$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/omkjFV7gaTU3OtkgIhO2ExZ3ROY.roa File: omkjFV7gaTU3OtkgIhO2ExZ3ROY.roa (raw, json) Hash identifier: RApbo+6tKgYmqN2Cv4Gx6dl7iR07cmW2LnVyAVc1y+U= Subject key identifier: A2:69:23:15:5E:E0:69:35:37:3A:D9:20:22:13:B6:13:16:77:44:E6 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 050E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/omkjFV7gaTU3OtkgIhO2ExZ3ROY.roa Signing time: Tue 31 Mar 2026 08:19:21 +0000 ROA not before: Tue 31 Mar 2026 08:19:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 36.52.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A26923155EE06935373AD9202213B613167744E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:68:34:7f:4f:e4:ea:11:a3:fb:77:cd:8e: 1e:e5:ae:86:c0:4f:9f:87:b6:e4:f6:4a:2e:9f:d1: a8:14:67:e6:c6:1c:57:14:98:0c:ad:93:a6:40:91: 89:6c:dd:17:2a:e3:2a:77:8c:b7:bb:b3:b5:43:c8: d7:e4:9a:47:32:91:2b:7c:52:07:e4:59:37:07:a1: 9a:76:19:71:85:8f:eb:48:7b:b2:e8:1b:5e:91:5e: bd:54:0f:95:06:53:52:a1:11:9f:90:eb:a8:5d:ca: 88:d0:1b:fd:d5:b5:70:53:59:fd:4a:b0:db:b4:40: f0:cc:ee:ea:5a:c0:c9:ad:aa:77:48:ee:ea:a3:87: 18:0f:6c:d6:0d:4c:9c:8d:d0:b3:e1:33:64:36:39: 51:3d:71:94:99:db:82:8e:00:08:d4:c9:c5:45:53: 0d:6c:2b:05:73:90:b7:d2:36:88:70:ec:57:ba:a1: dd:e6:95:1b:3d:78:2f:47:cc:e3:2d:cf:0c:40:ee: 81:8d:77:7b:44:24:a3:01:98:96:0d:a3:58:c7:7f: 04:f6:3c:04:b3:14:fa:59:a8:db:4b:42:06:e8:67: 72:fe:bb:f6:4e:b2:7a:5c:9b:70:c9:d9:c3:7e:a2: 5b:3e:9b:5d:c3:90:07:84:b5:9f:00:cf:52:da:7a: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:23:15:5E:E0:69:35:37:3A:D9:20:22:13:B6:13:16:77:44:E6 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/omkjFV7gaTU3OtkgIhO2ExZ3ROY.roa sbgp-ipAddrBlock: critical IPv4: 36.52.28.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:e5:9a:fc:5d:e7:bc:5c:c2:a8:46:53:29:63:56:5d:c8:70: 5a:e8:ce:02:52:55:6b:ab:3c:52:d3:b5:76:46:59:84:79:67: b2:29:50:64:6f:ac:e0:d2:3f:a5:35:f7:f4:2d:cb:d8:34:1d: bf:51:5f:24:f7:26:3b:6f:68:15:f8:03:70:d7:f3:77:54:6d: be:40:ee:c6:8e:e8:62:cc:af:ef:75:8a:67:37:51:34:ac:1f: 01:30:ac:a4:dc:b4:10:36:e2:71:31:b1:ed:ad:2b:2f:0c:39: fe:f9:2d:43:87:d3:e5:54:57:ba:0f:71:0f:48:9d:8f:2a:54: 31:e2:21:9c:c0:a9:90:03:ac:9b:09:94:5f:c8:a8:43:28:d9: c3:17:7c:70:96:e1:84:25:dd:2b:1e:82:eb:77:01:06:89:cd: 91:b5:14:9e:9b:d3:bc:4f:62:1b:3a:e7:55:14:24:86:e1:49: ca:4f:a1:c1:52:50:0a:a3:77:0a:b4:b9:2b:2a:17:74:1d:c9: 3b:9f:66:a5:23:22:bb:68:13:0f:9b:5b:22:3f:e5:d1:dd:92: 67:1c:e0:73:e7:06:ab:e0:27:99:54:65:46:05:a6:b1:d5:d5: 21:4f:64:4c:fe:6a:fd:b7:98:de:70:e9:ad:af:ac:d4:e0:a2: 88:36:fc:86 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyNjkyMzE1NUVFMDY5 MzUzNzNBRDkyMDIyMTNCNjEzMTY3NzQ0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCXmg0f0/k6hGj+3fNjh7lrobAT5+HtuT2Si6f0agUZ+bGHFcU mAytk6ZAkYls3Rcq4yp3jLe7s7VDyNfkmkcykSt8UgfkWTcHoZp2GXGFj+tIe7Lo G16RXr1UD5UGU1KhEZ+Q66hdyojQG/3VtXBTWf1KsNu0QPDM7upawMmtqndI7uqj hxgPbNYNTJyN0LPhM2Q2OVE9cZSZ24KOAAjUycVFUw1sKwVzkLfSNohw7Fe6od3m lRs9eC9HzOMtzwxA7oGNd3tEJKMBmJYNo1jHfwT2PASzFPpZqNtLQgboZ3L+u/ZO snpcm3DJ2cN+ols+m13DkAeEtZ8Az1LaeufXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUomkjFV7gaTU3OtkgIhO2ExZ3ROYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L29ta2pGVjdnYVRVM090a2dJaE8yRXhaM1JPWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIkNBwwDQYJKoZIhvcNAQELBQADggEB AF7lmvxd57xcwqhGUyljVl3IcFrozgJSVWurPFLTtXZGWYR5Z7IpUGRvrODSP6U1 9/Qty9g0Hb9RXyT3JjtvaBX4A3DX83dUbb5A7saO6GLMr+91imc3UTSsHwEwrKTc tBA24nExse2tKy8MOf75LUOH0+VUV7oPcQ9InY8qVDHiIZzAqZADrJsJlF/IqEMo 2cMXfHCW4YQl3Ssegut3AQaJzZG1FJ6b07xPYhs651UUJIbhScpPocFSUAqjdwq0 uSsqF3QdyTufZqUjIrtoEw+bWyI/5dHdkmcc4HPnBqvgJ5lUZUYFprHV1SFPZEz+ av23mN5w6a2vrNTgoog2/IY= -----END CERTIFICATE-----Generated at Fri Apr 17 07:03:11 2026 by rpki-client