$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/N2i0WMg_BHhLJsc77B3G6iqiLZs.roa File: N2i0WMg_BHhLJsc77B3G6iqiLZs.roa (raw, json) Hash identifier: eqVY+tBfOECP4BkhDpGYgSRkRgXfu4jzXFgAcA1QDak= Subject key identifier: 37:68:B4:58:C8:3F:04:78:4B:26:C7:3B:EC:1D:C6:EA:2A:A2:2D:9B Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Certificate serial: 08 Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/N2i0WMg_BHhLJsc77B3G6iqiLZs.roa Signing time: Thu 26 Mar 2026 00:20:34 +0000 ROA not before: Thu 26 Mar 2026 00:20:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10001 IP address blocks: 61.195.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Validity Not Before: Mar 26 00:20:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3768B458C83F04784B26C73BEC1DC6EA2AA22D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:0f:d1:87:05:70:61:93:ee:7a:43:22:c9: 30:67:aa:a2:a3:2c:aa:a6:84:cc:3e:b3:b3:ec:58: 10:cf:f0:56:bb:f1:a8:6a:8b:dc:60:0b:48:b5:0c: c5:26:d9:4a:24:11:db:41:8a:33:6d:11:12:26:b5: 45:30:b8:a2:27:89:00:d4:bb:fe:20:7e:62:cb:a0: 8f:bb:b3:ae:c1:e9:42:f3:fd:a2:07:0d:b4:e3:2b: 61:50:cf:46:0a:97:43:89:77:6d:ba:52:af:16:6b: 28:03:34:e8:2f:26:ac:cd:f7:53:33:c1:5e:d9:d0: ce:87:8d:6c:f8:59:a2:3f:81:a1:0c:41:4c:e3:6c: 72:6a:dd:70:78:5f:79:e1:75:e8:f9:3b:c0:49:47: ca:c0:96:3f:64:8c:4d:3e:f0:ff:ee:68:c2:c3:25: b6:8e:45:6a:8c:37:24:58:e4:d7:5c:91:f1:e9:9a: aa:e9:85:c2:c7:e5:8f:f2:26:95:1c:9c:f7:e9:e9: a5:75:c9:cf:da:4a:c4:fa:96:5d:f9:19:fa:af:45: 36:58:00:52:19:f3:ed:b2:59:b0:cf:fe:e7:6b:3d: 5b:31:2e:dd:aa:1f:f4:de:83:f5:5b:1a:ff:15:c3: 15:4b:c0:1d:55:8e:7f:f7:93:bc:c4:e6:b0:0f:6f: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:B4:58:C8:3F:04:78:4B:26:C7:3B:EC:1D:C6:EA:2A:A2:2D:9B X509v3 Authority Key Identifier: keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/N2i0WMg_BHhLJsc77B3G6iqiLZs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.240.0/20 Signature Algorithm: sha256WithRSAEncryption 46:36:11:c4:4a:3d:7b:72:bd:53:98:e6:d2:d4:7f:80:c3:15: 1f:a6:5c:1e:15:00:1a:2a:c1:af:7c:58:5e:1a:c0:14:1b:cb: 99:70:46:5d:43:4c:4f:f6:c9:cf:cc:a8:18:b3:40:d9:2f:0f: 3f:8a:9f:98:94:c1:f6:b5:ce:b7:9f:cc:36:02:86:7b:0d:d1: e4:7b:58:23:2f:eb:bb:1f:ef:3c:c7:7c:da:e4:d4:10:ad:11: f2:38:b0:bc:98:c2:7b:9c:bc:84:d5:79:f0:5a:ca:a3:b2:fd: 3c:49:e8:a6:2a:7a:ea:ba:f9:ce:9b:86:25:17:c8:0a:13:26: c9:b6:b6:fc:3f:76:0f:20:b9:3d:28:c4:af:ea:ea:f7:39:02: e3:dd:fb:00:8f:91:10:22:ed:55:fb:56:90:d7:fc:8f:63:43: ab:24:aa:6d:28:e8:00:28:f5:7a:63:45:8a:d3:97:cf:26:79: 2d:8a:7d:67:1d:b8:6f:bb:92:e2:8e:35:3c:22:c3:04:49:9f: b3:28:de:87:a6:2b:9b:8e:31:3a:30:f0:a0:bc:f7:c2:8b:c0: d2:91:91:f8:fd:37:aa:48:c0:3d:82:e5:60:b2:22:31:e0:78: 2e:0a:bd:3f:9e:4f:ff:bc:5b:f0:ec:65:40:d8:af:2d:4e:ef: e9:57:61:03 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTkw QkZENjNGODY3NUI3QjQ0NTYzNjIzRTQyRjcyOTI1NkNBMUU4MB4XDTI2MDMyNjAw MjAzNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzc2OEI0NThDODNGMDQ3 ODRCMjZDNzNCRUMxREM2RUEyQUEyMkQ5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDYD9GHBXBhk+56QyLJMGeqoqMsqqaEzD6zs+xYEM/wVrvxqGqL 3GALSLUMxSbZSiQR20GKM20REia1RTC4oieJANS7/iB+Ysugj7uzrsHpQvP9ogcN tOMrYVDPRgqXQ4l3bbpSrxZrKAM06C8mrM33UzPBXtnQzoeNbPhZoj+BoQxBTONs cmrdcHhfeeF16Pk7wElHysCWP2SMTT7w/+5owsMlto5Faow3JFjk11yR8emaqumF wsflj/ImlRyc9+nppXXJz9pKxPqWXfkZ+q9FNlgAUhnz7bJZsM/+52s9WzEu3aof 9N6D9Vsa/xXDFUvAHVWOf/eTvMTmsA9vxWECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ3aLRYyD8EeEsmxzvsHcbqKqItmzAfBgNVHSMEGDAWgBS5kL/WP4Z1t7RFY2I+ QvcpJWyh6DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDI1L3VaQ18xai1HZGJlMFJXTmlQa0wzS1NWc29lZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VaQ18xai1HZGJlMFJXTmlQa0wzS1NW c29lZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80MjUvTjJpMFdNZ19CSGhMSnNjNzdCM0c2aXFpTFpzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD3D8DANBgkqhkiG9w0BAQsFAAOCAQEARjYRxEo9e3K9U5jm0tR/gMMVH6Zc HhUAGirBr3xYXhrAFBvLmXBGXUNMT/bJz8yoGLNA2S8PP4qfmJTB9rXOt5/MNgKG ew3R5HtYIy/rux/vPMd82uTUEK0R8jiwvJjCe5y8hNV58FrKo7L9PEnopip66rr5 zpuGJRfIChMmyba2/D92DyC5PSjEr+rq9zkC4937AI+RECLtVftWkNf8j2NDqySq bSjoACj1emNFitOXzyZ5LYp9Zx24b7uS4o41PCLDBEmfsyjeh6Yrm44xOjDwoLz3 wovA0pGR+P03qkjAPYLlYLIiMeB4Lgq9P55P/7xb8OxlQNivLU7v6VdhAw== -----END CERTIFICATE-----Generated at Thu Mar 26 22:18:09 2026 by rpki-client