$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20159/PDLoxh2SCGmHEoNBez0L0a9lWrY.roa File: PDLoxh2SCGmHEoNBez0L0a9lWrY.roa (raw, json) Hash identifier: psUY9iWDGJRwG/+xaXBW291zRQvviScwzAHryNomvJA= Subject key identifier: 3C:32:E8:C6:1D:92:08:69:87:12:83:41:7B:3D:0B:D1:AF:65:5A:B6 Certificate issuer: /CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB Certificate serial: 37 Authority key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/PDLoxh2SCGmHEoNBez0L0a9lWrY.roa Signing time: Tue 31 Mar 2026 08:24:54 +0000 ROA not before: Tue 31 Mar 2026 08:24:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131988 IP address blocks: 103.170.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB Validity Not Before: Mar 31 08:24:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3C32E8C61D920869871283417B3D0BD1AF655AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:46:ab:38:a8:61:8d:96:78:88:a2:48:8b: ca:9d:10:3f:b3:f6:81:58:e2:46:1d:02:4f:53:ea: bf:c0:89:c2:6f:5b:81:e9:48:4e:27:c5:90:32:6a: c8:b1:9b:f9:b6:06:1d:0f:8e:1d:20:f2:1e:c2:2a: 32:84:33:c7:f3:9f:1a:64:94:73:76:1c:0a:d2:e5: 75:2e:28:51:ee:4a:dd:f5:68:33:4a:4f:b7:76:92: 2f:47:9a:eb:0e:95:16:46:0b:f6:25:d1:05:aa:d7: 95:68:68:18:b5:0a:ac:de:42:7b:0a:27:52:3e:b2: 56:ba:f8:3c:5c:e0:7d:c5:61:c2:cd:c4:7b:bc:67: ef:9d:ac:ff:d5:d5:fa:61:37:18:95:75:f4:b7:37: ac:f7:33:f3:ac:92:84:30:63:f7:59:bd:7b:2f:98: 4f:b6:98:33:73:bf:82:c2:4b:97:c1:1a:4f:cb:ce: ca:d2:a6:90:04:e3:54:f9:93:d7:c7:5b:f3:f9:73: b6:06:2e:fd:b2:65:96:0e:a3:62:af:fc:06:c3:b2: 36:17:f3:63:cd:04:3a:d6:5e:48:85:33:f0:9b:5d: 9f:95:a6:02:31:3b:f9:51:66:ac:24:72:03:25:c4: c9:11:4c:dc:fd:95:ce:00:6a:81:9e:cb:73:ff:d0: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:E8:C6:1D:92:08:69:87:12:83:41:7B:3D:0B:D1:AF:65:5A:B6 X509v3 Authority Key Identifier: keyid:BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/PDLoxh2SCGmHEoNBez0L0a9lWrY.roa sbgp-ipAddrBlock: critical IPv4: 103.170.124.0/23 Signature Algorithm: sha256WithRSAEncryption 00:de:19:db:49:8e:a0:d3:15:20:b9:61:67:ea:bd:20:9f:fd: 46:58:66:5f:9b:e2:77:29:66:ba:eb:14:7d:90:01:6e:51:bf: 99:a5:7e:eb:f2:50:b3:14:56:86:ef:1f:8a:a3:8f:94:7e:67: 6d:95:92:ea:1b:31:85:ea:1b:43:a8:b0:fb:56:d1:a6:d1:cd: 2c:a1:e1:b4:28:68:2e:8d:20:2c:a3:a0:41:c7:49:dd:2e:f1: a3:e6:e9:d9:e3:1f:98:bd:e6:19:f7:63:c1:13:d3:e5:25:65: 6b:6a:0c:67:46:a4:a7:1f:8b:05:fe:0f:99:b4:99:2d:1b:a0: 95:54:7f:2f:b0:1b:cd:a7:5b:e8:98:52:f4:c5:67:4e:b5:23: ea:31:cd:dd:04:92:5a:3f:d2:69:ae:de:cc:13:f9:fd:3f:a6: 12:a4:0c:cb:68:12:78:54:5e:49:22:14:d7:46:ad:88:8d:10: 9b:e0:c3:d6:21:21:80:6c:52:dd:ac:4d:4b:2a:64:3c:d8:06: 5f:68:3a:3a:fa:60:31:95:d0:c8:27:38:a8:e0:80:f7:23:e5: d2:74:19:a4:c4:a8:bc:39:b1:a7:bf:56:80:56:29:d5:9f:02: d9:f8:a1:f5:eb:cb:3d:8f:bf:86:5b:be:30:38:f0:7f:fc:5b: 3e:a1:f1:09 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCREI4 QjgxMEFBODUxOEYxOUU4RUExRUUxNTM5NjYyNzM2QUNGMEVCMB4XDTI2MDMzMTA4 MjQ1NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0MzMkU4QzYxRDkyMDg2 OTg3MTI4MzQxN0IzRDBCRDFBRjY1NUFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMuURqs4qGGNlniIokiLyp0QP7P2gVjiRh0CT1Pqv8CJwm9bgelI TifFkDJqyLGb+bYGHQ+OHSDyHsIqMoQzx/OfGmSUc3YcCtLldS4oUe5K3fVoM0pP t3aSL0ea6w6VFkYL9iXRBarXlWhoGLUKrN5CewonUj6yVrr4PFzgfcVhws3Ee7xn 752s/9XV+mE3GJV19Lc3rPcz86yShDBj91m9ey+YT7aYM3O/gsJLl8EaT8vOytKm kATjVPmT18db8/lztgYu/bJllg6jYq/8BsOyNhfzY80EOtZeSIUz8Jtdn5WmAjE7 +VFmrCRyAyXEyRFM3P2VzgBqgZ7Lc//Q6vsCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQ8MujGHZIIaYcSg0F7PQvRr2VatjAfBgNVHSMEGDAWgBS9uLgQqoUY8Z6Ooe4V OWYnNqzw6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNTkvdmJpNEVLcUZHUEdlanFIdUZUbG1KemFzOE9zLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdmJpNEVLcUZHUEdlanFIdUZUbG1K emFzOE9zLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMTU5L1BETG94aDJTQ0dtSEVvTkJlejBMMGE5bFdyWS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqnwwDQYJKoZIhvcNAQELBQAD ggEBAADeGdtJjqDTFSC5YWfqvSCf/UZYZl+b4ncpZrrrFH2QAW5Rv5mlfuvyULMU VobvH4qjj5R+Z22VkuobMYXqG0OosPtW0abRzSyh4bQoaC6NICyjoEHHSd0u8aPm 6dnjH5i95hn3Y8ET0+UlZWtqDGdGpKcfiwX+D5m0mS0boJVUfy+wG82nW+iYUvTF Z061I+oxzd0Eklo/0mmu3swT+f0/phKkDMtoEnhUXkkiFNdGrYiNEJvgw9YhIYBs Ut2sTUsqZDzYBl9oOjr6YDGV0MgnOKjggPcj5dJ0GaTEqLw5sae/VoBWKdWfAtn4 ofXryz2Pv4ZbvjA48H/8Wz6h8Qk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:58 2026 by rpki-client