$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OBY-wj33jggwc4vKbsvXOYVQ17Q.roa File: OBY-wj33jggwc4vKbsvXOYVQ17Q.roa (raw, json) Hash identifier: MuoDiGLZN61PlsiOJrJNXCrJXoj3EhQAoEWa1UkoE9Q= Subject key identifier: 38:16:3E:C2:3D:F7:8E:08:30:73:8B:CA:6E:CB:D7:39:85:50:D7:B4 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 9F Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OBY-wj33jggwc4vKbsvXOYVQ17Q.roa Signing time: Tue 31 Mar 2026 07:55:13 +0000 ROA not before: Tue 31 Mar 2026 07:55:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 160.249.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 31 07:55:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=38163EC23DF78E0830738BCA6ECBD7398550D7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:a5:7c:ec:4c:de:5c:34:c6:39:11:ca:7c: 5d:cf:95:74:22:38:c8:e1:4c:4e:22:75:8a:f2:5d: 16:dc:24:62:86:5d:97:d4:9f:3d:87:1f:62:d2:a9: 68:39:55:77:a6:30:69:fb:75:b7:39:50:70:15:77: f3:73:26:59:ff:87:db:0e:bf:26:69:84:69:a4:40: 49:11:7f:93:ab:9d:dc:86:7a:48:1d:eb:1c:85:88: 12:d3:7d:6d:96:66:04:2d:7a:53:d2:ae:99:7a:f3: 5b:04:2d:07:2b:0d:2a:20:0b:5f:cd:31:80:a2:2d: 8a:87:7d:71:61:94:b7:84:9f:ad:48:bc:25:92:0f: 76:4f:8a:44:b7:b9:3b:fe:73:11:33:7c:ae:80:2c: 14:17:f4:7a:37:8a:df:c4:d6:55:c7:88:ed:5c:51: c5:72:04:52:4f:a5:4a:ae:86:ab:88:11:95:c6:0d: a1:a5:17:6f:63:e4:10:29:ba:ee:31:68:c4:90:30: a7:9a:04:1c:ea:e0:19:f3:ac:2b:20:38:a5:88:9e: 2b:f7:8c:d6:d7:a5:e6:33:13:46:5f:05:64:63:f8: c4:14:83:e4:36:a3:da:9e:bb:c5:8c:93:55:eb:32: 5c:0f:c8:e4:cb:dd:b7:be:18:c7:bb:8f:ef:f0:a3: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:3E:C2:3D:F7:8E:08:30:73:8B:CA:6E:CB:D7:39:85:50:D7:B4 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OBY-wj33jggwc4vKbsvXOYVQ17Q.roa sbgp-ipAddrBlock: critical IPv4: 160.249.128.0/17 Signature Algorithm: sha256WithRSAEncryption 29:89:c4:5e:c8:88:69:58:41:4b:ea:df:f5:8d:4f:a9:85:10: 91:b4:74:bf:0c:b8:c3:d6:c3:0b:5d:8f:f0:66:78:86:8e:61: 88:98:6e:6a:29:ef:8c:6a:f0:a9:f3:a5:c4:58:c4:f5:a3:41: ee:4c:23:a5:10:ce:a6:3f:67:f3:58:e6:fa:89:30:3b:7e:24: 82:1c:91:17:49:bf:0a:a8:8f:da:9a:63:f2:5e:84:b8:fa:da: b9:2c:0d:a2:d7:3a:75:38:95:9e:85:e3:d2:77:67:42:ff:97: 84:16:c0:c4:4b:ff:5f:29:f2:11:30:8c:e4:57:6b:b4:36:d7: 9e:be:0b:d7:45:06:3a:38:9e:c6:02:f2:f5:2b:16:be:6f:f3: 28:98:6e:5c:e4:16:1d:51:93:3b:9e:7a:b6:67:0d:82:ba:88: 42:74:00:e7:9c:6d:66:bb:14:ef:6c:ed:d8:c7:3b:61:f2:40: 34:e9:ec:2f:5e:21:26:40:eb:21:26:78:f9:31:62:83:c8:48: c2:cf:a4:5c:10:74:7c:4e:d1:9e:ec:84:18:49:29:3e:3a:1c: fe:17:e1:43:48:92:05:02:e9:4d:ea:ff:d4:b7:f6:40:ed:48: 8a:d1:6b:1d:84:10:42:4a:b3:30:ec:78:2d:d5:b4:a2:04:ca: 1d:73:06:87 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw NzU1MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4MTYzRUMyM0RGNzhF MDgzMDczOEJDQTZFQ0JENzM5ODU1MEQ3QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVO6V87EzeXDTGORHKfF3PlXQiOMjhTE4idYryXRbcJGKGXZfU nz2HH2LSqWg5VXemMGn7dbc5UHAVd/NzJln/h9sOvyZphGmkQEkRf5OrndyGekgd 6xyFiBLTfW2WZgQtelPSrpl681sELQcrDSogC1/NMYCiLYqHfXFhlLeEn61IvCWS D3ZPikS3uTv+cxEzfK6ALBQX9Ho3it/E1lXHiO1cUcVyBFJPpUquhquIEZXGDaGl F29j5BApuu4xaMSQMKeaBBzq4BnzrCsgOKWIniv3jNbXpeYzE0ZfBWRj+MQUg+Q2 o9qeu8WMk1XrMlwPyOTL3be+GMe7j+/wowgxAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOBY+wj33jggwc4vKbsvXOYVQ17QwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L09CWS13ajMzamdnd2M0dktic3ZYT1lWUTE3US5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeg+YAwDQYJKoZIhvcNAQELBQADggEB ACmJxF7IiGlYQUvq3/WNT6mFEJG0dL8MuMPWwwtdj/BmeIaOYYiYbmop74xq8Knz pcRYxPWjQe5MI6UQzqY/Z/NY5vqJMDt+JIIckRdJvwqoj9qaY/JehLj62rksDaLX OnU4lZ6F49J3Z0L/l4QWwMRL/18p8hEwjORXa7Q2156+C9dFBjo4nsYC8vUrFr5v 8yiYblzkFh1RkzueerZnDYK6iEJ0AOecbWa7FO9s7djHO2HyQDTp7C9eISZA6yEm ePkxYoPISMLPpFwQdHxO0Z7shBhJKT46HP4X4UNIkgUC6U3q/9S39kDtSIrRax2E EEJKszDseC3VtKIEyh1zBoc= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:36 2026 by rpki-client