$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/T-8MZrjNHjF0fN4U2pN5OkSER9c.roa File: T-8MZrjNHjF0fN4U2pN5OkSER9c.roa (raw, json) Hash identifier: jukCL8rylFPn50j898QENp9ZVtG4BbD39vaFrZJFWrI= Subject key identifier: 4F:EF:0C:66:B8:CD:1E:31:74:7C:DE:14:DA:93:79:3A:44:84:47:D7 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01EE Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/T-8MZrjNHjF0fN4U2pN5OkSER9c.roa Signing time: Tue 31 Mar 2026 07:39:58 +0000 ROA not before: Tue 31 Mar 2026 07:39:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 121.101.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:39:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4FEF0C66B8CD1E31747CDE14DA93793A448447D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:aa:46:f6:27:b6:40:38:85:f7:3b:78:d8: 9e:7a:ad:9a:3d:43:2a:28:b4:7b:6c:e4:2c:30:4d: c7:7d:c1:e0:90:4f:91:9f:46:40:b2:13:ca:bd:46: b8:7d:0d:b1:2c:1c:22:59:7b:33:36:a3:01:15:8b: 95:08:7d:3e:ea:88:6c:5b:55:6a:61:d5:b3:91:56: db:5d:23:0f:2a:e1:2b:9e:9c:f7:74:f8:8c:52:62: 7f:47:2c:1f:01:f0:ce:4e:c8:da:a9:6f:37:cf:22: 81:62:3f:db:fb:ed:99:af:dc:7a:0f:95:4a:04:96: 2b:e1:24:14:8d:cd:6b:4f:93:cc:43:9c:9a:20:7a: b8:b4:3d:8c:26:52:1f:b2:1a:cd:ab:86:a7:45:1e: 67:0b:5c:52:f8:fc:1b:48:ea:b0:2f:ed:09:b1:3e: d1:a1:0c:d9:15:9d:17:ae:df:26:71:a0:f5:86:c2: 1f:9a:c3:fe:a0:53:cf:bb:b1:c5:ee:f1:a7:78:64: 63:b6:03:c4:2f:7e:58:61:72:57:67:09:b7:c4:5a: 7b:80:ca:fc:6f:3a:d8:54:58:87:c4:7e:2a:7a:f0: a2:63:23:78:79:51:c9:a0:bf:25:ca:3a:91:0f:bd: 08:69:d8:d0:02:6b:d7:06:66:d0:1a:86:fd:b3:5e: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EF:0C:66:B8:CD:1E:31:74:7C:DE:14:DA:93:79:3A:44:84:47:D7 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/T-8MZrjNHjF0fN4U2pN5OkSER9c.roa sbgp-ipAddrBlock: critical IPv4: 121.101.64.0/18 Signature Algorithm: sha256WithRSAEncryption 99:47:e9:ea:30:b0:f3:b3:99:38:96:c4:00:a3:43:f8:e0:a7: c5:46:92:1d:c1:f4:f6:6b:50:29:e4:62:24:31:0a:de:10:f5: 52:00:46:4a:97:06:98:c8:a3:60:34:25:39:46:94:fa:3e:8e: f1:72:0e:5b:e7:06:d0:5b:73:8a:10:18:c9:bf:7a:a6:22:b0: 93:0a:3b:79:88:1b:7b:7d:ca:52:f4:c4:42:9c:47:87:30:9a: 08:99:d4:f1:e9:4d:8d:a8:62:fc:7b:c0:c5:b8:ab:63:ed:6e: 95:c9:e7:5e:14:2b:15:09:8a:c2:3b:4c:4e:f1:00:c6:e6:79: 58:59:b9:2b:6d:e5:9b:85:3d:d0:49:56:a5:95:c6:43:e8:a5: 72:ea:2b:61:b3:13:a8:f6:31:63:77:07:08:b8:86:b7:6e:03: 86:28:1c:02:65:26:9e:de:58:f0:83:04:1e:15:1a:c3:6c:17: c6:0b:f2:a0:bb:51:ea:83:ab:b4:27:86:c7:93:dc:4d:28:48: 7d:33:07:d6:06:14:f5:c3:fe:2c:d1:9a:da:90:87:88:68:76: 3f:91:e5:3d:28:ab:cf:00:b2:f2:6b:bb:ff:45:34:9f:ef:54: 4b:7b:74:b6:25:b8:cc:3c:7d:71:cd:1c:c8:95:4a:98:81:d6: 87:38:98:12 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzM5NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRGRUYwQzY2QjhDRDFF MzE3NDdDREUxNERBOTM3OTNBNDQ4NDQ3RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmlqpG9ie2QDiF9zt42J56rZo9QyootHts5CwwTcd9weCQT5Gf RkCyE8q9Rrh9DbEsHCJZezM2owEVi5UIfT7qiGxbVWph1bORVttdIw8q4SuenPd0 +IxSYn9HLB8B8M5OyNqpbzfPIoFiP9v77Zmv3HoPlUoElivhJBSNzWtPk8xDnJog eri0PYwmUh+yGs2rhqdFHmcLXFL4/BtI6rAv7QmxPtGhDNkVnReu3yZxoPWGwh+a w/6gU8+7scXu8ad4ZGO2A8QvflhhcldnCbfEWnuAyvxvOthUWIfEfip68KJjI3h5 UcmgvyXKOpEPvQhp2NACa9cGZtAahv2zXm6BAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUT+8MZrjNHjF0fN4U2pN5OkSER9cwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9ULThNWnJqTkhqRjBmTjRVMnBONU9rU0VSOWMucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGeWVAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ R+nqMLDzs5k4lsQAo0P44KfFRpIdwfT2a1Ap5GIkMQreEPVSAEZKlwaYyKNgNCU5 RpT6Po7xcg5b5wbQW3OKEBjJv3qmIrCTCjt5iBt7fcpS9MRCnEeHMJoImdTx6U2N qGL8e8DFuKtj7W6VyedeFCsVCYrCO0xO8QDG5nlYWbkrbeWbhT3QSVallcZD6KVy 6ithsxOo9jFjdwcIuIa3bgOGKBwCZSae3ljwgwQeFRrDbBfGC/Kgu1Hqg6u0J4bH k9xNKEh9MwfWBhT1w/4s0ZrakIeIaHY/keU9KKvPALLya7v/RTSf71RLe3S2JbjM PH1xzRzIlUqYgdaHOJgS -----END CERTIFICATE-----Generated at Sun Apr 19 09:29:24 2026 by rpki-client