$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/I-oozCfWXE-lCdy7kIDQU6AkYFI.roa File: I-oozCfWXE-lCdy7kIDQU6AkYFI.roa (raw, json) Hash identifier: Dy2wp5SVs0F9NH7amueslr6RPElLxpcVrnl18LDJlCU= Subject key identifier: 23:EA:28:CC:27:D6:5C:4F:A5:09:DC:BB:90:80:D0:53:A0:24:60:52 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: C2 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/I-oozCfWXE-lCdy7kIDQU6AkYFI.roa Signing time: Tue 31 Mar 2026 07:39:40 +0000 ROA not before: Tue 31 Mar 2026 07:39:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 143.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Mar 31 07:39:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=23EA28CC27D65C4FA509DCBB9080D053A0246052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:c7:74:36:35:f1:98:a1:15:fd:a8:73:51: 1e:a8:d3:0d:cb:d5:99:4a:12:b6:57:47:3a:27:e4: ec:97:28:2b:9c:be:ac:b4:f1:d1:c7:75:82:eb:8c: 6c:d8:44:f6:dd:73:40:9d:54:4a:a7:32:d0:b3:3f: 2a:53:96:2b:e6:6d:de:9e:4c:db:c0:14:d3:1f:a5: 7a:a7:ae:87:e3:6d:72:7d:c8:f1:2e:fe:e4:b3:fd: a7:66:24:af:80:c4:a3:b0:94:32:d8:8e:eb:09:4a: 67:db:93:c9:8a:16:b3:29:04:c0:ee:7a:50:ec:77: 74:60:e6:c5:99:ab:57:f0:f4:3f:61:37:24:fc:6b: f5:95:59:98:87:c2:46:2f:9e:b2:9a:72:0a:ff:78: 9e:c2:7b:14:e8:a4:f0:f4:5c:13:82:50:09:04:30: ec:d4:3e:1d:17:a4:ff:70:02:c8:d2:2c:9d:a8:da: 5a:ea:9b:30:14:4e:47:0b:db:3f:1b:fb:bf:2e:2b: f6:46:d4:3c:df:97:03:09:e0:5f:49:67:4e:c9:92: e0:24:17:6a:ca:f6:2f:da:84:a4:61:fe:1b:ae:31: 38:9b:d8:3a:2b:5c:0d:f1:24:99:50:d3:26:57:dc: 4e:01:40:54:76:8f:43:02:1b:29:a5:c4:dc:af:4d: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EA:28:CC:27:D6:5C:4F:A5:09:DC:BB:90:80:D0:53:A0:24:60:52 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/I-oozCfWXE-lCdy7kIDQU6AkYFI.roa sbgp-ipAddrBlock: critical IPv4: 143.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:d8:4a:13:44:b0:53:e1:0d:03:22:ce:49:94:c4:e5:aa:fa: 90:eb:92:8d:58:d6:52:bc:76:ae:51:1d:6f:99:71:7b:b0:4e: 28:99:ce:b6:db:c8:f4:18:85:54:9a:21:dc:e5:25:5f:7a:d6: 22:dd:df:76:c8:92:87:d7:77:24:f8:4a:a7:78:d4:40:3e:6b: 62:fe:82:f8:16:23:c9:22:0a:b6:90:6e:88:dd:45:20:a8:40: ed:a8:eb:4b:ae:1b:48:c7:01:49:a9:de:9b:11:2b:7e:6a:9e: 92:0c:3a:a9:cb:b3:8f:18:f3:1b:84:ee:b1:e0:bc:1c:fb:a4: 68:f4:0a:a7:b3:28:bc:90:10:f4:ac:f1:04:7f:87:56:4a:07: 49:aa:7b:12:06:b6:48:55:22:05:ad:ca:cc:3f:1b:b7:22:0a: 13:51:c2:e7:98:27:38:f1:35:c7:87:0b:d6:25:55:d7:2d:11: 88:e1:9e:da:dc:9e:b9:e8:c3:b2:cd:ad:de:ed:3f:70:6a:d0: 6f:05:0c:bb:13:df:88:7d:06:51:69:6b:be:44:21:92:93:6c: b4:5b:b7:95:b9:32:ac:00:c6:62:76:4e:68:1a:fa:61:6a:a1: d5:c2:6e:16:23:b0:36:a9:e7:28:ab:9f:f4:44:b6:d8:7a:1d: 6c:d5:b5:f6 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw NzM5NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzRUEyOENDMjdENjVD NEZBNTA5RENCQjkwODBEMDUzQTAyNDYwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEe8d0NjXxmKEV/ahzUR6o0w3L1ZlKErZXRzon5OyXKCucvqy0 8dHHdYLrjGzYRPbdc0CdVEqnMtCzPypTlivmbd6eTNvAFNMfpXqnrofjbXJ9yPEu /uSz/admJK+AxKOwlDLYjusJSmfbk8mKFrMpBMDuelDsd3Rg5sWZq1fw9D9hNyT8 a/WVWZiHwkYvnrKacgr/eJ7CexTopPD0XBOCUAkEMOzUPh0XpP9wAsjSLJ2o2lrq mzAUTkcL2z8b+78uK/ZG1DzflwMJ4F9JZ07JkuAkF2rK9i/ahKRh/huuMTib2Dor XA3xJJlQ0yZX3E4BQFR2j0MCGymlxNyvTY4NAgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUI+oozCfWXE+lCdy7kIDQU6AkYFIwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9JLW9vekNmV1hFLWxDZHk3a0lEUVU2QWtZRkkucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj70wDQYJKoZIhvcNAQELBQADggEBAFLY ShNEsFPhDQMizkmUxOWq+pDrko1Y1lK8dq5RHW+ZcXuwTiiZzrbbyPQYhVSaIdzl JV961iLd33bIkofXdyT4Sqd41EA+a2L+gvgWI8kiCraQbojdRSCoQO2o60uuG0jH AUmp3psRK35qnpIMOqnLs48Y8xuE7rHgvBz7pGj0CqezKLyQEPSs8QR/h1ZKB0mq exIGtkhVIgWtysw/G7ciChNRwueYJzjxNceHC9YlVdctEYjhntrcnrnow7LNrd7t P3Bq0G8FDLsT34h9BlFpa75EIZKTbLRbt5W5MqwAxmJ2Tmga+mFqodXCbhYjsDap 5yirn/REtth6HWzVtfY= -----END CERTIFICATE-----Generated at Sun Apr 19 08:29:27 2026 by rpki-client