$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/8KJ20oilfMgGMvuDeSHITS53Ixc.roa File: 8KJ20oilfMgGMvuDeSHITS53Ixc.roa (raw, json) Hash identifier: foNXHeOt8Se53NzoNZ9Fi9zM4WWAK26OONugkq5FlGw= Subject key identifier: F0:A2:76:D2:88:A5:7C:C8:06:32:FB:83:79:21:C8:4D:2E:77:23:17 Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: 011F Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/8KJ20oilfMgGMvuDeSHITS53Ixc.roa Signing time: Tue 31 Mar 2026 08:30:23 +0000 ROA not before: Tue 31 Mar 2026 08:30:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4685 IP address blocks: 210.253.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Mar 31 08:30:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F0A276D288A57CC80632FB837921C84D2E772317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:10:2b:15:86:dd:f7:1f:57:ef:12:33:21: 68:ba:fd:05:d4:fc:8c:ed:50:97:d7:98:73:64:b9: bc:9f:42:a6:4f:68:d5:a2:fe:5b:d8:9f:71:4b:9d: e9:4d:68:f5:a7:e5:fe:51:0d:3f:a0:45:57:c9:70: d5:a9:a4:e6:ce:a2:98:c3:93:f9:72:fe:6f:32:c0: 2f:3b:0e:ba:3a:23:3e:4e:42:20:2f:5e:e3:9a:72: 84:84:7d:d5:eb:4a:f7:d1:16:7e:07:b6:9e:f8:6a: 73:bc:5e:5d:bf:67:f0:e7:86:10:a4:b9:16:bf:2d: ee:a9:67:00:f0:13:db:47:7d:8e:e7:be:a8:91:16: 71:66:be:2f:30:3a:d7:63:cc:1a:c6:c0:14:9f:66: f3:dd:f7:f7:86:be:8e:21:ff:83:86:5c:88:dd:de: 2b:56:33:77:af:d0:42:3f:69:19:16:11:6c:64:b8: d1:de:73:0e:5f:5e:f4:7f:31:aa:7d:4a:57:4c:dd: 37:cb:36:8f:af:53:56:99:71:27:f9:6d:9a:50:ca: 8a:84:40:92:39:28:8d:3f:57:3d:08:81:ee:8c:6e: 09:93:5f:2f:f4:35:ce:62:99:71:70:2d:ce:bf:da: 17:29:4c:95:d5:a1:99:8c:4e:3d:2b:8a:e4:7a:48: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:76:D2:88:A5:7C:C8:06:32:FB:83:79:21:C8:4D:2E:77:23:17 X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/8KJ20oilfMgGMvuDeSHITS53Ixc.roa sbgp-ipAddrBlock: critical IPv4: 210.253.224.0/19 Signature Algorithm: sha256WithRSAEncryption 1f:82:b6:a5:ea:7d:22:ff:e3:29:cc:aa:49:69:94:d3:e0:b0: fa:dc:00:d8:65:71:3d:5b:39:5f:43:65:17:18:75:06:f4:db: 00:a5:ba:5c:a1:78:ff:c5:b3:61:8a:8f:1f:f1:36:0e:82:12: 1d:e4:90:7d:f3:7d:e3:94:60:fa:5a:c1:aa:d4:24:d0:f7:62: a6:c4:5e:09:49:f7:8b:65:3d:5b:a6:cf:1c:b7:da:59:9a:ed: 99:1d:29:0a:a9:6a:d6:c5:1a:e5:a5:94:d9:14:7d:a0:32:5f: 3e:0b:e8:2c:fe:52:f7:33:fe:14:41:ff:e0:fa:40:fc:55:6b: 27:03:de:a4:e2:70:71:3b:e5:30:b2:66:30:9f:22:0f:16:da: 4a:10:3a:23:06:55:ca:ee:65:ce:1d:8c:da:1a:91:11:d7:5d: 5f:16:c9:2c:c0:2b:d4:ec:60:db:5d:21:e4:d2:ce:87:54:10: 99:df:56:fb:7e:90:2f:52:07:9b:ab:68:9a:8b:84:73:fe:c1: eb:10:b9:32:2e:79:4f:fa:09:48:07:cb:0c:6a:55:d7:d8:b6: c7:d0:75:a1:84:01:8a:40:3d:76:9f:a0:ab:34:9a:a9:3f:78: 51:c9:8d:5f:97:01:5a:9c:37:fb:9f:80:fd:01:a9:e0:45:eb: dd:f7:84:32 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNjAzMzEw ODMwMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwQTI3NkQyODhBNTdD QzgwNjMyRkI4Mzc5MjFDODREMkU3NzIzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGxArFYbd9x9X7xIzIWi6/QXU/IztUJfXmHNkubyfQqZPaNWi /lvYn3FLnelNaPWn5f5RDT+gRVfJcNWppObOopjDk/ly/m8ywC87Dro6Iz5OQiAv XuOacoSEfdXrSvfRFn4Htp74anO8Xl2/Z/DnhhCkuRa/Le6pZwDwE9tHfY7nvqiR FnFmvi8wOtdjzBrGwBSfZvPd9/eGvo4h/4OGXIjd3itWM3ev0EI/aRkWEWxkuNHe cw5fXvR/Map9SldM3TfLNo+vU1aZcSf5bZpQyoqEQJI5KI0/Vz0Ige6MbgmTXy/0 Nc5imXFwLc6/2hcpTJXVoZmMTj0riuR6SHNXAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQU8KJ20oilfMgGMvuDeSHITS53IxcwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51 FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC81MC84S0oyMG9pbGZNZ0dNdnVEZVNISVRTNTNJeGMucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0v3gMA0GCSqGSIb3DQEBCwUAA4IBAQAf gral6n0i/+MpzKpJaZTT4LD63ADYZXE9WzlfQ2UXGHUG9NsApbpcoXj/xbNhio8f 8TYOghId5JB9833jlGD6WsGq1CTQ92KmxF4JSfeLZT1bps8ct9pZmu2ZHSkKqWrW xRrlpZTZFH2gMl8+C+gs/lL3M/4UQf/g+kD8VWsnA96k4nBxO+UwsmYwnyIPFtpK EDojBlXK7mXOHYzaGpER111fFskswCvU7GDbXSHk0s6HVBCZ31b7fpAvUgebq2ia i4Rz/sHrELkyLnlP+glIB8sMalXX2LbH0HWhhAGKQD12n6CrNJqpP3hRyY1flwFa nDf7n4D9AangRevd94Qy -----END CERTIFICATE-----Generated at Fri Apr 17 13:38:20 2026 by rpki-client