$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/DqhHrSXURLU1A4OscFFNh9lk8RU.roa File: DqhHrSXURLU1A4OscFFNh9lk8RU.roa (raw, json) Hash identifier: VMjK2GXVzjPGTUBcvNQ+Rl1e+FZseNgAZnBRtEY3Qws= Subject key identifier: 0E:A8:47:AD:25:D4:44:B5:35:03:83:AC:70:51:4D:87:D9:64:F1:15 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01D3 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DqhHrSXURLU1A4OscFFNh9lk8RU.roa Signing time: Tue 31 Mar 2026 07:39:47 +0000 ROA not before: Tue 31 Mar 2026 07:39:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 150.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:39:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0EA847AD25D444B5350383AC70514D87D964F115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:4b:1e:fe:7d:cf:03:be:44:18:81:4d:be: 7f:c6:b0:1a:7a:2c:1e:94:36:bf:fa:e3:82:3a:4f: 0f:00:01:2b:bb:f0:7a:73:aa:77:64:dc:10:c4:83: 30:ed:76:8f:a8:44:a6:89:78:75:25:3e:d5:e2:f6: f3:17:85:f3:21:4d:ba:69:52:99:71:2f:4e:92:94: a8:91:99:a9:ed:88:bc:67:b0:2a:fb:f4:10:b1:17: cb:bf:0d:57:bd:33:96:e5:73:78:11:f4:80:78:60: d5:34:91:c5:c0:a5:8b:ae:70:c4:b4:cc:1d:e4:5d: 31:da:02:7a:16:f3:1e:94:07:7f:ff:0c:6c:72:3a: 80:33:74:d1:52:78:7a:d5:31:f0:5d:8d:c0:51:db: e6:60:14:77:b9:07:c4:67:c0:9c:47:6a:f9:e9:05: 05:0e:d6:79:d0:3b:96:fc:a9:95:fe:83:f4:11:8e: 30:d9:89:d8:f3:98:7c:bf:2f:e7:bc:c9:ca:aa:29: bd:47:e7:61:fb:65:35:cc:19:67:df:4a:43:17:a3: 15:d1:c6:e2:4b:67:80:39:39:b7:52:38:78:3d:12: 21:e7:e1:51:09:82:7a:5a:63:62:51:b9:f4:20:47: 3e:b8:5c:21:50:5d:f0:fe:af:d3:4a:a8:57:97:05: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:47:AD:25:D4:44:B5:35:03:83:AC:70:51:4D:87:D9:64:F1:15 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DqhHrSXURLU1A4OscFFNh9lk8RU.roa sbgp-ipAddrBlock: critical IPv4: 150.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:c3:96:98:ab:ef:55:5e:c7:5a:cd:35:6e:45:6c:12:fb:5f: d0:31:eb:5f:8e:9b:85:bd:b0:00:41:c7:4d:5b:39:ed:03:3e: 70:30:b0:6e:38:45:af:dd:6b:5d:b1:b2:8d:5c:cf:2d:c1:8c: b4:c3:3d:c2:73:c7:8d:5f:fb:12:7b:4b:bb:15:b4:29:07:a4: de:18:70:b3:6e:20:56:18:94:ec:7d:46:af:35:52:73:6d:26: 62:01:2e:fe:af:7f:6c:64:30:50:72:c8:51:ac:26:ae:28:19: 67:f4:a4:a6:41:aa:8b:ca:f9:e5:5d:39:a3:6b:83:b8:b8:38: ae:88:39:29:d1:6b:5b:52:d6:a1:ea:97:4a:fe:95:ed:1a:42: bc:79:e0:57:0e:a7:67:c0:1b:ec:3b:5e:97:ca:cc:53:71:49: 33:ac:8b:20:16:08:76:7c:e3:d1:fa:5f:6e:62:a3:be:e9:c6: 63:b8:dd:c8:60:21:15:e0:2b:f7:61:a8:a7:bd:33:3d:26:f7: 67:47:b2:40:e1:13:e5:35:6c:53:ab:e0:f6:29:bd:18:12:cc: ca:95:20:4e:24:94:80:0e:28:ba:d4:46:b3:27:82:36:54:ea: ff:f2:24:19:8c:82:9a:f0:64:08:91:ea:6d:d4:56:9c:50:16: d1:1e:f2:36 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzM5NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBFQTg0N0FEMjVENDQ0 QjUzNTAzODNBQzcwNTE0RDg3RDk2NEYxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBDEse/n3PA75EGIFNvn/GsBp6LB6UNr/644I6Tw8AASu78Hpz qndk3BDEgzDtdo+oRKaJeHUlPtXi9vMXhfMhTbppUplxL06SlKiRmantiLxnsCr7 9BCxF8u/DVe9M5blc3gR9IB4YNU0kcXApYuucMS0zB3kXTHaAnoW8x6UB3//DGxy OoAzdNFSeHrVMfBdjcBR2+ZgFHe5B8RnwJxHavnpBQUO1nnQO5b8qZX+g/QRjjDZ idjzmHy/L+e8ycqqKb1H52H7ZTXMGWffSkMXoxXRxuJLZ4A5ObdSOHg9EiHn4VEJ gnpaY2JRufQgRz64XCFQXfD+r9NKqFeXBbk3AgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUDqhHrSXURLU1A4OscFFNh9lk8RUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9EcWhIclNYVVJMVTFBNE9zY0ZGTmg5bGs4UlUucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlpMwDQYJKoZIhvcNAQELBQADggEBAKDD lpir71Vex1rNNW5FbBL7X9Ax61+Om4W9sABBx01bOe0DPnAwsG44Ra/da12xso1c zy3BjLTDPcJzx41f+xJ7S7sVtCkHpN4YcLNuIFYYlOx9Rq81UnNtJmIBLv6vf2xk MFByyFGsJq4oGWf0pKZBqovK+eVdOaNrg7i4OK6IOSnRa1tS1qHql0r+le0aQrx5 4FcOp2fAG+w7XpfKzFNxSTOsiyAWCHZ849H6X25io77pxmO43chgIRXgK/dhqKe9 Mz0m92dHskDhE+U1bFOr4PYpvRgSzMqVIE4klIAOKLrURrMngjZU6v/yJBmMgprw ZAiR6m3UVpxQFtEe8jY= -----END CERTIFICATE-----Generated at Sun Apr 19 08:14:43 2026 by rpki-client