$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/XzePmIZ8JFWbdNQfxnAqJ4MsSc8.roa File: XzePmIZ8JFWbdNQfxnAqJ4MsSc8.roa (raw, json) Hash identifier: BjDCXAkFjJpj8z/8pqVkrvcjpYQBawB6ijEElaHsAUU= Subject key identifier: 5F:37:8F:98:86:7C:24:55:9B:74:D4:1F:C6:70:2A:27:83:2C:49:CF Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 7F Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/XzePmIZ8JFWbdNQfxnAqJ4MsSc8.roa Signing time: Tue 31 Mar 2026 07:32:51 +0000 ROA not before: Tue 31 Mar 2026 07:32:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23818 IP address blocks: 203.79.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 31 07:32:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5F378F98867C24559B74D41FC6702A27832C49CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:ca:78:58:6d:d0:9e:ef:14:f9:9a:a9:da: 11:9d:85:ff:d3:39:27:31:33:7c:9e:54:0e:03:7a: b5:6a:2b:17:a6:bc:fa:63:8c:69:d5:0a:f4:c3:7a: 7b:75:aa:92:f2:2d:c2:cf:4c:8b:e1:62:21:07:34: 69:65:45:c1:0e:a1:c6:b1:79:d6:ee:7e:be:16:49: e8:0f:e4:6d:40:16:17:37:79:bd:26:a3:f8:bb:3e: ab:b3:51:b9:d9:ca:51:57:b6:98:e9:a2:ac:6b:47: e7:f4:05:37:7d:b9:ca:39:f5:62:a6:49:54:83:c1: b2:e6:da:e2:60:18:9c:8e:bb:30:d8:f1:1d:95:7e: 86:34:34:f5:a3:a8:84:36:6a:75:42:f6:ec:e3:40: d7:a3:e5:16:0c:3f:5f:a4:3b:db:1b:2a:a0:7d:f0: 6d:c3:c5:e6:f8:a0:05:c8:da:e4:5b:40:a3:d9:01: de:5f:93:3a:7c:80:ba:12:59:57:c2:50:0c:d7:cc: d1:08:ec:78:c9:23:82:7f:c7:01:d1:f9:97:0f:bb: e8:23:05:f2:03:79:e2:49:e9:c9:cd:ba:b9:9a:5b: 4f:23:58:21:ce:55:1e:7e:98:cb:c3:00:3f:76:f1: 90:9f:17:2f:51:6d:8d:79:7e:94:06:14:97:16:de: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:37:8F:98:86:7C:24:55:9B:74:D4:1F:C6:70:2A:27:83:2C:49:CF X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/XzePmIZ8JFWbdNQfxnAqJ4MsSc8.roa sbgp-ipAddrBlock: critical IPv4: 203.79.60.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:c7:6b:c1:1c:a7:25:5f:a8:bc:df:3a:54:07:7f:92:9c:f8: 6b:85:4e:06:66:6b:ef:32:82:9e:cc:2d:e7:c2:a9:0d:b6:3b: 54:98:93:df:a0:5c:a1:08:7e:8e:d7:50:b4:f1:9a:1a:19:1c: 78:8c:20:53:5e:0b:81:65:24:1c:2e:de:41:87:d1:35:94:e7: b1:1a:e6:b5:97:61:48:07:a8:a8:82:86:7d:39:6d:a1:5e:55: 45:f5:5d:81:47:45:83:7f:6f:1b:1d:dc:a1:5e:e8:28:b3:3c: 87:9d:e5:9e:59:8e:73:fe:f8:84:2b:c4:0f:20:ab:9b:3d:fd: bb:e4:63:e3:69:6e:a8:03:2e:3b:7a:ff:33:f9:e0:96:d3:f1: e6:13:67:4e:48:7a:21:12:bf:e1:b6:68:61:d9:4b:ff:ec:ce: 1b:18:b5:6c:10:74:35:93:38:a5:5e:f6:e1:00:26:da:d0:40: 9c:55:1b:87:f3:39:38:55:81:d9:de:5c:e5:3c:ab:44:f3:f2: a5:65:05:f9:e6:49:e1:13:1a:80:72:8b:b8:dd:ce:9f:6f:ca: ed:fc:89:55:19:a8:14:af:44:6a:2f:b2:7b:45:09:b4:9d:cd: 6c:10:3c:df:be:53:12:4d:6c:8a:73:68:f4:45:d2:af:26:84: 9a:45:d2:5b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI2MDMzMTA3 MzI1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUYzNzhGOTg4NjdDMjQ1 NTlCNzRENDFGQzY3MDJBMjc4MzJDNDlDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMXaynhYbdCe7xT5mqnaEZ2F/9M5JzEzfJ5UDgN6tWorF6a8+mOM adUK9MN6e3WqkvItws9Mi+FiIQc0aWVFwQ6hxrF51u5+vhZJ6A/kbUAWFzd5vSaj +Ls+q7NRudnKUVe2mOmirGtH5/QFN325yjn1YqZJVIPBsuba4mAYnI67MNjxHZV+ hjQ09aOohDZqdUL27ONA16PlFgw/X6Q72xsqoH3wbcPF5vigBcja5FtAo9kB3l+T OnyAuhJZV8JQDNfM0QjseMkjgn/HAdH5lw+76CMF8gN54knpyc26uZpbTyNYIc5V Hn6Yy8MAP3bxkJ8XL1FtjXl+lAYUlxbeH6MCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRfN4+YhnwkVZt01B/GcCongyxJzzAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84ODMvWHplUG1JWjhKRldiZE5RZnhuQXFKNE1zU2M4LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtPPDANBgkqhkiG9w0BAQsFAAOCAQEA bsdrwRynJV+ovN86VAd/kpz4a4VOBmZr7zKCnswt58KpDbY7VJiT36BcoQh+jtdQ tPGaGhkceIwgU14LgWUkHC7eQYfRNZTnsRrmtZdhSAeoqIKGfTltoV5VRfVdgUdF g39vGx3coV7oKLM8h53lnlmOc/74hCvEDyCrmz39u+Rj42luqAMuO3r/M/ngltPx 5hNnTkh6IRK/4bZoYdlL/+zOGxi1bBB0NZM4pV724QAm2tBAnFUbh/M5OFWB2d5c 5TyrRPPypWUF+eZJ4RMagHKLuN3On2/K7fyJVRmoFK9Eai+ye0UJtJ3NbBA8375T Ek1sinNo9EXSryaEmkXSWw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:11:53 2026 by rpki-client