$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/iq1ILjXjRyXLmv-0beNrIOOOwL0.roa File: iq1ILjXjRyXLmv-0beNrIOOOwL0.roa (raw, json) Hash identifier: 3Jbek1etcucHA1W2/8SvAEf3ZETQ9Bvo+EmkXF1j93w= Subject key identifier: 8A:AD:48:2E:35:E3:47:25:CB:9A:FF:B4:6D:E3:6B:20:E3:8E:C0:BD Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 8C Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/iq1ILjXjRyXLmv-0beNrIOOOwL0.roa Signing time: Tue 31 Mar 2026 07:35:15 +0000 ROA not before: Tue 31 Mar 2026 07:35:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7684 IP address blocks: 157.17.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Mar 31 07:35:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8AAD482E35E34725CB9AFFB46DE36B20E38EC0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:1c:d9:33:a8:8a:65:23:a1:50:4c:83:27: a3:9e:9a:3f:70:2f:49:d6:a2:f5:d2:22:20:8d:c0: 43:ed:bb:34:96:b8:58:61:38:3a:07:d0:74:8b:f1: 6a:7a:12:c8:ab:cf:04:2f:1b:a9:1b:8a:e3:4b:12: e7:fd:b6:15:24:42:8a:8c:89:8c:32:be:cf:3d:03: 14:3a:ea:93:66:9f:37:e2:3b:cd:8f:0f:52:5e:73: d4:ad:74:9b:df:be:89:e3:3d:1a:ee:0a:53:df:ad: d7:fb:6e:37:33:8d:ac:f4:0c:2e:39:5c:50:48:36: b1:79:93:cb:35:36:1b:e7:19:98:4d:42:92:e7:13: f0:97:3a:8c:b5:56:54:09:80:fe:03:fa:fc:71:4d: 6e:f0:13:11:30:13:10:97:42:a6:bf:88:f5:d8:c2: d4:7b:77:bb:b3:6b:0a:8b:83:3a:64:8f:37:e3:c4: ad:45:d6:fe:8f:1f:4f:a5:cc:b9:a2:48:15:d8:fb: 87:b2:4d:d2:2f:61:b1:5b:09:78:f7:25:7a:75:b3: a7:be:29:0f:5e:ec:b9:e8:e2:02:54:7e:39:f4:fe: 91:ab:2c:b5:9b:30:ea:ce:5f:46:86:5f:5d:85:ff: 65:9a:98:09:9a:85:1e:66:c4:4d:b1:ae:9d:0c:b5: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:48:2E:35:E3:47:25:CB:9A:FF:B4:6D:E3:6B:20:E3:8E:C0:BD X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/iq1ILjXjRyXLmv-0beNrIOOOwL0.roa sbgp-ipAddrBlock: critical IPv4: 157.17.32.0/19 Signature Algorithm: sha256WithRSAEncryption 33:f8:2d:3b:84:0f:78:e7:80:3f:f9:a9:bd:17:76:75:13:80: 3e:7b:b9:a4:c8:bd:0c:18:32:2c:2c:4a:fe:c7:55:da:dd:ba: cb:bd:72:f7:e9:4d:12:78:ab:4c:fa:94:4c:22:39:dc:7a:cd: d7:96:cd:c4:63:d3:93:78:90:39:d0:9b:30:6a:f8:97:b7:69: 61:c2:80:c5:83:bc:3d:c8:06:f4:e2:ad:e8:50:99:78:04:9f: 22:90:f5:2a:0c:e6:da:d3:e1:b1:c4:01:89:de:d3:0d:e8:25: e0:cd:10:ed:1e:eb:da:15:3d:9e:4c:dc:b6:ac:b6:77:2e:a7: f4:fa:0d:04:87:92:ec:c6:64:cf:95:a1:c6:54:d7:87:1e:70: aa:ef:0c:95:b5:8a:96:80:75:24:09:9f:ab:41:ea:2e:42:d7: 38:f6:a8:68:7a:98:e6:b4:86:5a:54:39:62:25:c9:54:da:78: 44:e7:b5:52:58:ec:51:43:91:d3:57:fe:95:58:34:27:f2:13: 6b:99:21:63:55:af:1e:21:90:04:5b:73:f7:2f:24:76:fc:1a: 65:e3:05:17:21:d1:11:02:0f:4a:5d:0a:b2:e7:cb:78:6f:e6: 4e:01:f4:15:ed:27:2a:18:a5:c8:15:da:63:65:cf:2a:79:c9: 9a:6b:43:7b -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD NDYyOTRBNUQ1NjQzN0UxOUExMUFFRjlGQjlCODc3NjkwMTQzRTAeFw0yNjAzMzEw NzM1MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBQUQ0ODJFMzVFMzQ3 MjVDQjlBRkZCNDZERTM2QjIwRTM4RUMwQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMnRzZM6iKZSOhUEyDJ6Oemj9wL0nWovXSIiCNwEPtuzSWuFhh ODoH0HSL8Wp6EsirzwQvG6kbiuNLEuf9thUkQoqMiYwyvs89AxQ66pNmnzfiO82P D1Jec9StdJvfvonjPRruClPfrdf7bjczjaz0DC45XFBINrF5k8s1NhvnGZhNQpLn E/CXOoy1VlQJgP4D+vxxTW7wExEwExCXQqa/iPXYwtR7d7uzawqLgzpkjzfjxK1F 1v6PH0+lzLmiSBXY+4eyTdIvYbFbCXj3JXp1s6e+KQ9e7Lno4gJUfjn0/pGrLLWb MOrOX0aGX12F/2WamAmahR5mxE2xrp0MtfDHAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUiq1ILjXjRyXLmv+0beNrIOOOwL0wHwYDVR0jBBgwFoAU+8RilKXVZDfhmhGu +fubh3aQFD4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzExMjQ3Ly04UmlsS1hWWkRmaG1oR3UtZnViaDNhUUZENC5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy04UmlsS1hWWkRmaG1oR3UtZnVi aDNhUUZENC5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMTI0Ny9pcTFJTGpYalJ5WExtdi0wYmVOcklPT093TDAucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnREgMA0GCSqGSIb3DQEBCwUA A4IBAQAz+C07hA9454A/+am9F3Z1E4A+e7mkyL0MGDIsLEr+x1Xa3brLvXL36U0S eKtM+pRMIjnces3Xls3EY9OTeJA50JswaviXt2lhwoDFg7w9yAb04q3oUJl4BJ8i kPUqDOba0+GxxAGJ3tMN6CXgzRDtHuvaFT2eTNy2rLZ3Lqf0+g0Eh5LsxmTPlaHG VNeHHnCq7wyVtYqWgHUkCZ+rQeouQtc49qhoepjmtIZaVDliJclU2nhE57VSWOxR Q5HTV/6VWDQn8hNrmSFjVa8eIZAEW3P3LyR2/Bpl4wUXIdERAg9KXQqy58t4b+ZO AfQV7ScqGKXIFdpjZc8qecmaa0N7 -----END CERTIFICATE-----Generated at Fri Apr 17 04:23:06 2026 by rpki-client