$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/bDJ-gELBn8eCORTj7ErzR_2tJ78.roa File: bDJ-gELBn8eCORTj7ErzR_2tJ78.roa (raw, json) Hash identifier: 7pSgr99dKxcnNfdEcEgCEVp3+Xtarx2yfKmLWk+m3ZA= Subject key identifier: 6C:32:7E:80:42:C1:9F:C7:82:39:14:E3:EC:4A:F3:47:FD:AD:27:BF Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0688 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bDJ-gELBn8eCORTj7ErzR_2tJ78.roa Signing time: Tue 31 Mar 2026 07:28:04 +0000 ROA not before: Tue 31 Mar 2026 07:28:04 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 111.67.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:28:04 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6C327E8042C19FC7823914E3EC4AF347FDAD27BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:a7:db:83:a7:fc:f0:9c:b6:cb:7f:e8:dc: 20:c2:6d:63:c0:6a:b7:42:67:31:77:c9:f1:72:88: a2:21:63:20:b1:0e:8e:1d:77:ca:67:9f:88:66:d9: 87:fd:c5:02:8c:09:b1:c3:41:6c:50:75:95:96:c3: a1:15:d9:59:03:b3:e3:53:79:b3:f1:73:8a:e3:f2: 84:c3:33:ce:e3:15:c8:ca:d4:76:2c:f3:40:be:d3: 50:5a:e0:8e:f7:c6:f8:98:61:af:1c:a7:8f:00:d4: f4:92:fe:b2:49:cb:f7:ef:d9:2e:34:4b:9d:35:c6: 81:c1:3f:1e:b4:26:66:ce:73:ff:11:14:b9:ea:06: 17:c7:e2:12:fb:5f:3a:b9:01:91:3d:a1:ed:81:22: 6a:17:34:88:76:93:68:b5:42:81:42:dc:bd:ea:4e: 69:91:38:c0:78:ff:1f:2f:12:70:1f:65:a8:01:a6: 78:43:ae:9c:f6:83:ea:2c:91:40:77:47:46:a2:ec: 0c:e7:41:90:74:06:3e:be:2d:71:db:07:d5:26:f0: 41:01:8f:03:10:2e:36:e2:e8:7b:b0:bd:b0:d9:7d: fa:1d:89:c7:88:4f:7d:27:e6:bf:d0:c0:d7:ec:84: a7:94:5d:e3:34:39:dc:3f:32:b3:dc:cd:9b:81:3b: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:32:7E:80:42:C1:9F:C7:82:39:14:E3:EC:4A:F3:47:FD:AD:27:BF X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bDJ-gELBn8eCORTj7ErzR_2tJ78.roa sbgp-ipAddrBlock: critical IPv4: 111.67.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:9a:36:87:72:e1:97:11:c5:fc:2b:6e:3a:cf:bc:4f:d4:20: 47:7e:c2:aa:48:1e:17:cb:d2:36:d5:d2:42:68:13:87:f6:4a: e4:18:f8:7e:78:d7:fd:6b:74:24:18:21:65:07:af:c7:02:22: 6a:b8:18:a5:b0:93:bb:4e:a7:4f:11:f6:5b:9c:69:1c:7c:fd: b7:99:5a:9e:5b:a3:1c:07:37:6a:ab:77:51:bb:32:08:30:fa: 8f:e4:e6:c5:e5:f5:6a:31:56:e1:3b:e1:3f:55:68:cd:5d:45: 77:24:e8:bd:0b:39:2b:9d:d8:62:a5:bc:66:cf:70:b8:6d:4d: d5:db:95:d6:8c:da:d8:fc:42:59:4b:a6:58:00:bb:4d:9c:f9: a3:c9:67:fd:dd:ef:3b:5a:85:82:c2:60:55:b2:7a:87:65:6b: c2:f8:91:1f:bc:67:97:a7:3f:b7:4f:67:67:07:b6:f4:61:e0: 3c:30:ac:99:d3:30:5f:69:a8:e9:ac:45:2b:d2:a3:f7:a3:73: 4c:ad:18:a0:09:d1:cf:4c:00:1e:0d:78:b1:70:be:9a:f2:9f: 9f:0d:46:86:50:93:ce:ce:99:3d:34:ea:a5:3a:10:10:58:f1: f8:9b:58:18:af:10:62:65:f1:60:09:4a:18:b3:ee:4b:64:f3: ee:a4:0e:b7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI4MDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZDMzI3RTgwNDJDMTlG Qzc4MjM5MTRFM0VDNEFGMzQ3RkRBRDI3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDtKfbg6f88Jy2y3/o3CDCbWPAardCZzF3yfFyiKIhYyCxDo4d d8pnn4hm2Yf9xQKMCbHDQWxQdZWWw6EV2VkDs+NTebPxc4rj8oTDM87jFcjK1HYs 80C+01Ba4I73xviYYa8cp48A1PSS/rJJy/fv2S40S501xoHBPx60JmbOc/8RFLnq BhfH4hL7Xzq5AZE9oe2BImoXNIh2k2i1QoFC3L3qTmmROMB4/x8vEnAfZagBpnhD rpz2g+oskUB3R0ai7AznQZB0Bj6+LXHbB9Um8EEBjwMQLjbi6HuwvbDZffodiceI T30n5r/QwNfshKeUXeM0Odw/MrPczZuBO7t1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUbDJ+gELBn8eCORTj7ErzR/2tJ78wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L2JESi1nRUxCbjhlQ09SVGo3RXJ6Ul8ydEo3OC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJvQ3gwDQYJKoZIhvcNAQELBQADggEB ADqaNody4ZcRxfwrbjrPvE/UIEd+wqpIHhfL0jbV0kJoE4f2SuQY+H541/1rdCQY IWUHr8cCImq4GKWwk7tOp08R9lucaRx8/beZWp5boxwHN2qrd1G7Mggw+o/k5sXl 9WoxVuE74T9VaM1dRXck6L0LOSud2GKlvGbPcLhtTdXbldaM2tj8QllLplgAu02c +aPJZ/3d7ztahYLCYFWyeodla8L4kR+8Z5enP7dPZ2cHtvRh4DwwrJnTMF9pqOms RSvSo/ejc0ytGKAJ0c9MAB4NeLFwvpryn58NRoZQk87OmT006qU6EBBY8fibWBiv EGJl8WAJShiz7ktk8+6kDrc= -----END CERTIFICATE-----Generated at Sun Apr 19 10:04:52 2026 by rpki-client