$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20260/bfJIkWHgKy-bfXS0LYifIcjKzw0.roa File: bfJIkWHgKy-bfXS0LYifIcjKzw0.roa (raw, json) Hash identifier: WqdlSvy8G1YQagAZeJZ/21mzAWimvO1e79oTk3t1tL0= Subject key identifier: 6D:F2:48:91:61:E0:2B:2F:9B:7D:74:B4:2D:88:9F:21:C8:CA:CF:0D Certificate issuer: /CN=DB70B12B416AE2434641E5ACD256FB224B4C5B9B Certificate serial: 22 Authority key identifier: DB:70:B1:2B:41:6A:E2:43:46:41:E5:AC:D2:56:FB:22:4B:4C:5B:9B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/bfJIkWHgKy-bfXS0LYifIcjKzw0.roa Signing time: Tue 31 Mar 2026 08:40:56 +0000 ROA not before: Tue 31 Mar 2026 08:40:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 55911 IP address blocks: 157.66.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB70B12B416AE2434641E5ACD256FB224B4C5B9B Validity Not Before: Mar 31 08:40:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6DF2489161E02B2F9B7D74B42D889F21C8CACF0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:58:6b:07:1d:28:ad:22:c3:33:9d:92:5d: 1a:e4:e2:7e:f7:f2:2d:2b:ba:c6:27:24:60:a2:52: bf:f3:78:0a:3f:ee:73:4c:22:35:0a:14:b1:1e:8d: 78:c9:3b:c7:57:a3:df:37:3b:16:15:22:ca:75:d3: 7f:96:3e:2e:df:ec:81:6f:4e:f3:88:da:43:2a:12: 92:4f:02:43:49:b3:5b:39:48:66:f8:37:54:89:01: 85:b7:9a:7b:f7:20:87:7b:73:f4:fc:06:c9:4d:2d: d6:73:7c:2b:08:61:d1:0d:72:bf:16:50:f8:02:55: d3:d0:c7:9c:17:bb:03:67:a0:e9:8f:4f:d0:13:8d: e3:c9:1e:45:43:e5:c7:4d:25:f9:65:b6:74:ec:52: 5a:da:01:3d:ce:f5:9d:ee:11:91:cc:4b:7a:01:d3: 09:2f:cc:7a:4d:74:4e:ff:42:28:57:ae:6b:4e:09: b0:5c:29:53:bd:f2:23:84:21:cd:b0:36:49:b2:a5: 71:a9:92:3b:65:b8:aa:e6:23:ad:ba:a0:f1:ea:7b: 8d:88:8a:3e:ea:ab:d6:3e:52:0a:89:f0:80:7d:85: 76:28:ab:f7:6a:87:f1:f0:5c:25:5d:ed:a0:2a:a6: 3c:4d:81:47:33:a7:8d:9b:7f:9c:53:26:14:d5:8b: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:48:91:61:E0:2B:2F:9B:7D:74:B4:2D:88:9F:21:C8:CA:CF:0D X509v3 Authority Key Identifier: keyid:DB:70:B1:2B:41:6A:E2:43:46:41:E5:AC:D2:56:FB:22:4B:4C:5B:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/23CxK0Fq4kNGQeWs0lb7IktMW5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/23CxK0Fq4kNGQeWs0lb7IktMW5s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20260/bfJIkWHgKy-bfXS0LYifIcjKzw0.roa sbgp-ipAddrBlock: critical IPv4: 157.66.180.0/23 Signature Algorithm: sha256WithRSAEncryption