$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/byCSFXEC7xFiXDcoPhqZUtrrZKs.roa File: byCSFXEC7xFiXDcoPhqZUtrrZKs.roa (raw, json) Hash identifier: Hsad7t4r/0pAFJOk8TLNEMEZnNlt2zIR9Fbki7HVp6E= Subject key identifier: 6F:20:92:15:71:02:EF:11:62:5C:37:28:3E:1A:99:52:DA:EB:64:AB Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 0101 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/byCSFXEC7xFiXDcoPhqZUtrrZKs.roa Signing time: Tue 31 Mar 2026 08:17:12 +0000 ROA not before: Tue 31 Mar 2026 08:17:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6F2092157102EF11625C37283E1A9952DAEB64AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:fb:37:7e:d2:18:ec:ad:5c:c3:22:15:af: c2:3a:86:05:f6:92:e9:dc:81:1b:a5:99:28:09:19: e0:99:b4:82:54:b3:f0:0b:0e:34:ad:59:02:a5:f2: 0b:69:8c:c9:58:43:4c:ab:71:8d:4e:ba:62:53:e0: 0f:e5:46:98:40:9e:f1:60:30:16:24:3f:87:b6:22: cf:9e:dc:cf:03:0a:c7:55:39:3c:82:a6:fc:07:f1: 67:13:a0:88:a9:97:ac:4f:cc:c2:9d:e7:e5:bc:01: b4:cc:3e:b9:65:b0:78:f2:3f:fe:51:2e:74:d1:7c: 03:92:0a:72:c7:9d:bf:03:8b:41:78:70:78:af:a4: ba:58:97:f7:d9:e4:de:3b:17:9f:17:00:04:53:26: 5a:a9:d9:b8:94:ee:83:d6:e6:38:d4:e7:0d:e9:0a: 34:94:47:42:7b:e6:24:87:44:9f:21:4d:75:ee:5b: fa:c7:d8:2f:68:96:56:8b:36:ea:4a:f8:07:f5:4c: 89:e1:5c:b5:8c:20:a8:ac:e9:9d:38:ca:a4:96:2b: a5:21:36:fd:2c:29:b5:f6:ad:7c:f9:6a:76:b1:58: 9c:7b:2e:c3:0a:49:ef:0d:9a:d3:29:23:81:6b:79: 72:58:b5:ea:64:bd:e8:94:33:ef:a5:e1:93:9a:11: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:20:92:15:71:02:EF:11:62:5C:37:28:3E:1A:99:52:DA:EB:64:AB X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/byCSFXEC7xFiXDcoPhqZUtrrZKs.roa sbgp-ipAddrBlock: critical IPv4: 160.248.68.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:e1:54:d7:67:df:2f:4b:9f:4a:74:32:e4:e1:c0:be:a5:34: 56:b5:7e:9f:30:98:5b:ad:7f:36:56:0c:f9:92:18:01:b8:52: be:fb:55:cb:52:44:16:f2:36:9e:10:97:82:0e:73:e2:d3:6c: dd:a7:08:7a:2d:0e:fb:05:89:c0:ab:c1:fd:27:a5:da:ab:c6: 31:4b:25:41:11:59:14:e3:d5:bc:da:84:a1:93:59:1a:6c:eb: 0b:55:07:e6:76:5e:6f:f0:25:67:04:b2:20:74:92:85:8b:c2: 3e:48:28:25:6e:c2:0c:e3:a3:00:bb:9f:70:f5:80:ed:a1:49: e8:19:e6:d0:0e:d8:8b:2e:3c:e9:31:2b:08:ac:84:20:a4:40: 56:55:8e:30:41:60:cf:bd:4f:ac:48:ec:11:a4:b8:6e:32:a7: d5:c4:df:24:f7:6d:cc:0c:52:f2:7f:81:e2:ac:60:6f:50:d6: ac:0e:d7:b1:3c:f0:c7:35:19:58:3e:e5:c9:b1:20:1f:a1:9a: c9:9a:3f:ba:52:17:1b:87:9c:8f:3f:a9:82:4d:9f:9b:0c:92: 67:23:0f:a4:d3:99:9e:58:75:c8:f8:3a:32:07:85:88:e2:e6: 99:bb:ea:f7:7e:bb:ab:a1:da:bf:32:3d:9e:46:c3:66:e0:08: a3:54:4d:1c -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZGMjA5MjE1NzEwMkVG MTE2MjVDMzcyODNFMUE5OTUyREFFQjY0QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMC/s3ftIY7K1cwyIVr8I6hgX2kuncgRulmSgJGeCZtIJUs/AL DjStWQKl8gtpjMlYQ0yrcY1OumJT4A/lRphAnvFgMBYkP4e2Is+e3M8DCsdVOTyC pvwH8WcToIipl6xPzMKd5+W8AbTMPrllsHjyP/5RLnTRfAOSCnLHnb8Di0F4cHiv pLpYl/fZ5N47F58XAARTJlqp2biU7oPW5jjU5w3pCjSUR0J75iSHRJ8hTXXuW/rH 2C9ollaLNupK+Af1TInhXLWMIKis6Z04yqSWK6UhNv0sKbX2rXz5anaxWJx7LsMK Se8NmtMpI4FreXJYtepkveiUM++l4ZOaES8HAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUbyCSFXEC7xFiXDcoPhqZUtrrZKswHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9ieUNTRlhFQzd4RmlYRGNvUGhxWlV0cnJaS3Mucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoPhEMA0GCSqGSIb3DQEBCwUAA4IBAQAP 4VTXZ98vS59KdDLk4cC+pTRWtX6fMJhbrX82Vgz5khgBuFK++1XLUkQW8jaeEJeC DnPi02zdpwh6LQ77BYnAq8H9J6Xaq8YxSyVBEVkU49W82oShk1kabOsLVQfmdl5v 8CVnBLIgdJKFi8I+SCglbsIM46MAu59w9YDtoUnoGebQDtiLLjzpMSsIrIQgpEBW VY4wQWDPvU+sSOwRpLhuMqfVxN8k923MDFLyf4HirGBvUNasDtexPPDHNRlYPuXJ sSAfoZrJmj+6Uhcbh5yPP6mCTZ+bDJJnIw+k05meWHXI+DoyB4WI4uaZu+r3frur odq/Mj2eRsNm4AijVE0c -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:26 2026 by rpki-client