$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FFh-cKthfOcx4cVE27EtcaFpE5g.roa File: FFh-cKthfOcx4cVE27EtcaFpE5g.roa (raw, json) Hash identifier: 10yHoOR8/f7ZSHosHBAJFXrDCCO3HtPruQIPm6L6LE0= Subject key identifier: 14:58:7E:70:AB:61:7C:E7:31:E1:C5:44:DB:B1:2D:71:A1:69:13:98 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0648 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FFh-cKthfOcx4cVE27EtcaFpE5g.roa Signing time: Tue 31 Mar 2026 07:27:31 +0000 ROA not before: Tue 31 Mar 2026 07:27:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.148.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=14587E70AB617CE731E1C544DBB12D71A1691398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:56:ee:34:df:04:9a:e5:77:a5:84:36:68: 58:0a:d3:09:e3:ab:59:54:ca:1b:d4:31:88:0c:73: b1:80:28:c5:65:ea:82:63:56:f0:42:f5:b4:9d:5b: a6:55:b6:69:d7:53:9e:43:72:ee:8c:b1:3b:3b:07: f2:78:46:e0:fa:90:c3:1a:1d:62:47:67:05:0a:3a: 73:15:e2:8c:f1:14:f7:45:51:a7:db:e9:49:ba:64: df:a1:fd:53:82:15:5a:46:53:34:81:e8:db:44:77: 61:7b:5c:77:14:a0:57:90:55:92:5a:bf:f6:53:c4: e6:01:13:08:01:a8:23:9f:a6:21:c1:2c:f6:fe:c2: bf:65:9e:02:fc:b3:0f:31:4f:42:57:71:5c:8d:3d: b6:5e:de:78:d2:78:18:6e:29:20:49:ef:d2:3c:e5: 5b:eb:c1:4f:a5:be:04:17:8b:92:5c:59:99:a6:8e: 46:83:d3:5d:79:d4:e9:12:e5:c5:a0:2d:4c:46:ae: a4:b2:1c:ae:05:05:fc:8e:32:20:e7:24:81:d9:7c: 86:9b:2b:da:32:c9:67:dd:db:e5:b7:ba:78:28:d0: 2e:2b:8b:b6:fe:56:57:1f:d8:d5:dd:04:bf:15:92: fd:83:03:d4:b5:fa:ed:47:74:3a:84:93:c2:95:dc: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:58:7E:70:AB:61:7C:E7:31:E1:C5:44:DB:B1:2D:71:A1:69:13:98 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FFh-cKthfOcx4cVE27EtcaFpE5g.roa sbgp-ipAddrBlock: critical IPv4: 220.148.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:dd:71:54:a6:c9:a5:4f:38:f1:f2:8c:62:04:a4:64:92:77: cd:34:11:79:4a:e6:64:27:78:cf:58:36:62:c9:68:64:60:79: 18:81:a5:0e:9a:3f:4f:66:e3:f4:d9:64:53:2f:aa:34:9c:f5: da:70:c4:b4:e0:9b:f8:f7:7a:95:fa:62:c9:55:c5:db:ab:d9: ff:f9:7a:cb:67:ba:c7:2c:f3:34:b2:40:6d:ed:90:38:5a:4d: e5:10:82:61:14:42:8a:ef:9d:1e:00:8b:d7:df:85:11:6b:a7: d8:8a:59:78:9b:3c:3d:bc:67:47:71:89:ec:eb:cc:33:cb:8b: 3a:35:02:3a:03:47:3b:6c:22:0a:ac:7e:a6:8d:aa:4a:b6:23: 13:da:eb:09:d0:48:33:0b:1b:f5:1d:b4:2c:d7:63:6b:58:1b: bd:79:f7:96:37:e6:b1:5d:55:49:97:6f:d8:2f:ab:29:10:4b: 05:ab:4c:47:ea:9d:48:c5:97:0d:38:9b:cd:aa:38:4c:3a:d0: bd:a0:0f:12:f1:17:21:52:aa:b3:cb:bc:9b:4c:45:90:a8:a1: 21:4c:4f:ea:64:9d:b8:9a:a0:d9:37:f0:5a:14:b1:8f:b5:0c: f4:43:95:c3:71:d2:73:a5:4a:8e:3f:d1:1a:a6:8f:9e:80:35: 29:3c:d9:8f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0NTg3RTcwQUI2MTdD RTczMUUxQzU0NERCQjEyRDcxQTE2OTEzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2ulbuNN8EmuV3pYQ2aFgK0wnjq1lUyhvUMYgMc7GAKMVl6oJj VvBC9bSdW6ZVtmnXU55Dcu6MsTs7B/J4RuD6kMMaHWJHZwUKOnMV4ozxFPdFUafb 6Um6ZN+h/VOCFVpGUzSB6NtEd2F7XHcUoFeQVZJav/ZTxOYBEwgBqCOfpiHBLPb+ wr9lngL8sw8xT0JXcVyNPbZe3njSeBhuKSBJ79I85VvrwU+lvgQXi5JcWZmmjkaD 01151OkS5cWgLUxGrqSyHK4FBfyOMiDnJIHZfIabK9oyyWfd2+W3ungo0C4ri7b+ Vlcf2NXdBL8Vkv2DA9S1+u1HdDqEk8KV3MuXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUFFh+cKthfOcx4cVE27EtcaFpE5gwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L0ZGaC1jS3RoZk9jeDRjVkUyN0V0Y2FGcEU1Zy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADclPEwDQYJKoZIhvcNAQELBQADggEB AD7dcVSmyaVPOPHyjGIEpGSSd800EXlK5mQneM9YNmLJaGRgeRiBpQ6aP09m4/TZ ZFMvqjSc9dpwxLTgm/j3epX6YslVxdur2f/5estnuscs8zSyQG3tkDhaTeUQgmEU QorvnR4Ai9ffhRFrp9iKWXibPD28Z0dxiezrzDPLizo1AjoDRztsIgqsfqaNqkq2 IxPa6wnQSDMLG/UdtCzXY2tYG71595Y35rFdVUmXb9gvqykQSwWrTEfqnUjFlw04 m82qOEw60L2gDxLxFyFSqrPLvJtMRZCooSFMT+pknbiaoNk38FoUsY+1DPRDlcNx 0nOlSo4/0Rqmj56ANSk82Y8= -----END CERTIFICATE-----Generated at Fri Apr 17 04:33:35 2026 by rpki-client