$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0ayPoDC2DghDvQ7EaZAwGj6Xk4o.roa File: 0ayPoDC2DghDvQ7EaZAwGj6Xk4o.roa (raw, json) Hash identifier: HN2/Y+urWWJbPj81kchzA8b5IRCKdjjXGZsv3EEgYtM= Subject key identifier: D1:AC:8F:A0:30:B6:0E:08:43:BD:0E:C4:69:90:30:1A:3E:97:93:8A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0522 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0ayPoDC2DghDvQ7EaZAwGj6Xk4o.roa Signing time: Tue 31 Mar 2026 08:19:29 +0000 ROA not before: Tue 31 Mar 2026 08:19:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 36.53.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D1AC8FA030B60E0843BD0EC46990301A3E97938A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:97:ea:9a:44:f7:db:f2:53:fb:72:94:e3: 55:1c:8f:9b:60:ff:e5:49:e4:42:13:a3:74:4e:e7: b6:f5:54:da:d0:d5:6f:94:2e:ab:11:da:d2:af:b0: 03:98:f7:96:2a:55:79:3e:0b:5f:67:ff:c6:91:15: 36:13:0a:13:15:6f:7f:2f:f1:3d:13:51:8c:ca:d9: de:e6:33:b9:0f:eb:4f:84:50:51:14:a4:b4:08:8b: e7:39:16:ef:2b:d1:ab:e7:8b:79:35:51:82:d5:bb: e1:08:40:93:3f:a9:71:ad:05:e1:9b:a0:06:f6:f4: a7:54:e1:74:67:6b:86:24:5f:18:97:77:6f:42:10: 91:30:9a:90:96:eb:38:02:9e:7c:01:97:fa:d4:c9: af:59:79:ff:01:25:22:f7:e9:ee:35:8d:fd:78:4c: 9f:e2:d8:c8:41:4c:cf:4e:40:4c:49:12:d4:29:3c: 54:4f:ba:ca:a9:d2:de:46:22:72:04:58:d1:48:22: 47:fe:e5:a9:88:32:02:83:7a:b3:13:7c:73:e8:f0: 13:4d:8e:34:5c:d9:43:a6:43:6b:ff:04:c2:22:56: 31:16:48:45:7d:37:dc:2d:4e:af:12:0b:14:11:1e: 7d:1f:ca:1b:90:ba:a1:58:e0:cd:28:f8:e2:a6:ed: 0a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AC:8F:A0:30:B6:0E:08:43:BD:0E:C4:69:90:30:1A:3E:97:93:8A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0ayPoDC2DghDvQ7EaZAwGj6Xk4o.roa sbgp-ipAddrBlock: critical IPv4: 36.53.224.0/21 Signature Algorithm: sha256WithRSAEncryption 00:0e:c7:8c:2f:d1:0e:13:d1:90:72:48:4c:c5:be:6e:c6:ed: ce:67:69:78:e4:3c:44:67:a4:6d:b3:8c:42:ce:d5:01:44:71: 0d:a7:5f:82:d8:77:84:6f:93:86:c9:bd:73:3b:fd:81:f1:29: 38:23:0f:97:8e:7a:13:03:4d:16:1b:a3:a2:a3:0e:8e:59:cb: 14:84:a5:ea:1f:e9:9f:da:9d:c1:3d:92:23:41:b0:ab:0e:ed: e4:28:e5:c9:c5:45:7f:db:d1:a5:6e:f8:19:b7:ca:cd:d8:75: 1a:3c:ff:b7:87:82:9d:09:02:d5:8b:01:f0:19:8f:f4:fc:04: e3:15:04:a2:48:4a:fa:4d:d3:5f:b6:fe:24:83:68:48:61:0c: ca:57:11:b5:6b:96:84:e7:56:57:61:90:c5:b0:84:0a:b4:9f: 42:d7:47:2e:3f:dd:85:4d:0e:73:af:dc:97:92:da:c5:1e:85: 60:8e:63:c6:83:a7:0f:52:13:3f:05:d3:15:c6:9b:41:82:2d: cb:7d:e3:87:99:c8:3a:94:0a:69:97:4e:ff:7f:a9:b9:f4:0a: c8:ba:92:81:aa:7d:22:cf:24:87:c7:36:8b:47:9f:ee:ca:34: 97:6e:ec:a2:69:6c:8f:98:22:98:3a:32:e9:45:a6:26:f1:f7: f2:2f:55:15 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxQUM4RkEwMzBCNjBF MDg0M0JEMEVDNDY5OTAzMDFBM0U5NzkzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8rZfqmkT32/JT+3KU41Ucj5tg/+VJ5EITo3RO57b1VNrQ1W+U LqsR2tKvsAOY95YqVXk+C19n/8aRFTYTChMVb38v8T0TUYzK2d7mM7kP60+EUFEU pLQIi+c5Fu8r0avni3k1UYLVu+EIQJM/qXGtBeGboAb29KdU4XRna4YkXxiXd29C EJEwmpCW6zgCnnwBl/rUya9Zef8BJSL36e41jf14TJ/i2MhBTM9OQExJEtQpPFRP usqp0t5GInIEWNFIIkf+5amIMgKDerMTfHPo8BNNjjRc2UOmQ2v/BMIiVjEWSEV9 N9wtTq8SCxQRHn0fyhuQuqFY4M0o+OKm7QpdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU0ayPoDC2DghDvQ7EaZAwGj6Xk4owHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0LzBheVBvREMyRGdoRHZRN0VhWkF3R2o2WGs0by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMkNeAwDQYJKoZIhvcNAQELBQADggEB AAAOx4wv0Q4T0ZBySEzFvm7G7c5naXjkPERnpG2zjELO1QFEcQ2nX4LYd4Rvk4bJ vXM7/YHxKTgjD5eOehMDTRYbo6KjDo5ZyxSEpeof6Z/ancE9kiNBsKsO7eQo5cnF RX/b0aVu+Bm3ys3YdRo8/7eHgp0JAtWLAfAZj/T8BOMVBKJISvpN01+2/iSDaEhh DMpXEbVrloTnVldhkMWwhAq0n0LXRy4/3YVNDnOv3JeS2sUehWCOY8aDpw9SEz8F 0xXGm0GCLct944eZyDqUCmmXTv9/qbn0Csi6koGqfSLPJIfHNotHn+7KNJdu7KJp bI+YIpg6MulFpibx9/IvVRU= -----END CERTIFICATE-----Generated at Fri Apr 17 02:19:36 2026 by rpki-client