$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/cHKO0KCzE6H1n0_Y4RuDP9rYvZA.roa File: cHKO0KCzE6H1n0_Y4RuDP9rYvZA.roa (raw, json) Hash identifier: Y3wx7jwujE9o9NQen0C8LE0ZSdewsGt/YkbdWUY3LXw= Subject key identifier: 70:72:8E:D0:A0:B3:13:A1:F5:9F:4F:D8:E1:1B:83:3F:DA:D8:BD:90 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 5B Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/cHKO0KCzE6H1n0_Y4RuDP9rYvZA.roa Signing time: Tue 31 Mar 2026 08:16:31 +0000 ROA not before: Tue 31 Mar 2026 08:16:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7672 IP address blocks: 101.96.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: Mar 31 08:16:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=70728ED0A0B313A1F59F4FD8E11B833FDAD8BD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:c7:3b:b4:3e:78:a6:62:1b:e6:0d:84:6a: 1d:ff:48:7d:7c:5f:66:de:a0:73:e7:7e:87:a2:71: 62:3f:12:86:6c:f8:0e:dc:16:f7:51:f1:e2:d0:4d: bd:44:b1:0f:38:4e:89:05:88:93:68:cd:b7:98:57: 26:61:3a:4c:2d:c3:88:b9:70:dc:e7:04:2e:1c:e9: e9:e4:03:67:ff:5b:aa:1c:f9:fc:42:3f:0f:46:72: da:3b:70:92:75:80:32:b0:31:9d:af:c0:d3:5c:ff: a1:ab:46:96:d7:dc:fa:69:d9:a8:b7:10:52:91:bd: 36:4a:92:c6:b0:3d:9a:2f:41:a4:4b:0e:1f:58:09: 77:6f:85:fd:58:d8:90:97:57:eb:af:a9:5c:b5:97: 29:4f:bf:d4:e6:c5:fd:62:9d:a7:5a:d0:39:6b:96: 18:20:d6:37:e1:47:8a:09:46:e5:e9:2d:06:e8:58: 15:1b:4a:b4:eb:b9:a2:c6:17:e1:d3:69:91:54:55: 38:8d:ca:18:ec:a9:40:0b:78:83:43:87:e4:b5:68: b4:9a:22:5f:c6:83:3d:cc:21:ba:16:7b:a7:cf:e5: 08:a2:50:4d:32:7f:39:3c:f5:81:3c:63:4c:d2:51: fd:bb:a8:f8:c9:87:de:e3:fa:4f:80:5e:2a:3c:d2: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:8E:D0:A0:B3:13:A1:F5:9F:4F:D8:E1:1B:83:3F:DA:D8:BD:90 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/cHKO0KCzE6H1n0_Y4RuDP9rYvZA.roa sbgp-ipAddrBlock: critical IPv4: 101.96.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2b:c8:a5:96:95:d9:57:58:49:6d:5a:88:fd:57:20:d6:ed:95: 21:fb:0c:1e:ef:38:e5:a4:e0:46:44:93:28:53:6d:cf:9a:41: 11:19:4c:28:64:a5:28:41:e7:0b:77:56:0e:75:4c:4c:62:07: 35:9c:03:6d:04:d3:44:17:4c:c6:d7:ea:14:95:0b:d0:38:7e: e5:48:7c:6b:34:d4:79:e0:59:fe:b7:8d:13:59:27:c3:65:98: 0b:8e:79:ad:e1:43:53:9a:6f:3c:71:a4:a0:8b:d7:48:c8:aa: 9b:9a:a2:7d:61:ca:67:63:00:4d:8f:ba:47:61:0a:5b:c9:6d: b7:91:ad:ca:8d:f3:6c:4a:ba:ff:e8:19:23:01:5a:71:a5:84: f5:9b:15:2e:05:e7:89:11:7a:47:28:66:50:76:5e:ef:ce:f8: 0c:87:23:08:44:6c:a2:71:84:fa:9a:f0:a7:8c:29:93:68:3d: 73:6d:fe:6a:13:cc:7c:84:eb:38:c1:8f:a3:a2:dd:a2:62:f1: 7d:51:22:49:da:3a:5a:6f:dc:06:8b:cd:42:e6:10:62:d1:19: a4:e1:47:27:15:61:36:b7:49:38:a7:c3:c8:d0:df:e5:5e:92: 63:d3:0d:af:99:c2:1d:b6:86:a1:16:7e:53:df:de:7f:e5:44: 6c:fe:c1:0b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MDMzMTA4 MTYzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzA3MjhFRDBBMEIzMTNB MUY1OUY0RkQ4RTExQjgzM0ZEQUQ4QkQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANaXxzu0PnimYhvmDYRqHf9IfXxfZt6gc+d+h6JxYj8Shmz4DtwW 91Hx4tBNvUSxDzhOiQWIk2jNt5hXJmE6TC3DiLlw3OcELhzp6eQDZ/9bqhz5/EI/ D0Zy2jtwknWAMrAxna/A01z/oatGltfc+mnZqLcQUpG9NkqSxrA9mi9BpEsOH1gJ d2+F/VjYkJdX66+pXLWXKU+/1ObF/WKdp1rQOWuWGCDWN+FHiglG5ektBuhYFRtK tOu5osYX4dNpkVRVOI3KGOypQAt4g0OH5LVotJoiX8aDPcwhuhZ7p8/lCKJQTTJ/ OTz1gTxjTNJR/buo+MmH3uP6T4BeKjzSngkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRwco7QoLMTofWfT9jhG4M/2ti9kDAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yMzIvY0hLTzBLQ3pFNkgxbjBfWTRSdURQOXJZdlpBLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWVgIDANBgkqhkiG9w0BAQsFAAOCAQEA K8illpXZV1hJbVqI/Vcg1u2VIfsMHu845aTgRkSTKFNtz5pBERlMKGSlKEHnC3dW DnVMTGIHNZwDbQTTRBdMxtfqFJUL0Dh+5Uh8azTUeeBZ/reNE1knw2WYC455reFD U5pvPHGkoIvXSMiqm5qifWHKZ2MATY+6R2EKW8ltt5Gtyo3zbEq6/+gZIwFacaWE 9ZsVLgXniRF6RyhmUHZe7874DIcjCERsonGE+prwp4wpk2g9c23+ahPMfITrOMGP o6LdomLxfVEiSdo6Wm/cBovNQuYQYtEZpOFHJxVhNrdJOKfDyNDf5V6SY9MNr5nC HbaGoRZ+U9/ef+VEbP7BCw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:55 2026 by rpki-client