$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/-bUFZkzNHZB77on4kO-1rEZ9jBw.roa File: -bUFZkzNHZB77on4kO-1rEZ9jBw.roa (raw, json) Hash identifier: 7gAf5uTELOt+o2Q92ezFKPLTXhYwxtUYlsUeHnya6b4= Subject key identifier: F9:B5:05:66:4C:CD:1D:90:7B:EE:89:F8:90:EF:B5:AC:46:7D:8C:1C Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01FD Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-bUFZkzNHZB77on4kO-1rEZ9jBw.roa Signing time: Tue 31 Mar 2026 07:40:08 +0000 ROA not before: Tue 31 Mar 2026 07:40:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 211.2.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:40:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F9B505664CCD1D907BEE89F890EFB5AC467D8C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:e3:96:6b:18:cf:48:75:da:22:c3:2b:2e: 47:ca:53:14:7f:85:43:e2:1c:d3:fd:a5:e2:16:09: 93:4e:11:b7:63:28:1a:cf:4c:6f:25:ca:82:7b:86: 00:03:69:8f:73:1c:e9:cf:e9:0d:18:42:89:a8:76: 16:1c:ca:4b:68:d1:66:69:29:02:77:26:bd:7c:06: 44:10:42:a2:ca:20:64:aa:6c:fe:61:9f:f0:b7:10: 76:00:64:0d:9b:4e:91:8f:1c:f0:21:12:16:86:d3: 5e:85:d8:45:2a:3e:b2:75:76:1a:11:ee:99:f9:95: 9f:78:2c:16:f7:f0:39:28:0d:f0:f4:2a:6b:13:00: 1f:d3:eb:82:3d:62:f8:1d:24:37:6b:58:e7:f2:8d: 36:6d:e4:da:0a:2f:7d:7f:65:97:5b:26:b3:56:b9: cc:09:69:56:75:50:d1:43:b7:36:24:d0:4e:e6:06: 48:bf:b3:bc:67:42:41:b9:df:66:16:22:78:2b:22: 5e:43:a9:1b:66:e2:0c:bd:83:62:17:71:52:f5:f9: eb:b2:38:b1:28:3e:ba:97:7d:9b:ab:a0:18:02:c8: c6:cf:09:e3:c9:47:41:48:41:ad:6c:1d:ce:a0:f6: 0d:af:0a:83:fe:aa:f2:f4:aa:f7:f9:7e:3d:46:78: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B5:05:66:4C:CD:1D:90:7B:EE:89:F8:90:EF:B5:AC:46:7D:8C:1C X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-bUFZkzNHZB77on4kO-1rEZ9jBw.roa sbgp-ipAddrBlock: critical IPv4: 211.2.0.0/18 Signature Algorithm: sha256WithRSAEncryption 64:7b:77:c6:76:09:1d:19:ea:a5:06:fb:c5:ed:a2:73:10:29: ad:68:cb:36:c0:71:20:b1:9e:9b:03:31:64:b8:26:23:07:1f: 4a:79:47:b6:80:ea:96:47:f1:0b:45:2f:ab:33:b4:f1:c3:7f: 93:98:01:aa:5e:89:f9:ae:f5:18:cc:b7:09:1b:6c:0e:91:21: b7:86:74:d4:cf:83:42:68:1d:6a:71:5d:f7:63:09:97:8a:7a: f0:04:49:6b:f7:dc:e9:e9:e7:44:d3:d4:63:3f:4a:bf:2a:41: 5a:2b:4d:7f:81:88:30:95:36:14:5e:c7:11:bd:f5:23:24:4b: f9:ea:40:81:a1:b4:d5:24:fc:b0:0f:67:18:49:a8:d4:ca:38: cf:ca:03:e8:b3:93:64:d5:b7:54:89:5a:08:a9:03:73:10:31: 81:41:ec:9b:46:31:f9:e3:81:f7:8f:90:f9:df:ff:11:cd:30: 7b:1e:9d:ca:71:76:72:92:bc:6a:1e:c8:24:73:bd:ca:b7:e2: 2c:ee:5d:64:92:af:7b:9d:f5:8d:80:af:e1:cd:ca:93:6a:36: ae:45:f5:8a:f1:20:27:0e:99:5d:51:34:8e:93:6a:67:0b:59: 67:b3:0f:db:2d:7c:cd:a1:cf:95:04:90:bd:06:8a:6a:57:52: 28:38:a3:33 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzQwMDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY5QjUwNTY2NENDRDFE OTA3QkVFODlGODkwRUZCNUFDNDY3RDhDMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaaeOWaxjPSHXaIsMrLkfKUxR/hUPiHNP9peIWCZNOEbdjKBrP TG8lyoJ7hgADaY9zHOnP6Q0YQomodhYcykto0WZpKQJ3Jr18BkQQQqLKIGSqbP5h n/C3EHYAZA2bTpGPHPAhEhaG016F2EUqPrJ1dhoR7pn5lZ94LBb38DkoDfD0KmsT AB/T64I9YvgdJDdrWOfyjTZt5NoKL31/ZZdbJrNWucwJaVZ1UNFDtzYk0E7mBki/ s7xnQkG532YWIngrIl5DqRtm4gy9g2IXcVL1+euyOLEoPrqXfZuroBgCyMbPCePJ R0FIQa1sHc6g9g2vCoP+qvL0qvf5fj1GeNrLAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQU+bUFZkzNHZB77on4kO+1rEZ9jBwwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My8tYlVGWmt6TkhaQjc3b240a08tMXJFWjlqQncucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0wIAMA0GCSqGSIb3DQEBCwUAA4IBAQBk e3fGdgkdGeqlBvvF7aJzECmtaMs2wHEgsZ6bAzFkuCYjBx9KeUe2gOqWR/ELRS+r M7Txw3+TmAGqXon5rvUYzLcJG2wOkSG3hnTUz4NCaB1qcV33YwmXinrwBElr99zp 6edE09RjP0q/KkFaK01/gYgwlTYUXscRvfUjJEv56kCBobTVJPywD2cYSajUyjjP ygPos5Nk1bdUiVoIqQNzEDGBQeybRjH544H3j5D53/8RzTB7Hp3KcXZykrxqHsgk c73Kt+Is7l1kkq97nfWNgK/hzcqTajauRfWK8SAnDpldUTSOk2pnC1lnsw/bLXzN oc+VBJC9BopqV1IoOKMz -----END CERTIFICATE-----Generated at Fri Apr 17 15:54:45 2026 by rpki-client