$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3ahnHkxn4091-hMgbB4BByD3tOU.roa File: 3ahnHkxn4091-hMgbB4BByD3tOU.roa (raw, json) Hash identifier: ciiY0fTEW49EEovSzNtkA6OoN03dzwnpao8ZF/Pk45w= Subject key identifier: DD:A8:67:1E:4C:67:E3:4F:75:FA:13:20:6C:1E:01:07:20:F7:B4:E5 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 066D Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3ahnHkxn4091-hMgbB4BByD3tOU.roa Signing time: Tue 31 Mar 2026 07:27:50 +0000 ROA not before: Tue 31 Mar 2026 07:27:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.216.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DDA8671E4C67E34F75FA13206C1E010720F7B4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:11:b9:f1:b6:af:06:5f:06:51:eb:7f:73: 54:9c:14:ef:57:02:26:f5:76:c1:cf:90:88:3c:66: 62:ab:ef:9f:55:63:51:f0:b5:69:09:77:2f:f6:69: 3f:3d:75:fe:33:63:19:33:01:5d:5b:c1:09:e1:77: 95:5d:71:18:87:4e:91:50:c0:9d:73:c1:e1:50:95: 53:46:09:a2:19:85:77:b3:46:67:b8:00:c9:8d:e4: 88:e0:75:71:3e:e0:67:5d:0c:b3:47:56:86:9f:d4: da:dc:d8:5f:5a:4c:21:9b:3f:be:b0:3a:e1:f4:25: ca:18:81:e2:b5:15:51:6f:b2:27:d8:dc:3f:14:c5: 78:af:c5:16:5d:7d:1e:63:47:d9:bd:fe:82:0c:ad: 1b:3b:0e:03:57:67:fb:6f:af:26:06:80:c9:bc:70: e4:bb:37:14:07:21:46:d0:c9:17:24:c6:f1:30:6d: fa:ce:72:93:06:2c:e6:a1:08:8c:9f:05:a6:e3:25: eb:e5:0f:19:b4:35:33:5b:41:d9:90:3d:e9:16:27: 5f:d3:b3:e0:76:21:9a:fe:4c:22:77:61:95:79:eb: 33:67:dc:3a:3f:41:15:9d:ae:3f:fa:89:b7:33:cc: 56:2c:cb:b5:92:49:77:a8:80:dc:6b:c3:00:3f:f4: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:67:1E:4C:67:E3:4F:75:FA:13:20:6C:1E:01:07:20:F7:B4:E5 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3ahnHkxn4091-hMgbB4BByD3tOU.roa sbgp-ipAddrBlock: critical IPv4: 220.216.106.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:0f:ba:ac:a8:00:92:c7:0d:11:31:83:e2:c8:e9:23:6d:a0: ae:89:28:aa:0d:9d:9a:d4:7c:69:2d:cb:64:85:5b:80:c5:15: a3:cf:25:68:49:dd:2a:ec:cd:37:22:53:69:49:1e:01:b7:53: fe:94:5b:52:6b:53:f1:9a:26:dd:cb:28:30:45:8b:87:80:4b: 35:f7:60:b3:40:f3:a0:f1:4f:1a:95:ad:79:be:9f:2d:03:28: 93:3a:60:1d:f7:3f:62:be:a9:b3:63:fd:d8:7e:88:fc:14:b7: 0c:ec:63:c3:3e:a6:1e:86:0f:fa:ab:f3:54:28:2e:69:9d:e6: 4a:21:c9:89:e6:3d:ed:33:0d:55:cf:71:ae:60:24:52:33:e9: 7c:82:2b:92:8d:11:2d:2b:bd:0f:4e:ba:7b:ba:c1:31:f2:aa: 71:ea:7d:ac:56:25:d4:20:4b:74:a6:fb:6e:7e:f6:07:4c:20: 3e:69:7e:1c:8d:e6:7e:01:f9:8c:8b:48:20:13:3e:0d:94:21: c6:9e:a5:13:bb:a4:68:41:c9:6e:a5:7f:0b:19:54:a3:13:a4: 4b:b4:11:f3:e1:e0:b3:2f:b7:d8:99:64:fa:0e:25:3a:bd:4a: 17:88:cc:3c:36:7b:3a:34:fe:70:39:dc:42:bb:59:2b:5f:b9: 23:e3:7e:85 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREQTg2NzFFNEM2N0Uz NEY3NUZBMTMyMDZDMUUwMTA3MjBGN0I0RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH7xG58bavBl8GUet/c1ScFO9XAib1dsHPkIg8ZmKr759VY1Hw tWkJdy/2aT89df4zYxkzAV1bwQnhd5VdcRiHTpFQwJ1zweFQlVNGCaIZhXezRme4 AMmN5IjgdXE+4GddDLNHVoaf1Nrc2F9aTCGbP76wOuH0JcoYgeK1FVFvsifY3D8U xXivxRZdfR5jR9m9/oIMrRs7DgNXZ/tvryYGgMm8cOS7NxQHIUbQyRckxvEwbfrO cpMGLOahCIyfBabjJevlDxm0NTNbQdmQPekWJ1/Ts+B2IZr+TCJ3YZV56zNn3Do/ QRWdrj/6ibczzFYsy7WSSXeogNxrwwA/9CidAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3ahnHkxn4091+hMgbB4BByD3tOUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1LzNhaG5Ia3huNDA5MS1oTWdiQjRCQnlEM3RPVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc2GowDQYJKoZIhvcNAQELBQADggEB ADoPuqyoAJLHDRExg+LI6SNtoK6JKKoNnZrUfGkty2SFW4DFFaPPJWhJ3SrszTci U2lJHgG3U/6UW1JrU/GaJt3LKDBFi4eASzX3YLNA86DxTxqVrXm+ny0DKJM6YB33 P2K+qbNj/dh+iPwUtwzsY8M+ph6GD/qr81QoLmmd5kohyYnmPe0zDVXPca5gJFIz 6XyCK5KNES0rvQ9Ounu6wTHyqnHqfaxWJdQgS3Sm+25+9gdMID5pfhyN5n4B+YyL SCATPg2UIcaepRO7pGhByW6lfwsZVKMTpEu0EfPh4LMvt9iZZPoOJTq9SheIzDw2 ezo0/nA53EK7WStfuSPjfoU= -----END CERTIFICATE-----Generated at Fri Apr 17 03:34:42 2026 by rpki-client