$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/OQDobXETcK4Y27q3nGEM2SxJxuk.roa File: OQDobXETcK4Y27q3nGEM2SxJxuk.roa (raw, json) Hash identifier: 45UkmoIgGbFrG4EarcIEl4j4/rZJ2v251I9upO8JGr8= Subject key identifier: 39:00:E8:6D:71:13:70:AE:18:DB:BA:B7:9C:61:0C:D9:2C:49:C6:E9 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 8C Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/OQDobXETcK4Y27q3nGEM2SxJxuk.roa Signing time: Tue 31 Mar 2026 08:37:40 +0000 ROA not before: Tue 31 Mar 2026 08:37:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 202.79.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3900E86D711370AE18DBBAB79C610CD92C49C6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:01:6d:52:88:8c:bb:2c:2e:1c:91:a9:7c:cf: c0:f9:0b:40:df:98:5f:e7:8b:2a:a4:d6:76:00:63: 5c:d7:20:f3:8e:a3:2a:c0:3b:ca:35:b1:e7:21:16: 4a:8b:09:6e:bd:ab:bb:31:ba:9b:16:19:b8:5c:e0: 93:62:e4:55:78:e3:a6:6d:9c:b3:ca:f9:f9:47:83: e4:42:22:b7:df:72:8d:30:c8:a0:59:40:30:96:1a: 7e:2a:2f:21:a1:14:fd:8d:02:a4:da:a0:07:59:fd: 6c:94:d8:0f:28:f4:c4:57:72:4e:d9:f7:fa:2e:8e: 06:fd:06:70:79:04:6e:b6:db:ce:fd:e6:b1:8d:fc: 79:b4:c1:d1:84:ff:a1:e7:27:40:0f:cf:10:e9:d2: 20:bb:39:99:13:df:5e:24:67:41:b8:23:e6:01:df: 5d:f3:5b:2e:44:5a:bf:fd:f1:12:1e:e5:c8:90:21: 47:50:d2:41:6a:92:01:76:30:22:98:85:d3:61:f1: e4:0a:81:91:e2:da:03:6e:c8:f6:63:14:b1:b5:8e: 82:50:ab:8e:ec:d7:4c:53:8e:81:b9:b3:c8:48:a9: 40:56:8d:40:4a:f4:e1:ca:62:53:b4:5e:0b:88:d9: cb:d7:de:12:64:07:09:d7:92:84:18:f9:86:22:20: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:00:E8:6D:71:13:70:AE:18:DB:BA:B7:9C:61:0C:D9:2C:49:C6:E9 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/OQDobXETcK4Y27q3nGEM2SxJxuk.roa sbgp-ipAddrBlock: critical IPv4: 202.79.128.0/19 Signature Algorithm: sha256WithRSAEncryption 1b:a7:bd:22:92:50:c6:55:c5:a9:24:34:ed:a6:91:ed:cb:d3: f2:59:eb:7f:3d:09:88:e1:85:7f:65:20:d2:18:9c:cc:ec:eb: 8d:dd:0f:2e:ad:fa:38:a4:f4:0c:89:d9:c5:e1:6e:13:37:d5: a9:fb:d4:9a:10:2d:58:f9:7c:45:2e:7b:c6:42:8d:9e:6c:d7: c0:f1:3d:80:30:0e:7d:8a:2e:03:cb:83:ec:ff:e0:94:58:4b: 96:45:c6:cb:6d:ea:c9:c5:00:45:05:3a:f5:03:73:fb:f9:50: 6d:f9:28:81:c8:2a:6e:f1:e3:c6:3b:6e:48:5b:d6:83:1a:ce: c7:82:55:94:14:21:59:71:9d:1c:d4:4c:69:02:99:73:25:d4: df:4d:0e:ba:ff:99:87:27:37:c5:94:08:16:95:02:ca:ce:2b: d7:4c:85:dc:91:d9:0e:a8:2e:fe:02:25:7e:ed:e2:84:b5:9e: a9:c5:1b:a7:5d:fc:6f:ca:b8:6f:45:3f:20:4b:77:1e:0d:7f: bb:f9:83:b0:c5:f2:cc:55:9a:a8:94:62:92:5f:6f:cb:43:82: 46:e7:0f:74:ed:4b:6e:b8:ff:69:79:e0:ac:2f:56:06:f6:c5: c3:d1:f0:89:be:e4:ad:49:8a:5e:21:e0:ca:e7:2d:b8:a7:4f: 6a:b7:84:0d -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5MDBFODZENzExMzcw QUUxOERCQkFCNzlDNjEwQ0Q5MkM0OUM2RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgAW1SiIy7LC4ckal8z8D5C0DfmF/niyqk1nYAY1zXIPOOoyrA O8o1sechFkqLCW69q7sxupsWGbhc4JNi5FV446ZtnLPK+flHg+RCIrffco0wyKBZ QDCWGn4qLyGhFP2NAqTaoAdZ/WyU2A8o9MRXck7Z9/oujgb9BnB5BG6228795rGN /Hm0wdGE/6HnJ0APzxDp0iC7OZkT314kZ0G4I+YB313zWy5EWr/98RIe5ciQIUdQ 0kFqkgF2MCKYhdNh8eQKgZHi2gNuyPZjFLG1joJQq47s10xTjoG5s8hIqUBWjUBK 9OHKYlO0XguI2cvX3hJkBwnXkoQY+YYiIMsbAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUOQDobXETcK4Y27q3nGEM2SxJxukwHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9PUURvYlhFVGNLNFkyN3EzbkdFTTJTeEp4dWsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyk+AMA0GCSqGSIb3DQEBCwUA A4IBAQAbp70iklDGVcWpJDTtppHty9PyWet/PQmI4YV/ZSDSGJzM7OuN3Q8urfo4 pPQMidnF4W4TN9Wp+9SaEC1Y+XxFLnvGQo2ebNfA8T2AMA59ii4Dy4Ps/+CUWEuW RcbLberJxQBFBTr1A3P7+VBt+SiByCpu8ePGO25IW9aDGs7HglWUFCFZcZ0c1Exp AplzJdTfTQ66/5mHJzfFlAgWlQLKzivXTIXckdkOqC7+AiV+7eKEtZ6pxRunXfxv yrhvRT8gS3ceDX+7+YOwxfLMVZqolGKSX2/LQ4JG5w907UtuuP9peeCsL1YG9sXD 0fCJvuStSYpeIeDK5y24p09qt4QN -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:26 2026 by rpki-client