$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1204/iafM8sZcCJ_xQu5fU7onJ-he3Ew.roa File: iafM8sZcCJ_xQu5fU7onJ-he3Ew.roa (raw, json) Hash identifier: sPS6z1DPh06NdRp0IoL6UgXyP58Guu5qqGXeDfEYdy4= Subject key identifier: 89:A7:CC:F2:C6:5C:08:9F:F1:42:EE:5F:53:BA:27:27:E8:5E:DC:4C Certificate issuer: /CN=3AF2969ACB86165DF223A509BAE1B5DFB4D904B8 Certificate serial: 0D Authority key identifier: 3A:F2:96:9A:CB:86:16:5D:F2:23:A5:09:BA:E1:B5:DF:B4:D9:04:B8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/iafM8sZcCJ_xQu5fU7onJ-he3Ew.roa Signing time: Tue 31 Mar 2026 08:46:32 +0000 ROA not before: Tue 31 Mar 2026 08:46:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2907 IP address blocks: 160.29.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF2969ACB86165DF223A509BAE1B5DFB4D904B8 Validity Not Before: Mar 31 08:46:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=89A7CCF2C65C089FF142EE5F53BA2727E85EDC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:c4:d8:82:0b:f6:58:4d:8c:6d:89:21:85: e9:9b:e3:09:a3:11:0f:e5:1d:32:3e:fb:f6:67:d0: 4a:ae:68:ea:3a:ce:62:29:58:d6:b9:35:3c:39:ea: 6e:ef:ef:2b:79:e1:b4:fe:a6:2c:04:99:0a:1b:66: 2e:f9:d9:29:bd:38:8f:96:92:8c:07:87:47:0e:76: 7d:85:fa:8f:84:c5:b2:ee:90:97:a8:bf:8d:f9:e8: 43:33:d6:e0:e1:dd:f7:23:ce:38:58:72:d2:2d:4b: dd:63:a6:01:c8:f4:07:0e:78:87:5a:eb:35:cd:fb: 73:60:4e:c7:29:91:bf:5d:a9:da:ed:13:bb:84:00: ad:16:43:27:ca:b2:3d:98:e9:f7:ab:ac:fd:38:09: c2:48:1a:2a:b5:bc:c1:d7:29:21:dd:c2:5d:f7:15: 2e:45:b4:38:d1:71:b4:48:20:bd:0a:66:5f:10:30: db:51:5b:5c:51:fa:51:b3:e0:b2:7a:34:e7:91:2b: dd:43:7f:f2:ad:d0:90:8e:71:16:d5:a2:d8:e3:3f: 86:a3:9d:96:55:7e:0b:ba:74:4b:a8:29:c7:f5:1f: 53:2f:0e:c4:7e:59:2a:31:1d:dc:16:89:ea:97:11: c4:c5:ce:b3:10:bf:93:51:c9:30:b0:8e:f7:a4:3d: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A7:CC:F2:C6:5C:08:9F:F1:42:EE:5F:53:BA:27:27:E8:5E:DC:4C X509v3 Authority Key Identifier: keyid:3A:F2:96:9A:CB:86:16:5D:F2:23:A5:09:BA:E1:B5:DF:B4:D9:04:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/iafM8sZcCJ_xQu5fU7onJ-he3Ew.roa sbgp-ipAddrBlock: critical IPv4: 160.29.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:a4:36:a2:ba:41:d9:5a:dd:46:b6:b6:e1:63:45:48:9a:f7: 5e:38:ee:d0:c9:f8:b7:85:fd:f9:2b:38:1b:3a:ea:3a:c3:f3: 0c:0a:d0:a9:31:80:f8:5a:c2:71:4e:c7:86:74:db:fd:08:60: c4:f1:1d:c4:5c:00:e5:ad:27:69:70:3d:d7:37:4e:50:96:a5: 42:54:70:20:1a:87:22:29:71:85:d5:55:6a:4f:82:b4:b6:4e: 1c:2c:46:39:ce:a0:db:05:b5:36:81:ee:dd:ba:b5:62:04:cc: ef:37:f7:95:d2:15:c3:f8:f4:2d:e3:63:73:d8:67:39:cb:31: 3d:63:61:d2:b0:38:48:dd:64:d6:86:c0:72:8e:ae:2a:d5:e2: 26:4e:3c:ad:f0:3c:cd:a9:6a:97:da:c2:9b:87:c6:ff:b9:5a: 5d:ca:46:57:a9:48:46:21:6e:9f:28:28:6d:81:71:bd:90:d3: 7f:5b:a8:fd:bb:98:91:f0:25:4f:3b:bc:cc:22:d4:dc:c3:69: 4a:20:20:dc:b8:cb:bc:f0:2f:0c:84:2c:5b:5f:35:9c:be:83: 6f:71:d1:59:77:59:e1:ca:82:8d:5e:14:ea:42:c7:5b:e4:d6: df:e6:67:ea:ee:cb:40:03:eb:eb:28:05:db:a2:19:7c:1a:36: 32:67:9e:cc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQUYy OTY5QUNCODYxNjVERjIyM0E1MDlCQUUxQjVERkI0RDkwNEI4MB4XDTI2MDMzMTA4 NDYzMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODlBN0NDRjJDNjVDMDg5 RkYxNDJFRTVGNTNCQTI3MjdFODVFREM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL1nxNiCC/ZYTYxtiSGF6ZvjCaMRD+UdMj779mfQSq5o6jrOYilY 1rk1PDnqbu/vK3nhtP6mLASZChtmLvnZKb04j5aSjAeHRw52fYX6j4TFsu6Ql6i/ jfnoQzPW4OHd9yPOOFhy0i1L3WOmAcj0Bw54h1rrNc37c2BOxymRv12p2u0Tu4QA rRZDJ8qyPZjp96us/TgJwkgaKrW8wdcpId3CXfcVLkW0ONFxtEggvQpmXxAw21Fb XFH6UbPgsno055Er3UN/8q3QkI5xFtWi2OM/hqOdllV+C7p0S6gpx/UfUy8OxH5Z KjEd3BaJ6pcRxMXOsxC/k1HJMLCO96Q9Ft8CAwEAAaOCAdowggHWMB0GA1UdDgQW BBSJp8zyxlwIn/FC7l9Tuicn6F7cTDAfBgNVHSMEGDAWgBQ68paay4YWXfIjpQm6 4bXftNkEuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwNC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3VFpCTGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3 VFpCTGcuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTIwNC9pYWZNOHNaY0NKX3hRdTVmVTdvbkotaGUzRXcucm9hMB4G CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoB0wDQYJKoZIhvcNAQELBQADggEB AKOkNqK6Qdla3Ua2tuFjRUia91447tDJ+LeF/fkrOBs66jrD8wwK0KkxgPhawnFO x4Z02/0IYMTxHcRcAOWtJ2lwPdc3TlCWpUJUcCAahyIpcYXVVWpPgrS2ThwsRjnO oNsFtTaB7t26tWIEzO8395XSFcP49C3jY3PYZznLMT1jYdKwOEjdZNaGwHKOrirV 4iZOPK3wPM2papfawpuHxv+5Wl3KRlepSEYhbp8oKG2Bcb2Q039bqP27mJHwJU87 vMwi1NzDaUogINy4y7zwLwyELFtfNZy+g29x0Vl3WeHKgo1eFOpCx1vk1t/mZ+ru y0AD6+soBduiGXwaNjJnnsw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:43 2026 by rpki-client