$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/oq3ry5TkqnNykKBon20PISlN6N4.roa File: oq3ry5TkqnNykKBon20PISlN6N4.roa (raw, json) Hash identifier: j029morbGus1g9PrZtmRim0KRVkf5hyhKlRPCszi0Y8= Subject key identifier: A2:AD:EB:CB:94:E4:AA:73:72:90:A0:68:9F:6D:0F:21:29:4D:E8:DE Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: EB Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/oq3ry5TkqnNykKBon20PISlN6N4.roa Signing time: Tue 31 Mar 2026 08:16:56 +0000 ROA not before: Tue 31 Mar 2026 08:16:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 23.232.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:16:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A2ADEBCB94E4AA737290A0689F6D0F21294DE8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:e7:5b:c0:cc:55:3f:ee:6e:d3:0f:5a:a2: e7:12:0d:87:f6:4c:bd:0f:73:87:ae:a5:0a:e2:55: b4:6c:cc:e7:98:36:89:e0:ab:a5:f3:74:ee:ec:12: 59:8e:4f:ad:f0:ed:5d:1b:15:68:d7:79:22:94:7e: ef:c6:12:b4:aa:52:77:e9:2f:a5:88:10:36:f8:27: c1:b9:32:3f:59:23:73:51:e5:30:c9:32:05:56:61: 57:63:c3:9b:44:d2:74:f3:23:b7:8d:e4:1f:0c:37: b9:14:3d:e0:9a:64:5e:84:78:52:a8:68:64:5e:fe: f9:a1:3c:63:d4:f3:9c:51:1b:3f:84:35:7f:5a:5f: f6:02:78:0e:dc:7d:86:5b:a2:1e:88:35:02:55:34: e0:ad:c3:a6:a7:b1:4e:c7:7b:cc:bc:19:74:de:e2: e8:2e:c9:72:79:45:3f:f8:c8:c1:8c:f9:9f:1a:a5: 19:7f:f5:7a:89:76:26:d7:7b:9b:16:bb:14:d7:83: 3e:f2:30:b6:50:b6:cf:d3:21:60:e0:4b:02:40:53: c3:73:a0:90:2b:e9:71:78:01:28:87:5f:ee:1c:2d: 9b:02:3e:1f:3b:39:7a:6e:98:04:b3:dd:06:27:d8: e3:d1:67:b5:38:21:74:53:ec:9d:b9:3c:74:5a:24: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AD:EB:CB:94:E4:AA:73:72:90:A0:68:9F:6D:0F:21:29:4D:E8:DE X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/oq3ry5TkqnNykKBon20PISlN6N4.roa sbgp-ipAddrBlock: critical IPv4: 23.232.128.0/17 Signature Algorithm: sha256WithRSAEncryption a3:72:a9:79:29:70:94:c3:92:68:34:d9:e3:59:31:4c:a0:26: 7f:7e:53:7a:79:0b:e9:66:56:1d:7e:be:a7:d9:23:2b:d5:ce: d2:70:1c:f9:21:65:e2:83:fa:12:ae:b0:59:da:cb:1a:cc:e6: ea:02:0b:db:f2:e9:68:5b:a4:dd:fe:39:d2:ec:76:a0:1a:ef: ef:07:d1:10:05:42:fb:ff:58:a6:1b:12:c6:f8:51:7c:bf:db: 9d:33:99:6e:f9:d9:22:4c:16:9e:85:2a:c2:6e:fc:13:2a:b8: 62:b0:45:0a:f0:a7:bc:55:b1:f7:b3:15:c8:1b:6d:3e:ec:3a: c5:96:66:0c:fa:a7:6a:d8:75:59:af:00:76:43:ae:8a:67:5d: 2f:9c:a1:9e:0d:43:da:6c:58:b7:35:0c:27:e7:67:02:5c:3c: e4:e6:3a:fc:53:f6:7f:0a:af:36:ef:a1:18:72:74:c1:95:5d: 15:29:56:c5:26:b7:6a:df:dd:6e:54:cd:7f:dc:39:55:42:55: 6f:bb:b1:de:54:8b:c0:f6:b7:33:b4:d0:12:49:b3:07:63:b5: ec:78:c3:21:04:ee:67:66:37:7b:a1:9d:7e:ec:5a:82:9f:6f: a9:83:87:3d:9f:92:3b:ff:bc:96:b6:20:bf:ce:e0:99:89:e1: 7a:97:76:a1 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE2NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyQURFQkNCOTRFNEFB NzM3MjkwQTA2ODlGNkQwRjIxMjk0REU4REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOU+dbwMxVP+5u0w9aoucSDYf2TL0Pc4eupQriVbRszOeYNong q6XzdO7sElmOT63w7V0bFWjXeSKUfu/GErSqUnfpL6WIEDb4J8G5Mj9ZI3NR5TDJ MgVWYVdjw5tE0nTzI7eN5B8MN7kUPeCaZF6EeFKoaGRe/vmhPGPU85xRGz+ENX9a X/YCeA7cfYZboh6INQJVNOCtw6ansU7He8y8GXTe4uguyXJ5RT/4yMGM+Z8apRl/ 9XqJdibXe5sWuxTXgz7yMLZQts/TIWDgSwJAU8NzoJAr6XF4ASiHX+4cLZsCPh87 OXpumASz3QYn2OPRZ7U4IXRT7J25PHRaJA+bAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUoq3ry5TkqnNykKBon20PISlN6N4wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9vcTNyeTVUa3FuTnlrS0JvbjIwUElTbE42TjQucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+iAMA0GCSqGSIb3DQEBCwUAA4IBAQCj cql5KXCUw5JoNNnjWTFMoCZ/flN6eQvpZlYdfr6n2SMr1c7ScBz5IWXig/oSrrBZ 2ssazObqAgvb8uloW6Td/jnS7HagGu/vB9EQBUL7/1imGxLG+FF8v9udM5lu+dki TBaehSrCbvwTKrhisEUK8Ke8VbH3sxXIG20+7DrFlmYM+qdq2HVZrwB2Q66KZ10v nKGeDUPabFi3NQwn52cCXDzk5jr8U/Z/Cq8276EYcnTBlV0VKVbFJrdq391uVM1/ 3DlVQlVvu7HeVIvA9rcztNASSbMHY7XseMMhBO5nZjd7oZ1+7FqCn2+pg4c9n5I7 /7yWtiC/zuCZieF6l3ah -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:17 2026 by rpki-client