$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/A4oxL0Ar87RU9yQ-gaVYHyc_3iI.roa File: A4oxL0Ar87RU9yQ-gaVYHyc_3iI.roa (raw, json) Hash identifier: 4pBDACNa7mNFt3Tp6G8FVZKQFbG7E4X9loYymr3qPSg= Subject key identifier: 03:8A:31:2F:40:2B:F3:B4:54:F7:24:3E:81:A5:58:1F:27:3F:DE:22 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0578 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/A4oxL0Ar87RU9yQ-gaVYHyc_3iI.roa Signing time: Tue 31 Mar 2026 08:20:14 +0000 ROA not before: Tue 31 Mar 2026 08:20:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 122.145.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=038A312F402BF3B454F7243E81A5581F273FDE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:5c:e7:81:8d:19:17:73:a3:cf:43:84:58: 73:79:08:2a:d5:c6:67:82:20:d0:c6:07:3e:7c:bc: dc:97:4c:d1:b0:97:6c:36:30:23:64:a3:1b:03:80: e6:4e:60:16:1b:4b:16:ce:ba:ec:a7:6c:3a:65:0e: 79:55:00:be:dc:bf:31:8e:95:fc:2a:00:0b:db:ea: 74:1c:98:f6:e1:9d:57:9c:3f:df:17:7c:bd:14:6b: 56:28:22:25:09:5d:d4:97:e3:36:78:c8:b7:31:ee: 96:27:e9:ab:d7:0c:3e:56:00:08:0d:b7:2e:da:f6: fd:f0:02:06:91:f6:6e:41:77:71:19:f4:07:85:31: 48:48:b1:60:c6:d7:73:27:a0:cf:c6:2d:2a:27:99: c0:ed:fc:66:31:c5:6e:79:15:68:47:32:4a:d3:f6: 8a:e6:57:1b:8c:ee:58:f4:59:67:37:e2:e3:0d:53: 49:f9:bd:22:9f:5b:f2:24:f3:d6:82:0b:56:8b:00: b7:32:cb:67:b3:15:5c:41:c5:45:77:0e:ec:96:cb: 5d:b7:69:6e:96:0a:fc:a4:97:48:ce:ea:dd:eb:96: 61:cf:21:d7:b8:d2:3a:38:a7:60:72:05:2c:d3:97: 65:0f:9f:98:ca:05:82:b3:f0:a1:80:2e:f0:9a:47: ce:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8A:31:2F:40:2B:F3:B4:54:F7:24:3E:81:A5:58:1F:27:3F:DE:22 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/A4oxL0Ar87RU9yQ-gaVYHyc_3iI.roa sbgp-ipAddrBlock: critical IPv4: 122.145.131.0/24 Signature Algorithm: sha256WithRSAEncryption 62:db:5f:85:19:88:4b:18:ac:f0:0d:45:44:a6:bf:bf:10:a2: b0:40:52:17:a6:06:5c:90:a9:ff:db:ff:21:61:97:2d:f0:74: 41:7f:a5:f6:55:59:66:0c:18:5c:58:1b:21:58:2e:0a:f2:6c: ef:2d:41:7c:dc:a5:1b:b3:c6:2e:fc:43:15:c5:6e:af:b9:8a: 06:38:99:c7:d9:67:ae:84:b5:43:fb:f2:07:53:e8:fb:81:f9: 50:34:3f:6e:ab:c8:23:c3:c1:43:4c:4b:0e:6f:61:bf:5c:a5: 21:50:dd:b6:ab:3c:42:a2:84:6b:cb:51:fc:fb:87:86:49:10: 12:7a:18:d5:00:67:12:14:42:e2:91:67:6d:2f:cd:c8:dd:3e: fb:f3:12:ec:06:81:aa:25:89:94:47:ad:9a:dd:53:2f:58:71: 8a:c6:59:44:a9:aa:a1:34:4f:22:ae:38:f9:99:89:ce:6c:e5: 01:39:c1:19:ce:4f:9b:35:1b:56:69:36:93:07:61:e0:4a:70: 3e:72:46:44:28:e9:36:9f:e7:a8:24:e3:a6:a1:80:95:a6:1d: 1d:62:3c:98:ee:a2:96:d4:6a:90:b5:81:e3:a7:73:a9:89:5f: 1e:a8:f6:79:37:3b:9c:0b:b0:7e:f4:9d:a1:4b:b8:57:f3:77: 32:7a:bb:19 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAzOEEzMTJGNDAyQkYz QjQ1NEY3MjQzRTgxQTU1ODFGMjczRkRFMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe61zngY0ZF3Ojz0OEWHN5CCrVxmeCINDGBz58vNyXTNGwl2w2 MCNkoxsDgOZOYBYbSxbOuuynbDplDnlVAL7cvzGOlfwqAAvb6nQcmPbhnVecP98X fL0Ua1YoIiUJXdSX4zZ4yLcx7pYn6avXDD5WAAgNty7a9v3wAgaR9m5Bd3EZ9AeF MUhIsWDG13MnoM/GLSonmcDt/GYxxW55FWhHMkrT9ormVxuM7lj0WWc34uMNU0n5 vSKfW/Ik89aCC1aLALcyy2ezFVxBxUV3DuyWy123aW6WCvykl0jO6t3rlmHPIde4 0jo4p2ByBSzTl2UPn5jKBYKz8KGALvCaR84fAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUA4oxL0Ar87RU9yQ+gaVYHyc/3iIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0E0b3hMMEFyODdSVTl5US1nYVZZSHljXzNpSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB6kYMwDQYJKoZIhvcNAQELBQADggEB AGLbX4UZiEsYrPANRUSmv78QorBAUhemBlyQqf/b/yFhly3wdEF/pfZVWWYMGFxY GyFYLgrybO8tQXzcpRuzxi78QxXFbq+5igY4mcfZZ66EtUP78gdT6PuB+VA0P26r yCPDwUNMSw5vYb9cpSFQ3barPEKihGvLUfz7h4ZJEBJ6GNUAZxIUQuKRZ20vzcjd PvvzEuwGgaoliZRHrZrdUy9YcYrGWUSpqqE0TyKuOPmZic5s5QE5wRnOT5s1G1Zp NpMHYeBKcD5yRkQo6Taf56gk46ahgJWmHR1iPJjuopbUapC1geOnc6mJXx6o9nk3 O5wLsH70naFLuFfzdzJ6uxk= -----END CERTIFICATE-----Generated at Fri Apr 17 03:07:34 2026 by rpki-client