$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/hqz2wz1TveBXFLzdGS4etD2rQ_w.roa File: hqz2wz1TveBXFLzdGS4etD2rQ_w.roa (raw, json) Hash identifier: xFcOOqMGUgkrVVzAyQFYMeu37eQlNxfj0T1S2TuNk+8= Subject key identifier: 86:AC:F6:C3:3D:53:BD:E0:57:14:BC:DD:19:2E:1E:B4:3D:AB:43:FC Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 5C Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/hqz2wz1TveBXFLzdGS4etD2rQ_w.roa Signing time: Tue 31 Mar 2026 07:32:02 +0000 ROA not before: Tue 31 Mar 2026 07:32:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24289 IP address blocks: 103.18.60.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Mar 31 07:32:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=86ACF6C33D53BDE05714BCDD192E1EB43DAB43FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:e5:79:a4:b4:55:7d:85:62:0b:5b:22:4a: f8:da:7c:b6:48:49:28:2b:bf:9e:c2:98:83:bd:8e: 3a:97:5b:c9:2d:f6:f9:5f:f1:98:f6:28:75:47:db: cd:52:72:f2:20:10:00:28:47:0c:38:f5:77:8f:ee: 2a:93:07:65:ef:a4:90:44:32:30:5a:ff:2a:87:a4: e7:3b:06:f2:cb:54:60:0f:03:d3:6c:b5:bc:98:4e: a1:4f:af:df:50:0c:f8:ef:a2:f6:7d:e8:40:4c:e4: 92:fa:78:8b:b4:66:54:d7:f5:70:54:31:a5:19:a6: 13:36:f8:0c:86:e4:a8:f4:de:e2:e7:8e:2a:c0:88: c9:71:9f:94:58:7f:51:4d:26:9d:5c:ee:c2:5d:5f: 9c:8a:74:f1:f0:fe:17:8f:8b:88:2c:ad:6d:ad:b8: ab:62:75:3e:94:e5:79:b6:6a:b9:17:32:32:8b:16: 62:ba:de:15:5f:16:fb:85:bf:8c:a7:2b:91:80:19: 60:48:54:73:db:7b:ec:bb:08:f5:aa:ee:9f:2b:98: ef:6f:90:a6:07:b8:a7:38:8a:3b:bf:10:d7:17:fc: 0d:b0:57:07:73:df:71:9f:b9:3d:1b:d4:98:2b:77: 32:69:2f:91:8e:9c:3f:cd:7f:79:59:b1:ea:f6:f8: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AC:F6:C3:3D:53:BD:E0:57:14:BC:DD:19:2E:1E:B4:3D:AB:43:FC X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/hqz2wz1TveBXFLzdGS4etD2rQ_w.roa sbgp-ipAddrBlock: critical IPv4: 103.18.60.0/22 Signature Algorithm: sha256WithRSAEncryption 52:6f:fb:7c:64:11:50:f2:d5:07:8e:5d:2e:3d:57:e9:d6:b7: 80:4c:31:30:ef:e4:85:5d:45:2a:27:be:65:3f:bb:96:dd:0c: 3f:cd:1c:2b:7a:64:e6:be:01:70:27:f4:40:5a:b3:c3:a9:56: 96:10:83:86:06:77:06:59:63:c8:3f:7e:01:6c:3b:c9:e5:b8: cc:99:63:88:f7:5e:c1:c4:5f:25:74:62:75:db:4a:10:db:bb: 5f:6c:4e:16:a8:9e:6f:d1:1a:a4:b7:9b:46:4f:0a:22:ec:5c: 24:84:74:01:52:22:39:5d:ab:a6:56:62:dc:c3:ec:43:7e:e3: 4a:a0:dd:dc:a1:69:12:7e:62:94:5c:f4:a5:ec:b7:91:74:b2: 4a:24:48:e3:95:f6:23:5a:b9:75:2d:b1:96:dd:df:4e:d0:07: 0a:0a:86:ce:d1:90:2d:c5:f1:aa:a8:44:9e:c1:94:d3:90:93: dc:e3:48:4f:53:e2:17:fe:4f:33:fe:d5:0f:a8:ba:09:93:14: 35:29:26:49:25:7b:f8:ed:81:fd:42:3c:6c:88:46:81:9c:8c: 82:95:dd:b2:df:2e:68:73:ab:72:15:fa:d3:9e:31:c9:9c:f1: c6:66:7b:31:a5:c5:6e:87:59:ac:5e:fa:8d:8a:38:dc:4e:2c: b6:56:ee:ec -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI2MDMzMTA3 MzIwMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODZBQ0Y2QzMzRDUzQkRF MDU3MTRCQ0REMTkyRTFFQjQzREFCNDNGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKCM5XmktFV9hWILWyJK+Np8tkhJKCu/nsKYg72OOpdbyS32+V/x mPYodUfbzVJy8iAQAChHDDj1d4/uKpMHZe+kkEQyMFr/Koek5zsG8stUYA8D02y1 vJhOoU+v31AM+O+i9n3oQEzkkvp4i7RmVNf1cFQxpRmmEzb4DIbkqPTe4ueOKsCI yXGflFh/UU0mnVzuwl1fnIp08fD+F4+LiCytba24q2J1PpTlebZquRcyMosWYrre FV8W+4W/jKcrkYAZYEhUc9t77LsI9arunyuY72+Qpge4pziKO78Q1xf8DbBXB3Pf cZ+5PRvUmCt3MmkvkY6cP81/eVmx6vb4MCUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSGrPbDPVO94FcUvN0ZLh60PatD/DAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MjUvaHF6Mnd6MVR2ZUJYRkx6ZEdTNGV0RDJyUV93LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcSPDANBgkqhkiG9w0BAQsFAAOCAQEA Um/7fGQRUPLVB45dLj1X6da3gEwxMO/khV1FKie+ZT+7lt0MP80cK3pk5r4BcCf0 QFqzw6lWlhCDhgZ3BlljyD9+AWw7yeW4zJljiPdewcRfJXRiddtKENu7X2xOFqie b9EapLebRk8KIuxcJIR0AVIiOV2rplZi3MPsQ37jSqDd3KFpEn5ilFz0pey3kXSy SiRI45X2I1q5dS2xlt3fTtAHCgqGztGQLcXxqqhEnsGU05CT3ONIT1PiF/5PM/7V D6i6CZMUNSkmSSV7+O2B/UI8bIhGgZyMgpXdst8uaHOrchX6054xyZzxxmZ7MaXF bodZrF76jYo43E4stlbu7A== -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:06 2026 by rpki-client