$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20245/ocQfw1WIgVvMJHT0D5QXwoHQzAE.roa File: ocQfw1WIgVvMJHT0D5QXwoHQzAE.roa (raw, json) Hash identifier: tuIJm0NVsJFf0LH01nTERbxq+JmUX5Wa9xKqVWuVC5g= Subject key identifier: A1:C4:1F:C3:55:88:81:5B:CC:24:74:F4:0F:94:17:C2:81:D0:CC:01 Certificate issuer: /CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D Certificate serial: 32 Authority key identifier: EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/ocQfw1WIgVvMJHT0D5QXwoHQzAE.roa Signing time: Tue 31 Mar 2026 08:35:43 +0000 ROA not before: Tue 31 Mar 2026 08:35:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 151375 IP address blocks: 103.250.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC4B5C02A42E82DDAD39B6FAE6ECA0F33EF8CA6D Validity Not Before: Mar 31 08:35:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A1C41FC35588815BCC2474F40F9417C281D0CC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:70:7e:19:6e:a2:d9:04:e3:4e:d7:aa:bd: 1c:67:72:ef:9a:15:66:ae:f5:8f:6f:54:72:3d:18: d8:12:ef:62:09:e0:60:90:89:f4:c8:55:20:85:7f: 13:61:4d:07:a0:80:f7:85:c4:f6:56:91:e5:9e:17: 71:79:51:6b:17:61:84:da:ec:26:6b:9b:8e:d2:80: af:40:81:e7:7e:87:91:57:34:f7:c9:bc:f0:29:84: bc:e5:df:56:bb:bf:6e:ee:a8:22:80:7b:0f:fe:65: 8a:42:f4:28:2f:3a:c8:09:d3:54:38:60:50:86:25: 16:22:d2:b4:3b:d4:c4:9a:db:41:74:2a:5d:74:b9: 3e:70:93:98:3f:74:6a:aa:0a:63:d1:70:47:bb:0a: 4c:9d:31:67:ff:24:66:25:cf:68:11:8e:14:20:76: 35:80:fe:8c:7f:9a:f7:19:a5:08:02:a0:3e:45:2e: 39:72:a6:a4:f9:6e:a5:f9:59:83:18:9c:0c:b1:24: 9d:3a:9c:19:43:9f:dd:80:36:d2:15:b7:1e:c8:a0: 21:c4:66:2d:04:a7:d2:6f:b4:7d:b4:19:23:53:1c: 63:b7:0a:48:97:9d:26:61:4d:9f:c2:1e:71:d0:3d: f5:f2:e4:14:dc:f0:ad:01:e4:7c:99:ed:08:4c:6c: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C4:1F:C3:55:88:81:5B:CC:24:74:F4:0F:94:17:C2:81:D0:CC:01 X509v3 Authority Key Identifier: keyid:EC:4B:5C:02:A4:2E:82:DD:AD:39:B6:FA:E6:EC:A0:F3:3E:F8:CA:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/7EtcAqQugt2tObb65uyg8z74ym0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7EtcAqQugt2tObb65uyg8z74ym0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20245/ocQfw1WIgVvMJHT0D5QXwoHQzAE.roa sbgp-ipAddrBlock: critical IPv4: 103.250.100.0/23 Signature Algorithm: sha256WithRSAEncryption 36:e6:01:97:25:03:b2:ea:aa:a3:85:01:fd:8e:a1:ec:41:c7: 35:18:02:02:58:bf:31:66:46:07:64:c1:c3:70:13:cc:84:9a: 3a:ea:2c:61:af:35:5d:90:d8:39:70:2f:a4:6c:dc:b7:79:6d: 5c:a9:28:0c:9c:5c:d8:1d:25:f0:c4:b9:a7:6f:0c:77:64:cd: dc:98:87:7c:3a:a4:46:1f:d4:f2:b0:59:14:1b:ca:4c:68:11: 1d:7d:ed:18:ab:df:0f:d6:3b:8a:24:95:cd:98:10:5a:13:c1: 35:0e:d8:25:f7:6b:a2:4a:66:58:75:31:05:3e:02:cf:32:d0: 4e:39:86:63:22:15:c0:04:7c:e1:5e:18:25:fa:45:fe:88:fd: d2:ec:87:3c:3a:cd:9a:25:aa:2f:5c:69:9f:a9:06:5b:8f:f6: 18:52:61:1c:85:8f:41:d4:11:a7:8d:f4:c4:fe:7f:9e:80:d8: f5:13:de:e1:2b:14:1e:9d:f3:6d:e6:3c:39:f4:32:69:aa:d8: 3f:24:ac:01:a9:e8:2e:98:9c:0e:6a:f1:d9:2f:bb:83:2f:47: f4:60:93:e6:33:82:ca:43:ee:4a:b4:5a:8f:67:01:9c:ff:7a: ba:dc:19:80:fa:74:55:c0:b2:8c:3c:e2:20:38:15:dc:d4:64: 1e:3d:07:32 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzRC NUMwMkE0MkU4MkREQUQzOUI2RkFFNkVDQTBGMzNFRjhDQTZEMB4XDTI2MDMzMTA4 MzU0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTFDNDFGQzM1NTg4ODE1 QkNDMjQ3NEY0MEY5NDE3QzI4MUQwQ0MwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/AcH4ZbqLZBONO16q9HGdy75oVZq71j29Ucj0Y2BLvYgngYJCJ 9MhVIIV/E2FNB6CA94XE9laR5Z4XcXlRaxdhhNrsJmubjtKAr0CB536HkVc098m8 8CmEvOXfVru/bu6oIoB7D/5likL0KC86yAnTVDhgUIYlFiLStDvUxJrbQXQqXXS5 PnCTmD90aqoKY9FwR7sKTJ0xZ/8kZiXPaBGOFCB2NYD+jH+a9xmlCAKgPkUuOXKm pPlupflZgxicDLEknTqcGUOf3YA20hW3HsigIcRmLQSn0m+0fbQZI1McY7cKSJed JmFNn8IecdA99fLkFNzwrQHkfJntCExsrRcCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBShxB/DVYiBW8wkdPQPlBfCgdDMATAfBgNVHSMEGDAWgBTsS1wCpC6C3a05tvrm 7KDzPvjKbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNDUvN0V0Y0FxUXVndDJ0T2JiNjV1eWc4ejc0eW0wLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN0V0Y0FxUXVndDJ0T2JiNjV1eWc4 ejc0eW0wLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjQ1L29jUWZ3MVdJZ1Z2TUpIVDBENVFYd29IUXpBRS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn+mQwDQYJKoZIhvcNAQELBQAD ggEBADbmAZclA7LqqqOFAf2OoexBxzUYAgJYvzFmRgdkwcNwE8yEmjrqLGGvNV2Q 2DlwL6Rs3Ld5bVypKAycXNgdJfDEuadvDHdkzdyYh3w6pEYf1PKwWRQbykxoER19 7Rir3w/WO4oklc2YEFoTwTUO2CX3a6JKZlh1MQU+As8y0E45hmMiFcAEfOFeGCX6 Rf6I/dLshzw6zZolqi9caZ+pBluP9hhSYRyFj0HUEaeN9MT+f56A2PUT3uErFB6d 823mPDn0Mmmq2D8krAGp6C6YnA5q8dkvu4MvR/Rgk+YzgspD7kq0Wo9nAZz/errc GYD6dFXAsow84iA4FdzUZB49BzI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:58 2026 by rpki-client