$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/_IrKAmRd75q2op_pg_FS3X5bpBc.roa File: _IrKAmRd75q2op_pg_FS3X5bpBc.roa (raw, json) Hash identifier: 9Ia7y8jtcasfmb8uf+g48MHfaKuBBgdxxiuyz8SZDZk= Subject key identifier: FC:8A:CA:02:64:5D:EF:9A:B6:A2:9F:E9:83:F1:52:DD:7E:5B:A4:17 Certificate issuer: /CN=C74DF50D0555514618B72AC45B42A850DACF0D64 Certificate serial: 24 Authority key identifier: C7:4D:F5:0D:05:55:51:46:18:B7:2A:C4:5B:42:A8:50:DA:CF:0D:64 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x031DQVVUUYYtyrEW0KoUNrPDWQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/_IrKAmRd75q2op_pg_FS3X5bpBc.roa Signing time: Tue 31 Mar 2026 08:40:00 +0000 ROA not before: Tue 31 Mar 2026 08:40:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131931 IP address blocks: 157.120.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/x031DQVVUUYYtyrEW0KoUNrPDWQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/x031DQVVUUYYtyrEW0KoUNrPDWQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x031DQVVUUYYtyrEW0KoUNrPDWQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C74DF50D0555514618B72AC45B42A850DACF0D64 Validity Not Before: Mar 31 08:40:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FC8ACA02645DEF9AB6A29FE983F152DD7E5BA417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:85:e8:38:65:ff:47:d3:6a:fc:cd:f3:0c: 2c:27:ad:c3:e3:6f:de:00:ed:e9:58:72:39:2d:39: 33:77:a9:fd:00:5f:57:a0:98:ca:d1:e1:7c:d8:a2: 47:37:df:cc:bc:87:0f:3a:5d:87:97:e2:a7:44:de: 5f:85:2c:45:09:95:33:18:7f:13:d4:c6:9d:c3:82: 8d:03:c4:a8:a9:96:68:c5:c0:75:cd:9a:26:95:68: 92:dc:d0:da:0a:68:5c:93:6e:e3:06:9c:92:ea:1c: 3c:07:b7:41:5a:b5:5a:41:ac:58:8f:28:b2:51:9a: a6:29:28:2a:26:cd:13:9e:ad:e3:41:fa:6e:09:68: 6b:d6:fa:84:0a:a4:53:38:a8:1e:8c:88:03:a4:4a: a3:6f:40:55:34:17:10:ee:91:a3:1a:c7:7f:c1:10: 09:cd:32:f5:71:73:cb:8b:a9:8b:26:d7:48:e3:4c: 5f:f3:8c:6d:47:08:3a:d9:71:0c:7d:c5:24:9b:3d: 64:e4:3d:24:00:4a:b5:9d:16:84:9f:b3:45:75:ed: 7e:36:c2:d8:a2:b9:25:9d:90:6c:34:53:91:a9:53: 3f:93:d0:11:fb:e5:b4:f0:58:f2:02:23:ee:ed:cf: 27:a3:10:ce:79:d7:8f:54:2e:4c:06:91:16:b2:45: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8A:CA:02:64:5D:EF:9A:B6:A2:9F:E9:83:F1:52:DD:7E:5B:A4:17 X509v3 Authority Key Identifier: keyid:C7:4D:F5:0D:05:55:51:46:18:B7:2A:C4:5B:42:A8:50:DA:CF:0D:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/x031DQVVUUYYtyrEW0KoUNrPDWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x031DQVVUUYYtyrEW0KoUNrPDWQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/_IrKAmRd75q2op_pg_FS3X5bpBc.roa