$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/lZ4tNkpqL5Sb9Q_9oz1UKsSm1NQ.roa File: lZ4tNkpqL5Sb9Q_9oz1UKsSm1NQ.roa (raw, json) Hash identifier: TwkEvhQW1lO3yOcE1FtFWnvIhC6zzJKNjV9eFFx23Is= Subject key identifier: 95:9E:2D:36:4A:6A:2F:94:9B:F5:0F:FD:A3:3D:54:2A:C4:A6:D4:D4 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01F5 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lZ4tNkpqL5Sb9Q_9oz1UKsSm1NQ.roa Signing time: Tue 31 Mar 2026 07:40:00 +0000 ROA not before: Tue 31 Mar 2026 07:40:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 150.246.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:40:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=959E2D364A6A2F949BF50FFDA33D542AC4A6D4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:08:80:92:1d:3e:90:b3:94:89:67:1e:b1: fd:49:8d:3f:0d:e0:3e:6c:f2:51:c4:84:98:f9:1d: ca:80:8b:b9:4d:2e:d1:64:3a:00:62:53:96:00:75: aa:82:b7:b0:d6:bf:37:81:a9:4d:26:3b:ac:b5:14: 46:d3:f0:a5:61:e0:f1:b6:71:d5:ac:0e:f0:88:11: d4:0d:ea:f2:ef:72:c1:de:11:0f:74:42:1e:8b:c6: dc:5a:29:ff:75:9c:c7:e7:c5:da:28:ad:b6:9c:b2: da:10:8b:15:2c:11:db:c4:4d:7b:a1:9b:7b:0c:a4: 6f:1c:ca:f9:3c:29:3f:af:3b:42:0a:06:1d:d5:9e: f6:44:ad:47:c2:21:05:8a:bf:70:0e:10:21:ee:7e: d7:94:02:d4:bf:97:f8:91:91:fd:d0:38:d6:52:2f: 82:ef:cf:2d:b2:bd:f6:da:84:63:32:09:f1:1b:99: 07:ef:de:bc:de:58:55:38:ba:a2:38:4e:a6:37:fe: e5:ab:fb:16:dd:ad:3a:a0:f5:0d:98:77:e0:7f:de: 38:ae:cc:78:af:8a:52:02:bb:70:da:50:41:f5:7d: 0b:53:89:f7:29:94:9f:2d:ef:57:02:84:ad:97:32: b4:be:4a:b0:84:67:ab:ec:16:65:bf:d7:c3:ba:bb: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:2D:36:4A:6A:2F:94:9B:F5:0F:FD:A3:3D:54:2A:C4:A6:D4:D4 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lZ4tNkpqL5Sb9Q_9oz1UKsSm1NQ.roa sbgp-ipAddrBlock: critical IPv4: 150.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption bf:d8:b7:69:6e:46:43:b4:7c:f4:a2:e5:09:e2:0e:a3:87:95: aa:98:69:b8:b2:d0:4d:e9:5b:98:71:7a:58:86:a3:e1:65:af: 14:87:10:c6:8c:65:2f:c6:64:98:2d:6e:b9:29:79:be:f5:db: 3e:50:e4:4d:41:36:81:0c:e6:75:77:5d:79:e7:39:11:34:95: 38:d6:f1:0a:a7:f0:65:43:7c:e9:26:1a:45:88:2b:f3:46:e5: 21:c4:df:65:7d:2d:77:08:43:48:19:e2:ad:d8:6c:0b:8a:75: c6:8c:57:09:b9:e4:2d:d3:b7:6e:9b:78:a6:9f:0e:9c:53:f3: dd:41:21:aa:0d:f6:db:8f:6e:95:fe:71:61:51:1b:a8:d5:7b: e5:25:92:b2:a2:f4:c7:3f:73:e9:99:06:a5:9e:83:28:3d:a9: 8f:69:69:f4:06:3d:ed:5b:8e:21:ce:6f:25:e7:4e:86:bc:d3: 69:91:71:1a:6c:df:73:4a:3d:5e:4c:c9:f3:63:5b:f7:3c:83: bf:05:88:c5:79:b8:7a:43:af:ee:2a:38:a5:77:61:af:78:7f: 90:88:25:35:f5:a4:54:bf:d3:4f:4a:c8:3a:0b:f2:df:1b:ee: 20:52:b2:cc:b8:33:29:87:a2:f2:eb:80:3a:72:77:c9:85:0f: 6e:47:a5:4c -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzQwMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1OUUyRDM2NEE2QTJG OTQ5QkY1MEZGREEzM0Q1NDJBQzRBNkQ0RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5+AiAkh0+kLOUiWcesf1JjT8N4D5s8lHEhJj5HcqAi7lNLtFk OgBiU5YAdaqCt7DWvzeBqU0mO6y1FEbT8KVh4PG2cdWsDvCIEdQN6vLvcsHeEQ90 Qh6LxtxaKf91nMfnxdoorbacstoQixUsEdvETXuhm3sMpG8cyvk8KT+vO0IKBh3V nvZErUfCIQWKv3AOECHufteUAtS/l/iRkf3QONZSL4Lvzy2yvfbahGMyCfEbmQfv 3rzeWFU4uqI4TqY3/uWr+xbdrTqg9Q2Yd+B/3jiuzHivilICu3DaUEH1fQtTifcp lJ8t71cChK2XMrS+SrCEZ6vsFmW/18O6u/vpAgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUlZ4tNkpqL5Sb9Q/9oz1UKsSm1NQwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9sWjR0TmtwcUw1U2I5UV85b3oxVUtzU20xTlEucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlvYwDQYJKoZIhvcNAQELBQADggEBAL/Y t2luRkO0fPSi5QniDqOHlaqYabiy0E3pW5hxeliGo+FlrxSHEMaMZS/GZJgtbrkp eb712z5Q5E1BNoEM5nV3XXnnORE0lTjW8Qqn8GVDfOkmGkWIK/NG5SHE32V9LXcI Q0gZ4q3YbAuKdcaMVwm55C3Tt26beKafDpxT891BIaoN9tuPbpX+cWFRG6jVe+Ul krKi9Mc/c+mZBqWegyg9qY9pafQGPe1bjiHObyXnToa802mRcRps33NKPV5MyfNj W/c8g78FiMV5uHpDr+4qOKV3Ya94f5CIJTX1pFS/009KyDoL8t8b7iBSssy4MymH ovLrgDpyd8mFD25HpUw= -----END CERTIFICATE-----Generated at Fri Apr 17 08:05:58 2026 by rpki-client