$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1085/tnfEARB30doGw0BKiqbzLD4qaMo.roa File: tnfEARB30doGw0BKiqbzLD4qaMo.roa (raw, json) Hash identifier: H3W8Ax4Z9/O0zdCwZPwAVn+bBvuJX54Ws254FZBqlEU= Subject key identifier: B6:77:C4:01:10:77:D1:DA:06:C3:40:4A:8A:A6:F3:2C:3E:2A:68:CA Certificate issuer: /CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320 Certificate serial: 37 Authority key identifier: 0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/tnfEARB30doGw0BKiqbzLD4qaMo.roa Signing time: Tue 31 Mar 2026 08:25:23 +0000 ROA not before: Tue 31 Mar 2026 08:25:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 0 IP address blocks: 202.255.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320 Validity Not Before: Mar 31 08:25:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B677C4011077D1DA06C3404A8AA6F32C3E2A68CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:4c:c5:9b:c0:1a:88:dd:67:a5:e5:fe:25: c5:4e:b3:b4:11:bb:c8:81:97:af:2c:2b:e3:38:56: 58:0c:9d:5d:84:52:af:d2:25:4b:47:da:47:dc:bf: b5:65:b3:f1:d7:8f:87:d4:64:fc:bd:aa:5d:65:6f: cd:1d:80:90:ad:e7:d7:69:dc:61:1d:8c:87:61:c7: 6e:be:52:fd:6d:e0:4a:9a:7c:6c:c2:35:27:e7:ce: ce:17:06:0d:16:aa:ca:4e:82:d0:dd:34:95:cc:c2: 60:61:a1:df:5b:d3:37:60:33:42:43:db:f7:5b:e1: a5:5d:0e:58:bd:c5:8d:b4:57:da:9a:49:f1:37:1e: a7:22:fe:44:9d:77:8e:ae:d3:f1:e5:f1:c3:e1:35: 19:7a:03:c7:42:e3:7a:fb:46:2c:de:31:2a:ec:83: ca:2f:e4:dc:00:59:b9:ee:cc:84:c3:db:86:22:ab: b6:7f:1b:a5:5e:18:99:e8:6f:8b:44:0d:a6:d8:79: 17:b6:2d:03:4e:a0:88:32:56:40:27:e1:03:27:2c: 48:2d:62:e2:93:59:ab:72:d8:7f:a1:bb:5f:7e:64: 28:21:6e:51:67:12:be:58:6a:cb:b1:18:55:e9:4d: 96:67:ee:2c:28:b3:1c:19:bb:cb:c2:36:0b:00:b2: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:77:C4:01:10:77:D1:DA:06:C3:40:4A:8A:A6:F3:2C:3E:2A:68:CA X509v3 Authority Key Identifier: keyid:0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/tnfEARB30doGw0BKiqbzLD4qaMo.roa sbgp-ipAddrBlock: critical IPv4: 202.255.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:2d:b6:0e:8b:90:b6:9f:d0:92:22:ad:6c:e5:00:10:21:99: 74:27:fb:ff:ff:34:86:59:c9:1a:7b:6a:a0:aa:58:eb:bf:08: 01:08:20:e3:a8:c0:48:6f:70:75:1d:da:34:7f:e9:43:5e:d2: c9:80:13:33:76:af:69:f8:77:dd:45:05:67:ff:21:3e:35:a2: f8:17:04:75:2a:10:94:67:56:5e:99:68:8d:a7:57:6c:e0:f1: ee:4b:e5:5f:49:9b:29:e8:2e:66:7d:6e:64:bb:41:49:d3:8f: 34:2b:5f:9d:39:49:42:0a:08:ef:fb:de:aa:39:a7:9c:76:a8: 94:5f:54:d8:a2:e9:93:d3:4e:62:ed:ce:95:ae:4f:23:c1:27: a4:63:50:d4:c3:52:38:fa:46:bb:41:a3:06:87:36:ea:18:3f: 86:98:ff:d0:b2:f4:b0:7b:49:b4:8a:d1:e2:ec:e8:52:a1:e2: fd:11:5f:0f:f0:5b:da:87:b4:83:c3:76:7e:c3:02:0c:4f:3c: 3d:6a:92:a5:d0:6c:08:97:5f:df:ae:b3:b9:e3:b4:c4:59:98: f6:50:66:44:a4:3b:fe:94:0c:b7:5d:f1:66:a0:6b:bb:26:41: 07:18:0a:09:3d:36:c5:cb:73:b4:b3:c1:ab:eb:cf:04:d9:00: 12:33:89:ce -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTg2 RTZDMERENDczM0MxNDJGMDFERDUzMkZCM0VBRUU0MjNCMzIwMB4XDTI2MDMzMTA4 MjUyM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjY3N0M0MDExMDc3RDFE QTA2QzM0MDRBOEFBNkYzMkMzRTJBNjhDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPoTMWbwBqI3Wel5f4lxU6ztBG7yIGXrywr4zhWWAydXYRSr9Il S0faR9y/tWWz8dePh9Rk/L2qXWVvzR2AkK3n12ncYR2Mh2HHbr5S/W3gSpp8bMI1 J+fOzhcGDRaqyk6C0N00lczCYGGh31vTN2AzQkPb91vhpV0OWL3FjbRX2ppJ8Tce pyL+RJ13jq7T8eXxw+E1GXoDx0LjevtGLN4xKuyDyi/k3ABZue7MhMPbhiKrtn8b pV4Ymehvi0QNpth5F7YtA06giDJWQCfhAycsSC1i4pNZq3LYf6G7X35kKCFuUWcS vlhqy7EYVelNlmfuLCizHBm7y8I2CwCyXysCAwEAAaOCAdswggHXMB0GA1UdDgQW BBS2d8QBEHfR2gbDQEqKpvMsPipoyjAfBgNVHSMEGDAWgBQKhubA3UczwULwHdUy +z6u5COzIDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4NS9Db2Jtd04xSE04RkM4QjNWTXZzLXJ1UWpzeUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9Db2Jtd04xSE04RkM4QjNWTXZzLXJ1 UWpzeUEuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTA4NS90bmZFQVJCMzBkb0d3MEJLaXFiekxENHFhTW8ucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyv/MMA0GCSqGSIb3DQEBCwUAA4IB AQA6LbYOi5C2n9CSIq1s5QAQIZl0J/v//zSGWckae2qgqljrvwgBCCDjqMBIb3B1 Hdo0f+lDXtLJgBMzdq9p+HfdRQVn/yE+NaL4FwR1KhCUZ1ZemWiNp1ds4PHuS+Vf SZsp6C5mfW5ku0FJ0480K1+dOUlCCgjv+96qOaecdqiUX1TYoumT005i7c6Vrk8j wSekY1DUw1I4+ka7QaMGhzbqGD+GmP/QsvSwe0m0itHi7OhSoeL9EV8P8Fvah7SD w3Z+wwIMTzw9apKl0GwIl1/frrO547TEWZj2UGZEpDv+lAy3XfFmoGu7JkEHGAoJ PTbFy3O0s8Gr688E2QASM4nO -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:41 2026 by rpki-client