$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HCP3jVO0KQ7YrpgWX97FQcMufPs.roa File: HCP3jVO0KQ7YrpgWX97FQcMufPs.roa (raw, json) Hash identifier: Vusb5qtqlvCXOnPOxQ57Zm578Yix2fJnq/v7hO3XHH4= Subject key identifier: 1C:23:F7:8D:53:B4:29:0E:D8:AE:98:16:5F:DE:C5:41:C3:2E:7C:FB Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0599 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HCP3jVO0KQ7YrpgWX97FQcMufPs.roa Signing time: Tue 31 Mar 2026 08:20:29 +0000 ROA not before: Tue 31 Mar 2026 08:20:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4686 IP address blocks: 124.255.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1C23F78D53B4290ED8AE98165FDEC541C32E7CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:b8:dc:bf:f2:c9:09:eb:cb:f2:09:4c:19: a8:ea:1c:25:cd:4b:e6:ac:cf:ec:c0:76:00:f4:d0: df:cd:f3:77:4a:d7:3c:aa:a5:14:fb:d1:0e:e2:ca: 51:39:e2:d5:8c:95:e5:5f:74:16:41:f2:40:e1:fd: 44:81:49:c0:04:57:f8:b0:7d:a6:60:1a:16:09:f0: 8e:50:42:d4:8a:6f:a4:f1:4f:bc:6d:13:f1:81:4f: fe:12:2c:3e:5e:e4:3e:93:ea:66:b2:ee:2a:8b:2d: fd:87:49:b6:90:d0:80:6b:00:4d:4f:3c:b6:a6:8e: 7e:17:ab:69:10:c3:c2:cf:75:59:90:01:29:c5:b6: 1c:a6:13:b1:e5:3e:d7:34:a1:34:d0:47:af:bb:78: 5b:f7:14:dd:60:0a:2f:35:94:41:e3:72:f5:ff:7c: b7:4a:b1:ec:be:68:25:40:b4:74:b4:62:a4:46:c9: 5b:7c:39:ff:ca:51:64:eb:bc:78:cc:84:e2:d9:03: bb:8b:60:5a:5f:5e:c8:36:fe:28:3e:51:d2:c7:e6: 4d:84:b4:eb:09:a9:15:25:c1:b2:6b:7d:5b:8f:12: 8b:32:73:c4:99:83:51:4d:b4:a0:22:04:ee:5c:e8: 95:f4:98:2d:b1:da:3f:76:25:75:53:78:10:f8:06: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:23:F7:8D:53:B4:29:0E:D8:AE:98:16:5F:DE:C5:41:C3:2E:7C:FB X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HCP3jVO0KQ7YrpgWX97FQcMufPs.roa sbgp-ipAddrBlock: critical IPv4: 124.255.224.0/19 Signature Algorithm: sha256WithRSAEncryption 33:50:42:e6:f9:20:65:18:5f:f7:39:0f:36:c2:b6:32:6d:20: 3d:bc:c4:e3:ed:2f:9c:8f:d2:8a:86:e1:9f:b0:f0:40:1f:d8: 4a:e5:2f:4e:08:09:1b:dc:dc:46:6f:88:16:79:bc:b9:dc:56: 4b:03:08:ae:60:c4:95:36:a7:b0:99:2d:56:70:21:14:02:52: 43:a6:5c:b2:d5:35:e3:f0:41:03:b1:64:a2:c4:63:71:29:6d: 68:d9:3b:a1:a9:f9:19:c2:2f:9a:2f:e0:0a:16:67:94:29:22: 8a:03:1a:30:2b:46:af:0f:df:93:f7:e5:d7:97:55:d0:c9:89: 15:e9:96:40:e6:2f:25:9b:74:8a:ef:45:16:cf:9b:fc:68:87: 4b:85:31:26:64:7c:ad:40:4d:cd:9c:d8:a2:fc:35:41:7c:cc: 63:04:40:9b:da:18:9c:60:6a:a7:30:bc:6a:69:05:7b:80:21: bb:17:2a:ef:70:f6:0f:6e:ed:9c:89:54:bb:a8:25:40:f2:ce: 3a:f9:f1:b4:3f:9a:13:1b:64:3a:91:77:f6:fc:f6:da:36:44: 22:8d:45:e1:08:3c:ed:1a:6e:b9:49:23:db:30:8c:6e:db:ba: 28:b0:3c:7d:29:74:f6:78:30:f7:e6:9f:83:e2:a3:88:4d:9b: fb:1c:ff:d0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwMjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDMjNGNzhENTNCNDI5 MEVEOEFFOTgxNjVGREVDNTQxQzMyRTdDRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5irjcv/LJCevL8glMGajqHCXNS+asz+zAdgD00N/N83dK1zyq pRT70Q7iylE54tWMleVfdBZB8kDh/USBScAEV/iwfaZgGhYJ8I5QQtSKb6TxT7xt E/GBT/4SLD5e5D6T6may7iqLLf2HSbaQ0IBrAE1PPLamjn4Xq2kQw8LPdVmQASnF thymE7HlPtc0oTTQR6+7eFv3FN1gCi81lEHjcvX/fLdKsey+aCVAtHS0YqRGyVt8 Of/KUWTrvHjMhOLZA7uLYFpfXsg2/ig+UdLH5k2EtOsJqRUlwbJrfVuPEosyc8SZ g1FNtKAiBO5c6JX0mC2x2j92JXVTeBD4Bjx3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHCP3jVO0KQ7YrpgWX97FQcMufPswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0hDUDNqVk8wS1E3WXJwZ1dYOTdGUWNNdWZQcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV8/+AwDQYJKoZIhvcNAQELBQADggEB ADNQQub5IGUYX/c5DzbCtjJtID28xOPtL5yP0oqG4Z+w8EAf2ErlL04ICRvc3EZv iBZ5vLncVksDCK5gxJU2p7CZLVZwIRQCUkOmXLLVNePwQQOxZKLEY3EpbWjZO6Gp +RnCL5ov4AoWZ5QpIooDGjArRq8P35P35deXVdDJiRXplkDmLyWbdIrvRRbPm/xo h0uFMSZkfK1ATc2c2KL8NUF8zGMEQJvaGJxgaqcwvGppBXuAIbsXKu9w9g9u7ZyJ VLuoJUDyzjr58bQ/mhMbZDqRd/b89to2RCKNReEIPO0abrlJI9swjG7buiiwPH0p dPZ4MPfmn4Pio4hNm/sc/9A= -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:26 2026 by rpki-client