$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OidCUojQbHf6rfQER4qrQ7RM92M.roa File: OidCUojQbHf6rfQER4qrQ7RM92M.roa (raw, json) Hash identifier: MWjqHywiai7iRZY5pyKuF3kUvhxdx4hhLhV1TxeaAsM= Subject key identifier: 3A:27:42:52:88:D0:6C:77:FA:AD:F4:04:47:8A:AB:43:B4:4C:F7:63 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0561 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OidCUojQbHf6rfQER4qrQ7RM92M.roa Signing time: Tue 31 Mar 2026 08:19:57 +0000 ROA not before: Tue 31 Mar 2026 08:19:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 220.150.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3A27425288D06C77FAADF404478AAB43B44CF763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:7b:cb:14:a7:0c:e8:41:98:c1:b6:75:a1: 50:a5:0d:80:38:70:34:d5:06:af:73:c3:03:21:ab: 9a:8a:d6:4e:3b:5f:a1:3a:36:22:0c:a7:d4:ab:da: 1d:1a:82:82:48:01:31:d2:3b:f3:6c:07:4c:5b:f3: 20:75:a9:a7:e3:bd:27:84:db:5b:8a:05:3a:78:25: 6d:c1:8b:09:a2:fd:e0:48:80:fb:7e:95:75:f3:91: f2:72:61:2d:0f:4c:8a:97:2a:81:0b:a5:e2:4f:a5: 6b:46:54:7a:c9:b3:88:26:a9:38:d3:4b:5a:30:ad: cf:fd:27:59:06:e4:56:fd:38:76:21:dc:48:6d:b9: 31:1d:c3:99:8d:6e:df:8b:14:9e:25:94:b5:7a:09: 57:8a:a6:32:37:73:7a:3b:5e:56:51:03:54:84:6c: e6:71:3e:80:f3:4b:dd:6c:32:25:39:cb:fe:b1:50: dc:cb:6b:f5:fd:69:f5:de:22:fb:9c:a1:0d:8b:7f: be:c7:0d:3e:a9:b1:37:53:1d:ef:85:75:3d:fd:f7: ab:41:d9:8a:72:6e:0d:9f:b3:ce:8e:b3:74:0f:b0: c8:b9:9b:4d:5c:95:0f:59:2f:a0:74:4b:21:3d:ff: 05:43:73:e7:06:61:62:4e:6c:03:48:fb:07:73:6c: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:42:52:88:D0:6C:77:FA:AD:F4:04:47:8A:AB:43:B4:4C:F7:63 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OidCUojQbHf6rfQER4qrQ7RM92M.roa sbgp-ipAddrBlock: critical IPv4: 220.150.68.0/22 Signature Algorithm: sha256WithRSAEncryption 53:5d:01:1a:1f:9c:3a:3e:99:07:f5:72:5c:51:87:04:13:5e: ba:b6:af:da:db:ec:33:84:c9:82:26:17:6e:f4:d7:6f:78:c5: ca:6c:06:d6:61:27:4e:46:30:bb:62:8c:45:fc:f3:72:76:4c: 2d:06:6c:5b:07:22:22:a4:e2:0c:7e:72:ec:ca:b5:b0:7e:10: e0:7e:82:61:7d:d2:37:c1:2c:cd:6c:45:fc:c9:48:35:5e:9d: 90:72:48:2c:39:79:85:cb:4b:bd:39:5c:99:9a:1b:f2:7a:13: d0:34:b1:8c:b9:ac:68:7a:e6:48:79:66:db:80:5a:2f:05:3f: b9:4d:76:3e:09:5d:69:e5:9d:08:bf:4a:f3:c5:20:59:ec:80: b8:b4:74:89:06:b5:55:bd:2e:14:8a:a1:3f:20:e0:da:71:c2: d1:43:31:0a:7c:e5:e1:b2:a4:7c:82:bd:80:31:e6:1e:1b:2a: f2:a8:42:7c:8d:bc:0d:40:63:1e:f9:1b:37:9f:5c:af:d4:7c: 66:1e:2f:3a:a7:23:78:1a:52:64:32:bb:2a:6f:7f:4c:8c:81: 56:b2:c0:63:23:59:9e:aa:72:22:45:29:83:fc:4a:28:a3:1b: 67:29:d4:e6:44:97:25:e8:ca:50:7f:5f:ad:28:5d:7e:ca:4f: 14:ae:59:59 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5NTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBMjc0MjUyODhEMDZD NzdGQUFERjQwNDQ3OEFBQjQzQjQ0Q0Y3NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWHXvLFKcM6EGYwbZ1oVClDYA4cDTVBq9zwwMhq5qK1k47X6E6 NiIMp9Sr2h0agoJIATHSO/NsB0xb8yB1qafjvSeE21uKBTp4JW3Biwmi/eBIgPt+ lXXzkfJyYS0PTIqXKoELpeJPpWtGVHrJs4gmqTjTS1owrc/9J1kG5Fb9OHYh3Eht uTEdw5mNbt+LFJ4llLV6CVeKpjI3c3o7XlZRA1SEbOZxPoDzS91sMiU5y/6xUNzL a/X9afXeIvucoQ2Lf77HDT6psTdTHe+FdT3996tB2Ypybg2fs86Os3QPsMi5m01c lQ9ZL6B0SyE9/wVDc+cGYWJObANI+wdzbKebAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOidCUojQbHf6rfQER4qrQ7RM92MwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L09pZENVb2pRYkhmNnJmUUVSNHFyUTdSTTkyTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALclkQwDQYJKoZIhvcNAQELBQADggEB AFNdARofnDo+mQf1clxRhwQTXrq2r9rb7DOEyYImF2701294xcpsBtZhJ05GMLti jEX883J2TC0GbFsHIiKk4gx+cuzKtbB+EOB+gmF90jfBLM1sRfzJSDVenZBySCw5 eYXLS705XJmaG/J6E9A0sYy5rGh65kh5ZtuAWi8FP7lNdj4JXWnlnQi/SvPFIFns gLi0dIkGtVW9LhSKoT8g4NpxwtFDMQp85eGypHyCvYAx5h4bKvKoQnyNvA1AYx75 GzefXK/UfGYeLzqnI3gaUmQyuypvf0yMgVaywGMjWZ6qciJFKYP8SiijG2cp1OZE lyXoylB/X60oXX7KTxSuWVk= -----END CERTIFICATE-----Generated at Sun Apr 19 09:42:00 2026 by rpki-client