$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/6PNmliUMDsCKNA8WO9KEAXI2xl8.roa File: 6PNmliUMDsCKNA8WO9KEAXI2xl8.roa (raw, json) Hash identifier: cI8hEJKCvF06YqBJGa4h95a9TYWdbVCk3LTp/Mx3nT0= Subject key identifier: E8:F3:66:96:25:0C:0E:C0:8A:34:0F:16:3B:D2:84:01:72:36:C6:5F Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016 Certificate serial: 5C Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/6PNmliUMDsCKNA8WO9KEAXI2xl8.roa Signing time: Tue 31 Mar 2026 07:52:12 +0000 ROA not before: Tue 31 Mar 2026 07:52:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 146987 IP address blocks: 157.120.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016 Validity Not Before: Mar 31 07:52:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E8F36696250C0EC08A340F163BD284017236C65F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:16:f6:60:de:1b:8a:cf:6f:78:cf:3f:10: 53:80:a1:62:88:6c:26:4c:66:f0:4e:1c:c3:8c:e1: 71:dc:6f:51:12:8a:01:c0:d8:8c:5b:a7:5f:44:29: eb:2c:cf:91:55:bf:cc:3d:1f:b1:21:0d:a1:be:85: 2a:7e:ec:8c:f4:e5:a7:d4:3a:e4:49:0e:07:8c:e3: be:35:f0:be:e4:a8:6f:71:0c:a6:3c:61:18:20:03: ae:f1:2c:83:c2:6c:6e:59:38:8a:c0:bf:28:1f:ca: 8c:cf:bf:44:5f:e2:73:d2:60:f1:cd:48:cb:75:11: d4:b3:47:eb:3e:2a:b5:cc:ba:de:32:9a:26:69:47: 89:35:e2:d6:ae:2a:b5:2a:01:69:20:5d:64:be:ff: f5:e4:97:f2:a2:34:ed:14:c7:99:ef:9d:db:76:6b: 70:b1:ce:a9:86:0b:22:6e:55:6a:8d:c4:96:80:6d: 3f:d2:5c:c6:94:9d:be:a4:67:37:ce:d1:77:d8:2b: c3:5d:bc:28:16:f0:5b:96:ab:38:3d:25:bc:e5:21: 15:71:f8:90:86:d0:9d:5f:18:3f:74:3f:d3:c1:9b: fb:ca:e3:55:ab:cf:5f:86:8f:6d:08:8a:78:0b:b7: 12:6e:49:6c:1c:0e:0e:ec:0a:ea:25:bc:c8:93:a2: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:66:96:25:0C:0E:C0:8A:34:0F:16:3B:D2:84:01:72:36:C6:5F X509v3 Authority Key Identifier: keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/6PNmliUMDsCKNA8WO9KEAXI2xl8.roa sbgp-ipAddrBlock: critical IPv4: 157.120.112.0/24 Signature Algorithm: sha256WithRSAEncryption 28:39:c7:aa:88:09:11:6c:f6:8b:f8:17:4c:b7:b4:f0:61:fa: 5f:5c:1f:4b:94:fe:94:56:4e:dc:23:48:13:c3:9f:0b:b6:ac: 51:fd:d8:7b:b3:64:78:07:c0:73:4c:e9:c5:18:37:41:06:a5: 8c:52:71:69:89:a2:ef:9a:cd:d8:85:b9:9b:97:88:78:cd:4c: d5:ba:c2:98:59:6c:29:f4:79:45:2c:e0:d2:d1:d5:33:05:3e: 4a:00:29:e3:30:95:c9:3b:77:a2:ad:bb:b9:3c:35:82:38:00: ed:a9:7d:e8:c8:e9:82:35:55:a5:2a:40:ff:d4:e4:9b:75:20: f1:45:1a:0d:8d:59:c8:30:50:01:26:51:02:03:ae:ef:bb:2e: 19:48:1a:86:a9:72:cc:4b:8f:71:d4:71:f9:55:aa:e3:64:de: 09:18:f7:8e:cc:d9:54:5a:07:f8:45:25:81:c2:e8:e1:97:b5: 88:e0:38:b1:8a:87:1d:0f:fb:2d:75:3d:e1:67:6e:bd:32:e7: c0:55:0a:10:e5:e8:de:42:c1:47:09:66:d5:57:38:a8:27:59: f7:89:bd:82:6e:b1:d3:10:48:c8:25:73:ae:46:78:72:05:2a: 35:e5:c6:c7:0b:5c:85:4a:6a:84:f5:cf:61:42:90:7f:5d:a7: bb:e7:8a:54 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjcy RkFBNTIzQkE2NTI2ODU1RDk5MDY1RTIxQjRCOTU4QzVGMDE2MB4XDTI2MDMzMTA3 NTIxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRThGMzY2OTYyNTBDMEVD MDhBMzQwRjE2M0JEMjg0MDE3MjM2QzY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKnJFvZg3huKz294zz8QU4ChYohsJkxm8E4cw4zhcdxvURKKAcDY jFunX0Qp6yzPkVW/zD0fsSENob6FKn7sjPTlp9Q65EkOB4zjvjXwvuSob3EMpjxh GCADrvEsg8Jsblk4isC/KB/KjM+/RF/ic9Jg8c1Iy3UR1LNH6z4qtcy63jKaJmlH iTXi1q4qtSoBaSBdZL7/9eSX8qI07RTHme+d23ZrcLHOqYYLIm5Vao3EloBtP9Jc xpSdvqRnN87Rd9grw128KBbwW5arOD0lvOUhFXH4kIbQnV8YP3Q/08Gb+8rjVavP X4aPbQiKeAu3Em5JbBwODuwK6iW8yJOiOUECAwEAAaOCAd0wggHZMB0GA1UdDgQW BBTo82aWJQwOwIo0DxY70oQBcjbGXzAfBgNVHSMEGDAWgBT7cvqlI7plJoVdmQZe IbS5WMXwFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5NjYvLTNMNnBTTzZaU2FGWFprR1hpRzB1VmpGOEJZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLTNMNnBTTzZaU2FGWFprR1hpRzB1 VmpGOEJZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwOTY2LzZQTm1saVVNRHNDS05BOFdPOUtFQVhJMnhsOC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdeHAwDQYJKoZIhvcNAQELBQAD ggEBACg5x6qICRFs9ov4F0y3tPBh+l9cH0uU/pRWTtwjSBPDnwu2rFH92HuzZHgH wHNM6cUYN0EGpYxScWmJou+azdiFuZuXiHjNTNW6wphZbCn0eUUs4NLR1TMFPkoA KeMwlck7d6Ktu7k8NYI4AO2pfejI6YI1VaUqQP/U5Jt1IPFFGg2NWcgwUAEmUQID ru+7LhlIGoapcsxLj3HUcflVquNk3gkY947M2VRaB/hFJYHC6OGXtYjgOLGKhx0P +y11PeFnbr0y58BVChDl6N5CwUcJZtVXOKgnWfeJvYJusdMQSMglc65GeHIFKjXl xscLXIVKaoT1z2FCkH9dp7vnilQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:29:05 2026 by rpki-client