$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/IMGmVOXBNDCw5YrIAAqSuN_bobI.roa File: IMGmVOXBNDCw5YrIAAqSuN_bobI.roa (raw, json) Hash identifier: OGR2WeJJfjyTPtMI2CiYKaiLFHHr9zF+Y8A/KXnuD0Q= Subject key identifier: 20:C1:A6:54:E5:C1:34:30:B0:E5:8A:C8:00:0A:92:B8:DF:DB:A1:B2 Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 7B Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/IMGmVOXBNDCw5YrIAAqSuN_bobI.roa Signing time: Tue 31 Mar 2026 07:32:49 +0000 ROA not before: Tue 31 Mar 2026 07:32:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23818 IP address blocks: 122.200.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 31 07:32:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=20C1A654E5C13430B0E58AC8000A92B8DFDBA1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:2c:89:4c:d9:90:e7:97:eb:7f:b4:ac:22: 6b:c8:eb:b5:c2:75:89:81:fc:0a:69:45:e5:c1:d0: a3:ea:31:f8:09:8c:71:0b:97:93:49:9f:3b:5d:a8: f1:e7:3c:9d:54:d8:d0:41:d3:e8:c6:e9:3c:c7:ef: e8:12:e5:d3:1f:76:60:fa:ac:82:78:bc:95:2f:20: 1b:4e:eb:12:bc:62:70:e2:2c:7f:e0:ae:83:02:1b: a3:cd:df:c0:32:6d:71:75:e4:c2:2e:43:8b:28:58: e6:36:63:f2:7f:45:64:83:a8:6b:83:45:fe:68:89: e1:07:61:68:14:d8:48:95:e4:28:72:97:ab:71:3a: 80:fa:1a:83:37:a2:ac:49:87:b1:26:10:6d:c1:7d: 35:36:16:a4:1a:e2:34:df:4f:85:71:cc:70:4e:7f: 17:1a:f4:9b:12:9d:3f:ad:45:6a:25:6a:c4:74:2a: 80:0e:0a:49:ab:ae:59:fc:9b:f4:ba:a9:db:c8:2f: b0:a7:3d:d5:6d:8c:78:4f:dd:a3:3a:e6:fa:b8:5d: 6f:2b:0f:34:17:46:f3:90:17:93:48:75:68:50:6a: 58:86:13:36:cd:1a:b8:1d:da:f0:48:5d:24:57:77: f6:63:d1:e7:3b:35:9d:15:02:bd:7c:ce:b4:f4:9a: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C1:A6:54:E5:C1:34:30:B0:E5:8A:C8:00:0A:92:B8:DF:DB:A1:B2 X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/IMGmVOXBNDCw5YrIAAqSuN_bobI.roa sbgp-ipAddrBlock: critical IPv4: 122.200.128.0/22 Signature Algorithm: sha256WithRSAEncryption 99:f6:c8:1e:60:23:00:28:fc:79:68:c3:ba:2e:72:37:c6:bd: 74:aa:e6:c3:ae:6b:67:7b:83:ee:27:56:1b:0a:00:98:53:6e: b2:df:db:1f:a1:df:d1:c7:02:66:a0:46:62:5b:3c:ae:1d:a2: 1e:b2:25:05:13:05:46:60:44:13:1b:e5:33:71:c3:0b:e8:19: bd:df:5e:f4:29:3a:ad:5b:01:bc:1f:24:e3:ac:eb:66:cb:fc: 91:49:84:c2:85:06:88:c9:43:69:fb:07:96:41:e6:a3:d9:b5: 6d:88:00:2b:ac:3a:65:75:dd:81:ea:94:f0:43:43:c1:0e:6f: 19:a1:b2:3e:48:b2:11:bc:4e:b8:39:e5:bf:cd:6e:c3:f3:e8: ba:97:c4:51:e0:70:44:57:4a:76:e7:07:8e:49:b4:47:32:c7: a0:68:00:4e:c4:b1:87:3f:c5:b0:fd:a2:e3:cc:f1:e5:0a:3e: 58:8b:ff:c1:4e:a0:e4:4e:be:ae:48:8e:06:ef:cf:d8:2b:e3: 59:f5:e9:79:76:ff:96:71:15:a4:78:0e:10:d7:56:e9:d6:06: b9:ec:d5:4e:6c:c1:1d:a5:db:47:d3:33:83:16:2e:b8:97:66: 24:26:93:ef:37:8c:5b:31:d2:3f:b9:7c:3d:11:48:6e:49:e9: b0:4c:60:d2 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI2MDMzMTA3 MzI0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjBDMUE2NTRFNUMxMzQz MEIwRTU4QUM4MDAwQTkyQjhERkRCQTFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANn9LIlM2ZDnl+t/tKwia8jrtcJ1iYH8CmlF5cHQo+ox+AmMcQuX k0mfO12o8ec8nVTY0EHT6MbpPMfv6BLl0x92YPqsgni8lS8gG07rErxicOIsf+Cu gwIbo83fwDJtcXXkwi5DiyhY5jZj8n9FZIOoa4NF/miJ4QdhaBTYSJXkKHKXq3E6 gPoagzeirEmHsSYQbcF9NTYWpBriNN9PhXHMcE5/Fxr0mxKdP61FaiVqxHQqgA4K SauuWfyb9Lqp28gvsKc91W2MeE/dozrm+rhdbysPNBdG85AXk0h1aFBqWIYTNs0a uB3a8EhdJFd39mPR5zs1nRUCvXzOtPSaLNkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQgwaZU5cE0MLDlisgACpK439uhsjAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84ODMvSU1HbVZPWEJOREN3NVlySUFBcVN1Tl9ib2JJLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnrIgDANBgkqhkiG9w0BAQsFAAOCAQEA mfbIHmAjACj8eWjDui5yN8a9dKrmw65rZ3uD7idWGwoAmFNust/bH6Hf0ccCZqBG Yls8rh2iHrIlBRMFRmBEExvlM3HDC+gZvd9e9Ck6rVsBvB8k46zrZsv8kUmEwoUG iMlDafsHlkHmo9m1bYgAK6w6ZXXdgeqU8ENDwQ5vGaGyPkiyEbxOuDnlv81uw/Po upfEUeBwRFdKducHjkm0RzLHoGgATsSxhz/FsP2i48zx5Qo+WIv/wU6g5E6+rkiO Bu/P2CvjWfXpeXb/lnEVpHgOENdW6dYGuezVTmzBHaXbR9MzgxYuuJdmJCaT7zeM WzHSP7l8PRFIbknpsExg0g== -----END CERTIFICATE-----Generated at Fri Apr 17 13:29:06 2026 by rpki-client