$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bIXfDAWxdtVQAn1u6abcEjDkP0g.roa File: bIXfDAWxdtVQAn1u6abcEjDkP0g.roa (raw, json) Hash identifier: Yy0hxoOzNzM2WkRm5IHCAeXEdogt5xLUrJ6OkwT3Igg= Subject key identifier: 6C:85:DF:0C:05:B1:76:D5:50:02:7D:6E:E9:A6:DC:12:30:E4:3F:48 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0530 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bIXfDAWxdtVQAn1u6abcEjDkP0g.roa Signing time: Tue 31 Mar 2026 08:19:36 +0000 ROA not before: Tue 31 Mar 2026 08:19:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 59.156.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6C85DF0C05B176D550027D6EE9A6DC1230E43F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:0f:b7:e1:c1:dc:cf:a7:ad:9a:aa:c4:b2: 85:3e:c2:35:fe:bf:b1:c1:17:d2:83:83:2c:4f:63: a0:d1:a0:cd:1c:48:bd:45:a1:5b:df:d5:a7:3d:ae: 45:54:8c:d9:78:67:29:94:65:43:e0:2a:53:84:da: 53:fc:32:cc:68:af:99:e3:d5:44:5e:29:56:8c:26: f5:85:50:f4:61:31:5c:be:9f:c7:72:89:90:c4:39: eb:84:4f:10:f1:01:ff:45:78:5f:7d:fc:e2:f3:cb: 51:95:bc:b8:2d:33:75:e4:b1:c0:89:2a:75:9b:78: ec:b1:98:12:64:84:fe:8e:69:0b:14:79:6a:7b:78: ec:0c:da:dc:f4:46:34:9f:07:be:d2:16:61:5a:75: 12:09:74:06:10:7f:2f:b0:06:cf:50:17:07:47:c9: 73:97:5a:eb:8c:6a:82:15:4f:a4:00:1c:a1:c5:66: 01:2f:de:db:0a:bc:5d:15:d4:3f:3f:3d:78:84:89: 24:42:7b:00:ea:88:8b:e8:82:55:55:e4:1c:38:cd: dd:55:1b:10:77:f0:08:00:6a:7c:a9:07:41:63:e4: 8f:f7:ad:12:f4:cf:e0:e9:9d:ae:fd:04:f0:1e:57: 89:22:7a:25:a4:24:54:60:f3:c2:7f:29:eb:ef:ed: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:85:DF:0C:05:B1:76:D5:50:02:7D:6E:E9:A6:DC:12:30:E4:3F:48 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bIXfDAWxdtVQAn1u6abcEjDkP0g.roa sbgp-ipAddrBlock: critical IPv4: 59.156.132.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:37:10:a5:33:13:e4:ab:e0:3c:d3:88:43:97:28:b9:33:d0: 56:00:86:94:9e:4f:53:5c:19:bc:52:4a:f3:24:36:9b:14:0f: 13:44:b0:c0:f4:ee:2d:5f:c6:b2:5e:47:50:bd:ca:ca:70:c6: ac:30:e3:49:03:b5:32:76:dd:05:60:2c:41:fe:ad:9d:2d:dd: 42:83:d6:d5:49:84:63:b8:f9:1b:98:95:1f:fc:86:a8:86:06: 73:23:c4:29:48:fe:8c:19:e3:8d:84:26:d9:5d:31:da:38:67: 19:2a:0e:c4:79:12:b9:eb:ea:02:93:d2:f7:28:d2:91:1d:75: fb:78:c3:55:0f:74:76:22:14:ee:98:ef:65:64:aa:de:87:81: ae:1a:e1:e5:4d:8c:03:8a:b7:32:a3:38:9f:3f:e1:8d:2d:39: d7:76:04:b5:a8:43:39:41:80:f2:4c:b8:6f:50:65:d3:b7:cf: 5b:0d:2c:33:c7:12:06:f1:91:f7:33:09:f6:e0:f0:1e:e4:7a: f0:72:e2:e0:c8:c5:9a:0d:17:59:72:f9:e0:7e:82:77:54:2a: 7c:59:77:0e:2f:8a:f3:0e:02:40:29:a6:e8:1c:7b:79:00:9c: 2a:90:32:77:8d:32:63:55:b2:ef:17:d4:d2:40:e0:a3:4a:4b: 6f:d2:eb:56 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZDODVERjBDMDVCMTc2 RDU1MDAyN0Q2RUU5QTZEQzEyMzBFNDNGNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcXg+34cHcz6etmqrEsoU+wjX+v7HBF9KDgyxPY6DRoM0cSL1F oVvf1ac9rkVUjNl4ZymUZUPgKlOE2lP8Msxor5nj1UReKVaMJvWFUPRhMVy+n8dy iZDEOeuETxDxAf9FeF99/OLzy1GVvLgtM3XkscCJKnWbeOyxmBJkhP6OaQsUeWp7 eOwM2tz0RjSfB77SFmFadRIJdAYQfy+wBs9QFwdHyXOXWuuMaoIVT6QAHKHFZgEv 3tsKvF0V1D8/PXiEiSRCewDqiIvoglVV5Bw4zd1VGxB38AgAanypB0Fj5I/3rRL0 z+Dpna79BPAeV4kieiWkJFRg88J/Kevv7W5RAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUbIXfDAWxdtVQAn1u6abcEjDkP0gwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L2JJWGZEQVd4ZHRWUUFuMXU2YWJjRWpEa1AwZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE7nIQwDQYJKoZIhvcNAQELBQADggEB AD43EKUzE+Sr4DzTiEOXKLkz0FYAhpSeT1NcGbxSSvMkNpsUDxNEsMD07i1fxrJe R1C9yspwxqww40kDtTJ23QVgLEH+rZ0t3UKD1tVJhGO4+RuYlR/8hqiGBnMjxClI /owZ442EJtldMdo4ZxkqDsR5Ernr6gKT0vco0pEddft4w1UPdHYiFO6Y72Vkqt6H ga4a4eVNjAOKtzKjOJ8/4Y0tOdd2BLWoQzlBgPJMuG9QZdO3z1sNLDPHEgbxkfcz Cfbg8B7kevBy4uDIxZoNF1ly+eB+gndUKnxZdw4vivMOAkAppugce3kAnCqQMneN MmNVsu8X1NJA4KNKS2/S61Y= -----END CERTIFICATE-----Generated at Fri Apr 17 02:19:35 2026 by rpki-client