$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/8HA99XoSKs647uD3urzlX-2UEnI.roa File: 8HA99XoSKs647uD3urzlX-2UEnI.roa (raw, json) Hash identifier: HIQYEqcphG20Wi46eKLBG4Vg8DCAVw/VZ0GSGhx7ATc= Subject key identifier: F0:70:3D:F5:7A:12:2A:CE:B8:EE:E0:F7:BA:BC:E5:5F:ED:94:12:72 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 30 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/8HA99XoSKs647uD3urzlX-2UEnI.roa Signing time: Tue 31 Mar 2026 08:32:42 +0000 ROA not before: Tue 31 Mar 2026 08:32:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7529 IP address blocks: 210.171.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Mar 31 08:32:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F0703DF57A122ACEB8EEE0F7BABCE55FED941272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:fa:d4:a8:8b:59:25:ae:3b:59:67:40:51: 3e:ec:03:0f:aa:5f:66:92:7a:28:26:54:d8:fd:d3: 6b:d5:bc:aa:c1:a9:d1:cf:11:5e:fa:fa:a3:34:46: f2:26:39:3b:a9:96:20:8b:ad:a5:4d:31:80:7b:e1: 50:d2:ea:4a:8b:a4:3d:a2:9c:86:97:2a:5c:02:83: bb:58:51:bf:8f:a1:2e:b1:40:57:a6:3f:da:ba:bd: 18:cb:a2:6a:19:f1:8b:13:08:71:80:0a:a5:d5:93: dc:4a:04:17:74:cb:68:a9:d0:75:40:f7:37:f0:ea: a7:7e:a4:39:2f:57:80:cc:d7:bd:33:c3:c2:26:e4: ce:89:13:2b:bb:b6:19:c6:fe:00:77:92:87:dc:66: 7a:47:b6:fe:9f:67:7f:e6:2f:34:8c:10:4c:69:64: 3d:1a:4a:26:97:5b:af:d4:7c:fb:8d:d5:58:f4:b0: fb:35:9d:78:e6:77:7f:32:70:59:14:37:84:0e:ba: 14:65:48:b5:93:25:ac:3c:2e:b9:05:fe:00:06:11: cc:b5:19:78:7c:78:8f:8c:85:5a:9a:27:86:7f:b6: 5e:ba:c8:49:b2:a4:01:99:9d:f2:fc:57:e9:39:7f: 24:09:44:5d:fc:10:17:54:66:c2:c0:c4:fe:26:58: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:3D:F5:7A:12:2A:CE:B8:EE:E0:F7:BA:BC:E5:5F:ED:94:12:72 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/8HA99XoSKs647uD3urzlX-2UEnI.roa sbgp-ipAddrBlock: critical IPv4: 210.171.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:e0:fb:87:7c:f2:a9:63:90:85:f4:24:65:95:98:65:57:38: 34:dd:5a:59:36:26:5c:04:e8:b8:18:66:97:7a:25:22:79:02: 13:a0:b6:e0:78:be:ec:c7:c8:e5:88:bf:68:d9:eb:9c:24:98: 7a:eb:9a:5d:15:90:89:4e:f2:6e:c3:b6:71:13:4a:9d:c3:25: d1:a2:3b:1d:57:c1:d6:e7:e4:5e:5b:00:2e:61:ad:bd:a3:46: db:5b:30:29:b2:49:1e:c3:4f:94:02:61:3f:66:d1:f0:3b:9c: 5a:1f:39:d7:53:95:36:85:e9:27:22:50:a4:9d:61:d2:f9:a3: 85:0e:99:d6:53:05:62:4a:29:23:d9:0e:e5:f0:71:36:e6:81: 88:56:0f:b5:fb:fa:fe:2d:aa:39:fb:14:53:97:0f:a1:4c:a3: 72:99:bf:0e:5a:f3:95:f1:d0:f7:ff:4c:06:8c:10:b3:4f:2e: 70:47:7b:21:11:23:a8:f0:a6:bb:90:ee:e3:d1:88:7e:c4:b2: 97:73:6e:1b:9a:ba:47:2e:d9:43:11:89:59:f8:6a:1d:ab:29: 75:67:91:c8:87:9c:f3:65:e9:e0:ab:af:5e:48:43:0a:ca:48: 01:49:39:11:65:8a:e5:69:dd:c3:7a:79:22:52:8c:a8:22:97: 07:21:b1:c6 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDMzMTA4 MzI0MloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjA3MDNERjU3QTEyMkFD RUI4RUVFMEY3QkFCQ0U1NUZFRDk0MTI3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANl1+tSoi1klrjtZZ0BRPuwDD6pfZpJ6KCZU2P3Ta9W8qsGp0c8R Xvr6ozRG8iY5O6mWIIutpU0xgHvhUNLqSoukPaKchpcqXAKDu1hRv4+hLrFAV6Y/ 2rq9GMuiahnxixMIcYAKpdWT3EoEF3TLaKnQdUD3N/Dqp36kOS9XgMzXvTPDwibk zokTK7u2Gcb+AHeSh9xmeke2/p9nf+YvNIwQTGlkPRpKJpdbr9R8+43VWPSw+zWd eOZ3fzJwWRQ3hA66FGVItZMlrDwuuQX+AAYRzLUZeHx4j4yFWponhn+2XrrISbKk AZmd8vxX6Tl/JAlEXfwQF1RmwsDE/iZYTMsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTwcD31ehIqzrju4Pe6vOVf7ZQScjAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10 TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8xOTEvOEhBOTlYb1NLczY0N3VEM3VyemxYLTJVRW5JLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNKrgDANBgkqhkiG9w0BAQsFAAOCAQEA DOD7h3zyqWOQhfQkZZWYZVc4NN1aWTYmXATouBhml3olInkCE6C24Hi+7MfI5Yi/ aNnrnCSYeuuaXRWQiU7ybsO2cRNKncMl0aI7HVfB1ufkXlsALmGtvaNG21swKbJJ HsNPlAJhP2bR8DucWh8511OVNoXpJyJQpJ1h0vmjhQ6Z1lMFYkopI9kO5fBxNuaB iFYPtfv6/i2qOfsUU5cPoUyjcpm/DlrzlfHQ9/9MBowQs08ucEd7IREjqPCmu5Du 49GIfsSyl3NuG5q6Ry7ZQxGJWfhqHaspdWeRyIec82Xp4KuvXkhDCspIAUk5EWWK 5Wndw3p5IlKMqCKXByGxxg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:34:00 2026 by rpki-client