$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/ozJAq-tliHQfcxHDQkKDre1Gg6E.roa File: ozJAq-tliHQfcxHDQkKDre1Gg6E.roa (raw, json) Hash identifier: 60RMxB0raLDfFLE5aQG7BU4YkYEg14dlU0KxweABtYo= Subject key identifier: A3:32:40:AB:EB:65:88:74:1F:73:11:C3:42:42:83:AD:ED:46:83:A1 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0197 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ozJAq-tliHQfcxHDQkKDre1Gg6E.roa Signing time: Tue 31 Mar 2026 07:38:21 +0000 ROA not before: Tue 31 Mar 2026 07:38:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 8220 IP address blocks: 202.7.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Mar 31 07:38:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A33240ABEB6588741F7311C3424283ADED4683A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:2d:97:b9:66:07:f8:c9:1a:8c:42:3a:43: 1a:0d:07:40:2e:96:d0:c6:cb:a0:92:e4:4c:59:94: e3:cc:e9:73:9d:33:bb:a3:aa:d8:bb:21:1f:0a:2b: 0d:a6:e7:99:ad:c8:58:14:9d:67:5e:cb:90:b6:26: 32:c2:53:46:e5:bf:94:ef:be:db:10:8c:cf:3e:6f: 00:4b:ea:bf:0e:73:93:ba:db:17:ae:0b:2c:63:a1: 16:6a:b2:cf:c7:b7:3f:b9:25:d2:c5:89:4d:c5:be: 33:26:fc:7e:26:f3:fe:37:1f:70:0e:17:c0:c3:ac: 3e:5d:cf:f0:dc:17:52:f8:f8:ac:79:bb:70:b3:d2: 69:67:4d:1f:b4:3a:89:f1:98:a2:16:b0:15:02:fb: 9d:40:27:de:9b:c1:ce:0a:70:69:a7:3b:de:ec:27: 47:ec:a9:d6:0b:7c:9e:7e:83:0c:3f:09:53:39:d8: e7:b0:c0:00:9f:d1:a8:2f:a0:d7:de:c7:1d:90:5a: 01:7b:39:ba:93:7e:81:2b:9b:b3:2a:86:9c:4a:36: a4:06:32:07:87:c9:05:c3:e7:93:84:67:f1:f6:39: d1:9b:c2:b5:c1:a3:89:a8:cc:f3:27:09:fe:49:4d: fc:52:ba:0c:2c:ce:df:a3:79:eb:e6:f9:37:c0:a7: af:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:40:AB:EB:65:88:74:1F:73:11:C3:42:42:83:AD:ED:46:83:A1 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ozJAq-tliHQfcxHDQkKDre1Gg6E.roa sbgp-ipAddrBlock: critical IPv4: 202.7.104.0/24 Signature Algorithm: sha256WithRSAEncryption 16:23:89:46:bc:c2:9a:a2:b5:0b:5a:f7:0e:da:2b:57:bc:93: 17:ae:24:cc:b8:b4:28:08:26:6f:42:72:48:66:bc:21:0e:06: e7:a2:20:07:27:a8:2e:ac:33:e7:7e:31:3d:d5:0b:de:d0:ee: cf:0d:72:5e:8d:cf:e4:b8:7c:f5:f2:ae:23:71:ac:ed:e0:bb: 0b:80:f7:58:0b:16:7e:2a:65:4f:14:79:ae:ca:5c:7c:20:bf: 60:c6:e1:ca:d5:79:33:ed:18:11:dc:6d:9d:e3:99:aa:c0:d8: 26:43:c2:78:85:d0:32:6c:27:51:a0:55:15:53:fe:af:d6:0b: 88:1e:8c:30:89:ea:3d:ff:df:f3:50:eb:52:23:0a:f8:ec:8d: c2:c5:b9:44:00:4e:1e:15:cc:a6:22:38:31:8c:76:93:13:df: 74:05:89:03:87:98:c4:09:9d:c3:56:5c:78:ba:8d:ff:d9:b2: a4:ae:36:a9:0a:aa:d8:1d:61:24:ca:e0:00:9f:ad:2c:c8:c7: 6b:e8:18:d6:73:ba:fc:b7:4a:97:44:ea:92:55:44:a3:7e:1b: 0d:12:ba:2b:00:c2:8e:14:a0:95:b5:78:78:3e:52:9e:c9:1f: b3:5d:9c:e7:69:eb:3a:67:76:fa:c7:61:f7:ea:c2:b7:47:fa: 23:4d:c4:eb -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNjAzMzEw NzM4MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzMzI0MEFCRUI2NTg4 NzQxRjczMTFDMzQyNDI4M0FERUQ0NjgzQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1YS2XuWYH+MkajEI6QxoNB0AultDGy6CS5ExZlOPM6XOdM7uj qti7IR8KKw2m55mtyFgUnWdey5C2JjLCU0blv5TvvtsQjM8+bwBL6r8Oc5O62xeu CyxjoRZqss/Htz+5JdLFiU3FvjMm/H4m8/43H3AOF8DDrD5dz/DcF1L4+Kx5u3Cz 0mlnTR+0OonxmKIWsBUC+51AJ96bwc4KcGmnO97sJ0fsqdYLfJ5+gww/CVM52Oew wACf0agvoNfexx2QWgF7ObqTfoErm7MqhpxKNqQGMgeHyQXD55OEZ/H2OdGbwrXB o4mozPMnCf5JTfxSugwszt+jeevm+TfAp69/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUozJAq+tliHQfcxHDQkKDre1Gg6EwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDY5L296SkFxLXRsaUhRZmN4SERRa0tEcmUxR2c2RS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKB2gwDQYJKoZIhvcNAQELBQADggEB ABYjiUa8wpqitQta9w7aK1e8kxeuJMy4tCgIJm9CckhmvCEOBueiIAcnqC6sM+d+ MT3VC97Q7s8Ncl6Nz+S4fPXyriNxrO3guwuA91gLFn4qZU8Uea7KXHwgv2DG4crV eTPtGBHcbZ3jmarA2CZDwniF0DJsJ1GgVRVT/q/WC4gejDCJ6j3/3/NQ61IjCvjs jcLFuUQATh4VzKYiODGMdpMT33QFiQOHmMQJncNWXHi6jf/ZsqSuNqkKqtgdYSTK 4ACfrSzIx2voGNZzuvy3SpdE6pJVRKN+Gw0SuisAwo4UoJW1eHg+Up7JH7NdnOdp 6zpndvrHYffqwrdH+iNNxOs= -----END CERTIFICATE-----Generated at Sun Apr 19 12:36:41 2026 by rpki-client