$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/WrhpKICjZf_m-En_YceBIbibYD0.roa File: WrhpKICjZf_m-En_YceBIbibYD0.roa (raw, json) Hash identifier: btTiDhvk7rMD6nzOvzWC6CBOsU55MxbgLSMt6fQNExw= Subject key identifier: 5A:B8:69:28:80:A3:65:FF:E6:F8:49:FF:61:C7:81:21:B8:9B:60:3D Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 12 Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/WrhpKICjZf_m-En_YceBIbibYD0.roa Signing time: Wed 25 Mar 2026 05:47:30 +0000 ROA not before: Wed 25 Mar 2026 05:47:30 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 112.68.0.0/14 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 25 05:47:30 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=5AB8692880A365FFE6F849FF61C78121B89B603D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:de:37:8b:08:d6:20:b4:0b:cc:f1:57:26: 61:0d:07:6e:c4:f5:39:e2:27:5d:91:fd:35:e2:c3: 2b:20:d2:a5:62:32:ee:1b:04:8b:e0:d9:67:81:48: 8d:2c:ea:2c:61:e4:21:09:20:91:72:ef:a3:2c:55: f0:fe:09:04:07:42:5d:84:2b:c1:2a:2c:29:e8:88: be:d2:da:31:04:5c:a4:5b:f1:e0:92:08:41:b8:86: 76:15:cd:16:ec:d8:dd:76:0f:96:fe:81:e5:37:ae: 6a:0c:22:a7:08:11:6e:8f:9d:a7:cf:31:3d:92:35: 67:1e:3c:e3:5b:e3:10:5f:a1:69:8f:40:fe:ef:10: 35:86:56:6b:e9:cc:6b:37:d1:00:0f:cb:5d:48:ee: 2e:5f:da:74:59:14:88:01:fa:1d:fa:59:b3:4f:e0: 9d:b7:8d:4d:71:e8:8c:b1:f4:a2:6d:d5:69:6b:1f: aa:ad:e6:9f:da:dc:58:8a:29:11:e2:58:c6:b0:a6: 78:fc:bc:4a:4c:ae:2a:75:02:86:85:55:ca:ab:d3: 8f:04:11:2e:9d:0f:21:c4:5e:29:fa:69:1e:c6:0e: e9:b2:1d:a8:2e:71:07:e3:6a:8f:f2:d6:0e:19:9e: b2:c7:c4:4c:88:19:a8:91:3f:a7:dc:2c:48:c8:9b: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:69:28:80:A3:65:FF:E6:F8:49:FF:61:C7:81:21:B8:9B:60:3D X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/WrhpKICjZf_m-En_YceBIbibYD0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.68.0.0/14 Signature Algorithm: sha256WithRSAEncryption 49:ea:52:d4:3e:bc:cf:9e:e6:40:43:ff:3a:a9:cf:3a:6d:8f: a0:1c:50:47:05:e8:76:de:c1:76:f5:58:9d:12:01:01:c7:89: 65:71:e8:f3:76:4c:5b:4d:53:49:51:12:bf:19:f0:e7:1b:1d: fd:cb:2b:1a:a1:c8:d6:47:7a:48:ea:24:e0:e3:d0:07:5e:b5: c1:d2:af:3f:20:76:0f:fa:5b:13:46:8f:6a:1c:d6:52:84:34: c2:40:ba:d2:7e:81:33:7e:d2:61:60:72:0a:f1:ed:fb:c9:e5: c6:43:cd:6f:bf:c0:1f:cf:bb:38:c5:fc:32:ee:e4:09:87:ce: eb:02:43:3c:1e:d8:7e:4c:9f:9e:6e:ce:1e:b6:75:ba:bf:f8: 0e:6d:a6:c7:04:10:29:3a:ff:aa:27:3e:9e:28:88:00:8a:93: 8f:12:2c:ed:e0:94:92:c6:d5:c9:9a:62:e0:a8:dc:6a:6e:56: c3:d2:67:d0:51:81:0a:e7:84:37:1a:94:05:5b:4e:4f:23:12: f3:12:05:ff:f4:3d:58:0f:9b:25:11:88:3b:22:11:4a:88:7e: 54:a3:19:13:df:5b:50:fc:53:9f:ef:6b:79:95:63:1e:dc:1d: 1a:88:6c:76:92:5d:77:be:98:61:5b:fe:9e:ba:c0:36:8a:28: 68:c2:14:3f -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1 NDczMFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoNUFCODY5Mjg4MEEzNjVG RkU2Rjg0OUZGNjFDNzgxMjFCODlCNjAzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK4C3jeLCNYgtAvM8VcmYQ0HbsT1OeInXZH9NeLDKyDSpWIy7hsE i+DZZ4FIjSzqLGHkIQkgkXLvoyxV8P4JBAdCXYQrwSosKeiIvtLaMQRcpFvx4JII QbiGdhXNFuzY3XYPlv6B5TeuagwipwgRbo+dp88xPZI1Zx4841vjEF+haY9A/u8Q NYZWa+nMazfRAA/LXUjuLl/adFkUiAH6HfpZs0/gnbeNTXHojLH0om3VaWsfqq3m n9rcWIopEeJYxrCmePy8SkyuKnUChoVVyqvTjwQRLp0PIcReKfppHsYO6bIdqC5x B+Nqj/LWDhmessfETIgZqJE/p9wsSMibOC0CAwEAAaOCAiMwggIfMB0GA1UdDgQW BBRauGkogKNl/+b4Sf9hx4EhuJtgPTAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80OTMvV3JocEtJQ2paZl9tLUVuX1ljZUJJYmliWUQwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAnBEMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6lLUPrzPnuZAQ/86qc86bY+gHFBH Beh23sF29VidEgEBx4llcejzdkxbTVNJURK/GfDnGx39yysaocjWR3pI6iTg49AH XrXB0q8/IHYP+lsTRo9qHNZShDTCQLrSfoEzftJhYHIK8e37yeXGQ81vv8Afz7s4 xfwy7uQJh87rAkM8Hth+TJ+ebs4etnW6v/gObabHBBApOv+qJz6eKIgAipOPEizt 4JSSxtXJmmLgqNxqblbD0mfQUYEK54Q3GpQFW05PIxLzEgX/9D1YD5slEYg7IhFK iH5UoxkT31tQ/FOf72t5lWMe3B0aiGx2kl13vphhW/6eusA2iihowhQ/ -----END CERTIFICATE-----Generated at Thu Mar 26 22:30:22 2026 by rpki-client