$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/dvBSAkok0LcvP7OyvU6StMTLZHU.roa File: dvBSAkok0LcvP7OyvU6StMTLZHU.roa (raw, json) Hash identifier: Fzksv59GJbTtSnp+eKCniqy85S1HPKHawJP52SRQ1bo= Subject key identifier: 76:F0:52:02:4A:24:D0:B7:2F:3F:B3:B2:BD:4E:92:B4:C4:CB:64:75 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0652 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dvBSAkok0LcvP7OyvU6StMTLZHU.roa Signing time: Tue 31 Mar 2026 07:27:36 +0000 ROA not before: Tue 31 Mar 2026 07:27:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.216.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=76F052024A24D0B72F3FB3B2BD4E92B4C4CB6475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:78:cb:23:e2:b2:3a:35:f4:cf:05:93:fd: d4:35:59:1d:b9:89:41:93:ca:0d:90:71:2a:d6:37: f5:b3:a3:06:46:6f:a8:60:2f:19:86:1d:cf:5e:e9: f4:ea:26:86:8f:96:59:09:68:3b:fe:63:19:ac:20: c1:6c:90:36:c0:d0:ca:7f:cd:ad:1f:04:f8:12:50: 98:6b:24:d3:b5:12:d3:15:c9:1b:de:56:d9:87:20: b7:78:3b:a8:be:81:58:b7:0e:21:7c:1b:17:62:b2: 11:2b:33:1e:8b:e8:5e:b1:af:f3:34:6d:8e:e8:0d: 45:7d:57:22:56:9d:69:62:83:22:b1:f6:f5:67:9e: 62:b7:d5:ca:3a:ac:1c:34:b1:c9:c5:62:b0:d3:f7: d2:e3:71:b6:48:35:e6:fb:73:fe:a0:9f:b2:32:4f: a7:ff:b3:2f:7b:fa:93:11:ba:15:d5:ad:ba:bc:b4: 8b:b2:bd:8e:ab:e2:13:9a:a1:e7:23:f6:8f:b2:38: 90:51:10:5c:62:4a:8f:cb:8f:56:47:25:65:9e:69: b4:f9:72:0c:38:a1:bc:9d:b7:0f:1a:42:2b:17:e5: b7:7c:ef:93:83:2e:82:b2:36:82:c0:0c:5d:d0:b1: d0:26:49:bc:ef:47:c0:d8:eb:31:fd:24:42:39:08: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F0:52:02:4A:24:D0:B7:2F:3F:B3:B2:BD:4E:92:B4:C4:CB:64:75 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dvBSAkok0LcvP7OyvU6StMTLZHU.roa sbgp-ipAddrBlock: critical IPv4: 220.216.84.0/22 Signature Algorithm: sha256WithRSAEncryption a2:37:68:12:09:34:34:2a:b6:d7:f0:8b:86:7e:c1:df:9d:d8: eb:ed:b6:ae:c7:df:85:cd:02:61:11:cb:45:84:46:70:a1:56: 61:60:48:70:94:fd:c4:0b:66:4d:7d:73:62:92:d6:29:53:78: 36:ac:1c:fd:fe:33:90:e9:6d:db:62:46:2c:ab:26:5c:47:39: 45:39:7d:22:e5:89:b8:41:29:3d:df:05:aa:e1:09:30:3a:8f: 65:6f:5d:19:1d:65:89:f1:ed:c7:44:1f:ea:ee:04:de:40:6f: 53:f9:4b:54:6c:68:fe:00:89:0f:27:c0:b8:38:df:9e:db:68: d2:e4:4c:58:eb:0d:c9:e1:e2:02:ca:0b:1a:fc:62:3e:11:40: b7:89:41:e3:16:cd:bb:ed:e0:c2:bc:8f:03:4d:83:3c:d8:36: 0c:a4:de:75:76:e1:86:d2:9e:a4:a1:1f:41:1d:2e:43:ee:b6: 90:d3:b7:8a:e0:f9:c6:2f:f5:20:30:3d:e0:f4:c3:c1:b6:d8: b0:a4:a5:4c:66:a6:95:14:89:e1:e2:83:be:85:56:3b:18:89: db:e5:a2:26:db:68:a3:ac:c1:83:ec:01:59:62:fd:59:30:c4: e9:b0:39:4a:10:fc:b3:8a:c2:7d:23:1b:65:13:4d:f9:67:b0: f3:7f:4f:83 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2RjA1MjAyNEEyNEQw QjcyRjNGQjNCMkJENEU5MkI0QzRDQjY0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6SXjLI+KyOjX0zwWT/dQ1WR25iUGTyg2QcSrWN/WzowZGb6hg LxmGHc9e6fTqJoaPllkJaDv+YxmsIMFskDbA0Mp/za0fBPgSUJhrJNO1EtMVyRve VtmHILd4O6i+gVi3DiF8GxdishErMx6L6F6xr/M0bY7oDUV9VyJWnWligyKx9vVn nmK31co6rBw0scnFYrDT99LjcbZINeb7c/6gn7IyT6f/sy97+pMRuhXVrbq8tIuy vY6r4hOaoecj9o+yOJBREFxiSo/Lj1ZHJWWeabT5cgw4obydtw8aQisX5bd875OD LoKyNoLADF3QsdAmSbzvR8DY6zH9JEI5CK59AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUdvBSAkok0LcvP7OyvU6StMTLZHUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L2R2QlNBa29rMExjdlA3T3l2VTZTdE1UTFpIVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc2FQwDQYJKoZIhvcNAQELBQADggEB AKI3aBIJNDQqttfwi4Z+wd+d2Ovttq7H34XNAmERy0WERnChVmFgSHCU/cQLZk19 c2KS1ilTeDasHP3+M5DpbdtiRiyrJlxHOUU5fSLlibhBKT3fBarhCTA6j2VvXRkd ZYnx7cdEH+ruBN5Ab1P5S1RsaP4AiQ8nwLg4357baNLkTFjrDcnh4gLKCxr8Yj4R QLeJQeMWzbvt4MK8jwNNgzzYNgyk3nV24YbSnqShH0EdLkPutpDTt4rg+cYv9SAw PeD0w8G22LCkpUxmppUUieHig76FVjsYidvloibbaKOswYPsAVli/VkwxOmwOUoQ /LOKwn0jG2UTTflnsPN/T4M= -----END CERTIFICATE-----Generated at Fri Apr 17 04:33:53 2026 by rpki-client