$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ip1fqmNtc4Fu-wG1AW9CQ-keJwA.roa File: Ip1fqmNtc4Fu-wG1AW9CQ-keJwA.roa (raw, json) Hash identifier: Kw3atvuv+Y7FWYNn+PNB6TRPkC2bWlBiozho7YojKlw= Subject key identifier: 22:9D:5F:AA:63:6D:73:81:6E:FB:01:B5:01:6F:42:43:E9:1E:27:00 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 06A7 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ip1fqmNtc4Fu-wG1AW9CQ-keJwA.roa Signing time: Tue 31 Mar 2026 07:28:20 +0000 ROA not before: Tue 31 Mar 2026 07:28:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.216.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:28:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=229D5FAA636D73816EFB01B5016F4243E91E2700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:16:bd:68:72:51:38:01:e3:d4:7b:26:fd:7c: 17:32:03:88:74:ff:c7:57:a2:c4:d0:27:56:9b:58: cd:d4:24:5f:29:03:84:2a:6e:16:e4:7b:42:31:26: 61:73:51:0d:ff:d5:00:c6:e7:b8:4e:8e:be:cc:72: ac:9b:fd:e7:5b:ed:e5:ed:b5:8f:3e:bf:b7:da:b1: be:55:12:4a:3c:90:93:f3:75:a2:05:a0:21:b5:7c: 68:88:fe:ae:bb:a3:be:48:a2:be:f1:0f:17:5d:94: da:89:56:13:55:d6:39:60:25:e1:d2:08:5f:ef:9c: a1:9f:26:26:de:19:70:5a:45:df:28:c2:08:ff:0d: 27:91:1b:71:6b:da:4d:60:72:cd:cc:cc:77:1d:70: 39:80:7e:59:42:cd:90:0c:69:ce:5d:fa:b9:03:e0: fa:49:cc:73:ea:5a:d2:ab:53:86:db:17:db:f8:15: 14:b3:b5:2b:f1:0d:32:01:73:27:45:f5:17:3c:69: 9a:c8:21:cb:7b:d6:06:14:07:15:1f:e0:2c:e3:55: 10:3e:ca:6e:29:bc:1e:6c:c0:51:de:50:df:22:f2: db:92:87:3b:62:b8:d7:79:b4:37:09:93:bf:3f:8f: da:bf:0f:a1:74:b8:8f:8b:fb:b6:2e:17:23:02:cc: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:5F:AA:63:6D:73:81:6E:FB:01:B5:01:6F:42:43:E9:1E:27:00 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ip1fqmNtc4Fu-wG1AW9CQ-keJwA.roa sbgp-ipAddrBlock: critical IPv4: 220.216.48.0/21 Signature Algorithm: sha256WithRSAEncryption 70:23:0a:2a:20:2d:29:fd:36:c0:be:53:ac:2d:4f:19:19:97: 79:65:7e:47:92:be:02:7b:f7:3e:be:37:6a:dd:79:e2:b5:61: 59:1e:7e:1d:5d:d4:58:e9:c5:a8:bb:9c:8d:ad:31:b1:93:db: 18:46:98:d9:94:c6:59:fa:57:c7:95:2f:e1:14:1f:76:4e:ba: f0:c1:10:08:75:34:44:da:d5:f5:44:cd:22:5a:51:bc:69:ba: 44:2c:70:a7:22:0b:ff:76:fa:0d:89:0c:41:96:0f:cb:52:d0: fa:28:2a:24:29:6e:5d:53:a9:dc:a5:f3:ae:0b:3c:46:dd:93: 9f:35:72:c9:bd:0b:05:fb:19:57:52:f5:a4:1b:ef:e1:df:25: 77:0c:3d:be:b3:84:bb:91:bb:40:29:b2:7a:dc:5c:a3:c0:3b: 13:c4:08:4b:26:93:18:2d:ae:e4:28:ae:27:6e:56:a9:ab:4c: c0:1d:2a:47:4f:0d:80:84:84:bb:8d:ab:1e:2a:be:b4:3d:34: 76:4a:1e:8c:00:d1:3f:ff:1a:c1:31:52:9b:32:9b:95:82:83: 72:20:21:2e:98:c1:af:50:73:a2:0a:61:16:e4:84:a9:01:74: 2f:0e:34:3a:a8:18:aa:cf:3b:0e:8e:26:68:69:2c:00:14:26: 27:dd:45:f2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI4MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyOUQ1RkFBNjM2RDcz ODE2RUZCMDFCNTAxNkY0MjQzRTkxRTI3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlFr1oclE4AePUeyb9fBcyA4h0/8dXosTQJ1abWM3UJF8pA4Qq bhbke0IxJmFzUQ3/1QDG57hOjr7Mcqyb/edb7eXttY8+v7fasb5VEko8kJPzdaIF oCG1fGiI/q67o75Ior7xDxddlNqJVhNV1jlgJeHSCF/vnKGfJibeGXBaRd8owgj/ DSeRG3Fr2k1gcs3MzHcdcDmAfllCzZAMac5d+rkD4PpJzHPqWtKrU4bbF9v4FRSz tSvxDTIBcydF9Rc8aZrIIct71gYUBxUf4CzjVRA+ym4pvB5swFHeUN8i8tuShzti uNd5tDcJk78/j9q/D6F0uI+L+7YuFyMCzKwfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIp1fqmNtc4Fu+wG1AW9CQ+keJwAwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L0lwMWZxbU50YzRGdS13RzFBVzlDUS1rZUp3QS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPc2DAwDQYJKoZIhvcNAQELBQADggEB AHAjCiogLSn9NsC+U6wtTxkZl3llfkeSvgJ79z6+N2rdeeK1YVkefh1d1Fjpxai7 nI2tMbGT2xhGmNmUxln6V8eVL+EUH3ZOuvDBEAh1NETa1fVEzSJaUbxpukQscKci C/92+g2JDEGWD8tS0PooKiQpbl1Tqdyl864LPEbdk581csm9CwX7GVdS9aQb7+Hf JXcMPb6zhLuRu0ApsnrcXKPAOxPECEsmkxgtruQoriduVqmrTMAdKkdPDYCEhLuN qx4qvrQ9NHZKHowA0T//GsExUpsym5WCg3IgIS6Ywa9Qc6IKYRbkhKkBdC8ONDqo GKrPOw6OJmhpLAAUJifdRfI= -----END CERTIFICATE-----Generated at Fri Apr 17 04:34:20 2026 by rpki-client