$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0h9R-8V6Pkq8NhMWGR9TdLvCb3A.roa File: 0h9R-8V6Pkq8NhMWGR9TdLvCb3A.roa (raw, json) Hash identifier: gowBrpwz3XMUvpbhzDIAyJczV0juaBodIUVUd4cMDAg= Subject key identifier: D2:1F:51:FB:C5:7A:3E:4A:BC:36:13:16:19:1F:53:74:BB:C2:6F:70 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 028E Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0h9R-8V6Pkq8NhMWGR9TdLvCb3A.roa Signing time: Tue 31 Mar 2026 07:34:20 +0000 ROA not before: Tue 31 Mar 2026 07:34:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Mar 31 07:34:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D21F51FBC57A3E4ABC361316191F5374BBC26F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f3:3c:f7:bf:87:6d:47:7c:4f:c4:5f:4e:52: 6d:27:ba:8b:97:df:73:42:f5:4c:e2:27:e5:5d:d0: 61:34:a6:3a:60:1f:c9:b2:e0:7a:9d:31:7b:82:03: 05:34:52:1b:84:70:b8:2d:71:18:4a:ff:9d:f7:1a: b4:88:6e:65:b5:88:aa:2b:59:b2:df:57:be:e9:38: 69:09:f5:6b:3e:02:54:20:ba:8e:85:ad:6c:7b:69: 60:58:68:1a:45:b5:64:af:2c:9c:2f:21:fd:5f:e1: eb:62:6a:9c:f0:07:d1:b7:5e:ce:8a:3f:01:82:16: 4a:02:86:ac:71:04:f2:6d:63:cd:d7:2d:01:fa:6b: 6b:27:de:55:94:39:c4:2a:bb:76:29:5c:44:fc:a4: b7:a5:d1:5a:5b:8a:36:05:0b:d3:d9:1c:8d:9d:fd: 8e:82:2f:77:bd:b0:42:4c:29:81:d9:62:7d:57:b4: 5e:c3:6a:49:17:31:91:59:96:60:ef:17:43:fe:7b: 44:ba:29:0a:6a:67:51:ff:b8:2f:77:d1:bb:04:0b: 8a:c7:85:d3:91:47:61:a0:06:df:63:d4:5a:66:dd: ca:86:b4:d3:07:2f:c1:b0:aa:a4:9d:53:f7:52:d2: cb:17:2a:b5:e3:d5:08:33:05:31:b0:e3:86:50:1d: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:51:FB:C5:7A:3E:4A:BC:36:13:16:19:1F:53:74:BB:C2:6F:70 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0h9R-8V6Pkq8NhMWGR9TdLvCb3A.roa sbgp-ipAddrBlock: critical IPv4: 49.212.116.0/24 Signature Algorithm: sha256WithRSAEncryption 10:94:89:c4:e0:50:8e:be:08:c9:f0:46:c4:67:00:cb:d2:8d: f5:63:01:c7:ce:3c:24:6e:15:dc:80:07:67:14:7f:be:60:e8: 6f:62:dd:e4:99:56:8f:6c:87:c3:cf:14:c8:4b:92:fa:14:33: 7a:0a:31:4e:8b:32:7d:be:4d:6d:c4:b7:d8:96:38:f8:11:d5: 49:e1:35:2a:57:68:e1:bf:62:2e:0a:81:65:99:49:50:d9:e4: ef:9d:47:e4:a5:a7:74:7a:67:d5:f2:35:e6:e8:b5:30:79:40: 6e:29:a3:67:c8:36:5a:4d:76:5b:2c:ad:fd:ad:a9:ae:6e:90: b6:92:b4:c9:a4:50:17:3d:1d:7e:6e:10:51:56:cf:21:a4:5c: 75:f8:c6:b4:32:b9:5d:4d:a7:5a:62:fe:a9:f1:c7:c0:2e:fc: 01:97:71:c4:d2:14:ec:af:d1:5f:89:d3:1a:b2:02:b1:ee:c1: 17:c0:ed:e4:2e:c8:55:8e:ab:44:8c:02:d6:93:cf:94:48:0c: 9f:fb:6d:2f:95:ec:1a:72:5f:4b:bf:13:47:6a:4b:35:9b:53: 69:30:04:4f:5a:61:4d:73:80:08:4d:c0:db:99:eb:66:c9:75: 74:cb:29:b4:8e:6e:0e:33:bf:b7:94:c2:23:f5:86:3a:7c:a2: 8b:4e:11:e3 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw NzM0MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyMUY1MUZCQzU3QTNF NEFCQzM2MTMxNjE5MUY1Mzc0QkJDMjZGNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq8zz3v4dtR3xPxF9OUm0nuouX33NC9UziJ+Vd0GE0pjpgH8my 4HqdMXuCAwU0UhuEcLgtcRhK/533GrSIbmW1iKorWbLfV77pOGkJ9Ws+AlQguo6F rWx7aWBYaBpFtWSvLJwvIf1f4etiapzwB9G3Xs6KPwGCFkoChqxxBPJtY83XLQH6 a2sn3lWUOcQqu3YpXET8pLel0VpbijYFC9PZHI2d/Y6CL3e9sEJMKYHZYn1XtF7D akkXMZFZlmDvF0P+e0S6KQpqZ1H/uC930bsEC4rHhdORR2GgBt9j1Fpm3cqGtNMH L8GwqqSdU/dS0ssXKrXj1QgzBTGw44ZQHfqtAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU0h9R+8V6Pkq8NhMWGR9TdLvCb3AwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDI0Ny8waDlSLThWNlBrcThOaE1XR1I5VGRMdkNiM0Eucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMdR0MA0GCSqGSIb3DQEBCwUA A4IBAQAQlInE4FCOvgjJ8EbEZwDL0o31YwHHzjwkbhXcgAdnFH++YOhvYt3kmVaP bIfDzxTIS5L6FDN6CjFOizJ9vk1txLfYljj4EdVJ4TUqV2jhv2IuCoFlmUlQ2eTv nUfkpad0emfV8jXm6LUweUBuKaNnyDZaTXZbLK39ramubpC2krTJpFAXPR1+bhBR Vs8hpFx1+Ma0MrldTadaYv6p8cfALvwBl3HE0hTsr9FfidMasgKx7sEXwO3kLshV jqtEjALWk8+USAyf+20vlewacl9LvxNHaks1m1NpMARPWmFNc4AITcDbmetmyXV0 yym0jm4OM7+3lMIj9YY6fKKLThHj -----END CERTIFICATE-----Generated at Fri Apr 17 04:34:21 2026 by rpki-client