$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/KKHNXSam8hqjKSp7n3MOpulaLnQ.roa File: KKHNXSam8hqjKSp7n3MOpulaLnQ.roa (raw, json) Hash identifier: PRHzLhYbbYTx+SMYaDJCBkZdowiu6M8GkmDGWtvr6Bo= Subject key identifier: 28:A1:CD:5D:26:A6:F2:1A:A3:29:2A:7B:9F:73:0E:A6:E9:5A:2E:74 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 064D Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/KKHNXSam8hqjKSp7n3MOpulaLnQ.roa Signing time: Tue 31 Mar 2026 07:27:34 +0000 ROA not before: Tue 31 Mar 2026 07:27:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.216.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=28A1CD5D26A6F21AA3292A7B9F730EA6E95A2E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:23:98:7e:de:79:84:16:37:94:e2:7d:42:67: b6:68:eb:a3:21:b6:f7:2a:50:5b:0a:72:e6:a6:f1: be:a2:82:f6:72:88:67:ee:ab:fc:cd:04:17:7f:2f: 2e:f9:96:4e:f1:e6:76:e6:b0:be:4a:08:80:29:d3: 20:e3:51:86:cc:6b:b6:fd:0c:b8:25:e1:7b:02:28: 30:9d:c7:a8:29:8a:9e:25:60:ef:85:4c:74:f7:34: 98:17:20:9d:b7:5b:bf:9d:16:4e:35:33:bb:b7:9a: 85:c0:40:51:ef:a2:94:7b:94:9a:38:f3:25:41:fc: a6:75:bf:e3:19:1d:ad:ed:aa:1d:6d:49:ed:d2:44: 86:2c:a4:99:03:7d:14:1a:ef:e1:53:c8:12:f7:11: 21:ca:44:ef:91:00:27:50:f5:7b:03:0d:d4:7d:ea: 68:82:73:cb:b9:5b:2a:8d:62:a3:cc:80:99:4a:49: 34:95:a5:85:66:4d:31:31:d6:75:81:e4:c9:84:c4: 6e:08:1a:1e:51:09:af:b5:93:49:57:48:53:02:09: bb:c4:d0:4d:af:c1:33:55:82:86:c0:2f:7c:1f:d4: 2e:10:62:33:8f:d8:13:c3:40:33:98:ba:c7:f0:98: 18:7d:37:77:ee:40:f3:6d:2f:0e:39:61:b0:18:13: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A1:CD:5D:26:A6:F2:1A:A3:29:2A:7B:9F:73:0E:A6:E9:5A:2E:74 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/KKHNXSam8hqjKSp7n3MOpulaLnQ.roa sbgp-ipAddrBlock: critical IPv4: 220.216.124.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:12:00:4b:9e:fd:b8:29:c7:d4:3e:f8:fb:1b:08:ab:2c:79: c1:29:48:86:84:f9:6a:5b:cb:0f:84:03:a5:6b:b9:92:1a:57: 15:7b:08:ba:17:05:12:06:11:ba:62:f3:2d:31:f2:33:1a:2e: 25:ef:18:49:73:21:39:ed:c3:30:1d:ce:d0:af:81:f6:7f:cd: b9:9a:b3:a5:be:1f:04:c1:71:b8:ad:a2:10:b1:ed:49:07:80: 51:be:ce:78:bb:7a:b7:35:ef:53:da:d7:93:38:f4:6c:ff:03: ba:ff:07:e4:f0:17:a5:67:1d:9c:14:23:5d:ea:5e:b6:3f:cf: a5:e6:4e:b5:9e:9d:96:03:08:72:8c:2e:f0:d1:b4:e3:65:5d: 5a:ba:ca:d2:57:ad:34:b4:ff:9e:b7:e8:4f:f8:47:73:4e:d5: c6:bb:63:02:09:92:2f:80:30:96:b3:fd:f0:3a:1b:64:a8:cf: 47:9a:12:2f:d2:6d:97:c8:fd:a5:30:49:32:19:fa:90:bd:ef: ce:2f:39:c5:6d:c3:02:6f:69:40:8c:7b:67:b3:47:17:86:f5: da:cb:17:62:97:7c:df:bc:83:b8:b5:1d:5d:dc:12:11:d1:f9: 2d:e0:21:f5:cf:04:8b:63:ec:a1:df:34:7f:68:40:72:96:cd: cc:fa:5e:69 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4QTFDRDVEMjZBNkYy MUFBMzI5MkE3QjlGNzMwRUE2RTk1QTJFNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaI5h+3nmEFjeU4n1CZ7Zo66MhtvcqUFsKcuam8b6igvZyiGfu q/zNBBd/Ly75lk7x5nbmsL5KCIAp0yDjUYbMa7b9DLgl4XsCKDCdx6gpip4lYO+F THT3NJgXIJ23W7+dFk41M7u3moXAQFHvopR7lJo48yVB/KZ1v+MZHa3tqh1tSe3S RIYspJkDfRQa7+FTyBL3ESHKRO+RACdQ9XsDDdR96miCc8u5WyqNYqPMgJlKSTSV pYVmTTEx1nWB5MmExG4IGh5RCa+1k0lXSFMCCbvE0E2vwTNVgobAL3wf1C4QYjOP 2BPDQDOYusfwmBh9N3fuQPNtLw45YbAYE0R3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUKKHNXSam8hqjKSp7n3MOpulaLnQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L0tLSE5YU2FtOGhxaktTcDduM01PcHVsYUxuUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc2HwwDQYJKoZIhvcNAQELBQADggEB AGwSAEue/bgpx9Q++PsbCKssecEpSIaE+Wpbyw+EA6VruZIaVxV7CLoXBRIGEbpi 8y0x8jMaLiXvGElzITntwzAdztCvgfZ/zbmas6W+HwTBcbitohCx7UkHgFG+zni7 erc171Pa15M49Gz/A7r/B+TwF6VnHZwUI13qXrY/z6XmTrWenZYDCHKMLvDRtONl XVq6ytJXrTS0/5636E/4R3NO1ca7YwIJki+AMJaz/fA6G2Soz0eaEi/SbZfI/aUw STIZ+pC9784vOcVtwwJvaUCMe2ezRxeG9drLF2KXfN+8g7i1HV3cEhHR+S3gIfXP BItj7KHfNH9oQHKWzcz6Xmk= -----END CERTIFICATE-----Generated at Fri Apr 17 04:34:29 2026 by rpki-client