$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zb5OdjnrfxdADChVmtE0nI6X8sk.roa File: zb5OdjnrfxdADChVmtE0nI6X8sk.roa (raw, json) Hash identifier: wbcTDpktphj68mCLe//gy4EdBcgNuSKm09bIN8NOZmc= Subject key identifier: CD:BE:4E:76:39:EB:7F:17:40:0C:28:55:9A:D1:34:9C:8E:97:F2:C9 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0691 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zb5OdjnrfxdADChVmtE0nI6X8sk.roa Signing time: Tue 31 Mar 2026 07:28:09 +0000 ROA not before: Tue 31 Mar 2026 07:28:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 219.124.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:28:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CDBE4E7639EB7F17400C28559AD1349C8E97F2C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:94:69:54:33:93:33:c0:3f:42:b7:d9:2c: 33:9d:4c:51:75:7c:3f:e1:2b:ec:f0:8f:00:1d:b4: cc:8c:cf:4f:2b:55:ad:5d:7a:03:d2:4a:7a:a6:ac: 60:12:b7:3a:c6:d9:61:2f:ef:3a:c2:b2:5f:46:0b: 7f:99:d9:33:5e:0c:f5:1d:b6:5b:82:dc:bc:72:22: 34:5d:bb:fc:12:da:8c:c3:94:81:77:16:64:7a:c2: 97:f3:d7:03:08:1c:f4:4c:e8:29:5b:15:e3:4b:65: 7b:d1:5d:08:5b:83:32:50:bf:b0:08:8c:df:c1:1c: 95:36:3a:f3:5d:2d:6f:30:6c:9a:4b:8e:1b:d3:14: 23:50:ac:7d:20:70:02:1f:f2:fb:91:9f:89:e6:ee: a5:73:31:74:4c:43:33:15:be:51:de:f2:34:1f:b2: d5:db:f9:cf:3d:0c:da:2c:0b:1c:b1:31:b8:89:5f: 8b:9f:e5:d4:f9:f6:09:f2:b2:bc:51:ce:6a:15:06: 29:6d:e9:35:52:74:6b:28:d8:cd:a9:2e:37:71:2e: e3:34:40:01:e5:68:c9:6a:fc:13:ff:20:96:20:22: 9d:0c:9c:c3:4b:34:78:15:6c:dc:7e:c0:2d:7f:38: a4:fb:03:2d:9e:d1:a8:4b:3d:c0:e3:d9:8b:dd:70: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BE:4E:76:39:EB:7F:17:40:0C:28:55:9A:D1:34:9C:8E:97:F2:C9 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zb5OdjnrfxdADChVmtE0nI6X8sk.roa sbgp-ipAddrBlock: critical IPv4: 219.124.156.0/23 Signature Algorithm: sha256WithRSAEncryption b7:1d:9d:70:a6:9b:83:8d:92:ac:92:23:e8:c8:da:f0:ce:dc: 49:22:15:be:31:88:8f:db:50:15:d4:8d:72:cf:28:d1:a7:73: 0e:3a:46:97:61:d2:80:e9:43:b8:07:2f:78:9c:f2:33:f2:f4: 9d:67:cf:3c:8e:72:53:7e:98:e1:57:1d:02:2c:a2:4f:cf:ec: 70:32:47:8b:7a:db:ff:c8:6b:aa:1b:c0:2b:16:ac:fc:14:47: 2a:26:07:57:3f:c7:49:ef:80:a2:b1:44:ac:06:ec:29:f4:90: 7f:d4:dc:87:2a:ef:91:70:4b:70:80:3c:da:2a:65:1e:ec:5a: 5f:c5:c9:85:ce:a5:f5:25:32:a2:5e:5d:52:d6:47:07:67:8a: 40:25:2a:68:b8:ac:80:54:57:7b:1d:4c:62:3f:e3:a7:5c:8c: 22:8e:1b:85:55:82:a4:ff:49:b8:74:96:67:05:53:fa:ba:81: de:bf:25:62:c8:04:d7:a0:77:8e:43:c4:c7:00:2a:6b:c9:16: 48:92:66:cd:8e:c0:21:c3:b4:51:e2:4f:ec:02:02:a2:b6:5e: f1:94:d8:26:e9:33:08:d8:a4:d2:b7:23:ec:81:e4:e7:e0:69: bc:4f:78:cd:6c:e3:33:47:43:eb:e9:11:e7:14:00:47:56:6e: 56:e1:1c:02 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI4MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENEQkU0RTc2MzlFQjdG MTc0MDBDMjg1NTlBRDEzNDlDOEU5N0YyQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+RpRpVDOTM8A/QrfZLDOdTFF1fD/hK+zwjwAdtMyMz08rVa1d egPSSnqmrGAStzrG2WEv7zrCsl9GC3+Z2TNeDPUdtluC3LxyIjRdu/wS2ozDlIF3 FmR6wpfz1wMIHPRM6ClbFeNLZXvRXQhbgzJQv7AIjN/BHJU2OvNdLW8wbJpLjhvT FCNQrH0gcAIf8vuRn4nm7qVzMXRMQzMVvlHe8jQfstXb+c89DNosCxyxMbiJX4uf 5dT59gnysrxRzmoVBilt6TVSdGso2M2pLjdxLuM0QAHlaMlq/BP/IJYgIp0MnMNL NHgVbNx+wC1/OKT7Ay2e0ahLPcDj2YvdcEA1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUzb5OdjnrfxdADChVmtE0nI6X8skwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L3piNU9kam5yZnhkQURDaFZtdEUwbkk2WDhzay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHbfJwwDQYJKoZIhvcNAQELBQADggEB ALcdnXCmm4ONkqySI+jI2vDO3EkiFb4xiI/bUBXUjXLPKNGncw46Rpdh0oDpQ7gH L3ic8jPy9J1nzzyOclN+mOFXHQIsok/P7HAyR4t62//Ia6obwCsWrPwURyomB1c/ x0nvgKKxRKwG7Cn0kH/U3Icq75FwS3CAPNoqZR7sWl/FyYXOpfUlMqJeXVLWRwdn ikAlKmi4rIBUV3sdTGI/46dcjCKOG4VVgqT/Sbh0lmcFU/q6gd6/JWLIBNegd45D xMcAKmvJFkiSZs2OwCHDtFHiT+wCAqK2XvGU2CbpMwjYpNK3I+yB5OfgabxPeM1s 4zNHQ+vpEecUAEdWblbhHAI= -----END CERTIFICATE-----Generated at Fri Apr 17 03:34:35 2026 by rpki-client