$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ii3OWGzqyDZUR-FYVv-VoTeW-Kc.roa File: ii3OWGzqyDZUR-FYVv-VoTeW-Kc.roa (raw, json) Hash identifier: 0rR19i+f389EHM0GocAjb5QKKslfGi6CahKia2f8/bY= Subject key identifier: 8A:2D:CE:58:6C:EA:C8:36:54:47:E1:58:56:FF:95:A1:37:96:F8:A7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0528 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ii3OWGzqyDZUR-FYVv-VoTeW-Kc.roa Signing time: Tue 31 Mar 2026 08:19:33 +0000 ROA not before: Tue 31 Mar 2026 08:19:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 59.156.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8A2DCE586CEAC8365447E15856FF95A13796F8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c3:f0:a4:fd:6d:1b:33:ba:30:fc:45:9d:ae: a9:fb:db:a7:7a:74:a1:18:ff:de:bf:79:91:23:b6: 22:d6:55:f5:19:80:11:0e:99:bd:a1:e0:73:28:c0: 56:d8:0f:05:10:5c:55:a0:37:a8:b9:7a:86:d6:a4: 38:6d:19:10:0e:8f:1e:bb:20:90:88:bd:f0:a8:fe: ad:e6:e4:13:98:b8:c8:57:49:89:b4:b5:28:64:0f: 2f:08:a2:28:37:f7:f7:4f:2a:77:d9:7a:66:cd:f7: 8d:82:59:c1:ff:8f:c4:c8:6d:6e:f3:c6:00:d1:90: 41:a6:7c:68:b7:35:de:6b:4c:f2:e7:99:5a:f4:6b: ec:1f:6d:19:4b:c9:9f:d3:df:96:81:80:b0:3a:0f: c2:41:02:80:37:ea:cd:79:2d:45:11:ae:5b:8f:5b: ce:69:2f:96:98:46:fa:9f:2f:63:69:a3:9e:41:7d: bb:63:fc:fa:e7:f8:99:ec:d4:0f:4c:01:31:62:3f: 41:41:61:64:d5:84:85:65:35:a9:02:8b:84:c6:e6: a5:14:23:26:b4:ff:18:1a:d4:8c:8b:26:3a:cb:7e: 1f:18:07:cf:7e:e2:16:c0:e9:a0:6d:2d:f3:3e:a9: c6:8e:51:7c:60:8b:84:52:99:22:d9:8d:7f:99:29: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:CE:58:6C:EA:C8:36:54:47:E1:58:56:FF:95:A1:37:96:F8:A7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ii3OWGzqyDZUR-FYVv-VoTeW-Kc.roa sbgp-ipAddrBlock: critical IPv4: 59.156.0.0/20 Signature Algorithm: sha256WithRSAEncryption 45:7a:09:62:00:fd:a2:0a:5c:1b:6d:37:1a:c0:31:d5:a5:e5: 46:5f:f2:59:aa:87:6b:99:c3:0d:fb:a7:11:2f:89:55:f0:ed: 28:22:df:f2:a6:82:f4:cb:9b:e2:dd:1c:ec:6d:28:f7:dd:84: d7:59:33:94:cb:e1:3c:a0:98:dd:54:56:59:a7:50:18:7c:21: 63:22:9e:f4:41:51:9e:71:ab:a3:6d:52:b0:e9:13:09:5e:d9: 67:21:f4:67:e1:b1:a7:fe:e4:4f:07:9a:64:dc:8d:8a:61:1b: 84:26:e2:fe:d0:26:21:61:1b:23:5f:71:3f:9c:8e:31:02:36: b9:fc:ec:10:18:b4:b0:4c:0b:99:ba:9d:14:82:fa:06:ad:b8: cb:9c:9c:03:b0:89:f0:e7:67:55:68:7b:67:b1:cd:aa:b4:5e: ea:bd:5a:d9:e4:6d:aa:b8:b8:80:db:b9:27:05:5d:1a:55:5d: 57:41:92:4e:a7:0d:ec:c4:78:0f:25:e8:99:9a:b9:34:f5:1f: 3f:c3:5c:8c:85:70:36:22:37:7c:81:30:1b:c7:cf:11:e6:9d: df:c2:a2:a5:da:34:5c:48:a9:93:eb:88:c1:48:5a:9d:52:ca: ad:70:f3:fc:50:2f:da:32:ec:b1:7e:c2:4e:75:c4:cc:90:f4: 00:1b:6f:d6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBMkRDRTU4NkNFQUM4 MzY1NDQ3RTE1ODU2RkY5NUExMzc5NkY4QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrw/Ck/W0bM7ow/EWdrqn726d6dKEY/96/eZEjtiLWVfUZgBEO mb2h4HMowFbYDwUQXFWgN6i5eobWpDhtGRAOjx67IJCIvfCo/q3m5BOYuMhXSYm0 tShkDy8Ioig39/dPKnfZembN942CWcH/j8TIbW7zxgDRkEGmfGi3Nd5rTPLnmVr0 a+wfbRlLyZ/T35aBgLA6D8JBAoA36s15LUURrluPW85pL5aYRvqfL2Npo55Bfbtj /Prn+Jns1A9MATFiP0FBYWTVhIVlNakCi4TG5qUUIya0/xga1IyLJjrLfh8YB89+ 4hbA6aBtLfM+qcaOUXxgi4RSmSLZjX+ZKUD7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUii3OWGzqyDZUR+FYVv+VoTeW+KcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L2lpM09XR3pxeURaVVItRllWdi1Wb1RlVy1LYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ7nAAwDQYJKoZIhvcNAQELBQADggEB AEV6CWIA/aIKXBttNxrAMdWl5UZf8lmqh2uZww37pxEviVXw7Sgi3/KmgvTLm+Ld HOxtKPfdhNdZM5TL4TygmN1UVlmnUBh8IWMinvRBUZ5xq6NtUrDpEwle2Wch9Gfh saf+5E8HmmTcjYphG4Qm4v7QJiFhGyNfcT+cjjECNrn87BAYtLBMC5m6nRSC+gat uMucnAOwifDnZ1Voe2exzaq0Xuq9Wtnkbaq4uIDbuScFXRpVXVdBkk6nDezEeA8l 6JmauTT1Hz/DXIyFcDYiN3yBMBvHzxHmnd/CoqXaNFxIqZPriMFIWp1Syq1w8/xQ L9oy7LF+wk51xMyQ9AAbb9Y= -----END CERTIFICATE-----Generated at Fri Apr 17 03:07:33 2026 by rpki-client