a3:41:68:ce:c2:52:ab:e7:7d:30:d4:ae:d2:f1:24:6f:b7:e4: 4c:66:83:64:f4:09:9e:9a:c3:77:bf:08:cf:c1:e5:35:4c:f9: 33:a8:fd:b2:05:69:e8:d2:5d:a7:8b:8b:be:25:78:af:54:a4: 93:80:38:df:a5:c9:f0:32:73:15:24:49:1a:3a:a6:c7:82:58: 65:88:0a:08:03:b1:1f:49:0c:d5:a2:17:80:68:d2:5a:e7:44: 79:c3:79:92:9c:11:a0:cb:1e:a9:f8:17:4c:82:31:f8:71:41: b8:d2:f4:a5:37:50:4b:66:7a:2e:fc:7e:24:53:3f:15:2d:1d: e1:0e:90:95:ac:e8:b5:39:c4:7d:ff:ac:21:23:7a:03:68:fe: eb:db:4b:0c:aa:11:04:3a:e6:b4:cd:9d:da:98:04:67:0f:c6: ae:50:0d:74:58:20:90:05:d3:54:9d:4c:73:ae:c8:36:5d:f4: a5:74:0d:d2:80:78:35:3d:85:e9:ee:a9:3f:ad:f6:d6:21:f3: 72:05:ed:86:ff:30:61:a4:3e:f9:5b:bb:c6:95:a2:10:6c:cf: e4:f5:aa:39:4e:ef:d6:2d:9f:84:e6:79:d9:16:02:a3:3d:2c: 1d:2f:9e:91:1c:33:42:95:0a:1a:26:b4:dc:e2:38:b0:51:4c: 8e:54:65:78 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQjcw QjEyQjQxNkFFMjQzNDY0MUU1QUNEMjU2RkIyMjRCNEM1QjlCMB4XDTI2MDMzMTA4 NDA1NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkRGMjQ4OTE2MUUwMkIy RjlCN0Q3NEI0MkQ4ODlGMjFDOENBQ0YwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5cWGsHHSitIsMznZJdGuTifvfyLSu6xickYKJSv/N4Cj/uc0wi NQoUsR6NeMk7x1ej3zc7FhUiynXTf5Y+Lt/sgW9O84jaQyoSkk8CQ0mzWzlIZvg3 VIkBhbeae/cgh3tz9PwGyU0t1nN8Kwhh0Q1yvxZQ+AJV09DHnBe7A2eg6Y9P0BON 48keRUPlx00l+WW2dOxSWtoBPc71ne4RkcxLegHTCS/Mek10Tv9CKFeua04JsFwp U73yI4QhzbA2SbKlcamSO2W4quYjrbqg8ep7jYiKPuqr1j5SConwgH2Fdiir92qH 8fBcJV3toCqmPE2BRzOnjZt/nFMmFNWLCyMCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRt8kiRYeArL5t9dLQtiJ8hyMrPDTAfBgNVHSMEGDAWgBTbcLErQWriQ0ZB5azS VvsiS0xbmzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNjAvMjNDeEswRnE0a05HUWVXczBsYjdJa3RNVzVzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjNDeEswRnE0a05HUWVXczBsYjdJ a3RNVzVzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjYwL2JmSklrV0hnS3ktYmZYUzBMWWlmSWNqS3p3MC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQrQwDQYJKoZIhvcNAQELBQAD ggEBAKNBaM7CUqvnfTDUrtLxJG+35Exmg2T0CZ6aw3e/CM/B5TVM+TOo/bIFaejS XaeLi74leK9UpJOAON+lyfAycxUkSRo6pseCWGWICggDsR9JDNWiF4Bo0lrnRHnD eZKcEaDLHqn4F0yCMfhxQbjS9KU3UEtmei78fiRTPxUtHeEOkJWs6LU5xH3/rCEj egNo/uvbSwyqEQQ65rTNndqYBGcPxq5QDXRYIJAF01SdTHOuyDZd9KV0DdKAeDU9 henuqT+t9tYh83IF7Yb/MGGkPvlbu8aVohBsz+T1qjlO79Ytn4TmedkWAqM9LB0v npEcM0KVChomtNziOLBRTI5UZXg= -----END CERTIFICATE-----Generated at Tue Apr 7 22:05:52 2026 by rpki-client