$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wp8lFKGF-HVLTjPPxr-lcye3Aro.roa File: wp8lFKGF-HVLTjPPxr-lcye3Aro.roa (raw, json) Hash identifier: QY6YJ7roOFaf59VvHANBQHb88tkOdbWXRRG26QJBvnU= Subject key identifier: C2:9F:25:14:A1:85:F8:75:4B:4E:33:CF:C6:BF:A5:73:27:B7:02:BA Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05A1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wp8lFKGF-HVLTjPPxr-lcye3Aro.roa Signing time: Tue 31 Mar 2026 08:20:32 +0000 ROA not before: Tue 31 Mar 2026 08:20:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 153.120.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C29F2514A185F8754B4E33CFC6BFA57327B702BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:84:1b:42:7a:65:a8:df:e3:55:4b:ff:bc: 0d:30:0d:37:31:6e:9f:c6:b0:c7:83:0f:ae:fe:92: f8:a2:84:5b:36:59:9c:52:31:5c:6d:fe:98:db:af: bc:b3:44:fe:39:c1:36:04:ec:fa:06:3b:76:e5:cd: 72:fd:04:c7:ca:2a:bd:3f:f4:52:c3:9f:ec:65:c6: c4:9d:b8:f9:84:41:21:0c:58:4c:33:9d:7e:a6:d1: 89:ff:5d:cf:13:89:d6:d4:99:9f:c3:f0:1a:fe:4b: 7f:32:69:09:cf:e7:52:68:cd:18:a1:d2:cd:9e:c3: 5f:7a:d0:d3:e7:c5:e0:ce:82:45:40:ac:9d:d1:0c: 7c:32:c5:8f:15:a8:b7:06:31:ea:29:59:73:a0:93: d1:76:0c:d4:4d:6a:63:6b:d6:ae:d0:3b:36:fe:7b: 30:51:63:b0:d1:89:d9:0b:74:43:51:73:8c:eb:a1: ac:7d:6d:ad:c3:db:07:e5:98:4a:fe:08:95:22:ed: 88:46:56:49:01:11:bf:19:04:2f:50:94:fe:d1:33: a7:56:97:ec:1d:ee:98:61:58:3d:cf:4d:d4:a8:8c: ba:3e:2e:5f:39:97:ba:e9:32:7f:e8:88:16:0b:8b: 4e:b0:61:cb:9c:6e:69:f1:b4:69:b0:e3:f1:5f:37: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9F:25:14:A1:85:F8:75:4B:4E:33:CF:C6:BF:A5:73:27:B7:02:BA X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wp8lFKGF-HVLTjPPxr-lcye3Aro.roa sbgp-ipAddrBlock: critical IPv4: 153.120.240.0/20 Signature Algorithm: sha256WithRSAEncryption 17:e6:a4:44:8d:e5:38:41:81:83:ea:0f:d4:b9:65:b7:e1:40: 4a:0e:1a:55:e3:27:97:e4:77:d6:4d:d9:af:c3:e3:ee:b5:ad: b0:68:18:6f:f8:40:af:62:7c:05:a2:3f:69:32:7a:07:83:2e: ab:ac:e2:9f:cf:2d:67:a6:5e:85:b4:a1:2e:98:80:fe:e0:ec: 72:bc:44:2c:f8:00:c9:45:e7:c2:4b:7b:e7:76:12:89:7e:e4: 4d:f0:f6:42:bf:80:dc:e7:ad:54:3b:14:26:a1:33:4b:77:fd: 46:2d:51:7c:fb:c1:fe:3d:ff:c8:4a:28:5f:99:4e:8f:6f:8d: 9e:86:fc:33:e9:76:22:fb:35:5a:71:c1:98:e4:35:41:cf:eb: 43:f0:66:f7:65:ff:c7:ca:58:bb:1a:00:09:60:4f:1b:f9:fd: 6c:bf:8c:54:9d:f7:f4:19:9b:f8:00:ba:a3:8c:ba:a6:4b:75: 85:c1:ad:e1:f0:74:e8:bb:30:c9:3c:a2:01:81:51:fc:7c:fc: 58:43:43:50:45:6a:a0:c8:99:2a:d5:09:1c:08:be:f9:3f:f4: f5:ab:01:9b:62:5f:01:31:50:41:d0:2a:c2:1d:f1:c1:1f:bd: 41:18:a5:75:27:77:ff:e1:71:5b:03:54:f4:cb:34:8d:88:da: 17:b7:2f:74 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMyOUYyNTE0QTE4NUY4 NzU0QjRFMzNDRkM2QkZBNTczMjdCNzAyQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBFIQbQnplqN/jVUv/vA0wDTcxbp/GsMeDD67+kviihFs2WZxS MVxt/pjbr7yzRP45wTYE7PoGO3blzXL9BMfKKr0/9FLDn+xlxsSduPmEQSEMWEwz nX6m0Yn/Xc8TidbUmZ/D8Br+S38yaQnP51JozRih0s2ew1960NPnxeDOgkVArJ3R DHwyxY8VqLcGMeopWXOgk9F2DNRNamNr1q7QOzb+ezBRY7DRidkLdENRc4zroax9 ba3D2wflmEr+CJUi7YhGVkkBEb8ZBC9QlP7RM6dWl+wd7phhWD3PTdSojLo+Ll85 l7rpMn/oiBYLi06wYcucbmnxtGmw4/FfN1C3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUwp8lFKGF+HVLTjPPxr+lcye3ArowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L3dwOGxGS0dGLUhWTFRqUFB4ci1sY3llM0Fyby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASZePAwDQYJKoZIhvcNAQELBQADggEB ABfmpESN5ThBgYPqD9S5ZbfhQEoOGlXjJ5fkd9ZN2a/D4+61rbBoGG/4QK9ifAWi P2kyegeDLqus4p/PLWemXoW0oS6YgP7g7HK8RCz4AMlF58JLe+d2Eol+5E3w9kK/ gNznrVQ7FCahM0t3/UYtUXz7wf49/8hKKF+ZTo9vjZ6G/DPpdiL7NVpxwZjkNUHP 60PwZvdl/8fKWLsaAAlgTxv5/Wy/jFSd9/QZm/gAuqOMuqZLdYXBreHwdOi7MMk8 ogGBUfx8/FhDQ1BFaqDImSrVCRwIvvk/9PWrAZtiXwExUEHQKsId8cEfvUEYpXUn d//hcVsDVPTLNI2I2he3L3Q= -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:24 2026 by rpki-client