$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2lQ3BGWBqaxWN2qfQXRylcFrbDY.roa File: 2lQ3BGWBqaxWN2qfQXRylcFrbDY.roa (raw, json) Hash identifier: 1cPvXbaPHqQmeZxrJTATnEMdYXilQEyKW2+hizla5ro= Subject key identifier: DA:54:37:04:65:81:A9:AC:56:37:6A:9F:41:74:72:95:C1:6B:6C:36 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05F8 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2lQ3BGWBqaxWN2qfQXRylcFrbDY.roa Signing time: Tue 31 Mar 2026 08:21:14 +0000 ROA not before: Tue 31 Mar 2026 08:21:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 61.192.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:21:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DA5437046581A9AC56376A9F41747295C16B6C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:8f:98:8e:0b:7d:f6:a5:f8:1c:89:91:d4: e6:a7:42:6c:0f:df:1e:8b:6b:a3:cd:54:cf:23:18: a3:3b:85:a2:66:25:8f:2e:af:87:fc:4f:af:6e:b0: 40:fa:ac:b7:18:ad:a7:89:95:95:27:82:c9:91:d2: 7f:f9:e4:7b:a1:dd:c9:bd:49:30:0c:71:16:2d:3d: 70:8e:9a:92:d6:5b:09:a9:23:ad:af:2a:f0:25:85: 50:94:db:15:3b:20:1a:6f:65:e8:f2:63:e0:88:ed: 51:fe:c0:6f:73:82:b7:c0:c0:aa:72:00:72:04:3e: 31:b4:9c:7d:92:d9:a3:6a:df:59:5c:5a:d0:7a:a3: 68:1d:a5:9b:90:13:7d:2e:af:09:35:07:dc:e1:75: 78:c0:ee:c2:86:4e:69:68:06:dd:c8:b9:1e:84:82: c7:98:7b:d0:60:99:d2:11:96:74:b9:63:e6:ee:2d: 37:89:1f:c4:8c:85:17:1f:07:85:55:6a:59:ca:15: 22:7a:a6:64:83:1e:9c:9a:72:d7:f1:b1:4e:b6:b5: 95:84:2c:7e:5a:84:90:b3:3e:f1:30:c4:8e:53:5a: ef:58:3d:26:a2:fa:71:f8:fc:b1:b1:46:e6:44:41: 7e:36:97:83:de:33:df:de:7b:23:5b:dc:be:bc:13: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:54:37:04:65:81:A9:AC:56:37:6A:9F:41:74:72:95:C1:6B:6C:36 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2lQ3BGWBqaxWN2qfQXRylcFrbDY.roa sbgp-ipAddrBlock: critical IPv4: 61.192.160.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b9:47:9c:25:f3:e6:9f:73:c4:57:25:66:ea:0e:6a:03:0c: 28:a8:29:67:20:fc:a1:ad:a8:78:fd:54:45:05:b6:7b:32:cd: 13:95:77:af:eb:90:6b:90:40:13:fe:50:b7:7e:7c:c8:a3:44: e0:54:0d:7b:d1:00:07:4e:aa:9d:74:8d:fd:84:d1:e6:84:eb: 97:55:39:e8:9a:cf:49:a1:db:51:9c:73:9c:b2:2b:af:e9:ff: 2c:02:43:37:a6:eb:94:90:86:0b:a3:a6:38:c8:38:79:0d:d8: e8:62:1f:61:e9:6c:6b:38:27:37:fc:59:55:ed:5d:dc:ff:f2: 21:9b:00:fa:0e:ff:93:01:fd:67:ac:83:0e:6a:28:49:a4:f7: ed:db:73:9c:76:57:d3:b8:5b:2c:91:22:48:d6:9d:84:99:45: a8:bc:fe:84:6f:bb:ea:35:d2:a9:58:8e:30:52:5a:be:bd:41: 24:19:87:45:18:94:84:15:eb:bf:48:e6:e8:a7:76:fd:21:7b: eb:2f:07:fa:ae:1b:fb:22:a8:43:82:56:c8:ac:ec:83:b2:8d: b8:70:1b:fc:8f:89:89:89:fe:95:9c:34:27:b4:4c:40:d5:62: 80:50:ab:e9:24:9c:aa:9c:0a:90:4f:2f:95:d8:26:b1:15:fc: 57:9f:48:00 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIxMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBNTQzNzA0NjU4MUE5 QUM1NjM3NkE5RjQxNzQ3Mjk1QzE2QjZDMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKs4+Yjgt99qX4HImR1OanQmwP3x6La6PNVM8jGKM7haJmJY8u r4f8T69usED6rLcYraeJlZUngsmR0n/55Huh3cm9STAMcRYtPXCOmpLWWwmpI62v KvAlhVCU2xU7IBpvZejyY+CI7VH+wG9zgrfAwKpyAHIEPjG0nH2S2aNq31lcWtB6 o2gdpZuQE30urwk1B9zhdXjA7sKGTmloBt3IuR6EgseYe9BgmdIRlnS5Y+buLTeJ H8SMhRcfB4VValnKFSJ6pmSDHpyactfxsU62tZWELH5ahJCzPvEwxI5TWu9YPSai +nH4/LGxRuZEQX42l4PeM9/eeyNb3L68EyiPAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2lQ3BGWBqaxWN2qfQXRylcFrbDYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0LzJsUTNCR1dCcWF4V04ycWZRWFJ5bGNGcmJEWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9wKAwDQYJKoZIhvcNAQELBQADggEB AGu5R5wl8+afc8RXJWbqDmoDDCioKWcg/KGtqHj9VEUFtnsyzROVd6/rkGuQQBP+ ULd+fMijROBUDXvRAAdOqp10jf2E0eaE65dVOeiaz0mh21Gcc5yyK6/p/ywCQzem 65SQhgujpjjIOHkN2OhiH2HpbGs4Jzf8WVXtXdz/8iGbAPoO/5MB/Wesgw5qKEmk 9+3bc5x2V9O4WyyRIkjWnYSZRai8/oRvu+o10qlYjjBSWr69QSQZh0UYlIQV679I 5uindv0he+svB/quG/siqEOCVsis7IOyjbhwG/yPiYmJ/pWcNCe0TEDVYoBQq+kk nKqcCpBPL5XYJrEV/FefSAA= -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:30 2026 by rpki-client