$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/966/9zh3u0kvTqJ9TXAAWFENmBLJ6xs.roa File: 9zh3u0kvTqJ9TXAAWFENmBLJ6xs.roa (raw, json) Hash identifier: BgNCiKG1AVzLOb6w0pJUNJ/8121RWAGvaTV9Ue/xJ5Q= Subject key identifier: F7:38:77:BB:49:2F:4E:A2:7D:4D:70:00:58:51:0D:98:12:C9:EB:1B Certificate issuer: /CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5 Certificate serial: 24 Authority key identifier: 0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/9zh3u0kvTqJ9TXAAWFENmBLJ6xs.roa Signing time: Tue 31 Mar 2026 08:38:51 +0000 ROA not before: Tue 31 Mar 2026 08:38:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131921 IP address blocks: 210.158.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5 Validity Not Before: Mar 31 08:38:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F73877BB492F4EA27D4D700058510D9812C9EB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:c0:4a:3e:83:c2:98:eb:b1:64:41:23:3a: ea:94:77:54:1c:fb:39:7a:df:17:10:6c:ff:4c:ce: e2:c9:9d:0a:8d:eb:4f:3f:6e:7e:d4:2b:4e:72:4f: 7e:48:de:fb:7a:48:4e:50:6b:0c:d6:b6:78:d7:38: 8f:21:da:92:4b:1d:53:77:24:1c:13:d9:79:40:1f: c7:2e:b6:6a:11:2d:25:9c:29:de:57:d2:a4:f0:5b: 4e:49:bb:30:e3:c3:df:16:ae:f9:99:33:e4:89:e6: 2b:c8:6c:d7:49:10:57:c8:e4:e9:41:33:db:4d:a8: 9a:32:34:6f:68:41:f2:1b:39:ab:69:22:fc:5a:b0: 88:5c:50:5a:d0:66:05:80:cc:be:dc:20:b6:d5:e3: 7d:64:6a:9f:63:f6:9e:29:94:e8:01:85:a5:89:de: b5:a8:06:aa:3d:6a:e8:8e:29:50:11:54:3d:48:45: 95:df:fd:f8:3f:78:f4:cd:63:72:9a:a0:e9:10:dd: bc:b5:82:d6:8d:55:2f:56:08:e5:87:88:9b:4c:cd: 0a:18:92:cc:38:d6:b8:98:8a:89:72:e8:db:d8:99: be:83:4b:8e:6d:8b:20:ce:36:fb:cb:b3:de:f8:74: d2:c8:59:ce:8d:79:bb:9c:18:51:e1:7a:52:45:8c: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:77:BB:49:2F:4E:A2:7D:4D:70:00:58:51:0D:98:12:C9:EB:1B X509v3 Authority Key Identifier: keyid:0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/9zh3u0kvTqJ9TXAAWFENmBLJ6xs.roa sbgp-ipAddrBlock: critical IPv4: 210.158.32.0/20 Signature Algorithm: sha256WithRSAEncryption 39:e0:50:d7:d2:19:74:cb:dd:07:0e:cf:16:60:42:ba:8c:8d: 69:46:3b:f9:55:c6:3e:a7:0e:e9:5d:36:42:b5:10:e7:52:f2: 64:63:aa:7d:c8:58:d9:75:4c:23:41:e7:bf:09:c6:43:6a:86: 03:1a:48:fa:4f:05:02:1e:1e:49:57:0e:8d:b4:d3:93:f4:fa: e0:08:05:c2:e8:91:0c:0c:fc:ba:fc:f5:5c:bc:9b:de:c4:81: 5f:3e:24:71:79:9f:45:96:30:97:f2:6e:4e:50:3c:c3:df:64: 6a:02:8e:34:8b:e2:52:fd:cb:5a:95:3d:62:bb:95:6a:51:72: 03:cd:d3:4f:1b:82:bb:1b:17:cd:3f:e7:bd:fa:44:8e:b3:8a: 26:13:d6:9d:0f:49:6c:0a:94:e6:33:f0:9f:05:d9:c7:ab:e5: d6:77:93:52:be:70:c4:3e:0b:9d:c0:02:bf:bd:e8:f8:d4:64: aa:e1:d2:c8:c2:24:ec:d9:1e:e0:8e:27:a5:4d:11:16:e8:48: 3e:ad:87:10:9f:96:9d:3b:88:d8:60:fe:03:8c:3b:5c:02:d8: ce:2a:96:7a:06:b5:2d:99:8e:32:69:7a:56:9c:f9:8a:33:f5: fa:fb:4a:5d:b7:be:60:42:e9:33:4d:27:e4:6c:0e:7b:06:84: 57:8e:b3:56 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDI2 NkRCODRGREM2OUIzNDJDMjdBRjExNjhFRjg3QTk1QTA3MEY1MB4XDTI2MDMzMTA4 Mzg1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjczODc3QkI0OTJGNEVB MjdENEQ3MDAwNTg1MTBEOTgxMkM5RUIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOQqwEo+g8KY67FkQSM66pR3VBz7OXrfFxBs/0zO4smdCo3rTz9u ftQrTnJPfkje+3pITlBrDNa2eNc4jyHakksdU3ckHBPZeUAfxy62ahEtJZwp3lfS pPBbTkm7MOPD3xau+Zkz5InmK8hs10kQV8jk6UEz202omjI0b2hB8hs5q2ki/Fqw iFxQWtBmBYDMvtwgttXjfWRqn2P2nimU6AGFpYnetagGqj1q6I4pUBFUPUhFld/9 +D949M1jcpqg6RDdvLWC1o1VL1YI5YeIm0zNChiSzDjWuJiKiXLo29iZvoNLjm2L IM42+8uz3vh00shZzo15u5wYUeF6UkWMbPUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBT3OHe7SS9Oon1NcABYUQ2YEsnrGzAfBgNVHSMEGDAWgBQNJm24T9xps0LCevEW jvh6laBw9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY2L0RTWnR1RV9jYWJOQ3ducnhGbzc0ZXBXZ2NQVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RTWnR1RV9jYWJOQ3ducnhGbzc0ZXBX Z2NQVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NjYvOXpoM3Uwa3ZUcUo5VFhBQVdGRU5tQkxKNnhzLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNKeIDANBgkqhkiG9w0BAQsFAAOCAQEA OeBQ19IZdMvdBw7PFmBCuoyNaUY7+VXGPqcO6V02QrUQ51LyZGOqfchY2XVMI0Hn vwnGQ2qGAxpI+k8FAh4eSVcOjbTTk/T64AgFwuiRDAz8uvz1XLyb3sSBXz4kcXmf RZYwl/JuTlA8w99kagKONIviUv3LWpU9YruValFyA83TTxuCuxsXzT/nvfpEjrOK JhPWnQ9JbAqU5jPwnwXZx6vl1neTUr5wxD4LncACv73o+NRkquHSyMIk7Nke4I4n pU0RFuhIPq2HEJ+WnTuI2GD+A4w7XALYziqWega1LZmOMml6Vpz5ijP1+vtKXbe+ YELpM00n5GwOewaEV46zVg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:43 2026 by rpki-client