$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/CDASYpsTcEecoZAw5iH6asVHrKQ.roa File: CDASYpsTcEecoZAw5iH6asVHrKQ.roa (raw, json) Hash identifier: QY5i3bVx74i5II6X6PtHElMN/FCOyaNc/opSZDMkMi0= Subject key identifier: 08:30:12:62:9B:13:70:47:9C:A1:90:30:E6:21:FA:6A:C5:47:AC:A4 Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE Certificate serial: 95 Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CDASYpsTcEecoZAw5iH6asVHrKQ.roa Signing time: Mon 27 Jul 2026 07:12:31 +0000 ROA not before: Mon 27 Jul 2026 07:12:31 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 2519 IP address blocks: 122.223.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 07:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE Validity Not Before: Jul 27 07:12:31 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=083012629B1370479CA19030E621FA6AC547ACA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:38:97:f6:3b:55:0c:f8:40:99:5d:66:93: 7e:8b:95:6b:04:c9:f3:99:13:99:4e:0a:85:cc:7c: c7:56:62:a5:24:e6:5d:e4:40:cd:ac:0e:e4:46:ec: f1:b2:04:46:08:26:50:fd:aa:68:67:31:7a:a4:90: b4:a9:dc:4b:27:c6:b0:24:db:18:d7:c9:5f:38:fc: 99:66:4c:8b:84:23:48:e1:cf:34:1c:24:0b:9f:01: 8c:bb:ba:e4:30:e0:93:62:6d:6a:54:e0:8d:ed:9a: eb:69:a2:d3:de:c6:6c:f6:4c:c2:4f:1f:07:d0:7f: 51:3b:09:7f:ec:4d:99:22:a1:8c:85:34:4a:e7:f3: 83:f1:5a:7d:3d:b7:72:1a:b3:74:14:ad:4a:88:33: 0e:aa:51:a8:0c:4d:13:35:8e:45:22:f0:98:25:8e: 5b:90:2d:51:30:95:c7:99:59:4a:75:2c:83:38:65: ee:c5:10:2e:0b:d4:7d:6d:24:97:e1:a5:1e:16:b6: b3:40:f0:38:94:ff:4a:7e:f8:9e:e7:cf:29:00:89: a1:51:58:41:a0:b8:3b:63:bb:79:8d:7f:27:57:0e: 29:c2:51:43:42:2b:20:20:15:48:e7:6f:a6:f3:25: 67:bc:2a:87:cd:08:84:56:8a:3f:ef:b3:d0:c1:e7: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:30:12:62:9B:13:70:47:9C:A1:90:30:E6:21:FA:6A:C5:47:AC:A4 X509v3 Authority Key Identifier: keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CDASYpsTcEecoZAw5iH6asVHrKQ.roa sbgp-ipAddrBlock: critical IPv4: 122.223.112.0/20 Signature Algorithm: sha256WithRSAEncryption b5:ee:eb:d8:e9:03:d4:6f:b2:cb:9f:8d:7b:de:18:b2:ca:23: 84:85:d0:e7:30:ab:69:78:fa:80:f3:5a:3d:bc:bf:20:be:54: 8a:74:75:a7:3e:56:83:6c:cd:e0:0c:06:fb:ed:a7:1b:19:26: 4e:cb:1a:b3:f9:3e:55:38:73:37:1b:98:6f:e4:46:7b:07:47: 85:8c:a1:cc:a8:f2:4a:93:9d:ca:6e:9f:5e:d6:a1:28:79:f2: 7c:38:33:ab:aa:c7:db:b7:df:68:5c:c5:6b:54:95:58:4f:1b: ff:f1:a0:a2:30:02:48:42:6d:3f:59:ec:2a:46:c2:ba:0a:3f: df:55:c5:80:c7:0c:ed:28:7c:78:c5:1a:94:30:b2:f1:53:ef: ee:ac:32:82:ea:f0:02:5c:49:c7:af:5b:3e:46:36:c8:b7:40: 0b:2f:b3:cb:dc:b3:1e:17:b5:01:46:7e:7b:8e:8b:90:c0:ac: 6f:dc:87:e4:48:43:f2:ea:8e:ae:b3:01:5f:89:57:99:a1:e5: 5a:f1:1b:c8:8c:40:48:c1:82:58:d5:4f:71:59:14:97:bb:53: 30:b3:50:de:24:be:1f:5f:86:10:05:1c:64:10:ad:32:11:13: 34:32:1f:b0:53:21:5f:26:b6:65:59:8b:9d:37:63:0b:cb:2b: 8d:c5:bf:b8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDY3 ODkxQjk0RUQ5RTU1N0U3Nzk3NDZCRkEyM0UwM0QxRUQyMzRFRTAeFw0yNjA3Mjcw NzEyMzFaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4MzAxMjYyOUIxMzcw NDc5Q0ExOTAzMEU2MjFGQTZBQzU0N0FDQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMWjiX9jtVDPhAmV1mk36LlWsEyfOZE5lOCoXMfMdWYqUk5l3k QM2sDuRG7PGyBEYIJlD9qmhnMXqkkLSp3EsnxrAk2xjXyV84/JlmTIuEI0jhzzQc JAufAYy7uuQw4JNibWpU4I3tmutpotPexmz2TMJPHwfQf1E7CX/sTZkioYyFNErn 84PxWn09t3Ias3QUrUqIMw6qUagMTRM1jkUi8JgljluQLVEwlceZWUp1LIM4Ze7F EC4L1H1tJJfhpR4WtrNA8DiU/0p++J7nzykAiaFRWEGguDtju3mNfydXDinCUUNC KyAgFUjnb6bzJWe8KofNCIRWij/vs9DB59aZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUCDASYpsTcEecoZAw5iH6asVHrKQwHwYDVR0jBBgwFoAU1niRuU7Z5VfneXRr +iPgPR7SNO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1Mi8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BSN1NOTzQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BS N1NOTzQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDUyL0NEQVNZcHNUY0VlY29aQXc1aUg2YXNWSHJLUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR633AwDQYJKoZIhvcNAQELBQADggEB ALXu69jpA9RvssufjXveGLLKI4SF0Ocwq2l4+oDzWj28vyC+VIp0dac+VoNszeAM BvvtpxsZJk7LGrP5PlU4czcbmG/kRnsHR4WMocyo8kqTncpun17WoSh58nw4M6uq x9u332hcxWtUlVhPG//xoKIwAkhCbT9Z7CpGwroKP99VxYDHDO0ofHjFGpQwsvFT 7+6sMoLq8AJcScevWz5GNsi3QAsvs8vcsx4XtQFGfnuOi5DArG/ch+RIQ/Lqjq6z AV+JV5mh5VrxG8iMQEjBgljVT3FZFJe7UzCzUN4kvh9fhhAFHGQQrTIREzQyH7BT IV8mtmVZi503YwvLK43Fv7g= -----END CERTIFICATE-----Generated at Wed Jul 29 09:01:41 2026 by rpki-client