$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/iAa8SfnOnCJ9YluNlqqAEGzp2Ww.roa File: iAa8SfnOnCJ9YluNlqqAEGzp2Ww.roa (raw, json) Hash identifier: xCQQRkd/inciG/HNJCsMT9LkUnKql9Wmh+Ksf1cDg0U= Subject key identifier: 88:06:BC:49:F9:CE:9C:22:7D:62:5B:8D:96:AA:80:10:6C:E9:D9:6C Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 36 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/iAa8SfnOnCJ9YluNlqqAEGzp2Ww.roa Signing time: Tue 31 Mar 2026 08:43:17 +0000 ROA not before: Tue 31 Mar 2026 08:43:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2907 IP address blocks: 192.58.12.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Mar 31 08:43:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8806BC49F9CE9C227D625B8D96AA80106CE9D96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e9:33:b8:26:24:33:c9:48:e3:ab:2a:2f:2a: 89:93:9d:02:d4:08:7d:a5:83:d2:41:e1:0c:c0:72: 18:cf:f2:e2:27:36:f4:35:1d:49:78:8b:83:11:6f: e9:b5:14:53:53:d3:d1:3d:b9:7f:a2:fb:e2:d1:0e: 58:c1:9e:04:30:5f:f7:1b:d3:f0:9e:94:0c:38:eb: a3:2a:ff:65:19:84:2f:8d:00:1f:1a:83:8a:99:00: ba:c2:61:52:e4:3f:7c:57:49:f6:cf:d2:d6:65:1d: 26:23:8c:18:37:67:36:49:9c:3c:e8:2f:95:cd:7e: 0f:f1:09:53:f0:c5:cc:c1:74:5a:eb:30:65:27:6d: 08:38:c9:68:82:bc:30:7a:cb:c0:ba:14:e5:38:f9: 4c:67:e9:6d:a8:e0:87:97:29:9f:af:4b:6c:71:6a: b3:5c:60:dd:90:1d:d9:5b:0e:04:ff:62:9f:d8:05: 08:ce:ba:2f:d8:a6:28:41:28:e7:b6:ff:e6:46:eb: 12:f0:e7:a8:7f:f7:4b:94:ba:59:c8:36:89:ee:5a: e4:c2:e4:80:a9:e2:f7:bc:f0:8e:5d:fa:ad:d7:54: 69:b7:6b:9a:53:2c:d5:32:cc:6d:36:4d:be:75:1f: b9:0c:51:37:8b:be:40:9c:ff:b8:7a:e8:94:63:33: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:06:BC:49:F9:CE:9C:22:7D:62:5B:8D:96:AA:80:10:6C:E9:D9:6C X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/iAa8SfnOnCJ9YluNlqqAEGzp2Ww.roa sbgp-ipAddrBlock: critical IPv4: 192.58.12.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:a6:88:b8:2c:6b:2c:9c:1a:91:62:7e:de:e1:8d:e6:39:87: 0f:49:a8:c8:75:ba:18:0a:5a:21:ac:6c:c4:54:1c:2b:c5:13: 2f:8f:43:ca:8e:99:3c:f0:4b:c1:25:15:29:42:78:1a:35:16: fd:18:19:49:bb:51:9a:23:2a:5b:17:66:0c:0d:5d:3e:12:7e: c9:96:5b:a5:f7:2b:e5:55:d5:a2:8c:d2:98:fc:67:25:6d:c9: 13:c4:27:bd:00:08:c8:07:7e:d8:d1:88:88:a1:db:4f:20:d1: 09:f7:d0:f2:6d:de:e5:79:26:35:95:13:6d:5b:18:8b:be:72: 46:84:d8:17:ad:3b:09:1b:5f:ad:01:9c:a5:bd:bf:20:7b:48: 51:c9:b4:42:99:0e:73:3c:7a:d0:5b:dd:e0:e0:d6:53:71:d9: 70:27:51:5d:23:84:06:29:41:52:0a:57:65:9b:e3:f7:08:c4: d2:fd:70:9e:48:23:93:67:e1:8b:3c:6d:48:8b:90:9c:cb:4c: 29:0e:a0:80:37:59:20:b2:ae:b7:86:8f:82:6b:71:fc:57:ea: a3:fb:b8:9f:aa:72:b9:9a:c5:cd:0f:49:a8:eb:62:f9:71:84: 16:d7:3b:c4:cc:51:6c:12:b7:08:97:b3:af:db:52:f3:5e:83: ca:a5:f2:2e -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI2MDMzMTA4 NDMxN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODgwNkJDNDlGOUNFOUMy MjdENjI1QjhEOTZBQTgwMTA2Q0U5RDk2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOfpM7gmJDPJSOOrKi8qiZOdAtQIfaWD0kHhDMByGM/y4ic29DUd SXiLgxFv6bUUU1PT0T25f6L74tEOWMGeBDBf9xvT8J6UDDjroyr/ZRmEL40AHxqD ipkAusJhUuQ/fFdJ9s/S1mUdJiOMGDdnNkmcPOgvlc1+D/EJU/DFzMF0WuswZSdt CDjJaIK8MHrLwLoU5Tj5TGfpbajgh5cpn69LbHFqs1xg3ZAd2VsOBP9in9gFCM66 L9imKEEo57b/5kbrEvDnqH/3S5S6Wcg2ie5a5MLkgKni97zwjl36rddUabdrmlMs 1TLMbTZNvnUfuQxRN4u+QJz/uHrolGMzZwsCAwEAAaOCAdswggHXMB0GA1UdDgQW BBSIBrxJ+c6cIn1iW42WqoAQbOnZbDAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjE2Ni9pQWE4U2ZuT25DSjlZbHVObHFxQUVHenAyV3cucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDoMMA0GCSqGSIb3DQEBCwUAA4IB AQA+poi4LGssnBqRYn7e4Y3mOYcPSajIdboYClohrGzEVBwrxRMvj0PKjpk88EvB JRUpQngaNRb9GBlJu1GaIypbF2YMDV0+En7Jllul9yvlVdWijNKY/GclbckTxCe9 AAjIB37Y0YiIodtPINEJ99Dybd7leSY1lRNtWxiLvnJGhNgXrTsJG1+tAZylvb8g e0hRybRCmQ5zPHrQW93g4NZTcdlwJ1FdI4QGKUFSCldlm+P3CMTS/XCeSCOTZ+GL PG1Ii5Ccy0wpDqCAN1kgsq63ho+Ca3H8V+qj+7ifqnK5msXND0mo62L5cYQW1zvE zFFsErcIl7Ov21LzXoPKpfIu -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:16 2026 by rpki-client