$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/hB6ZzTEKqtzctOuoDNiTvzq-xsQ.roa File: hB6ZzTEKqtzctOuoDNiTvzq-xsQ.roa (raw, json) Hash identifier: 6hmQS5RaKN6NHS4PPJlDmlMRJvZcj90+92IQHAh3l88= Subject key identifier: 84:1E:99:CD:31:0A:AA:DC:DC:B4:EB:A8:0C:D8:93:BF:3A:BE:C6:C4 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 37 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/hB6ZzTEKqtzctOuoDNiTvzq-xsQ.roa Signing time: Tue 31 Mar 2026 08:43:17 +0000 ROA not before: Tue 31 Mar 2026 08:43:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2907 IP address blocks: 192.58.16.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Mar 31 08:43:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=841E99CD310AAADCDCB4EBA80CD893BF3ABEC6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:59:bf:ce:21:1f:58:3f:a9:3e:98:a4:d2: d0:c5:c0:f3:c2:79:a5:a1:08:10:58:20:c8:57:9d: 4a:3f:37:38:2d:36:be:6b:23:6f:8d:7f:d7:0f:89: a9:d5:46:62:91:02:4d:17:e5:f3:9e:d7:55:47:b1: 45:45:5d:f6:0d:bd:b8:5c:46:3b:7f:a6:dd:e7:0c: e2:1d:fa:bf:75:02:0c:17:35:48:98:43:d2:81:92: b9:44:c2:8f:6a:71:f4:95:8f:bc:96:47:8b:ae:1c: f0:68:ec:13:99:82:02:2b:d1:57:7c:b3:54:fa:d5: 3e:a4:d8:49:4d:56:75:12:eb:bc:39:ac:f6:75:77: 1b:6c:d9:12:a1:f6:e7:34:5c:36:a2:c8:b1:a6:eb: aa:0e:00:e4:12:b7:b4:8d:19:f2:9c:94:29:77:39: 78:4e:58:b2:55:35:07:06:39:cf:46:bf:2e:d2:42: 28:8f:66:83:00:22:a9:b4:2a:d2:ce:81:77:f3:a1: c6:02:e3:a5:7a:50:1b:30:2e:bb:ce:e9:67:3b:ad: 94:e7:19:6f:cf:9f:87:58:e4:a5:30:56:81:f1:99: 1d:3c:8b:04:62:79:2e:7d:35:16:a1:36:97:5d:fc: c3:a7:f7:0f:ca:71:e4:68:f9:66:4d:ab:11:1c:84: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:99:CD:31:0A:AA:DC:DC:B4:EB:A8:0C:D8:93:BF:3A:BE:C6:C4 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/hB6ZzTEKqtzctOuoDNiTvzq-xsQ.roa sbgp-ipAddrBlock: critical IPv4: 192.58.16.0/23 Signature Algorithm: sha256WithRSAEncryption 39:d5:57:f8:b8:66:ed:d4:a4:4e:2c:37:32:6f:55:10:7c:8e: 15:53:36:e0:09:91:a2:75:a7:a8:7a:f8:66:2d:01:f0:a7:66: 13:9e:b9:0e:b6:e5:3c:22:18:f7:4c:d0:7b:75:14:a7:aa:88: 96:ef:dc:7b:c6:82:2a:de:4f:dd:a7:ab:1e:c9:1b:8b:51:2e: 80:62:c6:05:d4:fa:51:36:17:cc:9a:b4:f3:64:98:19:f5:9f: 6c:03:a2:c6:d5:41:02:73:88:19:91:7a:5e:05:50:9c:cf:de: e4:a1:a8:66:8b:5f:1b:77:3a:0c:2d:3c:af:33:82:0f:d3:4a: df:3d:ef:5d:fe:28:51:8c:7a:24:f8:54:a9:3a:12:f4:4b:0d: cb:84:34:89:93:f7:3f:73:5d:90:73:3a:19:9f:ab:50:3c:6d: 97:d9:e1:86:ba:b6:dd:30:c7:88:49:7c:f1:bf:c0:77:4e:e9: 0b:b9:13:2e:20:bd:78:f9:e9:d4:b3:d4:83:0d:d6:9d:a0:47: dd:a0:6a:f4:3d:55:3d:ed:78:26:e1:6e:35:f1:f5:e9:b5:f6: d2:c8:3c:2d:9c:d2:72:f0:ab:52:7e:f6:e0:c6:14:12:76:e2: ec:7d:07:c1:f2:3b:46:1c:b6:e9:37:ce:9b:68:bc:0b:96:17: da:36:c2:6b -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI2MDMzMTA4 NDMxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODQxRTk5Q0QzMTBBQUFE Q0RDQjRFQkE4MENEODkzQkYzQUJFQzZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmMWb/OIR9YP6k+mKTS0MXA88J5paEIEFggyFedSj83OC02vmsj b41/1w+JqdVGYpECTRfl857XVUexRUVd9g29uFxGO3+m3ecM4h36v3UCDBc1SJhD 0oGSuUTCj2px9JWPvJZHi64c8GjsE5mCAivRV3yzVPrVPqTYSU1WdRLrvDms9nV3 G2zZEqH25zRcNqLIsabrqg4A5BK3tI0Z8pyUKXc5eE5YslU1BwY5z0a/LtJCKI9m gwAiqbQq0s6Bd/OhxgLjpXpQGzAuu87pZzutlOcZb8+fh1jkpTBWgfGZHTyLBGJ5 Ln01FqE2l138w6f3D8px5Gj5Zk2rERyEXIMCAwEAAaOCAdswggHXMB0GA1UdDgQW BBSEHpnNMQqq3Ny066gM2JO/Or7GxDAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjE2Ni9oQjZaelRFS3F0emN0T3VvRE5pVHZ6cS14c1Eucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDoQMA0GCSqGSIb3DQEBCwUAA4IB AQA51Vf4uGbt1KROLDcyb1UQfI4VUzbgCZGidaeoevhmLQHwp2YTnrkOtuU8Ihj3 TNB7dRSnqoiW79x7xoIq3k/dp6seyRuLUS6AYsYF1PpRNhfMmrTzZJgZ9Z9sA6LG 1UECc4gZkXpeBVCcz97koahmi18bdzoMLTyvM4IP00rfPe9d/ihRjHok+FSpOhL0 Sw3LhDSJk/c/c12QczoZn6tQPG2X2eGGurbdMMeISXzxv8B3TukLuRMuIL14+enU s9SDDdadoEfdoGr0PVU97Xgm4W418fXptfbSyDwtnNJy8KtSfvbgxhQSduLsfQfB 8jtGHLbpN86baLwLlhfaNsJr -----END CERTIFICATE-----Generated at Fri Apr 17 18:23:20 2026 by rpki-client