$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/LwlTXbaWfviIOA_XxLRl_FqEBRY.roa File: LwlTXbaWfviIOA_XxLRl_FqEBRY.roa (raw, json) Hash identifier: Dj2kuMUvgjrWvbaSfjOsO6fmiNZ3NllQpMbQv4qTmxo= Subject key identifier: 2F:09:53:5D:B6:96:7E:F8:88:38:0F:D7:C4:B4:65:FC:5A:84:05:16 Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: A9 Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/LwlTXbaWfviIOA_XxLRl_FqEBRY.roa Signing time: Tue 31 Mar 2026 07:38:49 +0000 ROA not before: Tue 31 Mar 2026 07:38:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9621 IP address blocks: 211.120.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Mar 31 07:38:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2F09535DB6967EF888380FD7C4B465FC5A840516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:c0:8a:c2:e0:0a:d2:fa:b2:b5:be:3d:0f: 06:cf:dd:94:24:a9:d4:06:74:62:82:ea:b8:a4:01: 48:7e:21:75:28:97:1c:64:b2:99:5e:cd:5e:0d:a7: a5:88:58:67:79:ac:5f:2e:85:d1:70:b9:b3:26:48: 50:45:01:fc:63:e1:54:fb:d0:9b:0b:53:3b:c6:e3: d7:ac:80:6b:c1:79:b5:94:5e:ee:97:9b:84:8a:ba: 11:32:86:21:02:d4:fb:e7:7c:52:dc:4c:e5:9c:83: 37:2e:81:9f:f9:22:d9:89:d2:13:5c:ef:31:14:c0: 2b:2f:75:96:94:dd:d4:b0:93:5d:43:18:d0:1f:8c: 62:60:69:0f:db:ff:29:c7:4f:f0:14:9c:46:31:88: 1a:de:7a:12:4e:c6:00:b1:14:13:56:e9:66:a7:84: 25:d8:2f:d3:96:59:06:14:04:ea:25:8c:75:e9:b3: 75:81:ce:17:ed:31:c9:12:8c:73:71:db:e1:d0:f2: 57:09:c7:81:a4:0b:5f:40:1f:a5:47:68:db:2e:b5: f9:ad:31:4b:a0:b1:ab:f5:ea:ae:eb:84:60:d6:43: f3:10:03:a2:aa:a3:e5:49:2d:4b:44:89:31:21:48: 94:d1:a0:3f:41:fb:e3:12:02:cd:4d:8c:04:c2:b2: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:09:53:5D:B6:96:7E:F8:88:38:0F:D7:C4:B4:65:FC:5A:84:05:16 X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/LwlTXbaWfviIOA_XxLRl_FqEBRY.roa sbgp-ipAddrBlock: critical IPv4: 211.120.224.0/20 Signature Algorithm: sha256WithRSAEncryption 04:8f:4b:df:89:f1:e1:78:6c:35:47:bb:55:8d:be:8b:70:fc: 96:7d:55:d5:ea:04:36:bb:25:00:57:d4:42:37:89:4f:89:cf: 8d:fd:84:ac:49:d0:95:98:d7:83:5c:51:d1:d1:ad:34:ac:e1: a5:d7:52:e4:bb:91:35:25:54:89:da:54:4a:80:ee:66:c7:64: 83:a1:46:41:2d:a5:1d:e2:38:3a:04:83:a0:89:fc:4c:2f:89: ef:3b:37:e6:6e:8b:bf:23:5f:38:4e:96:03:47:88:aa:9b:4c: f1:c6:9b:b0:9a:11:ff:b5:9d:07:17:d4:0c:67:66:2a:ac:62: 13:e1:cb:af:47:35:05:02:ec:97:a0:65:6e:8a:49:bb:40:00: da:42:90:0a:8a:4d:06:10:f3:a7:37:6c:37:b9:cf:de:52:3b: b1:95:3a:eb:56:5c:f0:e8:6a:19:8a:a0:38:27:f7:ba:ca:54: d2:d1:be:f8:5d:07:43:91:da:16:ed:8a:98:4b:e2:4f:25:b1: e9:25:60:a4:fe:5e:0b:2a:9c:7e:7d:a9:16:44:5a:dc:8f:2b: 9c:23:20:21:19:a4:5f:a7:84:d5:80:4a:87:5c:ab:e5:16:23: 8f:8c:f7:3b:35:ef:a4:1a:9a:cc:e9:02:a8:25:94:de:cd:ea: c2:92:ec:91 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNjAzMzEw NzM4NDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGMDk1MzVEQjY5NjdF Rjg4ODM4MEZEN0M0QjQ2NUZDNUE4NDA1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCHcCKwuAK0vqytb49DwbP3ZQkqdQGdGKC6rikAUh+IXUolxxk splezV4Np6WIWGd5rF8uhdFwubMmSFBFAfxj4VT70JsLUzvG49esgGvBebWUXu6X m4SKuhEyhiEC1PvnfFLcTOWcgzcugZ/5ItmJ0hNc7zEUwCsvdZaU3dSwk11DGNAf jGJgaQ/b/ynHT/AUnEYxiBreehJOxgCxFBNW6WanhCXYL9OWWQYUBOoljHXps3WB zhftMckSjHNx2+HQ8lcJx4GkC19AH6VHaNsutfmtMUugsav16q7rhGDWQ/MQA6Kq o+VJLUtEiTEhSJTRoD9B++MSAs1NjATCsnEBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQULwlTXbaWfviIOA/XxLRl/FqEBRYwHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk 5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4 UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvODk3L0x3bFRYYmFXZnZpSU9BX1h4TFJsX0ZxRUJSWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATTeOAwDQYJKoZIhvcNAQELBQADggEB AASPS9+J8eF4bDVHu1WNvotw/JZ9VdXqBDa7JQBX1EI3iU+Jz439hKxJ0JWY14Nc UdHRrTSs4aXXUuS7kTUlVInaVEqA7mbHZIOhRkEtpR3iODoEg6CJ/Ewvie87N+Zu i78jXzhOlgNHiKqbTPHGm7CaEf+1nQcX1AxnZiqsYhPhy69HNQUC7JegZW6KSbtA ANpCkAqKTQYQ86c3bDe5z95SO7GVOutWXPDoahmKoDgn97rKVNLRvvhdB0OR2hbt iphL4k8lseklYKT+XgsqnH59qRZEWtyPK5wjICEZpF+nhNWASodcq+UWI4+M9zs1 76QamszpAqgllN7N6sKS7JE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:11:21 2026 by rpki-client