$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/VkOVMhHP3zJQR67cvYI7vGAarZY.roa File: VkOVMhHP3zJQR67cvYI7vGAarZY.roa (raw, json) Hash identifier: X6Qht9kQ4bg6UCavMAntHjr09g5Pbi/b59CvC6SpZe4= Subject key identifier: 56:43:95:32:11:CF:DF:32:50:47:AE:DC:BD:82:3B:BC:60:1A:AD:96 Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 7D Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/VkOVMhHP3zJQR67cvYI7vGAarZY.roa Signing time: Tue 31 Mar 2026 07:29:16 +0000 ROA not before: Tue 31 Mar 2026 07:29:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7687 IP address blocks: 160.246.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: Mar 31 07:29:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5643953211CFDF325047AEDCBD823BBC601AAD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:a0:aa:14:70:68:25:30:96:e4:08:16:be: 39:f4:a1:ab:e8:db:51:20:b1:90:e6:16:ba:a6:85: 2e:83:20:fa:32:02:29:fb:ac:0a:f0:d2:8a:dc:6b: b3:0a:9b:fe:9e:30:9a:a9:20:43:a8:df:04:02:a1: 07:82:64:fa:9a:3c:bc:98:c0:29:ce:a5:62:ec:c5: f4:2f:60:66:7b:7d:d1:38:f7:ff:20:eb:c0:1b:d9: 8b:68:7e:04:fd:2f:3e:66:60:de:55:36:e7:ae:f9: ea:04:f8:8b:6b:da:94:05:f0:7c:00:6c:20:18:a9: 25:38:19:71:83:25:31:b7:cf:5d:f0:1d:1d:32:16: 47:6d:e8:a3:ef:ae:ba:22:47:8c:8b:5d:59:85:72: bc:53:c3:d0:a9:74:03:3f:59:7d:b9:52:d6:62:7c: 1d:6f:52:c1:c3:7a:31:7d:76:cf:8d:f9:47:57:94: 10:4c:6c:15:4d:09:d0:69:b2:4c:94:06:3b:73:a1: 18:86:32:5e:d3:79:49:c4:10:cc:e1:7e:df:bf:1a: 7c:2b:57:49:aa:87:d9:4b:99:a7:a6:06:a2:c6:2c: a8:6b:0d:2a:9f:13:eb:7f:7f:6c:29:9d:71:a4:55: 7d:c1:43:7d:53:62:44:18:21:74:63:6b:3e:07:de: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:95:32:11:CF:DF:32:50:47:AE:DC:BD:82:3B:BC:60:1A:AD:96 X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/VkOVMhHP3zJQR67cvYI7vGAarZY.roa sbgp-ipAddrBlock: critical IPv4: 160.246.128.0/18 Signature Algorithm: sha256WithRSAEncryption 60:c2:bb:3f:32:a3:99:1e:a0:59:46:5b:1f:34:b2:d7:0e:75: 1b:18:51:c8:0f:dc:2e:14:48:95:cd:73:2c:a6:2d:d8:65:e1: 23:50:ae:27:66:fa:28:52:08:b1:1d:f6:35:18:98:9a:ae:0c: ed:86:e4:0d:c2:bf:1b:bf:71:eb:51:2c:3e:c3:d6:d9:fb:5f: 28:e6:8c:e0:58:5d:4b:cb:e3:ee:0d:55:b5:85:52:c9:1d:7b: 56:7c:bd:b5:28:bb:f5:1a:74:e9:07:89:7e:07:ca:8d:cf:27: 07:36:1f:5b:2f:98:56:08:36:33:60:83:d2:1e:30:69:c3:f7: 67:a0:56:5e:e1:77:6a:11:c8:77:7b:61:50:66:e7:de:a9:73: 53:1b:76:1e:2c:a9:bc:0f:07:fa:78:22:1f:27:16:59:01:7d: 74:dc:e3:30:98:62:ae:28:3e:34:6b:ca:48:44:ba:91:1a:fe: e1:a3:57:7c:cd:a6:0b:22:22:01:11:f7:3b:17:08:65:79:42: 64:9f:76:1f:91:c9:f9:3f:47:a3:3c:63:8e:6c:ce:6a:7a:78: 38:d5:7d:a3:8e:1a:84:30:c3:0c:ee:3b:66:4d:e5:dd:c2:c2: 93:72:b2:d2:36:dc:2f:c4:3b:8b:a3:44:20:83:8f:4d:a5:92: e4:4a:96:97 -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI2MDMzMTA3 MjkxNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTY0Mzk1MzIxMUNGREYz MjUwNDdBRURDQkQ4MjNCQkM2MDFBQUQ5NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/ToKoUcGglMJbkCBa+OfShq+jbUSCxkOYWuqaFLoMg+jICKfus CvDSitxrswqb/p4wmqkgQ6jfBAKhB4Jk+po8vJjAKc6lYuzF9C9gZnt90Tj3/yDr wBvZi2h+BP0vPmZg3lU256756gT4i2valAXwfABsIBipJTgZcYMlMbfPXfAdHTIW R23oo++uuiJHjItdWYVyvFPD0Kl0Az9ZfblS1mJ8HW9SwcN6MX12z435R1eUEExs FU0J0GmyTJQGO3OhGIYyXtN5ScQQzOF+378afCtXSaqH2UuZp6YGosYsqGsNKp8T 639/bCmdcaRVfcFDfVNiRBghdGNrPgfe4YECAwEAAaOCAdswggHXMB0GA1UdDgQW BBRWQ5UyEc/fMlBHrty9gju8YBqtljAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjQ5MC9Wa09WTWhIUDN6SlFSNjdjdllJN3ZHQWFyWlkucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoPaAMA0GCSqGSIb3DQEBCwUAA4IB AQBgwrs/MqOZHqBZRlsfNLLXDnUbGFHID9wuFEiVzXMspi3YZeEjUK4nZvooUgix HfY1GJiargzthuQNwr8bv3HrUSw+w9bZ+18o5ozgWF1Ly+PuDVW1hVLJHXtWfL21 KLv1GnTpB4l+B8qNzycHNh9bL5hWCDYzYIPSHjBpw/dnoFZe4XdqEch3e2FQZufe qXNTG3YeLKm8Dwf6eCIfJxZZAX103OMwmGKuKD40a8pIRLqRGv7ho1d8zaYLIiIB Efc7FwhleUJkn3Yfkcn5P0ejPGOObM5qeng41X2jjhqEMMMM7jtmTeXdwsKTcrLS NtwvxDuLo0Qgg49NpZLkSpaX -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:58 2026 by rpki-client