$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0H6fYN4fvrYhzOebuVqCe4fPux0.roa File: 0H6fYN4fvrYhzOebuVqCe4fPux0.roa (raw, json) Hash identifier: nwkr0Fpknh/dr/J0zZvnn4mb5Pe6tKyLczhqFxlkwKU= Subject key identifier: D0:7E:9F:60:DE:1F:BE:B6:21:CC:E7:9B:B9:5A:82:7B:87:CF:BB:1D Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0292 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0H6fYN4fvrYhzOebuVqCe4fPux0.roa Signing time: Tue 31 Mar 2026 07:33:42 +0000 ROA not before: Tue 31 Mar 2026 07:33:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 202.191.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D07E9F60DE1FBEB621CCE79BB95A827B87CFBB1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:25:5a:17:cc:4b:cf:3a:43:81:1e:1e:13: 48:85:37:0d:0b:f5:42:a0:2a:ff:a7:e6:f2:c5:49: d4:d7:3b:8e:a2:42:92:42:ce:f0:32:f5:2a:db:56: e8:4d:77:03:02:68:a9:0b:77:c3:c8:19:29:f1:f7: 48:a5:f4:aa:eb:f8:c4:69:9d:4e:65:a5:2f:14:6e: d3:67:cf:01:c7:7a:28:79:19:d3:0f:ec:d9:64:80: 64:bc:d7:d3:a4:06:f7:31:35:ae:da:da:26:6b:22: 9d:5d:ee:6d:ca:9e:bb:49:f8:6b:22:10:53:e3:4d: 9a:f3:53:b8:d1:43:39:2d:12:be:9b:cc:72:10:e7: 45:3f:d1:cb:fa:14:c6:12:69:d2:5a:f2:0a:b1:ff: 5c:10:8b:4b:dd:bc:0f:54:90:26:bb:09:12:4d:53: d0:f2:35:fa:c6:f9:16:08:bb:ec:ae:f0:33:29:5e: 32:02:a0:09:6f:a4:b1:f8:de:e2:63:18:7f:a5:c3: e7:7b:c7:39:25:49:05:68:e2:bf:61:49:88:a2:5f: ab:14:48:33:fd:c7:ae:84:da:72:55:26:df:5b:d0: 33:e7:df:04:d1:c6:44:8e:84:2d:c7:3e:67:9d:a2: 77:04:2b:f7:4f:63:4b:be:2d:7b:9e:f3:26:61:5c: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7E:9F:60:DE:1F:BE:B6:21:CC:E7:9B:B9:5A:82:7B:87:CF:BB:1D X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0H6fYN4fvrYhzOebuVqCe4fPux0.roa sbgp-ipAddrBlock: critical IPv4: 202.191.16.0/20 Signature Algorithm: sha256WithRSAEncryption c8:d2:b0:74:ad:5f:6f:ec:39:0d:32:58:2c:f0:e5:f2:de:81: b2:5d:bb:e1:db:94:dd:13:aa:05:53:65:a0:48:81:b9:e2:42: eb:72:65:43:55:34:14:b9:f5:c3:ec:59:2a:35:17:74:34:67: 1c:37:41:bb:3a:dc:96:8d:55:cf:1b:73:cc:22:62:7b:2d:2b: f2:db:63:a5:53:68:55:db:8f:7f:3b:56:07:6e:36:67:14:ee: 93:e8:6f:d5:23:91:3b:95:1f:00:e6:20:3d:c6:24:4f:95:26: 48:5f:c2:28:e1:19:7e:c0:f9:d1:8f:10:48:ca:7a:44:8b:40: 04:09:ec:d4:52:20:f5:16:64:55:19:8c:ba:84:f9:6b:c7:d1: 3b:df:c3:33:c5:c4:4a:a1:8f:a6:6f:20:0a:f1:14:45:44:3a: 0a:ee:54:82:6a:d8:7b:a1:6d:a1:76:85:5a:9e:a0:72:1d:e3: 17:d6:f7:83:b5:f8:a4:ae:9c:13:43:35:56:49:3b:78:80:96: f5:f5:a6:f0:d6:47:d3:b8:f4:17:c6:5f:68:12:f4:1e:f3:26: 64:cc:77:8b:32:45:e8:da:b2:50:93:d2:0a:96:6c:58:f4:c2: 7b:29:83:d6:0b:5c:c8:a9:11:30:af:24:3e:0e:4d:38:c6:bc: 21:95:93:11 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwN0U5RjYwREUxRkJF QjYyMUNDRTc5QkI5NUE4MjdCODdDRkJCMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9niVaF8xLzzpDgR4eE0iFNw0L9UKgKv+n5vLFSdTXO46iQpJC zvAy9SrbVuhNdwMCaKkLd8PIGSnx90il9Krr+MRpnU5lpS8UbtNnzwHHeih5GdMP 7NlkgGS819OkBvcxNa7a2iZrIp1d7m3KnrtJ+GsiEFPjTZrzU7jRQzktEr6bzHIQ 50U/0cv6FMYSadJa8gqx/1wQi0vdvA9UkCa7CRJNU9DyNfrG+RYIu+yu8DMpXjIC oAlvpLH43uJjGH+lw+d7xzklSQVo4r9hSYiiX6sUSDP9x66E2nJVJt9b0DPn3wTR xkSOhC3HPmedoncEK/dPY0u+LXue8yZhXErVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU0H6fYN4fvrYhzOebuVqCe4fPux0wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxLzBINmZZTjRmdnJZaHpPZWJ1VnFDZTRmUHV4MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKvxAwDQYJKoZIhvcNAQELBQADggEB AMjSsHStX2/sOQ0yWCzw5fLegbJdu+HblN0TqgVTZaBIgbniQutyZUNVNBS59cPs WSo1F3Q0Zxw3Qbs63JaNVc8bc8wiYnstK/LbY6VTaFXbj387VgduNmcU7pPob9Uj kTuVHwDmID3GJE+VJkhfwijhGX7A+dGPEEjKekSLQAQJ7NRSIPUWZFUZjLqE+WvH 0TvfwzPFxEqhj6ZvIArxFEVEOgruVIJq2HuhbaF2hVqeoHId4xfW94O1+KSunBND NVZJO3iAlvX1pvDWR9O49BfGX2gS9B7zJmTMd4syRejaslCT0gqWbFj0wnspg9YL XMipETCvJD4OTTjGvCGVkxE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:51 2026 by rpki-client