$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wxFYkuXJX-IbyK7196Gx7jOOJ-c.roa File: wxFYkuXJX-IbyK7196Gx7jOOJ-c.roa (raw, json) Hash identifier: EZ2DwP0mnffv1Ak5DOUSpj+oeBGDBVi7NbBgIIGYy8w= Subject key identifier: C3:11:58:92:E5:C9:5F:E2:1B:C8:AE:F5:F7:A1:B1:EE:33:8E:27:E7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 04DB Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wxFYkuXJX-IbyK7196Gx7jOOJ-c.roa Signing time: Tue 31 Mar 2026 08:18:56 +0000 ROA not before: Tue 31 Mar 2026 08:18:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 27.133.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:18:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C3115892E5C95FE21BC8AEF5F7A1B1EE338E27E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:50:09:40:65:eb:a7:af:35:cb:67:d8:ff: 66:69:75:ed:d8:d9:8d:cf:b4:d6:37:e1:d3:1f:7c: ab:72:34:58:d5:4b:46:a7:5c:86:52:15:f2:4c:9a: 4d:4b:e4:5b:cb:71:08:9b:57:99:bb:76:94:02:ce: fc:ce:6e:57:0c:b5:f8:35:ef:47:bb:aa:a5:cc:f8: 07:3a:d8:81:11:64:24:82:f2:c3:3b:dc:bf:cb:d7: 30:df:6b:a1:d3:ed:d6:b8:45:36:6b:2b:f8:4c:b9: 81:ef:60:70:ba:e1:13:30:cd:2e:13:db:eb:e6:65: 7a:27:a8:ac:4c:1a:d4:3b:47:b7:c1:34:31:8b:06: aa:d2:15:35:64:a3:b6:b7:ea:54:59:d9:3c:09:92: 81:a0:dc:76:8e:a8:b2:58:fc:a7:72:4d:07:36:ea: f8:58:48:b0:5b:5d:d1:e9:7b:40:6f:a9:d9:dd:f8: 7f:dd:25:b9:31:5a:b6:53:b3:75:f3:d1:c0:d9:83: 77:35:0b:df:20:7a:17:6c:ef:14:a1:47:c0:7e:72: bc:45:1f:49:43:1b:de:44:2d:e1:4a:e2:dd:e3:73: 4b:ae:bb:d5:b5:f9:bf:e7:d2:18:a8:b9:e8:87:59: a0:09:cd:22:75:f9:85:58:5d:f7:da:98:a4:6b:92: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:58:92:E5:C9:5F:E2:1B:C8:AE:F5:F7:A1:B1:EE:33:8E:27:E7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wxFYkuXJX-IbyK7196Gx7jOOJ-c.roa sbgp-ipAddrBlock: critical IPv4: 27.133.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:8c:1d:89:e0:cd:4b:fb:87:d0:1a:dd:cc:09:1e:e3:bd:94: 07:cf:e9:84:71:48:5a:d6:0d:80:bb:4b:82:4d:11:1d:1a:0d: 22:3b:ca:29:7d:b1:5c:f4:ac:2f:a3:dd:2d:31:2f:53:82:87: 60:da:85:b9:e6:3e:eb:22:fa:33:a8:6e:66:7e:3c:7b:8a:e9: 44:b6:53:74:e9:94:a8:5e:4d:03:0d:68:7d:a3:a7:09:9e:77: e2:50:e4:47:b1:51:d5:cd:8b:a6:76:ba:53:63:37:0f:4c:ac: 30:0c:34:c4:6e:d9:8f:38:ac:25:cd:49:8d:d9:7d:09:d1:41: 3c:ee:48:3f:c0:ec:20:40:c7:ba:5b:c0:a4:6b:c6:bb:f8:78: f7:6c:6c:d2:e3:a3:c1:7d:b5:8f:18:f6:c6:ef:7a:d8:0e:12: e2:41:14:fd:54:dd:e9:cd:8a:31:97:de:43:79:6c:ad:5d:42: 8d:96:38:e1:db:8e:b7:3c:e0:16:d1:a9:f4:04:fb:1e:de:d7: 35:22:38:7a:aa:24:12:f2:63:11:0c:47:25:54:a3:c1:f5:c4: 14:b0:b9:b4:65:f9:a0:86:88:7c:40:0e:6e:21:1c:96:ef:f4: a2:7d:88:eb:57:2b:8d:2c:55:8a:e8:16:a2:36:0b:f4:6a:d9: d5:f3:16:ff -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE4NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMzMTE1ODkyRTVDOTVG RTIxQkM4QUVGNUY3QTFCMUVFMzM4RTI3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl3FAJQGXrp681y2fY/2Zpde3Y2Y3PtNY34dMffKtyNFjVS0an XIZSFfJMmk1L5FvLcQibV5m7dpQCzvzOblcMtfg170e7qqXM+Ac62IERZCSC8sM7 3L/L1zDfa6HT7da4RTZrK/hMuYHvYHC64RMwzS4T2+vmZXonqKxMGtQ7R7fBNDGL BqrSFTVko7a36lRZ2TwJkoGg3HaOqLJY/KdyTQc26vhYSLBbXdHpe0Bvqdnd+H/d JbkxWrZTs3Xz0cDZg3c1C98gehds7xShR8B+crxFH0lDG95ELeFK4t3jc0uuu9W1 +b/n0hioueiHWaAJzSJ1+YVYXffamKRrkp/hAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUwxFYkuXJX+IbyK7196Gx7jOOJ+cwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L3d4RllrdVhKWC1JYnlLNzE5Nkd4N2pPT0otYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMbhbgwDQYJKoZIhvcNAQELBQADggEB AI2MHYngzUv7h9Aa3cwJHuO9lAfP6YRxSFrWDYC7S4JNER0aDSI7yil9sVz0rC+j 3S0xL1OCh2DahbnmPusi+jOobmZ+PHuK6US2U3TplKheTQMNaH2jpwmed+JQ5Eex UdXNi6Z2ulNjNw9MrDAMNMRu2Y84rCXNSY3ZfQnRQTzuSD/A7CBAx7pbwKRrxrv4 ePdsbNLjo8F9tY8Y9sbvetgOEuJBFP1U3enNijGX3kN5bK1dQo2WOOHbjrc84BbR qfQE+x7e1zUiOHqqJBLyYxEMRyVUo8H1xBSwubRl+aCGiHxADm4hHJbv9KJ9iOtX K40sVYroFqI2C/Rq2dXzFv8= -----END CERTIFICATE-----Generated at Sun Apr 19 09:33:45 2026 by rpki-client