$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/sZqxWHU_R-ZKySo6fEoTZ7B7m6I.roa File: sZqxWHU_R-ZKySo6fEoTZ7B7m6I.roa (raw, json) Hash identifier: VUPOcCOPPUB99QFIh2Y3YYUrm5m2bajnBlvLePY3akg= Subject key identifier: B1:9A:B1:58:75:3F:47:E6:4A:C9:2A:3A:7C:4A:13:67:B0:7B:9B:A2 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: BD Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/sZqxWHU_R-ZKySo6fEoTZ7B7m6I.roa Signing time: Tue 31 Mar 2026 07:39:37 +0000 ROA not before: Tue 31 Mar 2026 07:39:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 159.28.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Mar 31 07:39:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B19AB158753F47E64AC92A3A7C4A1367B07B9BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:b2:ad:88:83:18:a5:77:bb:d2:80:8c:b0: 6d:09:50:0d:5f:ea:d9:1f:8e:d0:a7:88:a5:c6:00: 8e:ef:1d:54:47:7f:14:14:e4:83:ee:0e:18:c7:81: 43:35:9c:d2:b1:1a:02:b9:c7:3c:23:ee:14:0c:35: e8:8a:f5:08:06:ae:cb:5b:5e:81:47:81:95:e7:0d: b6:a8:35:ad:f7:49:27:23:a8:e0:1f:3d:a6:c2:80: 44:42:d9:59:2f:1e:bc:fa:ef:c5:f3:81:1b:23:5b: e3:1c:e7:aa:a8:db:d5:8e:98:ad:c1:36:77:8a:44: 2f:46:b1:4d:87:02:51:d2:af:78:44:40:b0:b9:51: b3:bd:ad:c8:aa:99:7a:f6:5b:17:ae:92:01:49:9b: 1d:7b:22:1f:91:7a:61:e7:a6:34:c2:92:62:2f:ae: bf:5d:d2:5f:db:ff:75:fc:9c:93:7b:d3:24:dc:c4: 38:28:25:37:f8:ce:b2:af:f1:ce:24:29:49:9a:44: fb:b2:5b:58:94:e8:9c:74:69:7c:4e:6c:c0:1d:de: b1:a1:ac:53:1e:01:ac:36:4d:1f:75:1b:93:17:b4: a2:95:f4:d3:e3:05:61:5f:aa:18:6f:ab:56:c7:b1: f2:40:1a:f0:3e:91:59:45:ed:c4:ba:14:f0:11:17: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:B1:58:75:3F:47:E6:4A:C9:2A:3A:7C:4A:13:67:B0:7B:9B:A2 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/sZqxWHU_R-ZKySo6fEoTZ7B7m6I.roa sbgp-ipAddrBlock: critical IPv4: 159.28.64.0/18 Signature Algorithm: sha256WithRSAEncryption 24:f0:57:d6:9f:ce:54:2b:58:3a:fa:9c:c4:8a:f6:a5:90:61: 5a:7b:a4:9e:3e:67:3b:b5:39:fc:3c:c1:03:7b:70:44:67:37: d2:b6:8e:6f:7e:25:06:e7:e4:1b:ad:33:ea:b8:26:55:f6:5a: 0c:4c:a5:d3:01:45:fd:b2:38:98:b0:d7:25:72:77:0a:e3:4b: 58:9a:93:4c:2d:92:f4:ad:ee:b7:58:a7:e4:e2:77:a5:ea:fc: 93:62:4a:36:8f:ca:e7:eb:13:6f:4c:8f:24:1a:8d:0b:a3:05: ec:c0:2f:cc:48:a0:95:97:fa:a8:0e:24:7d:63:d5:aa:bb:f6: 95:ef:f4:8f:84:0e:5c:2c:64:37:e4:a2:98:a4:b7:19:ca:8a: 67:f4:ba:01:c8:f7:55:8a:50:90:84:fb:ce:6a:c0:f2:83:37: f6:3e:68:43:45:fd:6e:34:a9:76:cb:12:92:bc:5c:ba:dc:c7: fb:26:5a:db:ce:31:70:5a:d0:a5:a6:4d:fc:09:38:ad:22:6a: a1:16:af:b3:77:7f:9b:12:b8:a5:6d:1f:22:67:f9:7a:d5:5c: b4:76:27:15:00:fa:3c:c5:2e:79:c1:53:21:2b:c5:e5:81:60: bd:92:28:2d:bd:d4:e9:39:51:51:95:6c:85:eb:e7:fe:2f:fc: 9b:62:5a:26 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw NzM5MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxOUFCMTU4NzUzRjQ3 RTY0QUM5MkEzQTdDNEExMzY3QjA3QjlCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDForKtiIMYpXe70oCMsG0JUA1f6tkfjtCniKXGAI7vHVRHfxQU 5IPuDhjHgUM1nNKxGgK5xzwj7hQMNeiK9QgGrstbXoFHgZXnDbaoNa33SScjqOAf PabCgERC2VkvHrz678XzgRsjW+Mc56qo29WOmK3BNneKRC9GsU2HAlHSr3hEQLC5 UbO9rciqmXr2WxeukgFJmx17Ih+RemHnpjTCkmIvrr9d0l/b/3X8nJN70yTcxDgo JTf4zrKv8c4kKUmaRPuyW1iU6Jx0aXxObMAd3rGhrFMeAaw2TR91G5MXtKKV9NPj BWFfqhhvq1bHsfJAGvA+kVlF7cS6FPARF0G9AgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUsZqxWHU/R+ZKySo6fEoTZ7B7m6IwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9zWnF4V0hVX1ItWkt5U282ZkVvVFo3QjdtNkkucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnxxAMA0GCSqGSIb3DQEBCwUAA4IBAQAk 8FfWn85UK1g6+pzEivalkGFae6SePmc7tTn8PMEDe3BEZzfSto5vfiUG5+QbrTPq uCZV9loMTKXTAUX9sjiYsNclcncK40tYmpNMLZL0re63WKfk4nel6vyTYko2j8rn 6xNvTI8kGo0LowXswC/MSKCVl/qoDiR9Y9Wqu/aV7/SPhA5cLGQ35KKYpLcZyopn 9LoByPdVilCQhPvOasDygzf2PmhDRf1uNKl2yxKSvFy63Mf7JlrbzjFwWtClpk38 CTitImqhFq+zd3+bErilbR8iZ/l61Vy0dicVAPo8xS55wVMhK8XlgWC9kigtvdTp OVFRlWyF6+f+L/ybYlom -----END CERTIFICATE-----Generated at Sun Apr 19 10:06:02 2026 by rpki-client