$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/363C1crWuXK-Q6-HaFYQ5oDVyKQ.roa File: 363C1crWuXK-Q6-HaFYQ5oDVyKQ.roa (raw, json) Hash identifier: a8yl6SNwiS8zpQ4A+7nLTYh1Z0Qkja+8cywtOWzCIjQ= Subject key identifier: DF:AD:C2:D5:CA:D6:B9:72:BE:43:AF:87:68:56:10:E6:80:D5:C8:A4 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 0126 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/363C1crWuXK-Q6-HaFYQ5oDVyKQ.roa Signing time: Tue 31 Mar 2026 08:17:27 +0000 ROA not before: Tue 31 Mar 2026 08:17:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.160.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DFADC2D5CAD6B972BE43AF87685610E680D5C8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:f2:e1:c2:f8:fe:41:3f:24:29:3d:0e:0f: 22:56:12:58:80:7e:9d:a7:04:36:50:0b:24:cf:3f: 2f:b1:0f:ec:c7:72:1c:fc:19:bb:cb:ae:96:fb:cc: de:e8:12:fa:f1:9d:a8:0f:e9:61:e6:c1:a5:50:84: 9c:c8:f5:83:66:9d:23:80:32:ed:9f:e6:4e:73:8d: aa:17:24:fb:33:a5:ce:ef:85:bc:15:8b:6d:f5:8f: 52:c3:20:3e:95:65:75:99:f7:a7:03:ad:90:67:f5: c4:cb:d6:dd:1e:e6:72:fb:1c:4d:24:1f:10:dd:a6: be:9b:42:99:71:f8:48:03:31:95:20:21:98:cc:c2: 60:75:77:25:5b:6d:f0:d4:b8:db:fc:bc:06:cf:f7: cd:ec:91:51:89:0d:f4:d8:f2:32:ba:a0:e6:c8:69: 57:11:d7:b9:3c:67:63:81:9c:3e:aa:4e:6b:c2:96: f8:13:26:a8:be:78:b2:e0:79:c5:ec:28:bf:37:b9: b9:ec:69:a4:fc:95:ad:b3:a9:7f:77:9a:f0:7c:7b: e9:c6:28:53:15:9a:9c:f8:e2:7f:31:c8:bc:dc:cb: 10:66:9f:6d:c5:96:50:a5:0f:79:44:f4:ad:98:4e: 45:04:12:81:8f:7d:fb:ad:98:65:9e:de:aa:93:0f: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AD:C2:D5:CA:D6:B9:72:BE:43:AF:87:68:56:10:E6:80:D5:C8:A4 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/363C1crWuXK-Q6-HaFYQ5oDVyKQ.roa sbgp-ipAddrBlock: critical IPv4: 160.248.160.0/20 Signature Algorithm: sha256WithRSAEncryption 5a:71:ea:58:f9:cd:29:32:9d:b4:ed:5c:a6:fb:67:f8:e5:71: f2:41:40:de:ba:e7:d4:f8:0f:00:39:dd:33:2a:bd:ab:e3:a1: 26:32:75:2e:69:df:56:fa:81:7c:47:19:f4:f4:cc:b1:97:83: 6f:6a:0f:a3:49:42:7f:c5:89:d9:ad:3c:bd:3f:91:6b:bb:06: 7b:82:d3:41:2c:c9:b1:41:82:8a:d0:7a:4c:6b:29:4b:51:a4: d8:40:3e:49:b7:6b:65:ab:e8:c0:a3:96:1e:0f:1f:51:42:d2: a7:a0:98:94:ea:7e:a4:27:2d:53:c6:c3:92:03:19:73:f9:bb: 0a:48:ec:83:c4:72:3c:7a:d8:42:b9:da:8a:7a:f9:97:5f:46: 14:86:dc:f1:46:b0:a8:df:45:23:d2:38:8f:dd:72:d5:f3:d4: 83:05:fb:47:c4:10:52:eb:d4:3d:ec:a7:0e:ab:2e:99:89:0e: b2:11:b5:21:5b:16:0c:21:61:73:01:c2:92:64:8f:ce:65:ef: 35:de:50:44:f5:a9:34:78:e5:8e:6d:60:c8:3d:3b:69:f7:ed: ed:e0:bd:86:f1:fa:73:61:95:2c:a0:23:d0:ca:ad:36:12:a9: 72:04:2d:90:ae:28:ec:32:39:c6:f5:8e:0b:34:d2:6a:e3:2a: a4:b9:07:64 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGQURDMkQ1Q0FENkI5 NzJCRTQzQUY4NzY4NTYxMEU2ODBENUM4QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz5/Lhwvj+QT8kKT0ODyJWEliAfp2nBDZQCyTPPy+xD+zHchz8 GbvLrpb7zN7oEvrxnagP6WHmwaVQhJzI9YNmnSOAMu2f5k5zjaoXJPszpc7vhbwV i231j1LDID6VZXWZ96cDrZBn9cTL1t0e5nL7HE0kHxDdpr6bQplx+EgDMZUgIZjM wmB1dyVbbfDUuNv8vAbP983skVGJDfTY8jK6oObIaVcR17k8Z2OBnD6qTmvClvgT Jqi+eLLgecXsKL83ubnsaaT8la2zqX93mvB8e+nGKFMVmpz44n8xyLzcyxBmn23F llClD3lE9K2YTkUEEoGPffutmGWe3qqTD5YzAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQU363C1crWuXK+Q6+HaFYQ5oDVyKQwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS8zNjNDMWNyV3VYSy1RNi1IYUZZUTVvRFZ5S1Eucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoPigMA0GCSqGSIb3DQEBCwUAA4IBAQBa cepY+c0pMp207Vym+2f45XHyQUDeuufU+A8AOd0zKr2r46EmMnUuad9W+oF8Rxn0 9Myxl4Nvag+jSUJ/xYnZrTy9P5FruwZ7gtNBLMmxQYKK0HpMaylLUaTYQD5Jt2tl q+jAo5YeDx9RQtKnoJiU6n6kJy1TxsOSAxlz+bsKSOyDxHI8ethCudqKevmXX0YU htzxRrCo30Uj0jiP3XLV89SDBftHxBBS69Q97KcOqy6ZiQ6yEbUhWxYMIWFzAcKS ZI/OZe813lBE9ak0eOWObWDIPTtp9+3t4L2G8fpzYZUsoCPQyq02EqlyBC2Qrijs MjnG9Y4LNNJq4yqkuQdk -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:14 2026 by rpki-client