$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/cNXQxSAZd9BCr_tlsVdmJ5QT0ng.roa File: cNXQxSAZd9BCr_tlsVdmJ5QT0ng.roa (raw, json) Hash identifier: 4XU9gYL+ra0rp0sz76Bvc/xEkRcQ/guV/XsLNUV7V6s= Subject key identifier: 70:D5:D0:C5:20:19:77:D0:42:AF:FB:65:B1:57:66:27:94:13:D2:78 Certificate issuer: /CN=51164DDCE7F388F8244C452190F6964F1AF0685D Certificate serial: 04 Authority key identifier: 51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/cNXQxSAZd9BCr_tlsVdmJ5QT0ng.roa Signing time: Tue 31 Mar 2026 08:49:14 +0000 ROA not before: Tue 31 Mar 2026 08:49:14 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 128.22.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51164DDCE7F388F8244C452190F6964F1AF0685D Validity Not Before: Mar 31 08:49:14 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=70D5D0C5201977D042AFFB65B15766279413D278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:c5:be:6f:b1:7f:c8:4f:4e:e2:6b:2f:3c: 71:db:64:03:3d:03:6f:15:6f:02:d6:58:87:ea:95: b9:b4:41:7f:48:f5:e8:3a:96:c4:66:d6:78:33:8e: 45:9c:ca:45:48:00:7a:ef:19:55:c3:ee:5e:46:94: b6:1c:c0:59:be:78:71:36:62:37:1f:d4:4c:c3:94: 6d:67:1d:16:2a:7c:92:09:01:64:57:be:bd:6c:28: 98:74:97:2b:b9:3c:29:86:b4:49:9d:22:32:ff:ae: d1:1a:62:5c:b5:0a:1a:35:ff:39:49:1e:d5:da:f9: ec:96:4f:be:0c:c5:c7:6d:91:b8:e3:5b:8b:2f:97: c6:7c:86:52:d0:c5:b0:f5:7c:17:79:4c:21:c4:d0: e8:6d:fc:0a:b3:de:a1:ba:a6:b6:15:d2:64:a9:92: 2e:f8:f3:66:d0:f1:ee:05:d9:ca:58:12:35:da:02: e0:80:ef:2a:7b:bd:cf:40:c8:b8:88:1a:5e:e9:b2: 3c:d5:ac:a6:02:5a:52:0f:48:e4:04:ce:06:03:ea: 36:56:04:73:ef:5d:4e:60:c5:90:77:da:4b:47:42: ce:da:b5:73:13:03:0c:25:99:b0:ea:d5:9f:11:30: 93:dc:82:9f:ab:74:33:1a:b0:fa:32:a6:aa:9c:cb: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:D0:C5:20:19:77:D0:42:AF:FB:65:B1:57:66:27:94:13:D2:78 X509v3 Authority Key Identifier: keyid:51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/cNXQxSAZd9BCr_tlsVdmJ5QT0ng.roa sbgp-ipAddrBlock: critical IPv4: 128.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1b:f6:77:24:fe:db:e1:17:38:97:74:f7:93:f6:7b:9c:fb:15: 9a:2e:e0:01:40:f6:89:7e:e9:77:11:d1:6a:6d:3c:3e:69:df: 27:4e:c3:ee:4f:4d:fc:6d:25:d9:4e:cc:07:a5:61:41:a0:01: 39:8f:46:8d:61:83:d1:c3:8f:5a:02:ed:f5:39:fd:d2:a4:7b: 1f:3d:67:c7:67:77:04:69:ff:6e:2e:6a:70:c6:c3:6d:a6:eb: 66:d4:24:dc:25:40:fe:96:9a:48:16:56:a7:ed:18:04:70:21: b3:95:23:8c:51:27:bd:0d:88:de:3d:26:93:ae:dd:12:07:19: 8a:3e:37:02:a0:bc:fd:55:1e:57:d1:5e:c1:99:39:a7:74:24: 26:20:f4:a8:06:fd:44:e6:9b:49:97:3f:ff:6e:e4:d6:10:79: 5d:4b:e1:ef:24:c1:e2:68:67:b6:b0:38:83:c4:f1:06:a4:d6: 1a:c7:e4:ad:a3:2f:20:5a:e4:4e:18:58:94:5e:50:52:dd:81: 9d:45:e9:76:d4:c4:38:5e:9b:ba:58:4a:23:38:c2:46:2b:4c: 99:f7:46:1a:ff:50:61:e3:b5:d6:6f:e5:bd:5f:43:c8:6b:0c: 43:c3:c8:b5:cd:a0:18:f6:eb:d4:bd:d0:e2:db:ce:23:73:f2: 3c:fc:df:d2 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTE2 NEREQ0U3RjM4OEY4MjQ0QzQ1MjE5MEY2OTY0RjFBRjA2ODVEMB4XDTI2MDMzMTA4 NDkxNFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoNzBENUQwQzUyMDE5NzdE MDQyQUZGQjY1QjE1NzY2Mjc5NDEzRDI3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKoOxb5vsX/IT07iay88cdtkAz0DbxVvAtZYh+qVubRBf0j16DqW xGbWeDOORZzKRUgAeu8ZVcPuXkaUthzAWb54cTZiNx/UTMOUbWcdFip8kgkBZFe+ vWwomHSXK7k8KYa0SZ0iMv+u0RpiXLUKGjX/OUke1dr57JZPvgzFx22RuONbiy+X xnyGUtDFsPV8F3lMIcTQ6G38CrPeobqmthXSZKmSLvjzZtDx7gXZylgSNdoC4IDv Knu9z0DIuIgaXumyPNWspgJaUg9I5ATOBgPqNlYEc+9dTmDFkHfaS0dCztq1cxMD DCWZsOrVnxEwk9yCn6t0Mxqw+jKmqpzLLG0CAwEAAaOCAdgwggHUMB0GA1UdDgQW BBRw1dDFIBl30EKv+2WxV2YnlBPSeDAfBgNVHSMEGDAWgBRRFk3c5/OI+CRMRSGQ 9pZPGvBoXTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1VSWk4zT2Z6aVBna1RFVWhrUGFXVHhyd2FGMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VSWk4zT2Z6aVBna1RFVWhrUGFXVHhy d2FGMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMvY05YUXhTQVpkOUJDcl90bHNWZG1KNVFUMG5nLnJvYTAeBggr BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIAWMA0GCSqGSIb3DQEBCwUAA4IBAQAb 9nck/tvhFziXdPeT9nuc+xWaLuABQPaJful3EdFqbTw+ad8nTsPuT038bSXZTswH pWFBoAE5j0aNYYPRw49aAu31Of3SpHsfPWfHZ3cEaf9uLmpwxsNtputm1CTcJUD+ lppIFlan7RgEcCGzlSOMUSe9DYjePSaTrt0SBxmKPjcCoLz9VR5X0V7BmTmndCQm IPSoBv1E5ptJlz//buTWEHldS+HvJMHiaGe2sDiDxPEGpNYax+Stoy8gWuROGFiU XlBS3YGdRel21MQ4Xpu6WEojOMJGK0yZ90Ya/1Bh47XWb+W9X0PIawxDw8i1zaAY 9uvUvdDi284jc/I8/N/S -----END CERTIFICATE-----Generated at Fri Apr 17 06:56:09 2026 by rpki-client