$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3BhdVQB_iFEyrJeXGjDQTxvZeBk.roa File: 3BhdVQB_iFEyrJeXGjDQTxvZeBk.roa (raw, json) Hash identifier: FvOhz6Z6OzGz50wTVlP3rsbyaBBgXKFV99LxqAwHB6k= Subject key identifier: DC:18:5D:55:00:7F:88:51:32:AC:97:97:1A:30:D0:4F:1B:D9:78:19 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0657 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3BhdVQB_iFEyrJeXGjDQTxvZeBk.roa Signing time: Tue 31 Mar 2026 07:27:38 +0000 ROA not before: Tue 31 Mar 2026 07:27:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.216.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DC185D55007F885132AC97971A30D04F1BD97819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:7d:70:35:2b:a7:33:4c:59:ad:fd:cb:8c: b9:f8:42:23:3a:6d:7d:8f:e8:a7:f1:fd:fb:8c:3c: 80:d4:8d:2a:4b:58:1a:18:8d:af:57:2e:a8:c2:e7: a9:cc:83:de:0e:7d:3b:27:12:05:ce:81:f9:70:c7: ba:88:01:6f:ba:b6:44:9a:9f:ef:3d:2e:f0:01:fe: 74:a0:cb:e9:f9:c6:27:bf:6d:c7:e9:66:e0:ca:71: ba:2d:5e:fe:40:6f:d2:a4:45:6d:4e:c3:79:45:39: 19:de:14:af:47:02:97:67:df:b2:cd:34:4e:ab:1f: 41:22:1a:36:de:ed:99:07:6c:e9:2e:13:f5:cc:af: 01:b0:d5:2b:40:40:ec:59:5d:79:9f:44:76:eb:fa: 68:6d:43:9e:f3:f6:92:91:7f:dd:25:aa:39:a1:65: 1f:00:11:0c:52:4a:85:b0:ab:6c:69:11:1a:73:31: 92:d9:f8:37:23:a8:d0:63:93:c9:37:fc:e1:59:b2: c8:19:5a:90:d0:bf:b6:f3:33:fe:99:8c:35:b3:1a: 51:23:71:dc:63:61:41:b9:97:8e:bc:53:97:de:53: 5a:74:6b:0c:eb:0f:49:98:b9:03:fa:52:9c:dc:2a: 8d:e7:f1:37:97:47:8b:d8:2e:45:dc:a4:74:c2:56: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:18:5D:55:00:7F:88:51:32:AC:97:97:1A:30:D0:4F:1B:D9:78:19 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3BhdVQB_iFEyrJeXGjDQTxvZeBk.roa sbgp-ipAddrBlock: critical IPv4: 220.216.56.0/21 Signature Algorithm: sha256WithRSAEncryption 85:4c:24:c7:7f:3b:e3:df:ef:6f:64:6d:8b:c2:7a:f6:cf:36: 27:75:d3:cb:8b:6c:6d:a6:78:35:a0:e0:08:cb:40:96:f1:24: a1:bd:42:be:85:75:b3:39:a5:2a:63:a0:8a:f2:90:10:e7:51: 95:d4:42:86:63:17:1f:11:6a:2e:78:62:14:a5:df:09:00:76: 84:22:d7:49:12:49:fc:96:36:67:bf:67:65:fc:79:b0:89:b8: ab:8f:7f:4a:36:28:0f:4b:b4:82:fa:ee:20:15:3d:18:a9:28: f6:3b:3d:0f:c2:b6:7a:7e:94:d7:29:16:97:6d:37:af:00:ca: 03:9f:49:a3:4f:bf:d0:b7:27:66:52:e4:52:2c:97:13:0c:8b: 1d:ec:7a:00:59:8a:46:8b:73:79:33:33:b7:b2:36:a8:48:62: 76:70:e6:58:8b:84:58:17:25:2a:09:c4:f7:db:f4:e5:d1:1d: 3b:2d:7b:92:12:9d:e8:46:7a:98:6f:01:75:f8:b7:6d:93:aa: a3:03:32:88:39:9e:d9:de:3a:39:90:3c:4d:4a:c7:b5:46:12: 7e:d9:17:7a:64:8c:da:d6:7e:dd:23:68:02:ba:98:95:dd:7f: f6:34:96:fb:e0:ef:75:28:1f:f8:74:25:19:77:3b:d6:c1:8c: 94:3f:5f:df -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDMTg1RDU1MDA3Rjg4 NTEzMkFDOTc5NzFBMzBEMDRGMUJEOTc4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/WX1wNSunM0xZrf3LjLn4QiM6bX2P6Kfx/fuMPIDUjSpLWBoY ja9XLqjC56nMg94OfTsnEgXOgflwx7qIAW+6tkSan+89LvAB/nSgy+n5xie/bcfp ZuDKcbotXv5Ab9KkRW1Ow3lFORneFK9HApdn37LNNE6rH0EiGjbe7ZkHbOkuE/XM rwGw1StAQOxZXXmfRHbr+mhtQ57z9pKRf90lqjmhZR8AEQxSSoWwq2xpERpzMZLZ +DcjqNBjk8k3/OFZssgZWpDQv7bzM/6ZjDWzGlEjcdxjYUG5l468U5feU1p0awzr D0mYuQP6UpzcKo3n8TeXR4vYLkXcpHTCVrq5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3BhdVQB/iFEyrJeXGjDQTxvZeBkwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1LzNCaGRWUUJfaUZFeXJKZVhHakRRVHh2WmVCay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPc2DgwDQYJKoZIhvcNAQELBQADggEB AIVMJMd/O+Pf729kbYvCevbPNid108uLbG2meDWg4AjLQJbxJKG9Qr6FdbM5pSpj oIrykBDnUZXUQoZjFx8Rai54YhSl3wkAdoQi10kSSfyWNme/Z2X8ebCJuKuPf0o2 KA9LtIL67iAVPRipKPY7PQ/Ctnp+lNcpFpdtN68AygOfSaNPv9C3J2ZS5FIslxMM ix3segBZikaLc3kzM7eyNqhIYnZw5liLhFgXJSoJxPfb9OXRHTste5ISnehGephv AXX4t22TqqMDMog5ntneOjmQPE1Kx7VGEn7ZF3pkjNrWft0jaAK6mJXdf/Y0lvvg 73UoH/h0JRl3O9bBjJQ/X98= -----END CERTIFICATE-----Generated at Fri Apr 17 09:28:52 2026 by rpki-client