$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/VNyOZRqkCVbcZ_tMNlhtHrbrH0c.roa File: VNyOZRqkCVbcZ_tMNlhtHrbrH0c.roa (raw, json) Hash identifier: wDixnJoARTC4wU7rtCu4zEKcP4L8KL+Bd1x5Ic15imM= Subject key identifier: 54:DC:8E:65:1A:A4:09:56:DC:67:FB:4C:36:58:6D:1E:B6:EB:1F:47 Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Certificate serial: 03 Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/VNyOZRqkCVbcZ_tMNlhtHrbrH0c.roa Signing time: Mon 16 Mar 2026 02:43:05 +0000 ROA not before: Mon 16 Mar 2026 02:43:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10001 IP address blocks: 49.128.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Validity Not Before: Mar 16 02:43:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=54DC8E651AA40956DC67FB4C36586D1EB6EB1F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:05:33:43:64:ab:5f:b2:d6:4e:2a:4a:d0: bd:df:60:f5:5a:e3:3a:53:96:99:e1:52:6b:e4:e8: 0e:cb:cf:07:23:a1:cf:8b:04:a4:6a:54:fd:5b:e7: 67:b7:4d:ef:4a:6b:3a:b1:1d:28:8e:1a:5a:d5:eb: eb:42:da:12:28:1f:88:b3:1e:1b:42:36:e1:99:aa: dc:c0:a1:7d:8b:3a:a7:27:11:e1:55:91:88:c6:3b: 33:d3:be:a8:83:d5:a1:97:f8:e7:95:1b:5b:e8:67: e6:df:15:97:84:c8:c8:20:bf:da:7d:1c:ca:a5:05: e8:e0:ce:e2:cc:71:f5:83:81:9a:6a:e4:9c:f7:97: 01:b5:8a:14:f4:17:c1:38:a3:77:46:39:38:9a:63: 28:bd:f4:7a:27:df:6a:e9:a1:b6:b8:42:8d:a4:4f: d7:57:a8:72:bb:e1:37:fe:8c:06:aa:f4:b1:9e:3a: 1e:71:e7:96:2f:92:42:bd:0e:fb:35:e7:34:19:4c: 77:43:03:1e:83:c2:08:45:95:e8:a7:27:a6:ee:6c: 14:39:fd:6d:e8:a3:c0:65:ef:34:4a:90:5d:7e:95: 0b:d3:a9:ea:58:a8:a3:7a:67:1a:18:99:ca:d6:c2: 86:f4:04:af:31:e3:b6:cf:b2:71:83:97:a7:80:3c: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:8E:65:1A:A4:09:56:DC:67:FB:4C:36:58:6D:1E:B6:EB:1F:47 X509v3 Authority Key Identifier: keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/VNyOZRqkCVbcZ_tMNlhtHrbrH0c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.128.0/19 Signature Algorithm: sha256WithRSAEncryption 77:39:1d:00:23:a4:6d:68:57:79:1c:11:31:de:e0:e2:60:27: e0:a0:8e:6e:4a:93:3a:05:74:ed:86:58:56:e3:93:3d:a8:ac: 46:bb:fc:35:86:30:e7:97:ce:9e:e0:3e:86:83:11:b6:ee:22: 24:5f:d6:68:36:49:81:a2:aa:98:5a:4a:79:4e:04:a1:dd:e5: b1:6e:4f:50:33:4a:d1:09:1d:84:9a:d9:d3:29:f9:c1:a2:93: 9e:5e:10:b3:f7:6f:5e:b2:12:92:60:9a:5b:06:ab:e2:2e:30: 0c:b6:8f:e6:2f:a5:1f:d8:e0:c4:c8:74:ed:08:73:8d:7e:2b: f2:d6:43:05:a7:3c:b0:61:3c:d3:c2:1d:b8:68:58:f7:cf:52: 97:6a:98:9e:7c:8c:ef:67:d0:c9:60:db:a7:dd:c7:58:6d:32: 1d:4f:e3:51:da:e3:92:e7:5d:ac:06:ab:e0:a5:e0:d9:7d:bf: 22:67:cb:e6:e2:77:21:c3:f5:ee:df:1d:7d:54:00:56:69:49: fd:de:cf:a7:5b:c5:1c:76:00:ac:df:1a:ea:af:d8:2f:57:2b: db:fd:de:07:50:d2:45:0d:53:e9:1d:2b:a6:60:e7:b5:52:64: 18:3a:51:ca:15:7d:ad:4b:23:3c:f2:f7:44:05:7e:e0:67:72: 01:f7:87:56 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTkw QkZENjNGODY3NUI3QjQ0NTYzNjIzRTQyRjcyOTI1NkNBMUU4MB4XDTI2MDMxNjAy NDMwNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTREQzhFNjUxQUE0MDk1 NkRDNjdGQjRDMzY1ODZEMUVCNkVCMUY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANGEBTNDZKtfstZOKkrQvd9g9VrjOlOWmeFSa+ToDsvPByOhz4sE pGpU/VvnZ7dN70prOrEdKI4aWtXr60LaEigfiLMeG0I24Zmq3MChfYs6pycR4VWR iMY7M9O+qIPVoZf455UbW+hn5t8Vl4TIyCC/2n0cyqUF6ODO4sxx9YOBmmrknPeX AbWKFPQXwTijd0Y5OJpjKL30eiffaumhtrhCjaRP11eocrvhN/6MBqr0sZ46HnHn li+SQr0O+zXnNBlMd0MDHoPCCEWV6Kcnpu5sFDn9beijwGXvNEqQXX6VC9Op6lio o3pnGhiZytbChvQErzHjts+ycYOXp4A8SRECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRU3I5lGqQJVtxn+0w2WG0etusfRzAfBgNVHSMEGDAWgBS5kL/WP4Z1t7RFY2I+ QvcpJWyh6DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDI1L3VaQ18xai1HZGJlMFJXTmlQa0wzS1NWc29lZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VaQ18xai1HZGJlMFJXTmlQa0wzS1NW c29lZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80MjUvVk55T1pScWtDVmJjWl90TU5saHRIcmJySDBjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTGAgDANBgkqhkiG9w0BAQsFAAOCAQEAdzkdACOkbWhXeRwRMd7g4mAn4KCO bkqTOgV07YZYVuOTPaisRrv8NYYw55fOnuA+hoMRtu4iJF/WaDZJgaKqmFpKeU4E od3lsW5PUDNK0QkdhJrZ0yn5waKTnl4Qs/dvXrISkmCaWwar4i4wDLaP5i+lH9jg xMh07QhzjX4r8tZDBac8sGE808IduGhY989Sl2qYnnyM72fQyWDbp93HWG0yHU/j UdrjkuddrAar4KXg2X2/ImfL5uJ3IcP17t8dfVQAVmlJ/d7Pp1vFHHYArN8a6q/Y L1cr2/3eB1DSRQ1T6R0rpmDntVJkGDpRyhV9rUsjPPL3RAV+4GdyAfeHVg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:16:30 2026 by rpki-client