71:47:89:75:2c:7a:e7:f2:ad:ff:c2:f0:16: 91:81:24:e2:d6:b6:da:d8:56:ed:a0:d8:51:f5:42: ac:e6:40:62:af:92:ba:37:d1:3f:da:d6:1e:82:0b: cb:f2:d0:cc:33:08:0b:62:17:1a:f1:60:78:f9:3a: 4c:53:83:5f:bf:f1:c7:6c:53:14:8b:c1:15:c2:a0: 2e:8a:30:01:09:9b:23:50:3a:ac:44:5f:23:b9:89: d6:01:b0:5a:2b:8c:e0:58:27:6a:37:7b:2c:28:ee: 56:57:77:7e:24:bb:8e:97:81:93:b7:a5:0a:6c:1e: f3:f8:ca:16:05:3b:b1:6a:51:33:b2:e8:52:dc:f5: cd:b8:84:8a:3d:8a:d6:3a:6f:cb:2f:ae:0f:20:58: e6:0e:a5:b1:44:e0:b0:b0:2c:09:ed:d8:fc:a4:84: 3c:0b:a5:d5:ee:30:35:c8:e0:4c:18:66:d5:bb:c0: 74:8b:76:79:5f:f3:c1:df:dd:6b:db:43:da:b1:eb: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:C4:E6:DC:6A:14:85:3B:13:47:3E:95:D6:AE:3D:8F:34:F7:A5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qNXE5txqFIU7E0c-ldauPY8096U.roa sbgp-ipAddrBlock: critical IPv4: 61.44.208.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:f8:ce:aa:65:d1:f4:58:af:a8:10:c1:20:e1:4f:ad:31:30: a8:83:55:55:4c:ca:1e:ee:36:09:7f:81:43:4b:8e:a8:fd:df: 96:71:12:bc:5d:b1:b4:62:45:e6:e2:3d:c3:9a:db:1b:44:c2: 59:fc:c1:bd:72:b5:70:6f:9e:75:bc:09:25:42:4e:6f:25:76: 9a:e0:42:36:fb:dd:13:1a:fe:76:af:8c:6d:aa:63:b5:2e:cf: 17:84:df:f2:4d:21:d3:d2:10:23:44:44:6f:dd:3f:08:f0:8e: 4c:89:20:04:08:51:ac:d6:a0:c5:fb:81:47:ab:16:22:19:f0: eb:97:b3:e9:fe:7d:dc:a3:98:c3:44:df:1e:99:8c:94:5c:2f: df:29:76:5f:cd:8e:60:24:2f:0d:a7:22:88:e5:d3:66:9e:6b: 1f:f6:22:15:19:88:12:1e:0c:aa:9e:0e:4f:a4:1a:ab:7d:f8: 01:4a:6b:e7:92:e7:89:60:4e:be:e8:8a:53:a6:25:91:b1:fd: d6:cc:dc:6d:9f:9b:31:82:eb:cf:34:2b:c9:e1:76:b6:1b:44: e0:8a:ee:76:d1:9f:bf:6b:97:4b:2a:f8:ef:56:cb:ab:be:a1: 56:dc:53:5d:c8:f2:cb:b8:fc:2d:ad:da:69:c4:40:e1:19:72: e4:4a:d8:42 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4RDVDNEU2REM2QTE0 ODUzQjEzNDczRTk1RDZBRTNEOEYzNEY3QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn+pSP9at8vh3x/j5whtMTfhW5jNAcCM6Iu7oEI/i1qqdVfWsW 22XTD2Lm1ENNXCCqt2hV8rgSoFXWv0TpcUeJdSx65/Kt/8LwFpGBJOLWttrYVu2g 2FH1QqzmQGKvkro30T/a1h6CC8vy0MwzCAtiFxrxYHj5OkxTg1+/8cdsUxSLwRXC oC6KMAEJmyNQOqxEXyO5idYBsForjOBYJ2o3eywo7lZXd34ku46XgZO3pQpsHvP4 yhYFO7FqUTOy6FLc9c24hIo9itY6b8svrg8gWOYOpbFE4LCwLAnt2PykhDwLpdXu MDXI4EwYZtW7wHSLdnlf88Hf3WvbQ9qx60o7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUqNXE5txqFIU7E0c+ldauPY8096UwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L3FOWEU1dHhxRklVN0UwYy1sZGF1UFk4MDk2VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9LNAwDQYJKoZIhvcNAQELBQADggEB ADr4zqpl0fRYr6gQwSDhT60xMKiDVVVMyh7uNgl/gUNLjqj935ZxErxdsbRiRebi PcOa2xtEwln8wb1ytXBvnnW8CSVCTm8ldprgQjb73RMa/navjG2qY7UuzxeE3/JN IdPSECNERG/dPwjwjkyJIAQIUazWoMX7gUerFiIZ8OuXs+n+fdyjmMNE3x6ZjJRc L98pdl/NjmAkLw2nIojl02aeax/2IhUZiBIeDKqeDk+kGqt9+AFKa+eS54lgTr7o ilOmJZGx/dbM3G2fmzGC6880K8nhdrYbROCK7nbRn79rl0sq+O9Wy6u+oVbcU13I 8su4/C2t2mnEQOEZcuRK2EI= -----END CERTIFICATE-----Generated at Fri Apr 17 10:35:22 2026 by rpki-client