$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/PZc8sJku_maF2sPHJ-GHMpD_A8w.roa File: PZc8sJku_maF2sPHJ-GHMpD_A8w.roa (raw, json) Hash identifier: q8U1faITo3YrJE1DUSYaZLSM+vmrSoYmpOyrgBV9htQ= Subject key identifier: 3D:97:3C:B0:99:2E:FE:66:85:DA:C3:C7:27:E1:87:32:90:FF:03:CC Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 6B Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/PZc8sJku_maF2sPHJ-GHMpD_A8w.roa Signing time: Tue 31 Mar 2026 07:38:55 +0000 ROA not before: Tue 31 Mar 2026 07:38:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9621 IP address blocks: 157.120.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Mar 31 07:38:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3D973CB0992EFE6685DAC3C727E1873290FF03CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:89:b8:2d:bf:64:be:47:f1:ec:2b:c0:92: b6:99:92:61:57:60:12:77:74:da:11:a9:41:12:3a: 55:f1:3a:68:90:b0:ab:3f:84:b7:04:27:68:a9:be: b7:82:88:15:bf:c8:1d:bf:f2:06:10:53:2d:37:c5: bb:47:64:f2:c0:b3:f8:6f:4f:7c:77:00:6f:2d:1f: c2:95:6d:c3:32:8a:c9:01:c7:5b:9c:9a:4b:12:78: e8:82:8d:74:50:fb:29:66:5e:9c:03:65:51:8b:d8: f6:a0:5d:d4:5f:03:4c:7f:61:b8:0a:4c:a1:b5:6d: 3d:2b:13:3d:22:90:2c:02:21:18:83:05:8b:22:03: 9c:58:eb:b0:09:c0:06:18:74:b3:c0:bb:ca:03:0c: 73:d4:3a:c0:6d:2f:d1:fe:96:a6:3d:82:e8:8f:76: 53:6f:ec:23:e6:91:bb:af:dc:8c:3b:75:c2:21:2f: 8e:b9:0e:d1:19:e9:fb:54:79:7d:d8:e5:f7:e1:c1: f1:55:9b:3b:dd:68:a3:e6:2c:4c:41:34:c2:1d:bb: 7f:86:98:f0:7f:02:11:ba:44:18:bd:5a:2a:fd:1a: 69:0d:17:61:c2:91:4b:c9:15:7c:32:ce:0e:34:83: 20:07:9f:ef:91:21:7e:7d:40:2d:7c:6f:66:11:0d: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:3C:B0:99:2E:FE:66:85:DA:C3:C7:27:E1:87:32:90:FF:03:CC X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/PZc8sJku_maF2sPHJ-GHMpD_A8w.roa sbgp-ipAddrBlock: critical IPv4: 157.120.96.0/20 Signature Algorithm: sha256WithRSAEncryption 77:af:c9:a1:8f:15:29:6c:2a:95:7b:35:2e:31:ac:ef:87:38: fd:47:da:5b:f9:57:71:f1:96:0c:e0:d7:e9:99:1a:bf:a3:a9: a3:df:48:21:0a:80:84:86:3a:b1:32:73:1c:70:33:44:0a:19: ca:10:af:22:c6:50:bc:d0:c9:56:f1:a3:ba:32:9a:b3:d7:d1: 96:73:10:72:09:9e:40:68:c5:ed:13:b7:1a:e7:33:2e:a6:cf: 04:c4:b2:4f:2a:9c:e1:81:51:fc:03:6f:c9:3b:06:67:5e:ec: 27:d3:75:d2:0e:31:10:cc:e3:51:df:cd:81:ee:e6:a3:40:25: 8b:7e:aa:db:a0:bb:a1:9d:7a:bf:3a:41:55:46:d7:f3:de:fe: b4:f3:32:a8:f0:3a:bf:77:93:e2:0f:d1:65:3e:fa:62:b9:8a: 8b:a4:82:9b:d1:6f:1c:04:3d:3c:4c:c0:0b:a3:eb:aa:4d:a7: 14:2f:92:82:0a:d4:8c:d4:86:b9:91:cb:82:26:1d:c1:af:68: 83:1d:ac:d2:fc:77:34:6d:9f:b0:05:5d:3d:74:dd:75:1f:85: 5e:a6:53:50:a9:2a:b5:46:07:3e:f9:e2:1e:86:bd:8d:b5:fb: 32:9c:fd:23:4c:d6:80:3e:de:e0:b1:01:47:94:a5:0a:5b:a5: 22:33:f4:5b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI2MDMzMTA3 Mzg1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0Q5NzNDQjA5OTJFRkU2 Njg1REFDM0M3MjdFMTg3MzI5MEZGMDNDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANLOibgtv2S+R/HsK8CStpmSYVdgEnd02hGpQRI6VfE6aJCwqz+E twQnaKm+t4KIFb/IHb/yBhBTLTfFu0dk8sCz+G9PfHcAby0fwpVtwzKKyQHHW5ya SxJ46IKNdFD7KWZenANlUYvY9qBd1F8DTH9huApMobVtPSsTPSKQLAIhGIMFiyID nFjrsAnABhh0s8C7ygMMc9Q6wG0v0f6Wpj2C6I92U2/sI+aRu6/cjDt1wiEvjrkO 0Rnp+1R5fdjl9+HB8VWbO91oo+YsTEE0wh27f4aY8H8CEbpEGL1aKv0aaQ0XYcKR S8kVfDLODjSDIAef75Ehfn1ALXxvZhENnrcCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQ9lzywmS7+ZoXaw8cn4YcykP8DzDAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84OTcvUFpjOHNKa3VfbWFGMnNQSEotR0hNcERfQTh3LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJ14YDANBgkqhkiG9w0BAQsFAAOCAQEA d6/JoY8VKWwqlXs1LjGs74c4/UfaW/lXcfGWDODX6Zkav6Opo99IIQqAhIY6sTJz HHAzRAoZyhCvIsZQvNDJVvGjujKas9fRlnMQcgmeQGjF7RO3GuczLqbPBMSyTyqc 4YFR/ANvyTsGZ17sJ9N10g4xEMzjUd/Nge7mo0Ali36q26C7oZ16vzpBVUbX897+ tPMyqPA6v3eT4g/RZT76YrmKi6SCm9FvHAQ9PEzAC6Prqk2nFC+SggrUjNSGuZHL giYdwa9ogx2s0vx3NG2fsAVdPXTddR+FXqZTUKkqtUYHPvniHoa9jbX7Mpz9I0zW gD7e4LEBR5SlClulIjP0Ww== -----END CERTIFICATE-----Generated at Fri Apr 17 13:28:01 2026 by rpki-client