$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/KOXPBKEmCPP0OhEjMy0Tt8zw4aI.roa File: KOXPBKEmCPP0OhEjMy0Tt8zw4aI.roa (raw, json) Hash identifier: Vp/HiOTP/0jg1vF9/ODi60RSvxGnMwktL9tsKPSHdAk= Subject key identifier: 28:E5:CF:04:A1:26:08:F3:F4:3A:11:23:33:2D:13:B7:CC:F0:E1:A2 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 74 Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/KOXPBKEmCPP0OhEjMy0Tt8zw4aI.roa Signing time: Tue 31 Mar 2026 08:07:18 +0000 ROA not before: Tue 31 Mar 2026 08:07:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 15830 IP address blocks: 112.140.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Mar 31 08:07:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=28E5CF04A12608F3F43A1123332D13B7CCF0E1A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:f5:6b:e9:7a:29:aa:b0:75:37:8e:48:a3: d8:2e:3a:95:c3:36:38:dc:fd:d7:12:62:f3:7a:3b: 50:99:c1:fb:75:9a:36:da:10:66:7c:9b:78:08:a7: 3a:ec:7f:0d:90:ae:c1:a2:25:ab:d2:93:87:74:92: 45:6a:91:1c:0d:be:a7:4c:6f:bb:d3:a9:b9:a5:72: f4:c0:0f:54:ea:11:c7:cb:3c:e0:fe:5f:85:a9:01: 78:41:8d:49:59:8c:f9:da:a2:53:1a:1c:01:9d:bb: 78:38:7b:8a:5c:1c:c9:97:97:9c:45:2a:3d:f1:cf: 42:33:66:6f:01:40:22:a1:9c:c1:21:7f:fb:4f:97: ca:b5:ea:7b:c2:5c:a5:24:cf:bd:19:10:86:68:d9: ef:cc:18:2f:e4:1b:07:b9:28:c5:92:03:6d:29:9a: e3:d8:8c:c5:c2:f8:b3:51:f8:77:5a:40:f5:75:93: eb:34:6b:9b:01:7d:5d:16:b5:de:38:03:99:bb:2e: 3e:8b:c8:df:cd:61:f9:be:b2:31:bb:2d:69:6d:07: 14:77:58:a4:e5:4b:2f:70:18:8c:cd:39:41:d6:d5: 13:25:d7:96:d1:6c:a5:17:26:47:d7:20:4d:4b:55: 12:aa:e5:34:ea:02:d5:d7:5c:74:85:34:b5:1f:f4: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E5:CF:04:A1:26:08:F3:F4:3A:11:23:33:2D:13:B7:CC:F0:E1:A2 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/KOXPBKEmCPP0OhEjMy0Tt8zw4aI.roa sbgp-ipAddrBlock: critical IPv4: 112.140.128.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:da:8d:8b:a9:03:75:62:dd:29:30:5f:78:c6:e4:d6:63:8e: 7e:dd:2f:5e:73:86:8c:f4:b0:85:42:ce:bd:ed:a1:ba:cb:c0: 60:27:ff:e3:75:e8:bb:4d:39:82:80:08:aa:03:8c:e3:71:2a: b6:c5:5f:2c:4a:c2:9c:7a:22:dc:b2:39:bd:bb:22:3b:30:51: 58:ff:45:73:43:c9:1e:e3:48:e1:0b:ee:d1:8b:18:06:76:00: e2:2a:31:7f:ae:4e:52:67:b4:3e:2f:de:e6:7b:20:3a:9e:b4: ee:36:d0:fc:8b:b7:98:1b:85:d4:c6:ad:41:cd:50:17:02:7a: 62:ba:0f:3c:de:d4:1c:83:aa:73:60:d5:da:e4:1d:cc:9e:7e: 54:a2:4c:57:17:51:01:d0:59:50:ea:22:89:3a:53:f7:06:bc: 99:f1:17:4b:74:b3:ae:10:5a:78:31:df:63:4f:b9:b7:ad:28: 34:24:9f:65:a4:4f:3e:83:66:d4:e5:e7:5c:eb:83:b0:9d:e6: e4:84:54:c4:69:ca:4f:f3:98:a9:84:f3:51:fd:89:12:78:1d: dd:46:b4:97:6d:48:7f:9e:8a:4d:f3:e2:9e:50:f1:19:ee:8e: 27:ad:b0:8c:26:8b:73:b9:d6:cd:aa:f5:33:4c:13:ad:63:1b: ec:97:f0:81 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI2MDMzMTA4 MDcxOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjhFNUNGMDRBMTI2MDhG M0Y0M0ExMTIzMzMyRDEzQjdDQ0YwRTFBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANEf9WvpeimqsHU3jkij2C46lcM2ONz91xJi83o7UJnB+3WaNtoQ ZnybeAinOux/DZCuwaIlq9KTh3SSRWqRHA2+p0xvu9OpuaVy9MAPVOoRx8s84P5f hakBeEGNSVmM+dqiUxocAZ27eDh7ilwcyZeXnEUqPfHPQjNmbwFAIqGcwSF/+0+X yrXqe8JcpSTPvRkQhmjZ78wYL+QbB7koxZIDbSma49iMxcL4s1H4d1pA9XWT6zRr mwF9XRa13jgDmbsuPovI381h+b6yMbstaW0HFHdYpOVLL3AYjM05QdbVEyXXltFs pRcmR9cgTUtVEqrlNOoC1ddcdIU0tR/0nKMCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQo5c8EoSYI8/Q6ESMzLRO3zPDhojAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIxMDQyL0tPWFBCS0VtQ1BQME9oRWpNeTBUdDh6dzRhSS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARwjIAwDQYJKoZIhvcNAQELBQAD ggEBAIvajYupA3Vi3SkwX3jG5NZjjn7dL15zhoz0sIVCzr3tobrLwGAn/+N16LtN OYKACKoDjONxKrbFXyxKwpx6ItyyOb27IjswUVj/RXNDyR7jSOEL7tGLGAZ2AOIq MX+uTlJntD4v3uZ7IDqetO420PyLt5gbhdTGrUHNUBcCemK6Dzze1ByDqnNg1drk HcyeflSiTFcXUQHQWVDqIok6U/cGvJnxF0t0s64QWngx32NPubetKDQkn2WkTz6D ZtTl51zrg7Cd5uSEVMRpyk/zmKmE81H9iRJ4Hd1GtJdtSH+eik3z4p5Q8Rnujiet sIwmi3O51s2q9TNME61jG+yX8IE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:10 2026 by rpki-client