$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/O-rAJf6uCel2uiQiqG5vuOjpzSQ.roa File: O-rAJf6uCel2uiQiqG5vuOjpzSQ.roa (raw, json) Hash identifier: lHwutFsGAaRFUtQgwatEDpyErb4bkv3fBzmtX0YMIvA= Subject key identifier: 3B:EA:C0:25:FE:AE:09:E9:76:BA:24:22:A8:6E:6F:B8:E8:E9:CD:24 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 0115 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/O-rAJf6uCel2uiQiqG5vuOjpzSQ.roa Signing time: Tue 31 Mar 2026 08:17:20 +0000 ROA not before: Tue 31 Mar 2026 08:17:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3BEAC025FEAE09E976BA2422A86E6FB8E8E9CD24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:08:ab:42:be:20:e2:d4:e2:c5:fe:c6:33: 5f:8a:bc:e7:66:e2:22:66:20:ee:2e:0f:58:f4:53: 15:08:40:23:4f:f1:6f:9a:70:44:6f:76:d5:94:f6: 5c:db:44:94:11:47:cf:59:85:fa:c8:9d:a1:31:c3: fb:88:8d:16:92:b1:5f:66:0e:85:07:b1:c4:c3:6e: 2a:f0:b4:15:d3:e2:3b:17:28:3b:9b:6a:4a:7a:f4: e5:cd:ab:1a:77:6f:aa:19:eb:97:40:bf:ae:30:81: f3:24:72:1a:4a:f4:b1:fd:1d:ca:80:ee:df:36:f9: 12:c9:f3:f1:da:a3:37:e5:8a:82:65:ef:f8:e8:1c: f8:f5:db:6d:24:bf:89:b0:70:5c:ce:7c:de:cc:b5: f6:f3:94:e0:20:7a:61:be:ad:d4:f2:bd:34:32:3b: ea:94:88:72:f6:ff:7c:35:56:5b:37:88:4f:55:f9: 52:87:c3:ca:5b:84:c2:2c:6f:ea:b0:70:2c:8a:39: 8f:c5:b3:2f:38:b0:7b:56:3d:41:20:ca:7f:81:3b: 73:b6:ae:e4:c6:fb:8b:af:48:72:0d:16:96:e2:c9: 3c:01:b6:90:22:96:38:f6:01:db:7b:fa:53:8e:89: 8e:21:16:fe:12:8c:b8:ed:aa:bf:7e:d9:6d:a1:9b: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EA:C0:25:FE:AE:09:E9:76:BA:24:22:A8:6E:6F:B8:E8:E9:CD:24 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/O-rAJf6uCel2uiQiqG5vuOjpzSQ.roa sbgp-ipAddrBlock: critical IPv4: 160.248.232.0/22 Signature Algorithm: sha256WithRSAEncryption a4:5c:af:b3:02:17:2b:8f:78:ef:b5:49:84:15:c8:c3:18:35: e4:1c:df:37:87:8f:7b:68:11:2d:ed:00:c5:fd:c2:ee:92:9d: 48:20:72:22:a6:65:70:b7:69:2c:fa:63:3c:32:ba:71:5e:85: 5b:e0:7a:83:36:e4:fb:5d:88:16:07:c9:d9:b1:a0:7c:59:6a: 9b:98:42:87:cf:b2:90:a8:a3:7b:72:7b:1b:9a:d2:8a:58:aa: 63:c3:25:8d:ff:a6:bf:26:b3:6b:77:45:57:e9:fc:a5:c6:af: 7a:41:70:b7:54:17:8e:c4:ef:71:bc:8c:99:33:e5:4c:f4:a4: 8d:a3:58:99:56:3b:7d:71:11:f2:6a:c2:03:e1:03:ef:0b:59: 98:15:d2:7d:0c:7a:ad:8a:2f:cf:2e:9d:bf:f9:53:38:8d:01: 04:d1:8d:75:d3:94:7f:07:ea:00:86:ec:97:5a:ef:9f:0a:72: e3:73:8c:db:a0:b5:80:47:dd:8e:45:51:26:14:90:b7:86:de: 53:c9:51:a7:f4:25:3a:88:cb:43:43:94:c9:bf:01:67:ce:c2: b4:58:7f:cc:11:45:d5:4e:81:0d:e3:c0:de:97:2c:7c:6e:f5: 01:b0:b3:2b:f1:7a:2a:4f:61:51:66:d8:b0:eb:5f:dc:dc:7c: 72:4b:04:f4 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICARUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCRUFDMDI1RkVBRTA5 RTk3NkJBMjQyMkE4NkU2RkI4RThFOUNEMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqNQirQr4g4tTixf7GM1+KvOdm4iJmIO4uD1j0UxUIQCNP8W+a cERvdtWU9lzbRJQRR89ZhfrInaExw/uIjRaSsV9mDoUHscTDbirwtBXT4jsXKDub akp69OXNqxp3b6oZ65dAv64wgfMkchpK9LH9HcqA7t82+RLJ8/HaozflioJl7/jo HPj1220kv4mwcFzOfN7MtfbzlOAgemG+rdTyvTQyO+qUiHL2/3w1Vls3iE9V+VKH w8pbhMIsb+qwcCyKOY/Fsy84sHtWPUEgyn+BO3O2ruTG+4uvSHINFpbiyTwBtpAi ljj2Adt7+lOOiY4hFv4SjLjtqr9+2W2hm2ShAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUO+rAJf6uCel2uiQiqG5vuOjpzSQwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9PLXJBSmY2dUNlbDJ1aVFpcUc1dnVPanB6U1Eucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoPjoMA0GCSqGSIb3DQEBCwUAA4IBAQCk XK+zAhcrj3jvtUmEFcjDGDXkHN83h497aBEt7QDF/cLukp1IIHIipmVwt2ks+mM8 MrpxXoVb4HqDNuT7XYgWB8nZsaB8WWqbmEKHz7KQqKN7cnsbmtKKWKpjwyWN/6a/ JrNrd0VX6fylxq96QXC3VBeOxO9xvIyZM+VM9KSNo1iZVjt9cRHyasID4QPvC1mY FdJ9DHqtii/PLp2/+VM4jQEE0Y1105R/B+oAhuyXWu+fCnLjc4zboLWAR92ORVEm FJC3ht5TyVGn9CU6iMtDQ5TJvwFnzsK0WH/MEUXVToEN48Delyx8bvUBsLMr8Xoq T2FRZtiw61/c3HxySwT0 -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:20 2026 by rpki-client