$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HeUIuNKXc0Bh8RsLOigRcF6aqfw.roa File: HeUIuNKXc0Bh8RsLOigRcF6aqfw.roa (raw, json) Hash identifier: rm93fQrN8Hogvl7E6hO7AiaM1THRaXyXjVNnO2vMamY= Subject key identifier: 1D:E5:08:B8:D2:97:73:40:61:F1:1B:0B:3A:28:11:70:5E:9A:A9:FC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 176E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HeUIuNKXc0Bh8RsLOigRcF6aqfw.roa Signing time: Tue 31 Mar 2026 08:03:47 +0000 ROA not before: Tue 31 Mar 2026 08:03:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.158.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5998 (0x176e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1DE508B8D297734061F11B0B3A2811705E9AA9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:16:4c:69:e0:57:24:e7:37:03:30:f0:d2: 0c:e7:38:3d:ed:67:5f:fc:b7:d6:94:a2:03:58:8d: 49:3f:f2:0c:89:28:6c:72:93:41:d1:28:e4:84:72: 88:8d:d3:c9:26:6e:d5:70:7b:ff:81:47:2c:2b:3a: 38:96:d8:85:5c:7d:7f:1c:18:a7:76:76:ad:c3:c8: 55:48:0b:fa:af:c0:94:7b:30:17:d2:58:b0:d3:2a: 6e:e7:85:b1:cf:df:e6:e4:5c:b3:50:a6:de:b1:b0: ee:7d:e8:a1:ed:0e:3d:94:37:8c:8d:dd:88:96:60: 72:c1:74:a0:ad:c2:90:30:87:bc:d1:81:9a:11:2a: b9:f0:27:a2:00:24:0a:02:96:1d:52:1e:3c:bc:f9: 75:bf:d6:7e:8a:7f:e4:5a:e2:9c:32:57:33:d1:41: 2b:c0:a4:28:05:d1:5a:83:0f:98:79:21:6e:20:73: 80:3e:7e:7c:80:70:f2:10:df:7f:26:e1:0a:a8:65: bf:61:ed:89:c6:32:db:e8:da:a0:9c:54:fe:09:76: f2:4a:07:2f:79:66:f2:b7:9d:6f:39:80:a5:eb:80: b1:7c:02:4c:eb:6e:d0:35:02:de:4e:6a:cb:7f:f5: c3:62:e3:73:30:89:ed:58:8a:73:9d:25:85:8f:74: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:08:B8:D2:97:73:40:61:F1:1B:0B:3A:28:11:70:5E:9A:A9:FC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HeUIuNKXc0Bh8RsLOigRcF6aqfw.roa sbgp-ipAddrBlock: critical IPv4: 110.158.136.0/22 Signature Algorithm: sha256WithRSAEncryption 26:3a:4f:7a:54:35:d2:9b:a4:bb:35:26:7c:11:44:aa:75:84: bc:20:12:9e:0b:0d:29:b9:94:cb:10:7e:35:dc:e8:96:b4:ac: 4d:7d:e4:bb:ae:38:e5:17:ea:58:81:25:41:41:c3:40:a9:ab: e1:c1:80:07:9c:df:e0:c2:02:30:ea:89:fb:b9:26:e5:b1:32: e7:2d:81:fd:9b:5e:e4:77:54:b4:21:1b:3a:0a:41:9d:ea:3f: ec:4d:92:a1:20:5c:79:40:14:48:97:35:b7:02:a0:7a:9b:67: e2:20:28:c6:f5:2d:c5:2c:5d:64:5a:32:5c:2d:b0:43:0b:01: 58:cb:69:17:14:54:1e:27:e1:83:3d:10:80:3c:64:70:ac:11: 30:e1:02:1c:dd:c9:95:56:16:1c:75:fa:c2:a9:cd:00:a1:ef: ad:58:d2:6b:b8:3d:41:31:77:6b:68:18:89:7e:6d:12:48:cb: 04:87:a1:ec:50:eb:dd:20:e7:6f:f7:22:9a:11:26:b5:e6:5a: d0:1f:33:08:7c:f7:b1:3d:d3:9f:c3:fa:1f:f4:15:b1:2e:55: 34:f3:50:a1:fe:95:0f:b9:c3:d7:43:a1:aa:0d:82:59:e6:3a: 55:7e:b1:34:40:81:b9:75:d9:38:5b:fd:6c:25:d0:b8:9e:c5: 13:8c:af:20 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFERTUwOEI4RDI5Nzcz NDA2MUYxMUIwQjNBMjgxMTcwNUU5QUE5RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZGhZMaeBXJOc3AzDw0gznOD3tZ1/8t9aUogNYjUk/8gyJKGxy k0HRKOSEcoiN08kmbtVwe/+BRywrOjiW2IVcfX8cGKd2dq3DyFVIC/qvwJR7MBfS WLDTKm7nhbHP3+bkXLNQpt6xsO596KHtDj2UN4yN3YiWYHLBdKCtwpAwh7zRgZoR KrnwJ6IAJAoClh1SHjy8+XW/1n6Kf+Ra4pwyVzPRQSvApCgF0VqDD5h5IW4gc4A+ fnyAcPIQ338m4QqoZb9h7YnGMtvo2qCcVP4JdvJKBy95ZvK3nW85gKXrgLF8Akzr btA1At5Oast/9cNi43Mwie1YinOdJYWPdKVnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHeUIuNKXc0Bh8RsLOigRcF6aqfwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hlVUl1TktYYzBCaDhSc0xPaWdSY0Y2YXFmdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJunogwDQYJKoZIhvcNAQELBQADggEB ACY6T3pUNdKbpLs1JnwRRKp1hLwgEp4LDSm5lMsQfjXc6Ja0rE195LuuOOUX6liB JUFBw0Cpq+HBgAec3+DCAjDqifu5JuWxMuctgf2bXuR3VLQhGzoKQZ3qP+xNkqEg XHlAFEiXNbcCoHqbZ+IgKMb1LcUsXWRaMlwtsEMLAVjLaRcUVB4n4YM9EIA8ZHCs ETDhAhzdyZVWFhx1+sKpzQCh761Y0mu4PUExd2toGIl+bRJIywSHoexQ690g52/3 IpoRJrXmWtAfMwh897E905/D+h/0FbEuVTTzUKH+lQ+5w9dDoaoNglnmOlV+sTRA gbl12Thb/Wwl0LiexROMryA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:56 2026 by rpki-client