$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/qOcH8fyTKv9kv3EvSQn0oIEpfVE.roa File: qOcH8fyTKv9kv3EvSQn0oIEpfVE.roa (raw, json) Hash identifier: ayK06PvnVas4KZda97b1L9OWDdYBKckvoZqnKWpXT1U= Subject key identifier: A8:E7:07:F1:FC:93:2A:FF:64:BF:71:2F:49:09:F4:A0:81:29:7D:51 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 82 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/qOcH8fyTKv9kv3EvSQn0oIEpfVE.roa Signing time: Tue 31 Mar 2026 08:37:36 +0000 ROA not before: Tue 31 Mar 2026 08:37:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 103.1.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A8E707F1FC932AFF64BF712F4909F4A081297D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:89:6c:ac:63:79:83:ea:85:b4:cc:47:56:4a: 83:70:d3:1c:d4:0e:e7:f0:17:3f:c4:e6:56:db:3d: 4a:d9:5f:6a:8b:1b:93:a0:3c:9a:8c:48:b6:35:45: cc:90:83:b0:bb:76:55:b4:85:14:21:b1:b0:e7:45: 74:eb:07:c2:77:97:6e:87:b9:91:e6:dc:da:e5:56: 90:b2:36:b6:3e:94:2d:94:c3:29:a2:e8:8e:4e:31: 46:af:e1:d4:52:a3:cd:58:8d:c6:c7:02:7c:62:c9: 31:75:4d:d2:75:af:1c:99:1b:49:a8:aa:4b:68:62: b8:93:5b:ad:3a:eb:ec:de:dc:84:a6:24:98:22:27: 7d:af:8a:5f:2e:58:c4:14:7f:34:36:ab:33:0b:b2: 08:de:d2:8d:d2:32:2e:4f:6b:31:97:d1:f3:19:e2: b8:02:d9:e7:a1:a8:24:79:25:55:f6:5f:a0:4d:d5: 75:05:2d:a6:41:42:08:59:b9:12:c7:3c:d7:d8:ad: 7b:67:1b:6b:a8:74:bd:ba:2f:fb:17:18:78:19:7c: 2a:a0:89:ca:81:8a:09:d2:05:d5:cf:5e:e4:47:0d: d4:d5:e3:07:1a:64:46:84:02:44:35:c0:4d:53:31: ec:08:fe:c2:72:ba:2b:e0:f0:b1:ba:d7:2d:97:0f: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E7:07:F1:FC:93:2A:FF:64:BF:71:2F:49:09:F4:A0:81:29:7D:51 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/qOcH8fyTKv9kv3EvSQn0oIEpfVE.roa sbgp-ipAddrBlock: critical IPv4: 103.1.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:94:4a:82:f1:b2:83:ae:c6:e7:13:a1:1a:ba:bf:44:02:b1: ac:1d:db:a3:00:68:56:de:d6:4a:ff:7b:ac:b6:20:c6:c2:ba: b3:54:3c:ce:8c:94:ba:11:44:39:51:8a:50:e7:b3:6e:27:00: f5:61:4f:11:95:7a:04:cb:a7:7c:60:9b:ce:52:8a:44:f3:52: 50:3b:d6:99:11:e2:53:45:45:98:f7:d6:09:42:64:2b:68:21: 13:cc:89:60:7d:21:d6:83:ce:bd:1d:d9:c4:97:c3:b5:df:a5: 13:25:ab:1e:b6:7a:a1:f9:a7:dd:8a:b0:4e:53:a9:6f:3c:67: 00:08:09:78:9f:98:fa:c5:af:c6:06:1a:8d:44:b6:37:1a:33: a6:94:1d:c6:35:0e:47:77:10:38:6a:62:4a:bb:44:91:2d:4b: 44:df:2a:7f:70:5e:94:06:53:65:76:d5:e6:43:e6:bf:68:98: 43:97:6a:0a:b9:d7:d4:bc:ce:ea:47:1f:2e:8a:30:77:4c:a3: f4:de:9d:f8:5c:8f:42:b7:3a:ea:8b:07:5b:46:b6:3d:b6:24: 58:b4:2e:fc:86:11:22:45:7c:43:c4:8b:1c:88:a2:ae:40:7f: bd:7a:19:2e:62:f4:87:67:ab:44:a7:31:e6:a2:af:3d:ab:28: f1:d8:f8:22 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4RTcwN0YxRkM5MzJB RkY2NEJGNzEyRjQ5MDlGNEEwODEyOTdENTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoiWysY3mD6oW0zEdWSoNw0xzUDufwFz/E5lbbPUrZX2qLG5Og PJqMSLY1RcyQg7C7dlW0hRQhsbDnRXTrB8J3l26HuZHm3NrlVpCyNrY+lC2Uwymi 6I5OMUav4dRSo81YjcbHAnxiyTF1TdJ1rxyZG0moqktoYriTW6066+ze3ISmJJgi J32vil8uWMQUfzQ2qzMLsgje0o3SMi5PazGX0fMZ4rgC2eehqCR5JVX2X6BN1XUF LaZBQghZuRLHPNfYrXtnG2uodL26L/sXGHgZfCqgicqBignSBdXPXuRHDdTV4wca ZEaEAkQ1wE1TMewI/sJyuivg8LG61y2XD21TAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUqOcH8fyTKv9kv3EvSQn0oIEpfVEwHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9xT2NIOGZ5VEt2OWt2M0V2U1FuMG9JRXBmVkUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZwH0MA0GCSqGSIb3DQEBCwUA A4IBAQAflEqC8bKDrsbnE6Eaur9EArGsHdujAGhW3tZK/3ustiDGwrqzVDzOjJS6 EUQ5UYpQ57NuJwD1YU8RlXoEy6d8YJvOUopE81JQO9aZEeJTRUWY99YJQmQraCET zIlgfSHWg869HdnEl8O136UTJasetnqh+afdirBOU6lvPGcACAl4n5j6xa/GBhqN RLY3GjOmlB3GNQ5HdxA4amJKu0SRLUtE3yp/cF6UBlNldtXmQ+a/aJhDl2oKudfU vM7qRx8uijB3TKP03p34XI9CtzrqiwdbRrY9tiRYtC78hhEiRXxDxIsciKKuQH+9 ehkuYvSHZ6tEpzHmoq89qyjx2Pgi -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:30 2026 by rpki-client