$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/pbIy1bSapC7Cpzlzed2qmeYvw6M.roa File: pbIy1bSapC7Cpzlzed2qmeYvw6M.roa (raw, json) Hash identifier: QFghTRCQjFa/bgl8/hkTEklqjPLbm9snOnk93SSby4E= Subject key identifier: A5:B2:32:D5:B4:9A:A4:2E:C2:A7:39:73:79:DD:AA:99:E6:2F:C3:A3 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: FA Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pbIy1bSapC7Cpzlzed2qmeYvw6M.roa Signing time: Tue 31 Mar 2026 08:17:04 +0000 ROA not before: Tue 31 Mar 2026 08:17:04 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:04 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A5B232D5B49AA42EC2A7397379DDAA99E62FC3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:90:98:0f:27:8c:ae:24:cb:26:cd:7e:3c: b0:80:fb:dc:47:e0:32:61:48:54:9c:69:5a:ee:07: fe:b6:61:40:a3:be:b2:9b:5b:ed:a8:d8:63:1e:58: 4c:a9:58:9d:2d:d8:37:97:ed:35:99:65:eb:4e:8a: 30:cb:6d:12:ff:6d:59:aa:24:18:16:44:ee:e3:4c: a0:09:1c:e3:5f:46:7b:7d:7a:50:45:56:0f:3a:30: 94:99:ee:66:f2:76:db:bc:6d:e9:d2:a5:88:46:50: dd:64:cf:c2:9c:75:eb:e7:44:33:fd:1e:2a:5e:57: 27:62:39:00:bc:ad:c9:93:8a:48:fe:19:4c:06:aa: b4:98:71:42:71:22:f3:3b:a4:f1:e6:c1:33:56:cf: 08:95:97:e8:05:a9:d3:61:5d:ea:48:97:45:eb:7f: 78:e9:7e:73:c1:2f:76:f4:aa:d6:6b:1b:63:06:5d: 09:b6:ba:ed:44:fc:20:7c:d4:00:23:2d:19:37:44: 30:ff:c4:40:3b:d4:f9:10:1c:e7:3d:8a:09:ac:44: 44:ec:1c:b9:bf:f3:4c:27:58:91:77:19:88:97:98: 5b:db:2f:34:a8:d2:f6:7d:28:cc:de:2d:2b:79:6b: d0:a5:b3:60:ad:44:87:65:2d:02:62:44:33:96:51: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B2:32:D5:B4:9A:A4:2E:C2:A7:39:73:79:DD:AA:99:E6:2F:C3:A3 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pbIy1bSapC7Cpzlzed2qmeYvw6M.roa sbgp-ipAddrBlock: critical IPv4: 160.248.0.0/21 Signature Algorithm: sha256WithRSAEncryption 36:7d:8b:78:cd:eb:9f:1d:41:2d:96:c3:61:a1:71:c9:11:82: 64:fa:7d:1b:14:3f:48:0e:f4:1e:56:6f:43:0a:66:a2:13:49: 6c:88:95:57:66:c9:15:63:79:9a:ae:f7:c0:bc:fd:c7:16:5a: 37:04:84:ae:9a:24:25:af:93:65:17:cd:3e:c3:4c:48:ae:a0: 79:44:83:2d:ab:d5:80:3a:23:bf:e4:36:7e:eb:5c:b5:85:02: bf:45:31:0d:98:5b:6b:97:a2:f6:dd:56:e0:db:0d:b1:52:03: b7:21:08:13:92:27:86:a3:b7:cc:ee:7b:7f:b5:28:76:17:e3: 1b:b4:d6:56:ef:a8:cc:31:7a:82:fd:4a:bf:a9:80:78:9f:18: d1:af:b5:e8:64:3b:87:1e:0a:95:16:4f:b9:d3:63:cd:a9:f0: 6a:de:b3:c1:d7:02:e6:07:ae:27:66:32:ef:7b:ec:ee:2a:93: 1a:92:c0:c1:24:64:5d:c8:73:3c:89:74:31:1b:e7:f0:64:44: b5:8b:bc:ff:c5:fa:d5:12:6d:63:06:d4:73:13:58:f0:b0:e1: fc:76:56:11:c3:7c:54:e6:ef:78:cf:cc:51:8b:59:2c:fa:a9: 7a:dc:32:09:dd:e4:d8:25:68:fa:df:90:96:79:b1:29:80:70: 1e:1b:79:25 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE1QjIzMkQ1QjQ5QUE0 MkVDMkE3Mzk3Mzc5RERBQTk5RTYyRkMzQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC20pCYDyeMriTLJs1+PLCA+9xH4DJhSFScaVruB/62YUCjvrKb W+2o2GMeWEypWJ0t2DeX7TWZZetOijDLbRL/bVmqJBgWRO7jTKAJHONfRnt9elBF Vg86MJSZ7mbydtu8benSpYhGUN1kz8KcdevnRDP9HipeVydiOQC8rcmTikj+GUwG qrSYcUJxIvM7pPHmwTNWzwiVl+gFqdNhXepIl0Xrf3jpfnPBL3b0qtZrG2MGXQm2 uu1E/CB81AAjLRk3RDD/xEA71PkQHOc9igmsRETsHLm/80wnWJF3GYiXmFvbLzSo 0vZ9KMzeLSt5a9Cls2CtRIdlLQJiRDOWUQXdAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUpbIy1bSapC7Cpzlzed2qmeYvw6MwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9wYkl5MWJTYXBDN0Nwemx6ZWQycW1lWXZ3Nk0ucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoPgAMA0GCSqGSIb3DQEBCwUAA4IBAQA2 fYt4zeufHUEtlsNhoXHJEYJk+n0bFD9IDvQeVm9DCmaiE0lsiJVXZskVY3marvfA vP3HFlo3BISumiQlr5NlF80+w0xIrqB5RIMtq9WAOiO/5DZ+61y1hQK/RTENmFtr l6L23Vbg2w2xUgO3IQgTkieGo7fM7nt/tSh2F+MbtNZW76jMMXqC/Uq/qYB4nxjR r7XoZDuHHgqVFk+502PNqfBq3rPB1wLmB64nZjLve+zuKpMaksDBJGRdyHM8iXQx G+fwZES1i7z/xfrVEm1jBtRzE1jwsOH8dlYRw3xU5u94z8xRi1ks+ql63DIJ3eTY JWj635CWebEpgHAeG3kl -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:19 2026 by rpki-client