$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/qnPJ6uwJPnO4ozIz5F_heD6UUq4.roa File: qnPJ6uwJPnO4ozIz5F_heD6UUq4.roa (raw, json) Hash identifier: /eXnxVUFr73LioUjRUR85qmTaSfBezNEoooDc/bjfwo= Subject key identifier: AA:73:C9:EA:EC:09:3E:73:B8:A3:32:33:E4:5F:E1:78:3E:94:52:AE Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: AA Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qnPJ6uwJPnO4ozIz5F_heD6UUq4.roa Signing time: Tue 31 Mar 2026 07:38:50 +0000 ROA not before: Tue 31 Mar 2026 07:38:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9621 IP address blocks: 218.40.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Mar 31 07:38:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AA73C9EAEC093E73B8A33233E45FE1783E9452AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:42:fe:f3:a3:28:86:41:c8:bd:eb:d1:3e: a0:8e:10:c3:ad:d5:f0:45:3f:ae:d4:7a:9e:c3:82: 92:16:54:1a:68:71:93:c0:45:54:94:b6:4c:f6:02: bb:ef:27:32:a6:eb:5f:5a:7a:88:91:40:76:4b:f7: 5e:4f:46:09:68:44:2f:1e:44:76:e0:e1:57:c8:32: 7c:0a:55:b5:95:d5:c4:72:40:66:cd:ca:32:04:48: 74:1a:80:f5:0b:60:86:9f:79:d2:f3:71:af:30:8a: 73:db:d3:d6:2b:23:df:45:97:1e:b6:af:99:1a:e8: 4d:c6:0b:39:90:e7:0a:2a:51:1a:6e:37:3d:8c:33: 29:3a:87:b8:35:9e:58:7d:c3:f0:31:e9:c5:23:52: c9:7e:61:e6:c4:eb:55:44:4c:35:84:bd:bb:bd:44: 0b:a2:3b:10:45:f4:32:40:28:27:aa:1e:17:de:b4: 4d:c9:ba:b7:ed:55:77:ef:8e:f5:71:1a:43:9f:bc: a3:b4:18:6e:51:55:32:ed:39:c1:e4:1a:44:0f:b9: 9e:6c:00:2c:02:35:52:ac:14:96:de:7e:64:a5:01: d0:2e:c2:c3:f6:82:fb:2c:d4:d9:98:2f:b2:95:ca: 35:5a:27:0b:54:fb:98:c0:eb:d5:39:ee:5f:8f:8f: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:C9:EA:EC:09:3E:73:B8:A3:32:33:E4:5F:E1:78:3E:94:52:AE X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qnPJ6uwJPnO4ozIz5F_heD6UUq4.roa sbgp-ipAddrBlock: critical IPv4: 218.40.176.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:0e:7c:64:53:30:f4:a8:8f:62:db:45:42:e4:e0:64:a6:77: d4:ad:86:40:6a:8d:89:85:2e:f9:7a:dc:e6:b2:26:a6:1c:65: f4:17:2c:d6:a7:2c:02:70:37:90:d7:aa:14:b6:2f:26:07:ed: 9e:25:30:a1:bb:af:37:33:8b:d0:82:a3:3f:e7:ae:d2:26:b3: a4:38:4d:29:20:38:ab:61:02:e4:78:74:a1:8a:e8:8f:3b:03: 2b:25:72:e0:e3:c2:74:bb:d1:f9:dc:12:5e:1a:ea:5a:bc:c2: 5d:5a:a4:4c:9c:61:02:24:f0:47:9c:10:8d:c5:88:51:ea:e5: 7f:a1:a3:c6:48:89:f8:78:e3:34:2f:47:13:55:15:5f:89:1a: d5:0b:7c:4d:cc:b3:7f:4a:5e:e8:07:fc:3a:01:89:6b:d0:f8: 47:b6:e9:c3:af:6a:ee:9b:0e:b5:35:17:bb:0c:0c:53:86:58: b7:57:01:81:d3:ac:06:c5:72:45:82:ab:00:1f:e1:45:ed:67: b3:75:34:3f:60:98:99:55:4a:7f:6a:32:d9:d9:6b:5a:1c:a7: 7b:77:d8:24:a4:81:8f:82:08:d1:73:15:ff:b7:46:81:f8:52: 47:a4:c5:a0:39:b4:b7:d5:5b:3f:3b:9a:11:45:57:ed:fa:a8: f2:e4:dc:7b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNjAzMzEw NzM4NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBNzNDOUVBRUMwOTNF NzNCOEEzMzIzM0U0NUZFMTc4M0U5NDUyQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChNUL+86MohkHIvevRPqCOEMOt1fBFP67Uep7DgpIWVBpocZPA RVSUtkz2ArvvJzKm619aeoiRQHZL915PRgloRC8eRHbg4VfIMnwKVbWV1cRyQGbN yjIESHQagPULYIafedLzca8winPb09YrI99Flx62r5ka6E3GCzmQ5woqURpuNz2M Myk6h7g1nlh9w/Ax6cUjUsl+YebE61VETDWEvbu9RAuiOxBF9DJAKCeqHhfetE3J urftVXfvjvVxGkOfvKO0GG5RVTLtOcHkGkQPuZ5sACwCNVKsFJbefmSlAdAuwsP2 gvss1NmYL7KVyjVaJwtU+5jA69U57l+Pj4CNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUqnPJ6uwJPnO4ozIz5F/heD6UUq4wHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk 5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4 UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvODk3L3FuUEo2dXdKUG5PNG96SXo1Rl9oZUQ2VVVxNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATaKLAwDQYJKoZIhvcNAQELBQADggEB ABwOfGRTMPSoj2LbRULk4GSmd9SthkBqjYmFLvl63OayJqYcZfQXLNanLAJwN5DX qhS2LyYH7Z4lMKG7rzczi9CCoz/nrtIms6Q4TSkgOKthAuR4dKGK6I87AyslcuDj wnS70fncEl4a6lq8wl1apEycYQIk8EecEI3FiFHq5X+ho8ZIifh44zQvRxNVFV+J GtULfE3Ms39KXugH/DoBiWvQ+Ee26cOvau6bDrU1F7sMDFOGWLdXAYHTrAbFckWC qwAf4UXtZ7N1ND9gmJlVSn9qMtnZa1ocp3t32CSkgY+CCNFzFf+3RoH4UkekxaA5 tLfVWz87mhFFV+36qPLk3Hs= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:37 2026 by rpki-client