$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/DQxbh5AphhwbOgwhvulb5PuSTD0.roa File: DQxbh5AphhwbOgwhvulb5PuSTD0.roa (raw, json) Hash identifier: ovlxqY9GBKlhhVzqmtv28fsVWYV7+w6M80Xeg0O//K4= Subject key identifier: 0D:0C:5B:87:90:29:86:1C:1B:3A:0C:21:BE:E9:5B:E4:FB:92:4C:3D Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 010E Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/DQxbh5AphhwbOgwhvulb5PuSTD0.roa Signing time: Tue 31 Mar 2026 08:17:16 +0000 ROA not before: Tue 31 Mar 2026 08:17:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0D0C5B879029861C1B3A0C21BEE95BE4FB924C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:4c:e4:8f:e2:90:e5:8f:5f:d1:86:0d:84: 9f:90:31:86:f4:77:c8:bd:9b:e3:36:52:6b:66:6e: e5:e5:fb:30:e4:88:0d:be:25:bf:24:aa:63:eb:a1: 22:3f:6d:e2:dd:4b:1c:47:4c:34:56:40:dc:81:7a: cc:e4:17:cb:1b:ba:48:10:94:54:1d:63:e0:82:49: 80:a5:c1:09:c5:e1:cd:ad:e0:4f:16:ae:c2:dc:6e: 35:47:40:04:13:56:a8:39:fb:ea:a1:ab:c5:ec:e7: 24:eb:ed:e9:96:e0:fc:a6:c6:1b:43:a4:c8:4f:ee: 38:9d:c2:df:84:70:78:fc:e6:22:1a:ec:2d:9a:37: 2e:6e:c1:71:e2:e1:65:4b:32:04:ba:0b:04:41:00: 35:81:4b:76:92:85:18:12:1a:4b:92:86:96:ab:f9: c8:61:34:2c:42:31:07:1b:03:58:a8:62:f7:8c:1e: ee:9e:18:eb:e6:c7:a7:4b:44:64:52:0a:95:a1:90: 1c:5a:b9:b6:62:e5:f1:14:d6:ae:27:f6:8e:a2:bb: 54:33:59:f7:8d:99:84:3b:97:a9:5b:cf:42:4b:99: 9f:08:ac:38:3c:15:4a:b5:fa:6f:00:2b:24:17:65: 1a:12:6a:12:1f:a0:b9:3e:5d:b2:20:11:0b:28:3f: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0C:5B:87:90:29:86:1C:1B:3A:0C:21:BE:E9:5B:E4:FB:92:4C:3D X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/DQxbh5AphhwbOgwhvulb5PuSTD0.roa sbgp-ipAddrBlock: critical IPv4: 160.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 64:c4:13:82:be:2f:8d:e4:10:49:0d:8e:dc:5e:22:74:bd:86: 99:fa:a7:fd:87:72:64:d6:ac:e5:3d:b2:8b:e3:70:84:d1:96: c5:99:55:08:56:9e:1a:d6:62:7a:a0:71:12:17:97:57:cf:da: 7f:b2:99:46:41:81:3a:ac:f2:c2:3d:26:2c:eb:b0:ad:37:85: 76:c5:73:ad:b1:8a:a5:47:e6:e5:ef:3a:4e:9c:28:36:e5:87: 57:ab:62:9f:52:37:a9:76:e9:da:d0:05:42:e6:5f:8f:0f:08: 20:3f:80:1c:15:ac:f8:2d:b5:b3:26:6b:c7:e2:9f:3a:fe:2c: 39:a6:21:7b:75:3c:1c:78:b9:f5:18:ea:db:61:95:fe:c6:ab: b9:84:15:17:4d:4e:b3:48:08:3c:25:0e:cd:d0:da:3c:25:34: ee:1e:02:6b:45:5c:49:24:87:e1:2d:64:3c:be:f5:ec:62:a4: 69:94:a6:8b:e5:75:3a:05:91:00:81:23:cd:1d:ad:dc:eb:53: a1:33:1b:b2:a9:d8:b6:6b:01:64:85:4d:ee:ba:20:d0:1c:f7: 80:8a:e2:8e:d2:20:98:fd:a9:ae:20:35:fc:bb:45:0a:ba:f1: b8:e7:ab:3a:26:1c:5b:64:74:11:b5:05:60:ed:b4:7d:3f:81: 67:a3:d5:5b -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEMEM1Qjg3OTAyOTg2 MUMxQjNBMEMyMUJFRTk1QkU0RkI5MjRDM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoKUzkj+KQ5Y9f0YYNhJ+QMYb0d8i9m+M2UmtmbuXl+zDkiA2+ Jb8kqmProSI/beLdSxxHTDRWQNyBeszkF8sbukgQlFQdY+CCSYClwQnF4c2t4E8W rsLcbjVHQAQTVqg5++qhq8Xs5yTr7emW4PymxhtDpMhP7jidwt+EcHj85iIa7C2a Ny5uwXHi4WVLMgS6CwRBADWBS3aShRgSGkuShpar+chhNCxCMQcbA1ioYveMHu6e GOvmx6dLRGRSCpWhkBxaubZi5fEU1q4n9o6iu1QzWfeNmYQ7l6lbz0JLmZ8IrDg8 FUq1+m8AKyQXZRoSahIfoLk+XbIgEQsoP+DBAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUDQxbh5AphhwbOgwhvulb5PuSTD0wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9EUXhiaDVBcGhod2JPZ3dodnVsYjVQdVNURDAucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoPi4MA0GCSqGSIb3DQEBCwUAA4IBAQBk xBOCvi+N5BBJDY7cXiJ0vYaZ+qf9h3Jk1qzlPbKL43CE0ZbFmVUIVp4a1mJ6oHES F5dXz9p/splGQYE6rPLCPSYs67CtN4V2xXOtsYqlR+bl7zpOnCg25YdXq2KfUjep duna0AVC5l+PDwggP4AcFaz4LbWzJmvH4p86/iw5piF7dTwceLn1GOrbYZX+xqu5 hBUXTU6zSAg8JQ7N0No8JTTuHgJrRVxJJIfhLWQ8vvXsYqRplKaL5XU6BZEAgSPN Ha3c61OhMxuyqdi2awFkhU3uuiDQHPeAiuKO0iCY/amuIDX8u0UKuvG456s6Jhxb ZHQRtQVg7bR9P4Fno9Vb -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:21 2026 by rpki-client