$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDR-V8y37rTDppzHkwpeLs-nvMU.roa File: CDR-V8y37rTDppzHkwpeLs-nvMU.roa (raw, json) Hash identifier: gOZq0q+Bknt9AvlPkBLgIxEmIXuiJo3ttCpV5D/nLaI= Subject key identifier: 08:34:7E:57:CC:B7:EE:B4:C3:A6:9C:C7:93:0A:5E:2E:CF:A7:BC:C5 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01D5 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDR-V8y37rTDppzHkwpeLs-nvMU.roa Signing time: Tue 31 Mar 2026 07:39:48 +0000 ROA not before: Tue 31 Mar 2026 07:39:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 124.219.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:39:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=08347E57CCB7EEB4C3A69CC7930A5E2ECFA7BCC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:26:66:6c:22:8b:bf:26:32:87:a4:40:db: 3a:33:7a:b5:7b:2d:ee:a7:5a:89:b5:1d:9c:2b:33: 33:2e:0e:f1:a4:ce:47:95:bc:a5:c2:9c:92:70:ac: bc:03:86:e5:20:42:17:4d:cf:4a:44:ea:2a:03:37: 15:4d:4e:dc:b3:bb:9e:1c:b6:98:a8:86:17:7e:0e: 03:cb:39:1b:b8:70:14:28:52:77:5d:32:86:46:60: 58:77:27:92:08:1f:b0:33:01:ce:c3:70:17:52:a9: 41:f8:58:a5:ed:eb:56:a4:54:05:ac:f0:c2:4b:97: cd:49:da:48:da:84:b5:ac:96:46:22:00:bb:99:35: d0:bf:6d:18:95:91:2d:33:41:f7:7e:b2:1c:5d:85: 9c:62:59:52:fd:8b:9a:96:da:ac:21:07:51:83:0c: 94:fc:f1:57:00:65:3f:28:da:8f:ce:c7:42:ca:a7: 55:2a:01:50:0d:15:47:f7:70:96:01:9a:d0:00:b1: 40:f8:a7:e6:e5:65:2a:d5:8d:41:d2:30:b1:13:45: 70:2d:33:a2:00:e1:64:52:7a:e4:26:2d:6e:54:d8: b4:ee:27:26:dd:93:51:9b:07:29:29:11:f0:01:ba: 45:46:24:08:e4:a3:1e:bb:ec:79:79:42:88:ce:0c: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:7E:57:CC:B7:EE:B4:C3:A6:9C:C7:93:0A:5E:2E:CF:A7:BC:C5 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDR-V8y37rTDppzHkwpeLs-nvMU.roa sbgp-ipAddrBlock: critical IPv4: 124.219.128.0/17 Signature Algorithm: sha256WithRSAEncryption b8:15:96:b2:a1:b2:33:0f:3f:26:62:6d:c0:2c:22:ae:3d:68: c2:a6:8b:10:92:1f:f9:27:48:43:1f:d0:fe:4c:9b:97:79:ec: 93:11:ed:74:23:73:43:84:af:c9:42:78:b4:81:10:a0:b6:47: 1f:77:73:02:f0:ec:2b:de:16:1b:37:c3:3b:23:26:c3:b5:32: a6:51:b8:61:4e:1d:46:e9:c2:e0:7e:9d:78:e4:23:5f:df:d2: ac:a2:37:fb:ef:68:85:2f:9d:8e:f3:de:ae:b6:e2:d2:af:56: 6d:f1:09:ec:fc:68:8a:15:74:38:70:c0:4e:29:c4:57:59:7a: 82:1b:51:86:cf:62:00:f1:2f:aa:48:52:21:79:d7:66:b3:ba: be:a4:ea:51:e2:97:ab:1d:80:ce:15:54:db:60:28:66:0c:51: 1e:b4:43:14:17:9a:f0:8f:5d:3b:3c:e8:dc:75:d8:d5:20:e7: aa:b6:e3:b9:e8:14:43:0e:b3:6f:fb:cf:24:46:a1:28:1b:92: 5e:62:71:f3:65:f1:37:e3:6a:76:db:6c:28:a9:86:53:95:79: 7c:3c:f6:59:41:1c:2d:ef:be:60:d5:ec:89:06:e1:35:9b:d8: a8:5d:aa:4d:4e:22:99:b1:db:fd:42:c8:00:38:01:cb:72:f1: 39:d0:3d:56 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzM5NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4MzQ3RTU3Q0NCN0VF QjRDM0E2OUNDNzkzMEE1RTJFQ0ZBN0JDQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUASZmbCKLvyYyh6RA2zozerV7Le6nWom1HZwrMzMuDvGkzkeV vKXCnJJwrLwDhuUgQhdNz0pE6ioDNxVNTtyzu54ctpiohhd+DgPLORu4cBQoUndd MoZGYFh3J5IIH7AzAc7DcBdSqUH4WKXt61akVAWs8MJLl81J2kjahLWslkYiALuZ NdC/bRiVkS0zQfd+shxdhZxiWVL9i5qW2qwhB1GDDJT88VcAZT8o2o/Ox0LKp1Uq AVANFUf3cJYBmtAAsUD4p+blZSrVjUHSMLETRXAtM6IA4WRSeuQmLW5U2LTuJybd k1GbBykpEfABukVGJAjkox677Hl5QojODCjnAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUCDR+V8y37rTDppzHkwpeLs+nvMUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9DRFItVjh5MzdyVERwcHpIa3dwZUxzLW52TVUucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHfNuAMA0GCSqGSIb3DQEBCwUAA4IBAQC4 FZayobIzDz8mYm3ALCKuPWjCposQkh/5J0hDH9D+TJuXeeyTEe10I3NDhK/JQni0 gRCgtkcfd3MC8Owr3hYbN8M7IybDtTKmUbhhTh1G6cLgfp145CNf39Ksojf772iF L52O896utuLSr1Zt8Qns/GiKFXQ4cMBOKcRXWXqCG1GGz2IA8S+qSFIheddms7q+ pOpR4perHYDOFVTbYChmDFEetEMUF5rwj107POjcddjVIOeqtuO56BRDDrNv+88k RqEoG5JeYnHzZfE342p222woqYZTlXl8PPZZQRwt775g1eyJBuE1m9ioXapNTiKZ sdv9QsgAOAHLcvE50D1W -----END CERTIFICATE-----Generated at Fri Apr 17 06:51:59 2026 by rpki-client