$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/0p8VoX3-aOqLEsz7P0774cbdGc0.roa File: 0p8VoX3-aOqLEsz7P0774cbdGc0.roa (raw, json) Hash identifier: kFBxTuNNugzFCuGbouKEInF7aVAIupmQFwaOAIoLmIA= Subject key identifier: D2:9F:15:A1:7D:FE:68:EA:8B:12:CC:FB:3F:4E:FB:E1:C6:DD:19:CD Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: FD Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0p8VoX3-aOqLEsz7P0774cbdGc0.roa Signing time: Tue 31 Mar 2026 08:17:09 +0000 ROA not before: Tue 31 Mar 2026 08:17:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D29F15A17DFE68EA8B12CCFB3F4EFBE1C6DD19CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:e7:03:55:e9:0c:42:05:f6:ee:53:91:5a: 47:c8:7e:02:f4:61:38:1e:d7:31:27:18:50:03:c0: 32:62:fc:12:58:d9:b8:6b:4a:3b:c3:91:af:8a:36: 7e:be:90:2a:aa:6d:3f:fe:40:48:03:cf:38:ba:cb: 9e:52:c6:ec:f9:b1:a3:73:24:d6:ce:1f:41:45:e8: 1e:c6:10:51:b2:3a:43:8c:e2:4f:95:44:53:76:ef: 7c:91:b8:33:13:76:1c:9e:9b:cd:0c:aa:83:a1:43: dd:34:b3:99:50:36:75:71:01:0f:d6:8d:1a:73:6c: a8:2a:7c:f8:34:2b:61:7c:ad:ea:a5:ce:47:b8:cd: 36:d1:ec:38:92:dd:68:d4:04:5b:f0:fb:9b:a6:07: f9:1b:dc:79:c0:a4:28:ee:30:f5:e5:ec:9a:25:af: da:aa:56:86:71:58:c7:33:44:b5:b4:02:44:c1:a2: 36:20:f9:c1:a5:8d:d3:e4:28:67:73:5c:8f:7a:ee: 4d:10:50:dd:96:db:bf:4f:22:33:dd:ef:79:dc:ae: fc:1d:47:be:62:d8:be:cd:25:61:f0:fb:33:e6:cc: 9f:42:0b:52:49:02:f8:a8:ee:3f:22:dc:aa:77:f2: fc:87:85:64:e4:4c:95:83:d8:e7:e8:38:62:88:9e: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:15:A1:7D:FE:68:EA:8B:12:CC:FB:3F:4E:FB:E1:C6:DD:19:CD X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0p8VoX3-aOqLEsz7P0774cbdGc0.roa sbgp-ipAddrBlock: critical IPv4: 160.248.14.0/23 Signature Algorithm: sha256WithRSAEncryption b5:56:78:f5:e9:69:4e:b2:32:8b:93:30:8c:7a:4a:f1:ee:f1: 27:01:3b:79:83:f2:99:f0:9b:0b:d7:6a:1a:8b:c4:3c:65:4b: b8:ba:8c:1d:67:14:86:c1:34:ee:3d:eb:cd:7e:b7:11:19:b7: dc:45:f0:70:c9:01:5f:c8:df:94:d1:07:13:98:1e:a7:77:8f: b8:fd:ae:e6:09:d5:3b:7e:6a:8e:07:c1:6c:7d:7e:17:7e:6b: f2:48:99:49:1d:61:87:09:14:59:7a:af:8a:06:78:85:c4:87: 3d:7a:04:ea:7d:e3:6f:41:be:29:7d:96:61:05:0c:fb:ee:0b: 4f:de:3c:0d:41:28:b2:08:55:6d:2d:01:b9:a4:ef:00:60:26: 2b:15:80:77:ec:80:f0:91:04:07:27:9e:74:2d:f8:dd:aa:a3: b4:74:e9:9f:98:5a:9b:bb:c2:61:0f:76:ca:0d:1d:d6:1d:cf: 1f:ef:d4:87:59:42:f2:55:f5:f8:e6:82:a3:1d:79:4e:93:97: d0:df:97:0a:10:e9:f0:a4:c6:d7:7f:66:74:67:51:b4:40:3b: a7:1d:2f:98:c3:b8:6d:f8:64:91:46:62:21:d1:78:c1:8f:6c: 93:ba:82:e4:70:c1:7c:52:db:f5:4d:f9:75:00:3b:ce:f6:cb: 47:3b:91:59 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyOUYxNUExN0RGRTY4 RUE4QjEyQ0NGQjNGNEVGQkUxQzZERDE5Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA+ucDVekMQgX27lORWkfIfgL0YTge1zEnGFADwDJi/BJY2bhr SjvDka+KNn6+kCqqbT/+QEgDzzi6y55Sxuz5saNzJNbOH0FF6B7GEFGyOkOM4k+V RFN273yRuDMTdhyem80MqoOhQ900s5lQNnVxAQ/WjRpzbKgqfPg0K2F8reqlzke4 zTbR7DiS3WjUBFvw+5umB/kb3HnApCjuMPXl7Jolr9qqVoZxWMczRLW0AkTBojYg +cGljdPkKGdzXI967k0QUN2W279PIjPd73ncrvwdR75i2L7NJWHw+zPmzJ9CC1JJ Avio7j8i3Kp38vyHhWTkTJWD2OfoOGKInk35AgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQU0p8VoX3+aOqLEsz7P0774cbdGc0wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS8wcDhWb1gzLWFPcUxFc3o3UDA3NzRjYmRHYzAucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoPgOMA0GCSqGSIb3DQEBCwUAA4IBAQC1 Vnj16WlOsjKLkzCMekrx7vEnATt5g/KZ8JsL12oai8Q8ZUu4uowdZxSGwTTuPevN frcRGbfcRfBwyQFfyN+U0QcTmB6nd4+4/a7mCdU7fmqOB8FsfX4XfmvySJlJHWGH CRRZeq+KBniFxIc9egTqfeNvQb4pfZZhBQz77gtP3jwNQSiyCFVtLQG5pO8AYCYr FYB37IDwkQQHJ550LfjdqqO0dOmfmFqbu8JhD3bKDR3WHc8f79SHWULyVfX45oKj HXlOk5fQ35cKEOnwpMbXf2Z0Z1G0QDunHS+Yw7ht+GSRRmIh0XjBj2yTuoLkcMF8 Utv1Tfl1ADvO9stHO5FZ -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:24 2026 by rpki-client