$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/lEMRoq9sma9HbmiZ7k22Y-bp0KI.roa File: lEMRoq9sma9HbmiZ7k22Y-bp0KI.roa (raw, json) Hash identifier: lf8Yju2pzlV1osdZCUvViLxh17SJiur8DsZryziaAOI= Subject key identifier: 94:43:11:A2:AF:6C:99:AF:47:6E:68:99:EE:4D:B6:63:E6:E9:D0:A2 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 0107 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lEMRoq9sma9HbmiZ7k22Y-bp0KI.roa Signing time: Tue 31 Mar 2026 08:17:14 +0000 ROA not before: Tue 31 Mar 2026 08:17:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=944311A2AF6C99AF476E6899EE4DB663E6E9D0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:a4:5d:8d:41:5b:98:64:99:ee:fa:78:46: 4a:08:81:63:aa:2b:c6:60:27:12:88:61:03:81:be: 90:00:61:e7:96:e7:55:76:8f:16:5f:4d:24:9c:4a: d0:3e:3d:3c:c5:6a:b4:53:90:d4:65:c5:fb:34:f4: 90:7c:05:e6:5a:27:c4:9a:a0:82:41:b1:d6:be:69: 81:18:d9:d1:6f:fe:64:73:c7:1b:c5:ce:d7:75:82: 9b:19:d9:a8:0f:c5:f2:af:09:7b:56:99:0a:96:e6: c5:d0:43:81:4e:1f:46:0e:3d:6f:ba:24:f6:98:95: c7:df:89:19:19:88:a5:fb:3c:1b:e9:e3:97:e3:f6: a3:18:2b:79:4c:38:42:f2:f0:05:3a:f9:26:e6:c0: 01:8f:4f:db:8a:49:fe:1c:f4:da:f6:2e:8a:d3:08: d4:76:67:da:08:7a:47:21:44:45:96:b7:22:01:83: cb:a9:28:87:30:cb:9a:7e:da:d4:0b:7d:5a:2a:62: 64:3c:07:d4:65:b3:8c:fc:ff:bc:80:c7:4a:d7:e8: 4b:38:83:cf:77:65:df:78:f4:fa:0f:a2:e5:e4:ff: 6f:e7:ff:04:25:55:6e:2f:c2:f4:46:07:be:00:83: f1:5f:66:ae:24:d5:27:b9:7f:18:96:4d:43:7d:47: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:11:A2:AF:6C:99:AF:47:6E:68:99:EE:4D:B6:63:E6:E9:D0:A2 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lEMRoq9sma9HbmiZ7k22Y-bp0KI.roa sbgp-ipAddrBlock: critical IPv4: 160.248.87.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:c7:61:ac:c0:94:a0:57:36:25:33:be:62:98:b6:2f:3a:d6: 2a:3f:6c:30:02:4e:18:48:28:ec:3e:59:85:11:54:25:7b:b5: 52:e6:1e:88:ab:d6:5f:f8:53:95:a0:50:56:7b:c2:c3:cf:06: d6:92:aa:4f:fb:1b:40:43:12:7e:e5:85:f2:99:cd:8c:e7:22: 0b:89:e2:d2:18:24:41:86:d5:d3:96:87:7b:61:e7:f8:d1:20: f6:e7:58:0d:69:11:c8:fe:b2:de:5e:52:44:b2:26:06:13:b2: 24:c9:ae:d6:da:0d:b6:06:80:87:14:28:df:4d:e6:a1:fb:f8: 33:fd:6b:cb:0a:cf:ae:cf:a8:81:b1:ce:d2:fb:94:03:44:f3: 05:8a:06:c2:92:50:41:a1:22:a7:4c:2c:14:14:72:58:37:bd: 8a:b7:32:27:20:3e:b2:ee:47:49:69:9e:ac:a2:0a:b5:c6:e1: d2:87:c5:88:fd:1f:9f:13:1a:83:f7:3d:ed:f1:d3:86:29:fc: 46:b3:dd:2a:da:ef:0b:14:bc:96:1a:69:6d:3b:50:4a:ba:c5: 29:7d:ce:c4:3f:74:4c:ab:0f:84:19:79:95:06:79:7c:be:b9: c9:01:7c:a4:1a:cf:1b:64:28:90:d4:9c:e3:c2:53:75:76:6e: 75:9f:af:8b -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0NDMxMUEyQUY2Qzk5 QUY0NzZFNjg5OUVFNERCNjYzRTZFOUQwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCihqRdjUFbmGSZ7vp4RkoIgWOqK8ZgJxKIYQOBvpAAYeeW51V2 jxZfTSScStA+PTzFarRTkNRlxfs09JB8BeZaJ8SaoIJBsda+aYEY2dFv/mRzxxvF ztd1gpsZ2agPxfKvCXtWmQqW5sXQQ4FOH0YOPW+6JPaYlcffiRkZiKX7PBvp45fj 9qMYK3lMOELy8AU6+SbmwAGPT9uKSf4c9Nr2LorTCNR2Z9oIekchREWWtyIBg8up KIcwy5p+2tQLfVoqYmQ8B9Rls4z8/7yAx0rX6Es4g893Zd949PoPouXk/2/n/wQl VW4vwvRGB74Ag/FfZq4k1Se5fxiWTUN9R8yxAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUlEMRoq9sma9HbmiZ7k22Y+bp0KIwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9sRU1Sb3E5c21hOUhibWlaN2syMlktYnAwS0kucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoPhXMA0GCSqGSIb3DQEBCwUAA4IBAQBa x2GswJSgVzYlM75imLYvOtYqP2wwAk4YSCjsPlmFEVQle7VS5h6Iq9Zf+FOVoFBW e8LDzwbWkqpP+xtAQxJ+5YXymc2M5yILieLSGCRBhtXTlod7Yef40SD251gNaRHI /rLeXlJEsiYGE7Ikya7W2g22BoCHFCjfTeah+/gz/WvLCs+uz6iBsc7S+5QDRPMF igbCklBBoSKnTCwUFHJYN72KtzInID6y7kdJaZ6sogq1xuHSh8WI/R+fExqD9z3t 8dOGKfxGs90q2u8LFLyWGmltO1BKusUpfc7EP3RMqw+EGXmVBnl8vrnJAXykGs8b ZCiQ1JzjwlN1dm51n6+L -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:21 2026 by rpki-client