$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ORMpzvLAXv7diiYIBSSyHOvbaXo.roa File: ORMpzvLAXv7diiYIBSSyHOvbaXo.roa (raw, json) Hash identifier: noboubHcsNPq3D59DemjXL8wO6+L8zXZ/rpKqWloUiw= Subject key identifier: 39:13:29:CE:F2:C0:5E:FE:DD:8A:26:08:05:24:B2:1C:EB:DB:69:7A Certificate issuer: /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Certificate serial: 46 Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ORMpzvLAXv7diiYIBSSyHOvbaXo.roa Signing time: Tue 31 Mar 2026 08:36:36 +0000 ROA not before: Tue 31 Mar 2026 08:36:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18071 IP address blocks: 157.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D Validity Not Before: Mar 31 08:36:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=391329CEF2C05EFEDD8A26080524B21CEBDB697A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ba:10:ca:c4:fb:5b:4b:7d:1c:16:05:57:e0: cd:56:51:93:02:01:4e:b3:23:f3:b4:5f:0f:cb:df: aa:23:94:f0:9b:f7:03:63:0e:c0:f7:6a:71:71:62: d9:81:bb:05:7a:f3:a1:cd:89:f1:0e:d0:90:d0:db: a5:ae:d1:d3:35:63:b2:20:01:75:dd:b1:41:a3:d5: 97:e7:57:dd:91:6c:54:8e:50:6a:1b:dc:f4:ef:33: 90:15:df:5a:2c:e7:80:a2:05:7d:93:7d:d2:42:15: 73:43:c8:6f:47:4d:41:33:d0:2e:39:71:44:b7:cd: 70:8a:a7:ad:51:62:37:3e:32:83:97:9c:e2:c9:df: a5:12:6e:13:df:ff:5d:30:61:b1:98:7c:3f:01:88: 84:74:c1:4c:2d:52:cc:1d:bf:2e:4d:d6:e2:1a:5d: 9a:d0:fb:fa:b7:0f:8d:23:03:e2:f5:05:f0:ad:d9: 9b:3f:92:c9:05:62:0e:10:39:29:9b:5b:27:d5:f5: a9:12:b3:b4:13:99:16:d5:03:ed:a7:b3:a8:98:aa: e9:70:2c:cf:42:ec:35:69:31:48:32:79:48:46:fd: 26:fa:2f:28:8c:ae:f3:f9:cf:c9:30:d5:82:c9:05: b8:7f:fc:3c:c2:3b:a5:32:98:a3:30:77:87:36:da: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:13:29:CE:F2:C0:5E:FE:DD:8A:26:08:05:24:B2:1C:EB:DB:69:7A X509v3 Authority Key Identifier: keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ORMpzvLAXv7diiYIBSSyHOvbaXo.roa sbgp-ipAddrBlock: critical IPv4: 157.8.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:ce:8d:15:53:e6:c1:1e:c9:61:05:4c:c8:6a:0e:45:7b:69: 0b:51:7c:f3:e4:f3:f1:08:b6:d7:45:1f:e2:17:af:a4:af:77: 84:cb:3d:2c:2f:03:73:f8:f8:a2:df:41:b8:93:f8:5d:8a:7a: 21:c9:63:69:0c:74:20:90:15:15:a4:8a:f8:5e:3e:42:cc:57: 84:6d:1b:a8:78:4e:ba:16:c8:c1:4e:4a:60:65:a2:b6:e6:37: dd:24:0f:5b:c0:5c:88:45:51:3b:08:ca:8b:5b:0c:82:35:90: 4e:ca:9e:08:52:23:66:f2:a9:62:f0:b3:88:86:0e:ac:50:26: f3:83:45:9b:07:c1:7b:e4:4e:31:ca:71:ba:a6:b6:ad:e5:c4: e1:3d:80:d8:d3:e3:f0:5e:d6:e4:45:12:ed:b1:e7:08:b4:dc: 9c:e0:db:59:7a:a9:c0:7f:5f:81:2f:b2:3f:ee:c9:95:36:54: 43:54:f4:70:27:47:00:53:fc:ce:a3:bb:be:51:cf:8f:6d:5f: 79:7b:fd:55:94:f8:e9:04:f6:b6:70:2f:11:e2:25:39:12:02: 81:c9:0a:6d:4c:f6:2c:6d:34:db:b8:84:75:f6:b8:74:8b:75: 52:2d:ee:d3:59:02:c5:5d:cc:34:9c:8d:ae:72:80:ee:db:5c: a9:ba:d3:06 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI2MDMzMTA4 MzYzNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzkxMzI5Q0VGMkMwNUVG RUREOEEyNjA4MDUyNEIyMUNFQkRCNjk3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOC6EMrE+1tLfRwWBVfgzVZRkwIBTrMj87RfD8vfqiOU8Jv3A2MO wPdqcXFi2YG7BXrzoc2J8Q7QkNDbpa7R0zVjsiABdd2xQaPVl+dX3ZFsVI5Qahvc 9O8zkBXfWizngKIFfZN90kIVc0PIb0dNQTPQLjlxRLfNcIqnrVFiNz4yg5ec4snf pRJuE9//XTBhsZh8PwGIhHTBTC1SzB2/Lk3W4hpdmtD7+rcPjSMD4vUF8K3Zmz+S yQViDhA5KZtbJ9X1qRKztBOZFtUD7aezqJiq6XAsz0LsNWkxSDJ5SEb9JvovKIyu 8/nPyTDVgskFuH/8PMI7pTKYozB3hzbayfECAwEAAaOCAdowggHWMB0GA1UdDgQW BBQ5EynO8sBe/t2KJggFJLIc69tpejAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkzNy9PUk1wenZMQVh2N2RpaVlJQlNTeUhPdmJhWG8ucm9hMB4G CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnQgwDQYJKoZIhvcNAQELBQADggEB ABnOjRVT5sEeyWEFTMhqDkV7aQtRfPPk8/EIttdFH+IXr6Svd4TLPSwvA3P4+KLf QbiT+F2KeiHJY2kMdCCQFRWkivhePkLMV4RtG6h4TroWyMFOSmBlorbmN90kD1vA XIhFUTsIyotbDII1kE7KnghSI2byqWLws4iGDqxQJvODRZsHwXvkTjHKcbqmtq3l xOE9gNjT4/Be1uRFEu2x5wi03Jzg21l6qcB/X4Evsj/uyZU2VENU9HAnRwBT/M6j u75Rz49tX3l7/VWU+OkE9rZwLxHiJTkSAoHJCm1M9ixtNNu4hHX2uHSLdVIt7tNZ AsVdzDScja5ygO7bXKm60wY= -----END CERTIFICATE-----Generated at Tue Apr 7 22:23:34 2026 by rpki-client