$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/IO2m_HwlkyQeKiH1NK7zwqoY4dw.roa File: IO2m_HwlkyQeKiH1NK7zwqoY4dw.roa (raw, json) Hash identifier: wTGPNKmLnW1vNR79zj5dJvIHuDGWxelWk+PLlyOfqkE= Subject key identifier: 20:ED:A6:FC:7C:25:93:24:1E:2A:21:F5:34:AE:F3:C2:AA:18:E1:DC Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 02B2 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IO2m_HwlkyQeKiH1NK7zwqoY4dw.roa Signing time: Tue 31 Mar 2026 07:33:57 +0000 ROA not before: Tue 31 Mar 2026 07:33:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 220.96.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=20EDA6FC7C2593241E2A21F534AEF3C2AA18E1DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a8:78:63:98:ff:b9:43:12:a9:0c:bd:bd:b9: 3e:ca:66:e3:15:bc:09:85:9f:a4:96:4d:18:a5:cf: 1b:ba:73:8b:ec:2d:23:5b:bb:fd:37:77:a3:09:24: e5:5a:ad:91:87:25:a2:56:8d:1b:e2:70:dc:20:2b: 51:0f:a8:6f:c7:50:b4:2f:63:25:22:ca:2f:fd:60: d9:17:7c:d3:9d:f9:d0:a6:13:e0:70:d8:30:6c:84: 05:72:dd:3c:e1:4a:7a:dd:65:87:df:c8:cf:4d:f5: 08:e3:84:c2:4b:23:d9:8f:5e:f5:04:f0:b7:a5:31: 03:67:95:d7:30:e3:e0:b4:cc:49:ee:85:a3:81:27: a8:1c:96:0c:1d:60:ae:78:b3:cb:22:25:15:f2:65: 9b:94:5c:df:56:ba:99:49:70:86:82:6f:b8:e2:82: 62:a4:36:11:a0:73:27:33:2c:53:4c:4b:07:29:3f: 72:c9:6b:ad:c1:c9:78:f6:4b:58:da:81:73:33:27: da:65:93:3c:59:42:d7:c5:b4:b2:27:3a:26:52:9b: 19:ec:c8:c8:90:0d:b4:89:19:05:8b:21:28:34:3f: 65:e9:cc:23:59:f3:ff:08:04:7b:bf:f5:f5:1b:be: f1:20:35:b4:62:15:d0:28:e2:d8:34:d5:c9:fa:ec: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:ED:A6:FC:7C:25:93:24:1E:2A:21:F5:34:AE:F3:C2:AA:18:E1:DC X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IO2m_HwlkyQeKiH1NK7zwqoY4dw.roa sbgp-ipAddrBlock: critical IPv4: 220.96.0.0/14 Signature Algorithm: sha256WithRSAEncryption 71:6d:c5:12:78:cb:c4:c0:93:a1:6b:ff:07:05:e8:f2:64:a9: 63:ff:4c:82:4c:d2:ef:c8:82:1f:7a:e7:65:eb:f2:6f:e0:f9: 20:87:d8:0d:a3:4d:0d:80:3e:40:33:01:f8:8b:3a:dd:4f:8b: 46:76:85:cb:7b:e9:24:5e:b5:bd:e5:30:d6:46:78:5f:b1:f0: ee:75:d2:4a:8b:72:f3:9e:52:ad:63:81:1f:e3:19:f2:db:60: cd:77:d3:3a:ff:a1:29:aa:a8:79:32:12:eb:f0:ff:19:cd:cf: 33:ff:ee:e1:8f:14:b3:e1:4a:d3:f9:c0:a7:ef:d8:56:bf:74: a1:a8:b5:cf:c0:03:99:08:85:20:0c:bd:86:71:43:b3:2c:37: ea:92:11:ad:8c:a8:64:85:6b:b6:d6:e2:86:c0:07:e2:a5:a8: d8:6a:c2:b2:5b:f8:c6:63:19:5c:64:48:ea:5a:7f:15:c1:c7: 4f:86:01:b3:19:b5:e5:de:e2:93:e2:cd:fa:42:c9:7e:a9:e8: 5f:54:6e:e5:0f:57:80:b4:8a:7f:58:13:3e:67:61:36:af:61: 98:84:cf:93:bf:e8:ca:d9:2a:c4:e5:3c:0b:fa:83:e3:75:7a: e1:d6:fa:3b:82:97:3e:61:13:84:e5:bb:f1:71:8a:8c:8e:f7: 46:2f:7f:97 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICArIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwRURBNkZDN0MyNTkz MjQxRTJBMjFGNTM0QUVGM0MyQUExOEUxREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfqHhjmP+5QxKpDL29uT7KZuMVvAmFn6SWTRilzxu6c4vsLSNb u/03d6MJJOVarZGHJaJWjRvicNwgK1EPqG/HULQvYyUiyi/9YNkXfNOd+dCmE+Bw 2DBshAVy3TzhSnrdZYffyM9N9QjjhMJLI9mPXvUE8LelMQNnldcw4+C0zEnuhaOB J6gclgwdYK54s8siJRXyZZuUXN9WuplJcIaCb7jigmKkNhGgcyczLFNMSwcpP3LJ a63ByXj2S1jagXMzJ9plkzxZQtfFtLInOiZSmxnsyMiQDbSJGQWLISg0P2XpzCNZ 8/8IBHu/9fUbvvEgNbRiFdAo4tg01cn67DiVAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUIO2m/HwlkyQeKiH1NK7zwqoY4dwwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL0lPMm1fSHdsa3lRZUtpSDFOSzd6d3FvWTRkdy5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwLcYDANBgkqhkiG9w0BAQsFAAOCAQEA cW3FEnjLxMCToWv/BwXo8mSpY/9MgkzS78iCH3rnZevyb+D5IIfYDaNNDYA+QDMB +Is63U+LRnaFy3vpJF61veUw1kZ4X7Hw7nXSSoty855SrWOBH+MZ8ttgzXfTOv+h KaqoeTIS6/D/Gc3PM//u4Y8Us+FK0/nAp+/YVr90oai1z8ADmQiFIAy9hnFDsyw3 6pIRrYyoZIVrttbihsAH4qWo2GrCslv4xmMZXGRI6lp/FcHHT4YBsxm15d7ik+LN +kLJfqnoX1Ru5Q9XgLSKf1gTPmdhNq9hmITPk7/oytkqxOU8C/qD43V64db6O4KX PmEThOW78XGKjI73Ri9/lw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:18 2026 by rpki-client