$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/nB8_oGhcnZ2Pxg3PmtUvD3p35c0.roa File: nB8_oGhcnZ2Pxg3PmtUvD3p35c0.roa (raw, json) Hash identifier: 1a7bV7CUFHPQVGYNtGmU2c1imY8bW8dR6z+7l8cEmOM= Subject key identifier: 9C:1F:3F:A0:68:5C:9D:9D:8F:C6:0D:CF:9A:D5:2F:0F:7A:77:E5:CD Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 06BC Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nB8_oGhcnZ2Pxg3PmtUvD3p35c0.roa Signing time: Tue 31 Mar 2026 07:28:30 +0000 ROA not before: Tue 31 Mar 2026 07:28:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 27.121.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:28:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9C1F3FA0685C9D9D8FC60DCF9AD52F0F7A77E5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:72:81:64:b9:87:ac:2c:f9:a4:09:b0:90: 8d:1e:b8:0e:ac:8b:78:20:b7:8d:ca:dd:6a:be:1c: b1:a7:19:c2:6a:24:90:ca:9f:1a:9d:15:ac:c9:a4: 12:a1:aa:b2:18:62:11:93:dc:e2:25:46:b7:5d:c1: 3e:69:c2:03:3d:6c:2e:d6:0a:ae:1c:78:7c:99:5b: 2f:86:f2:5f:c0:0e:89:46:c3:4e:d3:39:6e:a1:85: ea:d2:38:40:2e:51:94:a8:db:22:ca:a7:f1:77:6a: 66:0e:b6:98:7b:93:97:ee:39:b7:35:e3:98:1b:ee: 52:3f:4f:bc:e2:64:1b:fc:dd:d8:8b:b3:d7:24:ff: 81:4e:f6:63:f0:ca:f7:8a:74:df:54:4a:00:80:13: 3f:7b:90:27:62:be:15:ca:57:d9:be:2f:01:fc:31: 2c:a7:0b:51:e3:72:14:62:9b:a6:18:e1:21:07:a2: 2b:df:1d:44:3c:94:6d:d7:c9:ca:72:7a:48:5b:e4: f9:a6:8e:08:ad:fb:03:f6:e7:d2:c6:63:38:03:3f: 2a:2f:f6:bf:5f:5f:bd:d2:24:e8:c5:b1:2d:f1:f3: 97:c5:30:6a:09:4e:27:97:ae:7e:19:6a:2f:ac:c4: aa:54:0a:e0:e0:72:5b:10:7b:49:38:62:9c:ad:19: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1F:3F:A0:68:5C:9D:9D:8F:C6:0D:CF:9A:D5:2F:0F:7A:77:E5:CD X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nB8_oGhcnZ2Pxg3PmtUvD3p35c0.roa sbgp-ipAddrBlock: critical IPv4: 27.121.0.0/19 Signature Algorithm: sha256WithRSAEncryption 31:5f:e4:4f:2e:84:d7:f4:0c:d3:62:58:e1:9d:b7:d2:b6:a4: ee:15:3e:11:dd:69:9e:76:2b:dd:b7:ab:3d:5a:c4:22:ae:08: e2:f0:90:98:d5:93:62:b7:d3:30:b9:a9:a6:9d:63:c0:fe:13: 8d:a5:d0:3a:f2:ab:79:ef:bb:1c:76:f0:7f:68:6d:71:df:45: e0:07:cc:20:40:b7:d1:c7:d0:ef:da:73:5c:5d:68:ea:ce:e9: ad:69:09:c8:d5:1a:35:97:8b:e9:ca:16:26:3e:5d:82:61:2e: 5d:f8:65:3f:a0:54:a4:46:76:0c:f4:89:5d:f3:86:33:ab:10: 07:d9:de:e0:44:94:b1:68:67:cb:d6:ad:14:07:0d:16:7b:85: 29:13:88:66:e0:71:79:46:51:fc:61:b2:d5:2e:1a:83:e2:6b: 3f:ed:90:1d:99:79:4d:b1:80:77:ac:b2:fe:e2:b2:f8:6e:01: ec:30:ca:12:85:30:16:71:05:72:9d:41:fe:54:8f:ef:26:dd: df:2a:b2:65:1c:71:13:f3:d6:f6:56:aa:85:4f:52:ad:11:0c: a0:06:81:ea:55:cb:77:63:2d:41:39:65:c9:bc:99:46:32:37: 54:ea:77:66:9e:a8:e3:d3:c8:9e:19:05:aa:e0:9e:f8:9f:9f: 69:5b:b2:e3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI4MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDMUYzRkEwNjg1QzlE OUQ4RkM2MERDRjlBRDUyRjBGN0E3N0U1Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztXKBZLmHrCz5pAmwkI0euA6si3ggt43K3Wq+HLGnGcJqJJDK nxqdFazJpBKhqrIYYhGT3OIlRrddwT5pwgM9bC7WCq4ceHyZWy+G8l/ADolGw07T OW6hherSOEAuUZSo2yLKp/F3amYOtph7k5fuObc145gb7lI/T7ziZBv83diLs9ck /4FO9mPwyveKdN9USgCAEz97kCdivhXKV9m+LwH8MSynC1HjchRim6YY4SEHoivf HUQ8lG3Xycpyekhb5Pmmjgit+wP259LGYzgDPyov9r9fX73SJOjFsS3x85fFMGoJ TieXrn4Zai+sxKpUCuDgclsQe0k4YpytGaN/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUnB8/oGhcnZ2Pxg3PmtUvD3p35c0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L25COF9vR2hjbloyUHhnM1BtdFV2RDNwMzVjMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUbeQAwDQYJKoZIhvcNAQELBQADggEB ADFf5E8uhNf0DNNiWOGdt9K2pO4VPhHdaZ52K923qz1axCKuCOLwkJjVk2K30zC5 qaadY8D+E42l0Dryq3nvuxx28H9obXHfReAHzCBAt9HH0O/ac1xdaOrO6a1pCcjV GjWXi+nKFiY+XYJhLl34ZT+gVKRGdgz0iV3zhjOrEAfZ3uBElLFoZ8vWrRQHDRZ7 hSkTiGbgcXlGUfxhstUuGoPiaz/tkB2ZeU2xgHessv7isvhuAewwyhKFMBZxBXKd Qf5Uj+8m3d8qsmUccRPz1vZWqoVPUq0RDKAGgepVy3djLUE5Zcm8mUYyN1Tqd2ae qOPTyJ4ZBargnvifn2lbsuM= -----END CERTIFICATE-----Generated at Fri Apr 17 04:35:30 2026 by rpki-client