$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Oc-Gkil1MAkVMkWHJaSncHi3M5o.roa File: Oc-Gkil1MAkVMkWHJaSncHi3M5o.roa (raw, json) Hash identifier: mLhXEoJKv5mfjgHaSpNUqjdZVUjPWEOQz+MyYo72yoE= Subject key identifier: 39:CF:86:92:29:75:30:09:15:32:45:87:25:A4:A7:70:78:B7:33:9A Certificate issuer: /CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Certificate serial: 56 Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Oc-Gkil1MAkVMkWHJaSncHi3M5o.roa Signing time: Tue 31 Mar 2026 07:39:27 +0000 ROA not before: Tue 31 Mar 2026 07:39:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2518 IP address blocks: 192.47.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324 Validity Not Before: Mar 31 07:39:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=39CF8692297530091532458725A4A77078B7339A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:60:05:b6:75:cc:db:ff:71:5a:20:eb:30: 8a:6c:97:a7:a6:09:37:72:0e:4f:49:87:83:aa:aa: 70:42:23:8e:ad:dd:e6:ac:74:89:40:40:00:10:35: 74:4f:40:51:60:84:bc:58:22:a9:92:ad:bf:09:c0: bd:53:d7:f8:d1:3a:00:de:89:ce:0e:98:d4:31:3a: 1e:4c:d0:69:cd:f7:64:ef:d1:e9:33:5e:18:f3:e5: d8:0f:b5:a7:28:29:a4:c9:80:38:84:3f:45:55:77: 00:49:f4:e6:fa:ac:42:0b:a9:e6:f1:0d:46:81:1a: b1:d7:f8:d8:15:e2:93:65:41:28:1d:13:34:47:2d: 79:28:48:a4:13:99:1a:44:8c:18:27:94:1c:26:5a: b2:4b:e5:43:9e:ef:63:7b:f9:2e:fd:e2:95:6e:13: 96:b4:6e:d6:38:d4:a1:ad:d1:6c:a7:99:5b:5b:76: 1a:89:19:27:ea:23:ea:47:20:f7:f0:2e:46:28:43: af:d2:0c:47:e5:e4:35:f0:c0:62:a8:c0:6a:a3:ae: 32:4a:37:1c:4f:1f:6c:4a:86:51:69:69:74:af:af: 4d:83:61:e3:10:28:26:b8:4a:34:39:61:14:46:16: 09:89:c6:b0:09:51:3f:9a:05:54:b7:35:ef:11:f8: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CF:86:92:29:75:30:09:15:32:45:87:25:A4:A7:70:78:B7:33:9A X509v3 Authority Key Identifier: keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Oc-Gkil1MAkVMkWHJaSncHi3M5o.roa sbgp-ipAddrBlock: critical IPv4: 192.47.117.0/24 Signature Algorithm: sha256WithRSAEncryption 83:19:41:96:5a:4f:f7:33:e6:d4:4a:9a:a1:e0:19:9f:aa:e7: 26:3a:9b:69:d2:4f:72:1a:5a:63:62:98:cf:ad:e1:f5:a4:e2: da:99:24:93:9e:97:c2:fe:95:cb:18:8e:f0:0e:e2:0e:a6:2b: da:17:80:e2:98:5d:ad:5e:ca:1b:8e:ff:65:5b:d5:84:96:aa: e1:2b:c1:4d:78:21:52:ce:2a:51:31:e1:54:b0:d9:3b:75:40: 2f:fb:94:9e:7a:1f:d9:a0:e9:4c:87:24:25:b7:56:d3:98:1d: 93:a3:1f:09:e6:47:b8:94:fb:e5:37:8a:48:37:aa:ec:e4:a1: 03:e8:e1:c0:d0:e9:a6:d1:b0:a2:c1:0a:9f:51:4d:43:66:4e: d3:f3:0b:76:3d:f9:0b:ec:7e:00:cd:1e:ae:f7:72:df:96:7b: a2:ac:e0:d4:67:53:73:bd:4f:36:0e:af:b1:e8:3b:70:33:12: 0a:e1:d4:a9:74:86:b8:10:47:98:c5:8f:26:8b:b4:1a:33:c1: c0:8e:80:5b:b1:47:ac:c3:62:17:6f:12:81:25:80:00:35:76: d9:12:ba:46:6a:9c:28:3a:e5:d1:27:70:07:63:c7:7e:05:07: 20:1b:c7:01:5e:cc:71:c9:1c:d1:52:41:31:ad:bb:d6:56:6f: fb:4d:69:ed -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTE0 NjBEMjY4OEY2RDEwNjhCOTdDMUY5MTQwNDA0MzRCOEYwMzI0MB4XDTI2MDMzMTA3 MzkyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzlDRjg2OTIyOTc1MzAw OTE1MzI0NTg3MjVBNEE3NzA3OEI3MzM5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL0nYAW2dczb/3FaIOswimyXp6YJN3IOT0mHg6qqcEIjjq3d5qx0 iUBAABA1dE9AUWCEvFgiqZKtvwnAvVPX+NE6AN6Jzg6Y1DE6HkzQac33ZO/R6TNe GPPl2A+1pygppMmAOIQ/RVV3AEn05vqsQgup5vENRoEasdf42BXik2VBKB0TNEct eShIpBOZGkSMGCeUHCZaskvlQ57vY3v5Lv3ilW4TlrRu1jjUoa3RbKeZW1t2GokZ J+oj6kcg9/AuRihDr9IMR+XkNfDAYqjAaqOuMko3HE8fbEqGUWlpdK+vTYNh4xAo JrhKNDlhFEYWCYnGsAlRP5oFVLc17xH4sXsCAwEAAaOCAdswggHXMB0GA1UdDgQW BBQ5z4aSKXUwCRUyRYclpKdweLczmjAfBgNVHSMEGDAWgBSeFGDSaI9tEGi5fB+R QEBDS48DJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9uaFJnMG1pUGJSQm91WHdma1VCQVEw dVBBeVEuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjI1MS9PYy1Ha2lsMU1Ba1ZNa1dISmFTbmNIaTNNNW8ucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC91MA0GCSqGSIb3DQEBCwUAA4IB AQCDGUGWWk/3M+bUSpqh4BmfqucmOptp0k9yGlpjYpjPreH1pOLamSSTnpfC/pXL GI7wDuIOpivaF4DimF2tXsobjv9lW9WElqrhK8FNeCFSzipRMeFUsNk7dUAv+5Se eh/ZoOlMhyQlt1bTmB2Tox8J5ke4lPvlN4pIN6rs5KED6OHA0Omm0bCiwQqfUU1D Zk7T8wt2PfkL7H4AzR6u93LflnuirODUZ1NzvU82Dq+x6DtwMxIK4dSpdIa4EEeY xY8mi7QaM8HAjoBbsUesw2IXbxKBJYAANXbZErpGapwoOuXRJ3AHY8d+BQcgG8cB XsxxyRzRUkExrbvWVm/7TWnt -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:40 2026 by rpki-client