$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/BHq2zkzsQdy3kWP4GGFYJLCvufA.roa File: BHq2zkzsQdy3kWP4GGFYJLCvufA.roa (raw, json) Hash identifier: KhwSzOgGv37mRkCMGxvMcCNi9FPY8B3B1ZJ4P72cWgU= Subject key identifier: 04:7A:B6:CE:4C:EC:41:DC:B7:91:63:F8:18:61:58:24:B0:AF:B9:F0 Certificate issuer: /CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Certificate serial: 25 Authority key identifier: 67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/BHq2zkzsQdy3kWP4GGFYJLCvufA.roa Signing time: Tue 31 Mar 2026 08:39:07 +0000 ROA not before: Tue 31 Mar 2026 08:39:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7690 IP address blocks: 158.199.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Validity Not Before: Mar 31 08:39:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=047AB6CE4CEC41DCB79163F818615824B0AFB9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:72:bd:4a:bf:2d:f6:ca:98:e9:37:de:8d: 40:dd:49:d7:13:74:0d:39:89:41:f9:84:96:b5:75: f5:a1:1d:12:b1:88:02:e0:82:f2:af:79:40:a4:1b: 66:00:2b:4b:61:ef:3f:2a:2d:25:83:aa:c8:33:c2: 5b:f4:61:8a:4d:5e:ba:6a:dc:7e:65:65:9b:84:3f: de:44:02:8b:5a:71:78:19:c8:d6:60:46:0e:56:07: bb:2e:6c:0c:9f:29:94:df:0f:ae:95:42:f0:e0:ba: 78:6d:51:88:98:31:b7:3c:38:8e:f0:a6:43:d7:c3: 76:24:e7:5b:e4:8a:a0:26:94:8e:4c:6e:69:75:46: 95:05:e4:56:cc:4a:18:5a:47:1a:76:38:46:78:02: c7:f8:0b:37:cc:72:ef:43:bf:c9:8b:82:d4:83:4c: b3:a8:aa:92:a8:f1:16:76:f4:a1:43:7c:5b:ae:cc: 6a:9d:ee:24:b0:f3:ae:27:36:5a:77:9d:fc:68:54: 89:a6:6b:88:75:26:48:6a:bc:c0:da:1a:1b:61:05: 6b:a6:25:e6:78:a5:4e:b0:38:af:89:6b:e8:53:32: 7c:8c:14:2b:dd:52:72:0a:1b:85:1e:f1:1b:38:ed: fa:d2:8b:6a:d8:d8:b9:a7:f3:f8:be:ea:1a:8c:56: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7A:B6:CE:4C:EC:41:DC:B7:91:63:F8:18:61:58:24:B0:AF:B9:F0 X509v3 Authority Key Identifier: keyid:67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/BHq2zkzsQdy3kWP4GGFYJLCvufA.roa sbgp-ipAddrBlock: critical IPv4: 158.199.112.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:60:21:4b:51:9a:ba:c3:5e:9e:78:0a:23:c6:bf:4d:58:91: 97:93:c0:b3:0f:e6:20:de:cb:4f:f1:d7:19:5d:b6:fa:7e:bf: 9e:57:f7:db:72:34:ae:50:66:bd:a5:bb:a1:c8:3f:df:a5:6a: e1:ac:0b:2b:14:e1:65:f4:14:31:39:75:cc:cb:39:1c:91:58: 52:18:68:7c:5e:b7:07:7d:d1:9a:d4:0d:1e:9b:d8:91:54:26: 73:17:87:91:d9:a6:5b:84:ac:2a:c0:f9:a0:d1:bf:0a:75:15: 3f:a2:33:3f:b6:ef:0a:8e:e3:21:f3:9c:13:40:e6:31:f4:73: 0c:b4:79:fb:b1:f0:27:c2:40:bf:3d:55:34:ce:1e:1c:30:b7: 92:a3:a0:6b:b0:53:9a:09:67:a3:46:49:2a:1b:64:2e:8a:63: b4:cd:d1:9a:20:27:2b:ea:42:42:ad:98:9e:31:fa:7b:87:0f: 5d:1a:1c:8b:03:b7:a7:9d:08:af:09:9a:ac:33:e6:7e:bd:aa: c2:16:d6:8b:11:4b:38:8f:a9:25:52:88:e4:87:c0:17:97:4a: 36:99:92:8a:08:be:56:ef:e0:47:4d:67:67:a5:7c:13:e8:e5: fe:b2:64:ec:92:53:fe:32:e8:44:b2:fe:1e:2f:02:97:b5:2b: 43:be:d8:47 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2N0FF MjFBM0M3RDQ3ODJCNDVCNkJEQzE0QjhBMTIwRDA2MTdBQjQyMB4XDTI2MDMzMTA4 MzkwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDQ3QUI2Q0U0Q0VDNDFE Q0I3OTE2M0Y4MTg2MTU4MjRCMEFGQjlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOAvcr1Kvy32ypjpN96NQN1J1xN0DTmJQfmElrV19aEdErGIAuCC 8q95QKQbZgArS2HvPyotJYOqyDPCW/Rhik1eumrcfmVlm4Q/3kQCi1pxeBnI1mBG DlYHuy5sDJ8plN8PrpVC8OC6eG1RiJgxtzw4jvCmQ9fDdiTnW+SKoCaUjkxuaXVG lQXkVsxKGFpHGnY4RngCx/gLN8xy70O/yYuC1INMs6iqkqjxFnb0oUN8W67Map3u JLDzric2Wned/GhUiaZriHUmSGq8wNoaG2EFa6Yl5nilTrA4r4lr6FMyfIwUK91S cgobhR7xGzjt+tKLatjYuafz+L7qGoxWwDsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQEerbOTOxB3LeRY/gYYVgksK+58DAfBgNVHSMEGDAWgBRnriGjx9R4K0W2vcFL ihINBherQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjU1L1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZWHEwSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZ WHEwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82NTUvQkhxMnprenNRZHkza1dQNEdHRllKTEN2dWZBLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJ7HcDANBgkqhkiG9w0BAQsFAAOCAQEA P2AhS1GausNenngKI8a/TViRl5PAsw/mIN7LT/HXGV22+n6/nlf323I0rlBmvaW7 ocg/36Vq4awLKxThZfQUMTl1zMs5HJFYUhhofF63B33RmtQNHpvYkVQmcxeHkdmm W4SsKsD5oNG/CnUVP6IzP7bvCo7jIfOcE0DmMfRzDLR5+7HwJ8JAvz1VNM4eHDC3 kqOga7BTmglno0ZJKhtkLopjtM3RmiAnK+pCQq2YnjH6e4cPXRociwO3p50Irwma rDPmfr2qwhbWixFLOI+pJVKI5IfAF5dKNpmSigi+Vu/gR01nZ6V8E+jl/rJk7JJT /jLoRLL+Hi8Cl7UrQ77YRw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:53:11 2026 by rpki-client