$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q3HX3k6xgF3mak4Xxr6LwvytRBI.roa File: Q3HX3k6xgF3mak4Xxr6LwvytRBI.roa (raw, json) Hash identifier: Og2tKVSPenAyebr4czlbWe2XCClLwB7XPJ17cwOMHMA= Subject key identifier: 43:71:D7:DE:4E:B1:80:5D:E6:6A:4E:17:C6:BE:8B:C2:FC:AD:44:12 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05A9 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q3HX3k6xgF3mak4Xxr6LwvytRBI.roa Signing time: Tue 31 Mar 2026 08:20:35 +0000 ROA not before: Tue 31 Mar 2026 08:20:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4686 IP address blocks: 220.150.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4371D7DE4EB1805DE66A4E17C6BE8BC2FCAD4412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:a2:ec:40:00:d8:c2:2b:67:5b:5a:0c:c8: c7:62:ad:97:4b:98:8a:ca:c6:9a:19:69:9e:bb:5c: fd:85:58:be:c1:c9:59:4f:8e:d3:8c:a9:35:db:44: 02:1c:2e:95:fc:1f:10:a1:2a:84:02:d5:8e:e8:a8: e6:0c:57:ed:b6:78:ae:d2:1a:53:b9:4d:6e:7e:0e: 4d:1c:d3:34:8d:b4:92:98:46:07:c4:1a:17:e6:f6: 2a:34:af:92:d7:ef:bf:f2:9a:18:15:da:c1:78:c4: 64:d1:32:02:3d:27:70:ca:c2:67:07:d5:0c:af:a2: 98:22:15:a1:0c:22:08:5a:3e:73:ce:73:89:fd:a4: c7:47:68:9f:8e:e5:b8:d3:11:9c:d6:af:1b:f6:9a: 18:a5:c3:e9:6a:31:ab:71:47:e1:ad:33:65:be:2b: bd:8d:94:70:1e:e2:34:29:fc:0f:e9:91:51:07:bd: d4:ee:51:59:aa:cd:e1:ae:36:9e:d5:c4:2b:1e:1f: 0c:42:e6:bf:78:8c:76:d2:76:80:74:5a:f3:86:31: 45:16:84:e5:0a:9d:14:89:30:92:ab:5a:2a:f3:81: 84:d6:48:d0:83:30:3b:d1:3b:f4:f9:e7:f9:a4:f8: c6:5e:60:4b:38:21:e2:49:5a:50:05:81:d0:41:1f: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:71:D7:DE:4E:B1:80:5D:E6:6A:4E:17:C6:BE:8B:C2:FC:AD:44:12 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q3HX3k6xgF3mak4Xxr6LwvytRBI.roa sbgp-ipAddrBlock: critical IPv4: 220.150.223.0/24 Signature Algorithm: sha256WithRSAEncryption 83:1e:f5:cb:98:0c:70:62:ca:a4:e1:8f:91:d4:6d:ab:7c:b1: 38:da:25:6e:f5:5a:b0:74:d8:a8:63:ac:39:e2:49:2a:66:5d: 92:da:8c:83:c5:1b:60:65:57:d9:ab:e2:d2:5b:47:f1:d9:eb: ff:ce:42:d1:90:5f:98:2c:fb:e7:e9:05:7a:eb:10:0e:92:8d: ad:c7:5c:39:08:bd:06:47:81:7c:ab:5a:22:0c:5a:79:a5:8c: 62:65:b7:50:86:01:37:ff:2f:6b:9a:82:ae:2b:7d:66:0d:c3: 87:77:c8:2c:08:f8:eb:09:8f:2a:21:dd:a7:c1:89:e4:7a:89: 27:8f:68:86:24:40:9f:65:1e:82:4e:eb:14:87:fe:47:df:a4: 42:fa:ad:97:bf:84:05:06:01:82:d8:52:97:a1:26:98:67:fa: f8:75:66:25:93:e4:0c:32:e8:c8:37:59:30:f6:e4:81:e5:e5: 7f:69:3e:ab:2b:ba:f6:e9:f7:d7:05:8c:eb:6f:48:69:a3:22: 6a:e9:0a:50:eb:31:f6:df:a8:0d:8c:42:16:2d:e4:13:cb:9c: a6:88:03:1c:91:cc:64:75:dd:23:e1:48:fa:95:aa:02:86:4d: d3:f8:24:e5:74:8e:23:3f:a4:3d:27:15:31:a2:48:49:77:0f: ed:79:29:67 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNzFEN0RFNEVCMTgw NURFNjZBNEUxN0M2QkU4QkMyRkNBRDQ0MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiNKLsQADYwitnW1oMyMdirZdLmIrKxpoZaZ67XP2FWL7ByVlP jtOMqTXbRAIcLpX8HxChKoQC1Y7oqOYMV+22eK7SGlO5TW5+Dk0c0zSNtJKYRgfE Ghfm9io0r5LX77/ymhgV2sF4xGTRMgI9J3DKwmcH1QyvopgiFaEMIghaPnPOc4n9 pMdHaJ+O5bjTEZzWrxv2mhilw+lqMatxR+GtM2W+K72NlHAe4jQp/A/pkVEHvdTu UVmqzeGuNp7VxCseHwxC5r94jHbSdoB0WvOGMUUWhOUKnRSJMJKrWirzgYTWSNCD MDvRO/T55/mk+MZeYEs4IeJJWlAFgdBBH279AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQ3HX3k6xgF3mak4Xxr6LwvytRBIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L1EzSFgzazZ4Z0YzbWFrNFh4cjZMd3Z5dFJCSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADclt8wDQYJKoZIhvcNAQELBQADggEB AIMe9cuYDHBiyqThj5HUbat8sTjaJW71WrB02KhjrDniSSpmXZLajIPFG2BlV9mr 4tJbR/HZ6//OQtGQX5gs++fpBXrrEA6Sja3HXDkIvQZHgXyrWiIMWnmljGJlt1CG ATf/L2uagq4rfWYNw4d3yCwI+OsJjyoh3afBieR6iSePaIYkQJ9lHoJO6xSH/kff pEL6rZe/hAUGAYLYUpehJphn+vh1ZiWT5Awy6Mg3WTD25IHl5X9pPqsruvbp99cF jOtvSGmjImrpClDrMfbfqA2MQhYt5BPLnKaIAxyRzGR13SPhSPqVqgKGTdP4JOV0 jiM/pD0nFTGiSEl3D+15KWc= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:43 2026 by rpki-client