$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/OPK-WNvdXeeEV06l96LIAbN5IWQ.roa File: OPK-WNvdXeeEV06l96LIAbN5IWQ.roa (raw, json) Hash identifier: gUfg6UprOFEeoAtJjGcLP+e7AECbO8aiZeOZ5eqCv8s= Subject key identifier: 38:F2:BE:58:DB:DD:5D:E7:84:57:4E:A5:F7:A2:C8:01:B3:79:21:64 Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Certificate serial: 0102 Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/OPK-WNvdXeeEV06l96LIAbN5IWQ.roa Signing time: Tue 31 Mar 2026 07:39:11 +0000 ROA not before: Tue 31 Mar 2026 07:39:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2518 IP address blocks: 219.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4 Validity Not Before: Mar 31 07:39:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=38F2BE58DBDD5DE784574EA5F7A2C801B3792164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:59:88:1e:5a:82:18:ae:c8:db:fd:a7:df: aa:c7:38:91:c9:9c:45:36:52:4f:e5:aa:49:8b:18: ac:1d:40:0c:4f:01:4c:47:8f:f7:f4:c9:20:a4:a8: b0:76:d6:ad:06:c9:1e:61:6b:c2:a1:b1:67:d2:36: 1d:d8:e4:3a:ef:0e:bf:f9:d2:66:68:c5:6e:1d:23: 66:8c:f4:1d:21:96:0e:ba:54:fe:c1:4f:46:5c:57: 6c:da:50:a5:53:77:6d:af:e6:4d:ff:f3:69:bd:84: b2:54:55:0b:e9:9c:06:81:e9:21:c6:83:9f:e6:62: 88:b0:ec:b7:1c:78:b2:52:24:f1:e0:89:4b:fe:3a: 67:4f:b7:2e:e5:c0:1a:15:5f:c0:94:f7:ae:24:eb: 3f:17:2f:2d:60:93:20:83:27:f3:24:95:41:6d:34: a8:83:ca:1e:2d:91:18:1f:38:55:f4:21:a9:52:f2: cc:b2:08:d7:2b:e3:09:7a:20:77:3b:f8:0e:c4:41: e0:44:d9:31:b1:e1:02:23:84:10:11:e6:1a:5b:ae: 5d:8b:33:49:61:1d:6c:22:b9:69:6d:50:2e:4e:df: b5:4d:22:02:c4:4d:ea:98:9d:46:52:43:da:7d:b7: b3:7d:32:06:0b:27:39:62:50:4e:fd:30:ac:fb:b4: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F2:BE:58:DB:DD:5D:E7:84:57:4E:A5:F7:A2:C8:01:B3:79:21:64 X509v3 Authority Key Identifier: keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/OPK-WNvdXeeEV06l96LIAbN5IWQ.roa sbgp-ipAddrBlock: critical IPv4: 219.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:89:9c:65:f2:08:6d:76:ea:52:63:e9:a9:31:68:6d:b1:27: ab:e3:da:f4:49:2e:c4:6f:16:15:a6:f2:bd:22:17:3c:04:8a: 52:23:92:32:b8:93:a3:39:50:f8:57:eb:32:f7:4e:c8:dc:41: bf:0a:ef:d1:77:cb:5b:64:9c:94:76:eb:68:f7:71:60:a7:e0: 02:c5:99:8c:0e:c6:aa:83:11:69:c4:e9:b2:8f:c8:88:b7:72: 46:47:5d:79:9c:79:4f:ef:a2:c3:4e:24:e9:af:b9:4f:16:11: 77:9a:e5:1a:24:3b:0b:84:6f:04:d9:4a:5b:2e:98:25:29:b1: 0c:ab:da:fa:b8:92:88:88:5b:91:3e:75:50:00:76:2d:98:ef: ee:06:4a:6e:bc:34:b8:08:5e:7a:4a:4f:cd:46:9c:45:cb:d9: d8:d1:19:4d:e2:86:0f:60:10:d0:ed:dd:62:49:1b:68:22:a9: bc:ba:fb:c9:2c:61:11:8d:3b:78:25:58:10:f3:8d:bc:da:29: 80:34:c9:b4:26:6e:18:71:53:b8:90:ec:bd:32:5b:22:ed:55: 65:7c:03:70:a2:74:d7:6f:83:c4:50:81:51:37:69:cb:fd:87: 97:2c:e6:d4:b5:ae:c1:2f:20:ba:a1:b7:44:97:6a:bc:dd:3e: fa:d1:83:42 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2 MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNjAzMzEw NzM5MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4RjJCRTU4REJERDVE RTc4NDU3NEVBNUY3QTJDODAxQjM3OTIxNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWWFmIHlqCGK7I2/2n36rHOJHJnEU2Uk/lqkmLGKwdQAxPAUxH j/f0ySCkqLB21q0GyR5ha8KhsWfSNh3Y5DrvDr/50mZoxW4dI2aM9B0hlg66VP7B T0ZcV2zaUKVTd22v5k3/82m9hLJUVQvpnAaB6SHGg5/mYoiw7LcceLJSJPHgiUv+ OmdPty7lwBoVX8CU964k6z8XLy1gkyCDJ/MklUFtNKiDyh4tkRgfOFX0IalS8syy CNcr4wl6IHc7+A7EQeBE2TGx4QIjhBAR5hpbrl2LM0lhHWwiuWltUC5O37VNIgLE TeqYnUZSQ9p9t7N9MgYLJzliUE79MKz7tNH5AgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUOPK+WNvdXeeEV06l96LIAbN5IWQwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3 LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvOTM5L09QSy1XTnZkWGVlRVYwNmw5NkxJQWJONUlXUS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDbazANBgkqhkiG9w0BAQsFAAOCAQEA n4mcZfIIbXbqUmPpqTFobbEnq+Pa9EkuxG8WFabyvSIXPASKUiOSMriTozlQ+Ffr MvdOyNxBvwrv0XfLW2SclHbraPdxYKfgAsWZjA7GqoMRacTpso/IiLdyRkddeZx5 T++iw04k6a+5TxYRd5rlGiQ7C4RvBNlKWy6YJSmxDKva+riSiIhbkT51UAB2LZjv 7gZKbrw0uAheekpPzUacRcvZ2NEZTeKGD2AQ0O3dYkkbaCKpvLr7ySxhEY07eCVY EPONvNopgDTJtCZuGHFTuJDsvTJbIu1VZXwDcKJ012+DxFCBUTdpy/2Hlyzm1LWu wS8guqG3RJdqvN0++tGDQg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:11:33 2026 by rpki-client