sbgp-ipAddrBlock: critical IPv4: 157.120.192.0/21 Signature Algorithm: sha256WithRSAEncryption 07:dc:19:22:2c:ba:0b:b1:40:d9:34:68:a7:df:e5:97:09:8a: cc:95:77:89:d2:af:5e:d3:43:ec:c1:db:c8:06:ff:4a:82:79: ec:94:ea:db:c5:25:94:96:b3:7e:ec:03:95:95:2f:26:75:0e: 27:17:59:e8:90:c4:ce:52:0c:7f:31:f7:d3:ca:49:d4:7b:9c: 8e:3c:ff:56:8f:e1:ac:5f:60:75:fe:50:4e:75:8e:b6:ba:7b: b2:10:d0:d1:1e:ff:a6:fb:93:0b:c3:aa:bc:b5:f6:3f:c1:0b: b1:f7:d7:48:f2:ff:0f:72:15:67:a9:c1:42:23:cc:e9:2e:e7: 3e:4b:2e:ac:00:4f:64:19:5b:50:17:2a:c8:2e:48:a5:24:71: a6:89:a5:28:e5:b8:2f:84:c6:06:d6:9f:e5:ec:63:48:df:e8: 99:cf:20:f9:8b:4a:46:08:d1:80:99:46:d3:59:c0:72:4c:e8: bc:93:2e:c9:ec:e3:cd:c0:4b:2c:3e:48:22:fd:05:dc:93:55: c7:9a:fd:6f:36:fb:1e:88:ba:59:5e:b5:e0:a2:d4:03:36:53: b6:16:c2:ed:03:4b:9c:d8:95:1c:28:ed:f1:c0:14:19:6c:67: 40:01:df:c7:35:b8:7c:01:26:c9:23:9b:e8:d1:84:a1:55:77: cd:2a:9f:36 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzRE RjUwRDA1NTU1MTQ2MThCNzJBQzQ1QjQyQTg1MERBQ0YwRDY0MB4XDTI2MDMzMTA4 NDAwMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRkM4QUNBMDI2NDVERUY5 QUI2QTI5RkU5ODNGMTUyREQ3RTVCQTQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMEtheg4Zf9H02r8zfMMLCetw+Nv3gDt6VhyOS05M3ep/QBfV6CY ytHhfNiiRzffzLyHDzpdh5fip0TeX4UsRQmVMxh/E9TGncOCjQPEqKmWaMXAdc2a JpVoktzQ2gpoXJNu4wackuocPAe3QVq1WkGsWI8oslGapikoKibNE56t40H6bglo a9b6hAqkUzioHoyIA6RKo29AVTQXEO6RoxrHf8EQCc0y9XFzy4upiybXSONMX/OM bUcIOtlxDH3FJJs9ZOQ9JABKtZ0WhJ+zRXXtfjbC2KK5JZ2QbDRTkalTP5PQEfvl tPBY8gIj7u3PJ6MQznnXj1QuTAaRFrJFKPUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBT8isoCZF3vmrain+mD8VLdflukFzAfBgNVHSMEGDAWgBTHTfUNBVVRRhi3KsRb QqhQ2s8NZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODE4L3gwMzFEUVZWVVVZWXR5ckVXMEtvVU5yUERXUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gwMzFEUVZWVVVZWXR5ckVXMEtvVU5y UERXUS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MTgvX0lyS0FtUmQ3NXEyb3BfcGdfRlMzWDVicEJjLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA514wDANBgkqhkiG9w0BAQsFAAOCAQEA B9wZIiy6C7FA2TRop9/llwmKzJV3idKvXtND7MHbyAb/SoJ57JTq28UllJazfuwD lZUvJnUOJxdZ6JDEzlIMfzH308pJ1Hucjjz/Vo/hrF9gdf5QTnWOtrp7shDQ0R7/ pvuTC8OqvLX2P8ELsffXSPL/D3IVZ6nBQiPM6S7nPksurABPZBlbUBcqyC5IpSRx pomlKOW4L4TGBtaf5exjSN/omc8g+YtKRgjRgJlG01nAckzovJMuyezjzcBLLD5I Iv0F3JNVx5r9bzb7Hoi6WV614KLUAzZTthbC7QNLnNiVHCjt8cAUGWxnQAHfxzW4 fAEmySOb6NGEoVV3zSqfNg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:52:51 2026 by rpki-client