$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/YBre0Hqe4wOTGDNfNUNC_UQKCio.roa File: YBre0Hqe4wOTGDNfNUNC_UQKCio.roa (raw, json) Hash identifier: 75AJYmLMF7hXx84DNxF7Pp/GERtJZRjZLa2PliRi/BU= Subject key identifier: 60:1A:DE:D0:7A:9E:E3:03:93:18:33:5F:35:43:42:FD:44:0A:0A:2A Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: FE Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YBre0Hqe4wOTGDNfNUNC_UQKCio.roa Signing time: Tue 31 Mar 2026 08:17:09 +0000 ROA not before: Tue 31 Mar 2026 08:17:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=601ADED07A9EE3039318335F354342FD440A0A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:b2:72:38:d8:90:b8:22:79:f4:17:d3:ba: 75:6e:62:79:b8:c6:df:3f:61:af:e7:6c:4e:13:ab: 0b:53:6d:b2:78:ea:3f:ee:e1:18:af:68:86:2e:ce: d4:f4:7d:b4:14:06:83:0e:4e:91:d5:4d:a7:c1:6e: 43:8c:b2:7e:d9:92:12:74:c1:99:fa:ee:b4:5e:30: 79:38:d0:4a:66:74:6f:32:9b:45:3d:19:34:60:20: 8b:1a:b1:72:fe:35:f1:dc:35:46:10:ba:d6:61:05: c9:25:e4:da:54:1a:d3:d1:a7:28:67:6b:51:10:28: 49:8b:2c:d1:08:fd:91:c5:c4:1d:04:7a:24:91:37: 09:d4:47:d4:e8:48:56:61:93:b7:a2:7b:28:82:a6: de:1d:ac:f4:d1:3b:27:21:a2:cd:83:a6:ac:56:ac: 96:a6:03:4c:2c:96:ae:d2:b3:e7:de:e9:14:a4:8a: f9:e3:be:c4:62:c7:a7:f2:2b:9a:c7:64:bf:8c:08: 28:60:6d:49:1c:c4:80:02:e9:49:13:cf:10:7c:cb: 77:3e:18:fc:61:36:ce:5c:1c:ff:eb:33:12:0d:50: 04:f7:96:ee:d2:6a:0c:8d:c7:67:fa:7f:2d:35:d2: e6:b4:d0:e5:2b:9d:36:88:14:c6:77:da:ce:b0:be: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1A:DE:D0:7A:9E:E3:03:93:18:33:5F:35:43:42:FD:44:0A:0A:2A X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YBre0Hqe4wOTGDNfNUNC_UQKCio.roa sbgp-ipAddrBlock: critical IPv4: 160.248.16.0/20 Signature Algorithm: sha256WithRSAEncryption a7:d8:2a:c1:d5:bd:eb:7a:52:94:63:f8:df:c0:09:7f:e7:75: 8b:40:a6:ed:7a:00:8c:16:52:ad:47:46:24:a1:30:ba:eb:6f: b9:66:5c:4a:b9:64:a4:6f:f4:a4:45:7c:f5:91:33:d2:b4:d6: b6:53:4b:fa:ea:bf:b6:4e:22:95:38:c4:f3:13:25:1a:6e:af: fa:d4:02:02:24:63:46:6f:7b:4b:a0:02:9c:73:eb:9a:52:54: 4b:eb:59:08:3f:83:76:21:fb:c3:fc:9e:10:22:18:49:1c:60: f7:d8:9d:bb:ab:5c:ff:ef:19:d3:3f:76:7d:46:8b:b6:91:0c: 71:c7:85:0e:0a:18:a6:f4:40:6a:dd:ea:ce:e5:97:d6:c7:25: 81:32:a1:07:07:1b:39:49:21:f5:9a:26:6f:d1:72:ca:3d:0b: b6:f2:7a:00:5d:3a:73:b8:ab:4f:70:5b:e4:93:d7:ee:f7:7a: 05:a8:ea:da:f7:b1:8c:10:30:43:b0:35:8d:16:b8:a5:00:10: b9:58:21:ab:0b:37:7f:46:f8:48:56:46:4c:96:c8:7a:f7:b5: f9:13:35:9a:88:a4:d6:35:83:65:a0:2f:0e:10:2d:f5:23:78: b7:64:19:e1:87:36:1d:19:ab:21:a4:37:3d:28:b0:03:ba:b7: 09:a8:b0:e3 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwMUFERUQwN0E5RUUz MDM5MzE4MzM1RjM1NDM0MkZENDQwQTBBMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGRrJyONiQuCJ59BfTunVuYnm4xt8/Ya/nbE4TqwtTbbJ46j/u 4RivaIYuztT0fbQUBoMOTpHVTafBbkOMsn7ZkhJ0wZn67rReMHk40EpmdG8ym0U9 GTRgIIsasXL+NfHcNUYQutZhBckl5NpUGtPRpyhna1EQKEmLLNEI/ZHFxB0EeiSR NwnUR9ToSFZhk7eieyiCpt4drPTROychos2DpqxWrJamA0wslq7Ss+fe6RSkivnj vsRix6fyK5rHZL+MCChgbUkcxIAC6UkTzxB8y3c+GPxhNs5cHP/rMxINUAT3lu7S agyNx2f6fy010ua00OUrnTaIFMZ32s6wvptDAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUYBre0Hqe4wOTGDNfNUNC/UQKCiowHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9ZQnJlMEhxZTR3T1RHRE5mTlVOQ19VUUtDaW8ucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoPgQMA0GCSqGSIb3DQEBCwUAA4IBAQCn 2CrB1b3relKUY/jfwAl/53WLQKbtegCMFlKtR0YkoTC662+5ZlxKuWSkb/SkRXz1 kTPStNa2U0v66r+2TiKVOMTzEyUabq/61AICJGNGb3tLoAKcc+uaUlRL61kIP4N2 IfvD/J4QIhhJHGD32J27q1z/7xnTP3Z9Rou2kQxxx4UOChim9EBq3erO5ZfWxyWB MqEHBxs5SSH1miZv0XLKPQu28noAXTpzuKtPcFvkk9fu93oFqOra97GMEDBDsDWN FrilABC5WCGrCzd/RvhIVkZMlsh697X5EzWaiKTWNYNloC8OEC31I3i3ZBnhhzYd GashpDc9KLADurcJqLDj -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:23 2026 by rpki-client