$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/hqJZg_vNd3z-BRxAflnguDrS5K0.roa File: hqJZg_vNd3z-BRxAflnguDrS5K0.roa (raw, json) Hash identifier: X2QmqW7NHVmMdnDiO+hufJfELQLMXGqGyqURayYgbiM= Subject key identifier: 86:A2:59:83:FB:CD:77:7C:FE:05:1C:40:7E:59:E0:B8:3A:D2:E4:AD Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 44 Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/hqJZg_vNd3z-BRxAflnguDrS5K0.roa Signing time: Tue 31 Mar 2026 08:43:35 +0000 ROA not before: Tue 31 Mar 2026 08:43:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9354 IP address blocks: 202.157.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Mar 31 08:43:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=86A25983FBCD777CFE051C407E59E0B83AD2E4AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:7a:9b:22:94:35:0d:9b:57:6a:d9:91:a4: 02:00:69:b6:98:5a:7b:ba:e4:47:aa:83:5b:ee:64: 80:68:83:fc:57:cd:64:ef:ef:9a:1b:44:d0:7f:1b: 53:49:b6:3f:5b:98:5b:d5:bc:9d:20:a8:64:32:87: 79:c9:8e:8b:07:fc:79:03:87:e4:5b:49:0e:79:9e: bc:0c:7b:c0:53:3b:1c:a8:60:84:e3:f3:5b:2c:0a: bc:f3:35:ba:46:0d:55:74:fd:41:f4:2f:df:e2:4a: 6d:83:2a:32:ef:82:4a:19:ef:01:26:d4:3e:69:a4: 32:e2:d7:c2:d4:07:72:40:85:c0:e4:43:8a:6e:6f: 58:89:2a:9b:14:65:94:44:ad:c5:e7:fd:11:4a:f9: 3f:d9:a2:c3:95:95:ad:9d:ac:75:29:01:1c:a4:44: 41:7c:d4:01:a9:10:10:33:e1:16:7c:56:e5:84:df: 6d:95:20:a3:c2:fa:28:09:92:be:ba:25:4e:a5:c6: e4:8a:43:6c:36:75:55:e7:4d:0d:0a:85:21:d8:54: 53:b5:09:83:a1:7c:62:e4:25:2a:ef:e2:19:fe:df: 54:4e:ff:60:f4:de:8c:9e:2a:b8:a2:1c:e0:42:18: 1b:b5:ba:12:dd:8b:d4:c3:9e:f0:1c:7b:67:bf:be: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:59:83:FB:CD:77:7C:FE:05:1C:40:7E:59:E0:B8:3A:D2:E4:AD X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/hqJZg_vNd3z-BRxAflnguDrS5K0.roa sbgp-ipAddrBlock: critical IPv4: 202.157.234.0/23 Signature Algorithm: sha256WithRSAEncryption 25:b7:3b:47:4e:c1:e7:e9:f5:a7:70:fc:4a:61:44:e0:14:30: 64:a4:ee:0f:32:64:ce:f6:9a:43:98:c8:92:95:b8:d2:b7:f9: b3:d6:93:f1:41:47:f3:10:4e:43:4d:a8:e9:dc:92:57:be:30: 40:72:85:87:d4:20:fd:a7:ff:e8:bf:8c:6b:41:a3:58:06:b8: 2d:f8:fa:ff:5b:16:15:70:23:2d:ce:12:c2:3e:73:77:e5:12: 72:34:95:ab:5b:cf:06:44:1d:bd:25:7d:74:fd:6b:09:c3:be: 46:61:1e:b4:8b:1c:9b:40:09:f4:3c:92:66:91:4c:b0:c9:27: da:73:d8:a7:34:95:92:d1:b6:f5:b6:82:63:7b:a9:27:77:2e: e9:35:cb:3c:77:3f:b1:09:94:ff:2e:2d:ac:ff:ca:86:af:c8: 4d:3d:d9:2f:1b:4b:58:51:22:ed:58:7f:a2:c8:b4:e1:e1:df: 96:dd:92:6f:6b:98:06:92:68:09:7a:c7:4d:06:ba:ba:63:c6: 2d:00:e9:31:0a:4b:14:fa:a1:69:32:b5:29:46:ff:bf:5c:98: 15:e5:98:9e:b5:9f:cf:d4:ac:77:fa:d6:3a:e9:9d:63:d2:ec: d4:f7:1b:e7:60:5c:18:e2:2c:95:ff:66:00:b0:a7:25:31:27: f1:ca:fd:f5 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI2MDMzMTA4 NDMzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODZBMjU5ODNGQkNENzc3 Q0ZFMDUxQzQwN0U1OUUwQjgzQUQyRTRBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANqoepsilDUNm1dq2ZGkAgBptphae7rkR6qDW+5kgGiD/FfNZO/v mhtE0H8bU0m2P1uYW9W8nSCoZDKHecmOiwf8eQOH5FtJDnmevAx7wFM7HKhghOPz WywKvPM1ukYNVXT9QfQv3+JKbYMqMu+CShnvASbUPmmkMuLXwtQHckCFwORDim5v WIkqmxRllEStxef9EUr5P9miw5WVrZ2sdSkBHKREQXzUAakQEDPhFnxW5YTfbZUg o8L6KAmSvrolTqXG5IpDbDZ1VedNDQqFIdhUU7UJg6F8YuQlKu/iGf7fVE7/YPTe jJ4quKIc4EIYG7W6Et2L1MOe8Bx7Z7++2zMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSGolmD+813fP4FHEB+WeC4OtLkrTAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80ODQvaHFKWmdfdk5kM3otQlJ4QWZsbmd1RHJTNUswLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcqd6jANBgkqhkiG9w0BAQsFAAOCAQEA Jbc7R07B5+n1p3D8SmFE4BQwZKTuDzJkzvaaQ5jIkpW40rf5s9aT8UFH8xBOQ02o 6dySV74wQHKFh9Qg/af/6L+Ma0GjWAa4Lfj6/1sWFXAjLc4Swj5zd+UScjSVq1vP BkQdvSV9dP1rCcO+RmEetIscm0AJ9DySZpFMsMkn2nPYpzSVktG29baCY3upJ3cu 6TXLPHc/sQmU/y4trP/Khq/ITT3ZLxtLWFEi7Vh/osi04eHflt2Sb2uYBpJoCXrH TQa6umPGLQDpMQpLFPqhaTK1KUb/v1yYFeWYnrWfz9Ssd/rWOumdY9Ls1Pcb52Bc GOIslf9mALCnJTEn8cr99Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:31 2026 by rpki-client