$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/o9kohEKj_rx2zl5nmGsq1i_lxgU.roa File: o9kohEKj_rx2zl5nmGsq1i_lxgU.roa (raw, json) Hash identifier: hbZCRLZgX3X+j7w+54MJGEoSGZIm8XvoejOntlMjSKc= Subject key identifier: A3:D9:28:84:42:A3:FE:BC:76:CE:5E:67:98:6B:2A:D6:2F:E5:C6:05 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 029A Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/o9kohEKj_rx2zl5nmGsq1i_lxgU.roa Signing time: Tue 31 Mar 2026 07:33:45 +0000 ROA not before: Tue 31 Mar 2026 07:33:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 210.164.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A3D9288442A3FEBC76CE5E67986B2AD62FE5C605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:14:9e:f5:2f:b4:f7:2f:ef:d7:21:3f:3f: 5c:95:3c:36:24:b2:28:d7:29:24:df:9e:93:05:07: 4a:64:a7:80:99:92:d5:5b:94:c6:f8:46:6f:4f:6d: 33:14:cc:1f:9c:6c:7a:73:c9:a7:5f:16:59:b5:dd: 10:e7:1f:01:69:f6:f0:8a:4e:a2:e6:31:15:28:33: ea:0a:f5:40:90:d6:41:a8:dc:3d:7b:8b:38:53:0c: 27:44:0e:5a:9f:48:07:13:66:79:9f:7e:a2:86:b1: 96:33:fc:d5:ae:c8:24:ea:a4:a6:7e:b3:d1:9b:23: 4c:c4:8b:31:bb:2e:08:18:40:b6:8c:49:c6:dd:80: 9e:a2:c7:64:81:10:c6:ba:e4:74:03:21:58:96:19: 42:fa:35:86:e4:78:cb:cd:20:49:5f:60:7b:f1:92: 64:75:29:bb:98:a9:72:4f:34:46:27:f2:d8:9b:5c: f5:dd:7b:68:c0:3a:e4:f5:94:d8:d5:c4:9f:8d:97: a8:ed:f9:cf:e1:70:1b:f4:32:aa:80:8d:50:9c:98: a4:8a:dd:3b:86:55:cd:71:55:7d:64:86:1b:44:93: b5:41:1c:73:7a:58:a4:55:0d:21:10:9c:10:cd:ec: bc:c9:a0:49:a8:ee:d5:10:24:89:8d:3c:00:02:ca: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:28:84:42:A3:FE:BC:76:CE:5E:67:98:6B:2A:D6:2F:E5:C6:05 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/o9kohEKj_rx2zl5nmGsq1i_lxgU.roa sbgp-ipAddrBlock: critical IPv4: 210.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:4f:66:c7:30:97:69:49:24:85:84:de:35:35:b4:fe:1c:da: 90:81:8f:15:d9:7a:04:f2:fd:62:2a:b2:34:a5:4d:25:4d:3d: 50:b5:ad:8a:99:35:b5:f8:ad:59:d0:73:57:2c:f7:fa:1c:3a: 3a:b9:98:5c:42:82:d5:0f:f2:6d:12:c2:9d:5f:b1:ab:47:94: 10:f2:0f:cd:74:ba:a5:4a:5e:c6:f8:7c:0a:1f:1a:18:57:87: 82:a0:16:56:82:7b:d6:97:5f:9f:dd:af:67:58:f3:d1:91:36: b7:48:81:14:20:77:01:ac:48:8d:93:8d:8a:74:af:f5:1d:37: 67:df:6c:8c:06:75:e3:5f:d0:85:b7:6e:4c:f2:51:39:99:9a: 63:ba:83:fa:55:03:d0:83:49:0b:12:ea:f3:f1:13:d3:7b:98: b2:4a:8d:01:ea:d7:84:a6:39:88:c0:67:20:63:44:76:a9:2b: da:69:e0:f7:d1:ad:64:11:27:a0:00:b3:5e:91:cf:8a:b9:3f: 55:c2:a7:c3:e3:1f:f8:f3:10:11:7b:bb:af:9c:75:87:fc:fd: 6f:b4:ff:9a:23:7c:68:82:4f:f9:21:31:c4:d6:db:78:55:34: c0:19:fc:ae:4c:a1:49:71:c0:eb:00:db:36:ad:37:98:13:36: 24:d9:de:28 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICApowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzRDkyODg0NDJBM0ZF QkM3NkNFNUU2Nzk4NkIyQUQ2MkZFNUM2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDokhSe9S+09y/v1yE/P1yVPDYksijXKSTfnpMFB0pkp4CZktVb lMb4Rm9PbTMUzB+cbHpzyadfFlm13RDnHwFp9vCKTqLmMRUoM+oK9UCQ1kGo3D17 izhTDCdEDlqfSAcTZnmffqKGsZYz/NWuyCTqpKZ+s9GbI0zEizG7LggYQLaMScbd gJ6ix2SBEMa65HQDIViWGUL6NYbkeMvNIElfYHvxkmR1KbuYqXJPNEYn8tibXPXd e2jAOuT1lNjVxJ+Nl6jt+c/hcBv0MqqAjVCcmKSK3TuGVc1xVX1khhtEk7VBHHN6 WKRVDSEQnBDN7LzJoEmo7tUQJImNPAACyoZNAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUo9kohEKj/rx2zl5nmGsq1i/lxgUwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL285a29oRUtqX3J4MnpsNW5tR3NxMWlfbHhnVS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSpDANBgkqhkiG9w0BAQsFAAOCAQEA QU9mxzCXaUkkhYTeNTW0/hzakIGPFdl6BPL9YiqyNKVNJU09ULWtipk1tfitWdBz Vyz3+hw6OrmYXEKC1Q/ybRLCnV+xq0eUEPIPzXS6pUpexvh8Ch8aGFeHgqAWVoJ7 1pdfn92vZ1jz0ZE2t0iBFCB3AaxIjZONinSv9R03Z99sjAZ141/QhbduTPJROZma Y7qD+lUD0INJCxLq8/ET03uYskqNAerXhKY5iMBnIGNEdqkr2mng99GtZBEnoACz XpHPirk/VcKnw+Mf+PMQEXu7r5x1h/z9b7T/miN8aIJP+SExxNbbeFU0wBn8rkyh SXHA6wDbNq03mBM2JNneKA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:04 2026 by rpki-client