$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/keohWiiQcodaOSJhlD8clbzVXKk.roa File: keohWiiQcodaOSJhlD8clbzVXKk.roa (raw, json) Hash identifier: pErwvWx0mvVHlnzloj2IgU2lrSUvC+hfkiEX8oCQuZQ= Subject key identifier: 91:EA:21:5A:28:90:72:87:5A:39:22:61:94:3F:1C:95:BC:D5:5C:A9 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05BA Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/keohWiiQcodaOSJhlD8clbzVXKk.roa Signing time: Tue 31 Mar 2026 08:20:42 +0000 ROA not before: Tue 31 Mar 2026 08:20:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 36.52.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=91EA215A289072875A392261943F1C95BCD55CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:d9:f5:28:6c:2f:10:8f:61:3e:72:b4:47: 39:c9:1a:c0:db:32:71:41:03:f3:ab:b5:e4:37:fd: 78:6a:e6:32:4b:dd:0f:fd:a8:d5:ab:1a:96:4f:3b: 97:c7:b3:f3:8b:d4:4e:2a:03:63:98:25:c4:82:5f: d5:55:08:ae:da:6b:46:c0:c7:de:ad:88:ec:cc:e8: cd:bc:c1:7f:35:c2:7d:b9:62:22:45:4b:d8:cf:68: 9c:25:4f:67:b5:7c:d7:8b:9f:ff:64:37:46:73:f0: 31:a5:5c:b7:00:58:7f:35:f5:8b:2f:ac:7c:3c:75: a6:12:4b:36:a3:f8:9c:e0:18:53:17:ff:bf:0a:37: 4f:a2:7c:d6:32:45:9f:e2:db:53:ce:96:46:7b:bf: 80:7a:55:6b:ea:01:aa:9c:60:5a:97:f3:c1:a1:5e: 81:a1:6e:29:47:00:cd:96:0d:dc:5e:8f:c7:11:fd: d5:09:f2:57:9e:0d:e2:ca:45:a1:0d:de:ed:f1:6e: c2:79:29:56:4d:bf:4e:e6:8d:a0:93:36:96:80:75: b6:fb:cf:fe:6c:62:a5:5f:35:a7:1e:ec:b9:6b:ef: af:0b:5d:d1:a2:2e:24:2e:f7:59:ae:13:28:33:71: 86:8b:0f:f4:c6:ea:4a:e1:df:17:21:30:df:1e:d5: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:21:5A:28:90:72:87:5A:39:22:61:94:3F:1C:95:BC:D5:5C:A9 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/keohWiiQcodaOSJhlD8clbzVXKk.roa sbgp-ipAddrBlock: critical IPv4: 36.52.222.0/24 Signature Algorithm: sha256WithRSAEncryption 92:f3:f2:22:86:8d:64:17:00:df:e1:a7:a7:07:41:19:25:9d: 18:12:fb:62:be:0e:7d:fe:8f:60:26:7f:4e:1b:7d:c1:8e:a8: 3b:46:f1:7e:b8:41:42:64:8f:62:de:21:eb:d8:a0:b3:c1:08: 47:4a:21:52:aa:4b:27:b0:65:a0:68:ed:7e:a9:fc:05:7f:8f: 18:ad:fc:3e:58:77:55:53:a3:f9:52:82:a7:02:39:5e:b4:e5: 5d:8e:10:14:f3:88:68:d4:33:d2:ab:6b:cc:0b:ff:08:ee:4d: a5:63:21:fc:f8:19:b7:57:93:36:c6:20:72:19:5f:c3:22:bb: 18:e0:bc:d5:94:ec:79:79:6a:0e:71:5e:8a:49:96:a8:2a:d8: b6:cd:fa:94:cf:6d:e7:9d:45:66:31:fa:31:b1:e1:f9:90:78: 9c:dd:0d:63:c8:95:07:5d:e8:f6:47:ef:97:df:2d:29:57:7c: 2e:d4:85:d4:e8:52:01:07:f9:12:2e:da:81:28:45:8b:c4:89: c4:6b:c6:a3:50:13:c2:d5:13:3b:6a:65:2b:2f:d4:f7:85:9e: ed:95:6f:5a:a3:9b:2f:1c:ba:22:a3:6a:5c:d4:f2:99:cb:fe: 91:4e:60:5c:e6:8a:6e:09:58:b0:b7:80:f8:33:f0:b7:8f:26: 0c:25:e7:9c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkxRUEyMTVBMjg5MDcy ODc1QTM5MjI2MTk0M0YxQzk1QkNENTVDQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIINn1KGwvEI9hPnK0RznJGsDbMnFBA/OrteQ3/Xhq5jJL3Q/9 qNWrGpZPO5fHs/OL1E4qA2OYJcSCX9VVCK7aa0bAx96tiOzM6M28wX81wn25YiJF S9jPaJwlT2e1fNeLn/9kN0Zz8DGlXLcAWH819YsvrHw8daYSSzaj+JzgGFMX/78K N0+ifNYyRZ/i21POlkZ7v4B6VWvqAaqcYFqX88GhXoGhbilHAM2WDdxej8cR/dUJ 8leeDeLKRaEN3u3xbsJ5KVZNv07mjaCTNpaAdbb7z/5sYqVfNace7Llr768LXdGi LiQu91muEygzcYaLD/TG6krh3xchMN8e1TsHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkeohWiiQcodaOSJhlD8clbzVXKkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L2tlb2hXaWlRY29kYU9TSmhsRDhjbGJ6VlhLay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkNN4wDQYJKoZIhvcNAQELBQADggEB AJLz8iKGjWQXAN/hp6cHQRklnRgS+2K+Dn3+j2Amf04bfcGOqDtG8X64QUJkj2Le IevYoLPBCEdKIVKqSyewZaBo7X6p/AV/jxit/D5Yd1VTo/lSgqcCOV605V2OEBTz iGjUM9Kra8wL/wjuTaVjIfz4GbdXkzbGIHIZX8MiuxjgvNWU7Hl5ag5xXopJlqgq 2LbN+pTPbeedRWYx+jGx4fmQeJzdDWPIlQdd6PZH75ffLSlXfC7UhdToUgEH+RIu 2oEoRYvEicRrxqNQE8LVEztqZSsv1PeFnu2Vb1qjmy8cuiKjalzU8pnL/pFOYFzm im4JWLC3gPgz8LePJgwl55w= -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:11 2026 by rpki-client