$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/cz4F8QlRcJ7UNTvqAL6S8nUnOxc.roa File: cz4F8QlRcJ7UNTvqAL6S8nUnOxc.roa (raw, json) Hash identifier: 5LaM5jhzPneyiOd1jCv6Bj687mnEG928Qbv9r9e2G4U= Subject key identifier: 73:3E:05:F1:09:51:70:9E:D4:35:3B:EA:00:BE:92:F2:75:27:3B:17 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 068C Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/cz4F8QlRcJ7UNTvqAL6S8nUnOxc.roa Signing time: Tue 31 Mar 2026 07:28:07 +0000 ROA not before: Tue 31 Mar 2026 07:28:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 180.233.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:28:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=733E05F10951709ED4353BEA00BE92F275273B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:83:cf:e6:28:04:aa:a8:f3:ed:d2:0a:80: 2b:c7:eb:1c:df:e2:7c:2c:3a:66:90:3d:47:ea:3d: f5:c9:84:02:6a:6a:1c:4b:6e:00:3f:7d:5b:68:f6: 7b:af:02:a8:93:79:73:24:61:d1:e8:94:8f:9e:26: 9c:26:68:b1:c6:2a:0f:ee:e3:59:61:e0:00:0f:04: fe:21:a9:33:e1:8b:6a:02:60:d2:d0:e8:d5:5a:d8: 42:c6:19:ae:a9:cf:0e:61:a6:e3:a3:98:19:e2:26: bc:b0:b6:d0:55:39:b3:5b:99:71:a8:20:5a:f8:5f: eb:29:89:bf:b5:3b:24:94:e0:63:0f:50:60:6f:ec: c6:42:6b:35:a1:ca:1c:37:0a:93:2f:ef:64:dd:05: 98:27:df:db:72:22:9a:5c:d3:c5:03:20:b4:e3:0d: 7a:24:fe:73:62:b9:eb:fa:49:34:f1:a3:89:ff:61: fc:18:0d:46:3f:e3:27:da:ad:55:bd:09:ea:ab:3b: 0c:48:b9:c3:90:f8:8a:19:cf:b1:a9:c5:32:07:1f: 6f:35:b4:ab:9e:6b:45:83:77:9a:68:88:6b:e3:69: 30:f9:97:7e:b6:38:f1:52:8b:09:5f:8f:96:f6:05: 7b:0d:1b:d8:35:4a:e9:77:23:f1:b7:bc:7c:7d:8e: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3E:05:F1:09:51:70:9E:D4:35:3B:EA:00:BE:92:F2:75:27:3B:17 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/cz4F8QlRcJ7UNTvqAL6S8nUnOxc.roa sbgp-ipAddrBlock: critical IPv4: 180.233.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:17:e0:0e:5d:07:9e:8a:19:76:e2:e6:d5:d2:d3:2a:e7:7d: 86:2a:68:00:cd:2f:98:51:c4:1d:a3:f6:c7:2d:dd:b2:9d:1a: c8:4a:82:d0:ce:2e:52:b1:db:de:2b:66:2e:2a:78:6e:0b:36: 60:34:f6:44:af:ad:b0:de:70:91:d3:c4:23:09:08:e3:2c:af: ab:8f:88:8a:13:23:e7:35:7f:a0:fa:cb:e1:8d:f4:84:b6:da: 2d:73:57:a9:c5:c5:86:45:ac:7a:e6:27:00:14:ec:28:ff:74: 57:9d:c6:a8:de:72:64:4e:4d:c8:7b:d3:db:e1:57:a2:00:85: 15:c7:bf:2b:4a:32:75:86:39:61:9e:92:10:53:54:d8:ba:5f: 37:96:d6:cc:c4:1b:cb:6a:58:e7:dc:4c:b7:ca:d2:86:41:5c: 7a:d8:9e:ed:e4:4f:63:50:9e:b3:c9:6d:01:38:c6:34:9a:6a: 04:7b:d0:e5:df:2f:28:5c:6e:19:3b:fa:74:19:7f:5d:49:88: 4c:9b:bc:42:2a:44:d3:02:7f:5b:d1:b7:09:0b:41:1f:59:21: b1:ac:da:8a:c3:f7:99:fe:8b:f1:b8:2a:11:17:4b:15:8e:ab: 4d:61:1a:84:8d:db:af:d9:f0:16:49:d8:2f:fa:88:91:8f:c2: 8b:91:39:4f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI4MDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczM0UwNUYxMDk1MTcw OUVENDM1M0JFQTAwQkU5MkYyNzUyNzNCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbtIPP5igEqqjz7dIKgCvH6xzf4nwsOmaQPUfqPfXJhAJqahxL bgA/fVto9nuvAqiTeXMkYdHolI+eJpwmaLHGKg/u41lh4AAPBP4hqTPhi2oCYNLQ 6NVa2ELGGa6pzw5hpuOjmBniJrywttBVObNbmXGoIFr4X+spib+1OySU4GMPUGBv 7MZCazWhyhw3CpMv72TdBZgn39tyIppc08UDILTjDXok/nNiuev6STTxo4n/YfwY DUY/4yfarVW9CeqrOwxIucOQ+IoZz7GpxTIHH281tKuea0WDd5poiGvjaTD5l362 OPFSiwlfj5b2BXsNG9g1Sul3I/G3vHx9jiulAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcz4F8QlRcJ7UNTvqAL6S8nUnOxcwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L2N6NEY4UWxSY0o3VU5UdnFBTDZTOG5Vbk94Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS06WAwDQYJKoZIhvcNAQELBQADggEB AEoX4A5dB56KGXbi5tXS0yrnfYYqaADNL5hRxB2j9sct3bKdGshKgtDOLlKx294r Zi4qeG4LNmA09kSvrbDecJHTxCMJCOMsr6uPiIoTI+c1f6D6y+GN9IS22i1zV6nF xYZFrHrmJwAU7Cj/dFedxqjecmROTch709vhV6IAhRXHvytKMnWGOWGekhBTVNi6 XzeW1szEG8tqWOfcTLfK0oZBXHrYnu3kT2NQnrPJbQE4xjSaagR70OXfLyhcbhk7 +nQZf11JiEybvEIqRNMCf1vRtwkLQR9ZIbGs2orD95n+i/G4KhEXSxWOq01hGoSN 26/Z8BZJ2C/6iJGPwouROU8= -----END CERTIFICATE-----Generated at Fri Apr 17 04:35:20 2026 by rpki-client