$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/xSGlfUr7_wTvlcmzzrIUs5mef1A.roa File: xSGlfUr7_wTvlcmzzrIUs5mef1A.roa (raw, json) Hash identifier: XZa2h1puu4FTA6KvkOHEPcJa7wt4bK8hhhBZC8gwGcM= Subject key identifier: C5:21:A5:7D:4A:FB:FF:04:EF:95:C9:B3:CE:B2:14:B3:99:9E:7F:50 Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 18 Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/xSGlfUr7_wTvlcmzzrIUs5mef1A.roa Signing time: Wed 25 Mar 2026 05:53:43 +0000 ROA not before: Wed 25 Mar 2026 05:53:43 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 180.144.0.0/14 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 25 05:53:43 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=C521A57D4AFBFF04EF95C9B3CEB214B3999E7F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:fa:7c:80:22:0d:41:c7:e9:64:dc:bd:8a: 43:41:de:d5:30:fc:54:b0:91:7f:6a:ab:3b:a9:d2: 21:4a:ee:07:3c:e8:7b:69:ca:4f:dc:1a:89:fc:d5: c4:31:0e:01:4e:de:e4:4a:18:34:2e:96:68:1b:f5: 6d:ca:50:18:86:57:5a:85:f7:21:46:76:ab:e8:9d: ce:f8:a4:dc:1e:0c:9b:6a:1f:4c:a3:c5:0b:2d:1c: fb:6c:f7:96:96:02:f1:c2:17:0a:19:5a:bf:66:94: d3:70:e8:08:68:1b:b7:7d:16:68:7c:6b:0c:43:32: 32:98:2f:b5:a1:9d:0b:df:1b:f2:8e:1d:c6:a9:76: 02:93:24:6d:2a:a5:40:c9:dc:e1:8e:4b:fc:42:f6: b0:8b:6c:62:c6:7c:98:42:a3:82:7f:77:05:95:9e: a0:78:9f:14:b1:99:a3:77:75:48:3e:d1:fa:72:b1: 33:d4:70:0d:db:de:64:c4:2c:31:cc:20:bf:29:1c: fa:14:03:4c:5a:8c:9b:83:9d:78:d4:a3:6b:31:13: d2:e6:af:25:31:fa:e9:5e:a9:fe:6d:1f:a8:ba:77: 0a:d6:a2:e1:23:0e:20:7c:19:a8:7b:f7:cc:2a:b1: b1:91:5f:41:83:87:27:63:40:42:2f:96:9b:9b:5a: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:21:A5:7D:4A:FB:FF:04:EF:95:C9:B3:CE:B2:14:B3:99:9E:7F:50 X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/xSGlfUr7_wTvlcmzzrIUs5mef1A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.144.0.0/14 Signature Algorithm: sha256WithRSAEncryption 71:8c:80:f8:90:26:5c:e1:56:e4:95:f6:7a:ae:6e:f8:df:52: 38:09:3d:8f:b6:9c:cd:1b:dd:b2:40:f2:40:99:69:5f:e0:e9: 88:fe:a5:34:84:28:29:fa:01:d1:29:ec:ee:9a:6b:18:20:56: e2:84:a8:00:e1:48:4e:6d:00:e8:21:c2:ca:dd:fd:57:c7:ea: 00:0d:4c:74:ff:1e:78:3c:1e:d5:78:ff:0e:85:39:f0:ab:e1: 81:a0:e7:aa:8a:c4:5f:1c:cf:00:83:f0:09:89:8f:d7:ba:74: 16:a4:ca:2f:1f:39:a3:15:d7:5a:a0:b3:a1:e7:ce:48:58:c4: 31:2d:71:17:59:77:c8:55:57:1d:2c:db:1a:13:28:af:cf:cf: aa:ef:63:1f:48:d7:0f:58:1e:00:a1:ca:97:c0:09:66:72:92: da:86:05:4f:6b:b0:2b:33:2f:b9:db:0b:f5:ec:0d:93:29:11: dd:b9:65:52:ca:57:a2:fb:df:0d:fe:a5:c7:98:d6:22:a0:1a: 30:01:19:f5:cc:6d:51:39:ff:0f:f9:4f:07:92:35:1d:9d:19: 62:c1:4c:ab:c0:7f:93:b2:fa:b6:c8:e1:a2:66:eb:37:f5:7c: ec:f4:93:04:c6:9a:cb:e6:27:85:02:af:6f:6c:8e:36:18:b4: 10:17:00:a8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1 NTM0M1oXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQzUyMUE1N0Q0QUZCRkYw NEVGOTVDOUIzQ0VCMjE0QjM5OTlFN0Y1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANAU+nyAIg1Bx+lk3L2KQ0He1TD8VLCRf2qrO6nSIUruBzzoe2nK T9waifzVxDEOAU7e5EoYNC6WaBv1bcpQGIZXWoX3IUZ2q+idzvik3B4Mm2ofTKPF Cy0c+2z3lpYC8cIXChlav2aU03DoCGgbt30WaHxrDEMyMpgvtaGdC98b8o4dxql2 ApMkbSqlQMnc4Y5L/EL2sItsYsZ8mEKjgn93BZWeoHifFLGZo3d1SD7R+nKxM9Rw DdveZMQsMcwgvykc+hQDTFqMm4OdeNSjazET0uavJTH66V6p/m0fqLp3Ctai4SMO IHwZqHv3zCqxsZFfQYOHJ2NAQi+Wm5taGV0CAwEAAaOCAiMwggIfMB0GA1UdDgQW BBTFIaV9Svv/BO+VybPOshSzmZ5/UDAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80OTMveFNHbGZVcjdfd1R2bGNtenpySVVzNW1lZjFBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDArSQMA0GCSqGSIb3DQEBCwUAA4IBAQBxjID4kCZc4VbklfZ6rm7431I4CT2P tpzNG92yQPJAmWlf4OmI/qU0hCgp+gHRKezummsYIFbihKgA4UhObQDoIcLK3f1X x+oADUx0/x54PB7VeP8OhTnwq+GBoOeqisRfHM8Ag/AJiY/XunQWpMovHzmjFdda oLOh585IWMQxLXEXWXfIVVcdLNsaEyivz8+q72MfSNcPWB4AocqXwAlmcpLahgVP a7ArMy+52wv17A2TKRHduWVSylei+98N/qXHmNYioBowARn1zG1ROf8P+U8HkjUd nRliwUyrwH+Tsvq2yOGiZus39Xzs9JMExprL5ieFAq9vbI42GLQQFwCo -----END CERTIFICATE-----Generated at Thu Mar 26 20:56:07 2026 by rpki-client