$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/AaFKw4uItTM8JLTQ8SNW446dQ7w.roa File: AaFKw4uItTM8JLTQ8SNW446dQ7w.roa (raw, json) Hash identifier: cPuODUrBt60irH7yWBKK+a683HV32hafViPhkmIqXZI= Subject key identifier: 01:A1:4A:C3:8B:88:B5:33:3C:24:B4:D0:F1:23:56:E3:8E:9D:43:BC Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01E4 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/AaFKw4uItTM8JLTQ8SNW446dQ7w.roa Signing time: Tue 31 Mar 2026 07:39:54 +0000 ROA not before: Tue 31 Mar 2026 07:39:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 103.2.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:39:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=01A14AC38B88B5333C24B4D0F12356E38E9D43BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:47:8a:9a:7e:ca:59:a3:27:88:c6:a6:3e:70: f6:21:3a:e1:1b:48:0d:f6:21:5d:1d:fc:17:e8:e3: 17:ba:f9:49:47:a2:2f:2b:8a:91:9f:99:71:11:ea: eb:ab:11:9c:ae:07:bb:ef:9a:bc:dd:17:17:76:3f: b4:9f:4e:90:1c:eb:df:de:ba:23:65:60:3b:0e:b6: 57:f4:a4:d4:a1:53:2a:4e:e8:19:5e:3e:33:46:5f: 06:f5:40:27:5f:87:51:cd:c8:ed:ad:8e:de:47:22: 4e:6e:5a:e7:05:ca:8c:21:51:79:92:f3:86:a7:3d: f3:f2:69:2c:06:51:b3:30:1c:5f:12:9e:c9:d4:8f: e5:bf:26:a6:c5:27:2b:9d:76:6c:6f:75:e1:06:f2: bb:9a:48:fa:1a:83:36:03:c8:c2:dd:99:74:57:c0: aa:20:a1:70:13:a5:27:46:5c:be:1e:42:11:ae:48: bd:a3:52:b6:c0:71:4a:d0:f8:61:33:5e:2f:a6:c4: 34:90:7e:69:aa:af:f7:1a:37:d4:e8:57:6f:d1:29: 8e:4b:24:43:6e:79:e8:f8:82:ac:5b:79:8a:1b:88: c3:75:66:a5:e0:5b:8a:e2:e2:79:1a:51:14:f6:87: cb:77:62:b1:70:1a:eb:c6:ff:76:eb:07:10:26:f7: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:4A:C3:8B:88:B5:33:3C:24:B4:D0:F1:23:56:E3:8E:9D:43:BC X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/AaFKw4uItTM8JLTQ8SNW446dQ7w.roa sbgp-ipAddrBlock: critical IPv4: 103.2.48.0/22 Signature Algorithm: sha256WithRSAEncryption ae:d5:96:46:8a:8f:b8:21:f7:a0:1d:f8:9e:18:a0:7a:fd:3e: df:11:b9:a7:13:54:c5:e1:36:b6:70:ed:c3:47:30:28:e7:06: 0d:93:77:c5:88:e8:74:c9:de:c1:b9:7e:cb:8c:d3:53:0c:e2: 92:04:f3:5f:36:f1:30:f3:18:2c:19:ec:c4:9f:a9:3f:ec:48: ad:2f:58:a8:c7:c3:a2:3a:de:5a:b2:40:25:44:2b:42:74:8f: 84:ad:c1:cb:c1:3a:58:ed:f0:f3:84:23:30:05:ce:f0:94:5d: 8d:1c:9e:e7:8c:60:57:2a:62:f9:87:7f:55:c3:0d:47:21:2f: 6b:8a:5a:e6:d8:df:ae:1d:06:72:d8:0e:29:75:52:ce:54:a7: ef:7c:51:2c:36:d3:6a:8a:0d:ae:ba:c8:16:48:9c:9e:a7:8c: 32:e3:c0:d3:fa:e7:9a:2f:2f:0d:dd:2d:90:d5:cc:a9:27:75: d1:87:fa:57:05:33:53:46:e5:aa:3b:c7:51:f1:f6:96:38:84: 22:ce:4b:70:57:d7:66:80:86:86:56:07:de:d6:d1:46:a3:0a: de:4a:26:8d:90:20:e5:1c:ee:c1:56:bc:79:40:c2:69:ef:4b: a5:69:73:e5:9d:ce:5d:44:01:b7:40:ca:9e:26:cd:fa:16:48: 04:f8:29:ac -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzM5NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAxQTE0QUMzOEI4OEI1 MzMzQzI0QjREMEYxMjM1NkUzOEU5RDQzQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtR4qafspZoyeIxqY+cPYhOuEbSA32IV0d/Bfo4xe6+UlHoi8r ipGfmXER6uurEZyuB7vvmrzdFxd2P7SfTpAc69/euiNlYDsOtlf0pNShUypO6Ble PjNGXwb1QCdfh1HNyO2tjt5HIk5uWucFyowhUXmS84anPfPyaSwGUbMwHF8SnsnU j+W/JqbFJyuddmxvdeEG8ruaSPoagzYDyMLdmXRXwKogoXATpSdGXL4eQhGuSL2j UrbAcUrQ+GEzXi+mxDSQfmmqr/caN9ToV2/RKY5LJENueej4gqxbeYobiMN1ZqXg W4ri4nkaURT2h8t3YrFwGuvG/3brBxAm9+I3AgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUAaFKw4uItTM8JLTQ8SNW446dQ7wwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9BYUZLdzR1SXRUTThKTFRROFNOVzQ0NmRRN3cucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZwIwMA0GCSqGSIb3DQEBCwUAA4IBAQCu 1ZZGio+4IfegHfieGKB6/T7fEbmnE1TF4Ta2cO3DRzAo5wYNk3fFiOh0yd7BuX7L jNNTDOKSBPNfNvEw8xgsGezEn6k/7EitL1iox8OiOt5askAlRCtCdI+ErcHLwTpY 7fDzhCMwBc7wlF2NHJ7njGBXKmL5h39Vww1HIS9rilrm2N+uHQZy2A4pdVLOVKfv fFEsNtNqig2uusgWSJyep4wy48DT+ueaLy8N3S2Q1cypJ3XRh/pXBTNTRuWqO8dR 8faWOIQizktwV9dmgIaGVgfe1tFGowreSiaNkCDlHO7BVrx5QMJp70ulaXPlnc5d RAG3QMqeJs36FkgE+Cms -----END CERTIFICATE-----Generated at Sun Apr 19 10:03:02 2026 by rpki-client