$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5quW12tMpu8Wyi3K3o3-FxFsm30.roa File: 5quW12tMpu8Wyi3K3o3-FxFsm30.roa (raw, json) Hash identifier: Ue4//jl/9cqYsbIUPKTwMQ+vIT88sFrA+F2h7nTcedw= Subject key identifier: E6:AB:96:D7:6B:4C:A6:EF:16:CA:2D:CA:DE:8D:FE:17:11:6C:9B:7D Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0646 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5quW12tMpu8Wyi3K3o3-FxFsm30.roa Signing time: Tue 31 Mar 2026 07:27:31 +0000 ROA not before: Tue 31 Mar 2026 07:27:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 42.125.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E6AB96D76B4CA6EF16CA2DCADE8DFE17116C9B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ff:1a:58:60:99:cc:c2:02:1d:75:44:cb:d2: e2:e8:cd:ca:3f:f0:08:e8:a2:89:3c:22:0f:e4:ce: 92:31:05:51:94:79:7d:e6:c1:d4:3f:6e:81:2b:1f: 12:19:9e:c7:c9:e1:1c:d6:11:01:53:ea:7a:63:53: 3f:82:f5:7c:19:9d:a2:9a:fa:4c:8d:87:02:fd:fb: a1:c4:c4:e4:a7:96:49:f2:a5:1a:2b:ef:f8:b6:59: d3:96:2c:ef:28:18:55:97:1a:85:7e:d9:22:58:83: 41:bb:90:0b:9c:c7:93:da:64:80:13:f1:e1:0b:bf: 86:2f:21:bd:28:63:24:ca:10:36:80:16:97:5b:4d: 8e:a3:fc:1c:8e:6d:9f:13:3c:4e:36:f0:98:5f:da: 4a:4c:12:c5:20:d4:00:74:c2:d6:db:c6:43:c4:57: 56:38:f2:41:cf:8c:eb:ce:45:6a:d0:06:a2:47:60: 2b:4e:06:ce:12:0e:d6:a2:c0:c2:7a:35:c5:34:2b: 02:da:82:90:05:42:d8:08:b6:c3:b1:08:2d:8c:f6: cf:b4:97:d9:93:e6:f3:48:42:35:05:6a:88:c4:53: 67:f8:53:a1:ed:bf:fa:9d:41:1c:de:2a:72:c3:2b: b0:75:e3:08:8e:d8:a9:83:65:12:f2:49:e0:bd:0a: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:96:D7:6B:4C:A6:EF:16:CA:2D:CA:DE:8D:FE:17:11:6C:9B:7D X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5quW12tMpu8Wyi3K3o3-FxFsm30.roa sbgp-ipAddrBlock: critical IPv4: 42.125.245.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8c:f4:d7:be:e9:81:1d:4e:9c:85:54:5d:27:3a:65:7d:b9: 36:88:2b:a9:a2:a9:80:af:e0:56:19:f9:f0:0c:44:26:6b:65: 32:3d:5b:ec:c3:1a:71:a7:d2:a9:24:42:02:bf:46:ee:17:4b: 01:63:b3:62:bc:53:8a:20:cc:88:d0:5a:6d:21:d9:1a:17:82: 97:41:67:36:45:c0:16:c5:c6:c8:fb:2e:21:5f:63:5e:50:77: 26:e9:75:e0:5c:09:d3:9a:61:ac:f5:c9:b1:d7:be:bd:cb:17: d5:3e:79:7a:e7:5f:2a:85:3a:1d:d8:17:b4:f5:eb:05:3f:57: ac:31:66:ef:70:6c:34:27:36:c6:89:cf:78:aa:dc:74:0b:1c: ab:23:04:77:5c:25:3d:8f:b5:62:94:40:a1:49:39:7c:7f:72: 79:50:25:ff:08:c2:9b:8d:0e:67:32:7d:dd:5b:dd:4d:54:43: 6f:0e:b3:74:1c:72:55:e6:14:3e:ac:99:2a:31:55:e4:a7:6d: e2:fe:20:ac:26:e2:9f:ef:db:4d:dc:22:12:8b:2d:35:a1:31: 32:8d:98:53:b5:da:55:83:d3:34:5c:b8:bd:50:72:8c:8b:21: 5a:1d:4a:3a:8f:44:8e:59:6b:f5:3a:72:02:36:0c:76:cf:ac: 69:4b:ef:46 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2QUI5NkQ3NkI0Q0E2 RUYxNkNBMkRDQURFOERGRTE3MTE2QzlCN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq/xpYYJnMwgIddUTL0uLozco/8Ajoook8Ig/kzpIxBVGUeX3m wdQ/boErHxIZnsfJ4RzWEQFT6npjUz+C9XwZnaKa+kyNhwL9+6HExOSnlknypRor 7/i2WdOWLO8oGFWXGoV+2SJYg0G7kAucx5PaZIAT8eELv4YvIb0oYyTKEDaAFpdb TY6j/ByObZ8TPE428Jhf2kpMEsUg1AB0wtbbxkPEV1Y48kHPjOvORWrQBqJHYCtO Bs4SDtaiwMJ6NcU0KwLagpAFQtgItsOxCC2M9s+0l9mT5vNIQjUFaojEU2f4U6Ht v/qdQRzeKnLDK7B14wiO2KmDZRLySeC9CqCZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU5quW12tMpu8Wyi3K3o3+FxFsm30wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1LzVxdVcxMnRNcHU4V3lpM0szbzMtRnhGc20zMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAqffUwDQYJKoZIhvcNAQELBQADggEB ADSM9Ne+6YEdTpyFVF0nOmV9uTaIK6miqYCv4FYZ+fAMRCZrZTI9W+zDGnGn0qkk QgK/Ru4XSwFjs2K8U4ogzIjQWm0h2RoXgpdBZzZFwBbFxsj7LiFfY15QdybpdeBc CdOaYaz1ybHXvr3LF9U+eXrnXyqFOh3YF7T16wU/V6wxZu9wbDQnNsaJz3iq3HQL HKsjBHdcJT2PtWKUQKFJOXx/cnlQJf8IwpuNDmcyfd1b3U1UQ28Os3QcclXmFD6s mSoxVeSnbeL+IKwm4p/v203cIhKLLTWhMTKNmFO12lWD0zRcuL1QcoyLIVodSjqP RI5Za/U6cgI2DHbPrGlL70Y= -----END CERTIFICATE-----Generated at Fri Apr 17 04:35:04 2026 by rpki-client