$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OxvHqX196Ooo43Sj1f9zYz2uFDA.roa File: OxvHqX196Ooo43Sj1f9zYz2uFDA.roa (raw, json) Hash identifier: vY+KThKINrSYDLK1BGRg/KdnlusvpUL1EFILG11oOBI= Subject key identifier: 3B:1B:C7:A9:7D:7D:E8:EA:28:E3:74:A3:D5:FF:73:63:3D:AE:14:30 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0146 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OxvHqX196Ooo43Sj1f9zYz2uFDA.roa Signing time: Tue 31 Mar 2026 07:47:52 +0000 ROA not before: Tue 31 Mar 2026 07:47:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 3949 IP address blocks: 117.103.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3B1BC7A97D7DE8EA28E374A3D5FF73633DAE1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:ff:7b:d6:84:6d:2c:78:b2:f0:b0:d1:5f: 24:c2:a3:b2:d2:6a:34:db:93:c7:d4:dd:b0:98:f0: ab:1f:0f:4d:02:8d:99:39:a8:00:b8:ca:43:72:82: 4d:4b:09:f4:d7:9b:41:e7:ff:f9:25:58:01:ea:ee: 72:7d:14:c4:54:48:4b:99:ff:a0:6e:c7:0c:37:dd: 67:99:82:c5:03:72:16:19:c7:37:43:36:20:91:3d: 2b:47:f8:2b:3f:24:48:22:71:0f:67:5b:99:07:6a: 7e:93:b6:62:d2:40:60:35:49:dd:30:18:a4:fc:0f: 19:72:4d:2e:0b:4d:41:2e:c4:0a:1a:0a:41:15:15: 8b:cb:1b:c0:a8:3d:9c:10:ec:ed:25:05:96:75:43: 68:f3:c1:5d:d4:7e:da:41:e0:c1:7b:12:2d:6e:00: ad:00:10:6b:53:db:b7:1d:ce:55:07:8c:1d:d5:31: 52:25:80:7e:54:60:8d:cd:6f:63:34:0d:cb:05:84: 01:12:34:06:05:61:e5:e4:e5:1c:9d:50:76:4a:97: bd:ea:b2:e7:d4:02:a1:ad:ff:f1:ee:07:be:c7:1f: e5:5c:f4:ea:eb:7f:e8:c4:16:83:f8:3b:db:51:af: 95:bc:14:d3:77:39:52:91:57:2c:e7:27:48:15:06: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:C7:A9:7D:7D:E8:EA:28:E3:74:A3:D5:FF:73:63:3D:AE:14:30 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OxvHqX196Ooo43Sj1f9zYz2uFDA.roa sbgp-ipAddrBlock: critical IPv4: 117.103.185.0/24 Signature Algorithm: sha256WithRSAEncryption b9:18:41:cf:66:5b:7c:59:1b:36:44:3e:64:1e:03:28:bc:cf: b2:e8:1e:8e:93:9e:f2:1e:c6:ef:42:dd:d8:3f:a5:d6:fb:2b: 29:f4:3b:93:d0:ea:5c:10:11:cd:68:4f:73:74:c6:a2:be:cf: ce:a3:a4:b1:d0:2a:bc:d3:bb:1d:6f:bf:87:67:b1:48:7f:de: 98:a9:25:ba:d3:59:fc:aa:f6:d2:75:f9:4e:c4:cc:a6:ba:ee: 5c:5d:c4:ac:af:f5:e7:21:eb:43:ab:a0:10:84:6d:ea:f6:14: e3:10:2e:14:12:9c:01:41:59:8b:a2:30:97:7c:ff:09:c1:69: 19:cb:ae:65:6f:b5:16:96:3b:f5:a2:6b:6d:51:74:e3:2e:10: 4c:17:d3:12:d2:96:9a:d4:05:f7:eb:97:fe:f3:33:30:f2:68: a3:d5:f3:a6:60:fc:9b:d6:3a:80:ff:8f:13:d6:5b:14:89:77: 6d:37:ed:a1:df:b9:2a:db:87:b4:e9:d0:07:5c:57:90:46:ef: 2f:ca:f6:2e:5d:53:d6:77:69:95:8f:1c:15:f7:46:db:b6:6a: b5:b8:92:64:07:6c:d4:c8:02:15:f3:48:40:ee:93:1e:4b:74: 95:93:a1:f2:52:05:d1:91:ff:8a:04:c1:cc:7f:af:b7:98:0d: b2:73:73:66 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCMUJDN0E5N0Q3REU4 RUEyOEUzNzRBM0Q1RkY3MzYzM0RBRTE0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWP971oRtLHiy8LDRXyTCo7LSajTbk8fU3bCY8KsfD00CjZk5 qAC4ykNygk1LCfTXm0Hn//klWAHq7nJ9FMRUSEuZ/6Buxww33WeZgsUDchYZxzdD NiCRPStH+Cs/JEgicQ9nW5kHan6TtmLSQGA1Sd0wGKT8DxlyTS4LTUEuxAoaCkEV FYvLG8CoPZwQ7O0lBZZ1Q2jzwV3UftpB4MF7Ei1uAK0AEGtT27cdzlUHjB3VMVIl gH5UYI3Nb2M0DcsFhAESNAYFYeXk5RydUHZKl73qsufUAqGt//HuB77HH+Vc9Orr f+jEFoP4O9tRr5W8FNN3OVKRVyznJ0gVBrINAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUOxvHqX196Ooo43Sj1f9zYz2uFDAwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9PeHZIcVgxOTZPb280M1NqMWY5ell6MnVGREEucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdWe5MA0GCSqGSIb3DQEBCwUA A4IBAQC5GEHPZlt8WRs2RD5kHgMovM+y6B6Ok57yHsbvQt3YP6XW+ysp9DuT0Opc EBHNaE9zdMaivs/Oo6Sx0Cq807sdb7+HZ7FIf96YqSW601n8qvbSdflOxMymuu5c XcSsr/XnIetDq6AQhG3q9hTjEC4UEpwBQVmLojCXfP8JwWkZy65lb7UWljv1omtt UXTjLhBMF9MS0paa1AX365f+8zMw8mij1fOmYPyb1jqA/48T1lsUiXdtN+2h37kq 24e06dAHXFeQRu8vyvYuXVPWd2mVjxwV90bbtmq1uJJkB2zUyAIV80hA7pMeS3SV k6HyUgXRkf+KBMHMf6+3mA2yc3Nm -----END CERTIFICATE-----Generated at Sun Apr 19 09:30:03 2026 by rpki-client