$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qpk6RxnvJOnAge8_jXPCJttQF5M.roa File: Qpk6RxnvJOnAge8_jXPCJttQF5M.roa (raw, json) Hash identifier: F8H+bELkRE9/F+D9IZdujmNEHZ4VPjjPO6TU+py6oHs= Subject key identifier: 42:99:3A:47:19:EF:24:E9:C0:81:EF:3F:8D:73:C2:26:DB:50:17:93 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: A4 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qpk6RxnvJOnAge8_jXPCJttQF5M.roa Signing time: Tue 31 Mar 2026 07:55:15 +0000 ROA not before: Tue 31 Mar 2026 07:55:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 158.199.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 31 07:55:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=42993A4719EF24E9C081EF3F8D73C226DB501793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:de:a5:67:88:b3:36:02:ac:b7:34:8b:c4: 8a:15:b3:a6:fc:48:63:16:2f:f9:f7:19:ae:18:78: 0f:2f:6f:47:e0:d3:72:ea:3a:19:d8:23:28:ed:40: a9:fc:18:18:a8:3f:94:b6:6d:5d:e8:2b:cb:40:b8: dd:14:d4:d3:90:e5:2c:6d:9d:b1:5f:73:2f:8d:77: 2a:aa:2c:57:c3:8a:ca:99:c3:0e:3f:bc:2f:32:2b: 5f:e1:48:90:a4:2f:0b:46:d5:7b:23:c5:f9:55:d2: 8a:f3:dd:fe:b8:a0:30:45:fe:9a:01:1f:0e:44:08: eb:dc:5d:5e:c9:21:9c:da:55:44:73:f3:ac:99:14: 7b:32:be:97:85:58:d3:c2:af:dd:db:6a:9c:fc:a1: a4:2a:e6:39:71:03:df:0f:6e:ef:98:a0:48:02:01: 45:6b:cc:ef:a1:37:2d:61:21:f8:8b:c1:49:51:5c: 85:73:16:26:38:86:2a:75:06:2d:67:e1:66:4b:55: d4:fa:2a:93:26:4a:a4:9e:dd:d2:6c:ea:d9:e8:30: 8a:9e:74:73:cb:ee:09:d3:e1:bd:bd:c7:42:2e:da: c4:f0:dc:9a:c4:78:18:54:9c:49:68:cf:be:80:51: 92:f0:62:47:6a:36:17:d8:d1:22:11:c8:8f:ae:71: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:99:3A:47:19:EF:24:E9:C0:81:EF:3F:8D:73:C2:26:DB:50:17:93 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qpk6RxnvJOnAge8_jXPCJttQF5M.roa sbgp-ipAddrBlock: critical IPv4: 158.199.48.0/20 Signature Algorithm: sha256WithRSAEncryption aa:a5:77:77:53:5d:69:2d:a0:87:7c:7d:50:28:d1:7d:84:9d: 65:4b:03:74:c1:51:85:55:80:ea:62:03:cf:36:bf:3d:d5:1a: 2e:91:61:b0:79:29:91:4c:aa:76:c4:f2:ae:90:5d:57:dc:02: c9:ca:f4:89:5b:6a:88:ff:35:c7:50:70:55:25:af:0f:75:64: 7b:94:4b:38:57:e0:28:f7:07:a5:0f:9c:87:67:85:c3:0f:be: 8f:2e:c9:84:61:a0:01:32:ad:ef:43:20:34:36:10:08:58:38: 9b:1b:c6:81:42:d3:72:ff:65:55:7b:5e:81:92:db:4e:51:4f: 83:de:b1:03:fa:f6:8a:03:ec:87:27:60:17:5c:54:44:f9:f5: be:c4:fb:c6:81:7d:61:22:d6:4a:e0:53:f7:2b:3a:d3:1c:3c: 6c:80:71:81:9d:39:54:48:8a:18:2f:7d:75:18:b0:a8:7b:56: 35:0f:3d:86:9e:95:fc:1f:8a:03:80:df:49:49:0b:db:f8:9f: 05:be:1c:49:01:d9:61:d6:53:8c:79:82:6d:2f:92:7a:11:3d: 67:9c:45:1f:f6:a4:f5:68:df:45:07:32:b9:de:a2:3c:51:75: c3:4e:81:27:0f:8e:eb:f2:71:61:50:0a:de:92:7f:ad:7b:42: cb:91:a9:4f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw NzU1MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQyOTkzQTQ3MTlFRjI0 RTlDMDgxRUYzRjhENzNDMjI2REI1MDE3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfP96lZ4izNgKstzSLxIoVs6b8SGMWL/n3Ga4YeA8vb0fg03Lq OhnYIyjtQKn8GBioP5S2bV3oK8tAuN0U1NOQ5SxtnbFfcy+NdyqqLFfDisqZww4/ vC8yK1/hSJCkLwtG1XsjxflV0orz3f64oDBF/poBHw5ECOvcXV7JIZzaVURz86yZ FHsyvpeFWNPCr93bapz8oaQq5jlxA98Pbu+YoEgCAUVrzO+hNy1hIfiLwUlRXIVz FiY4hip1Bi1n4WZLVdT6KpMmSqSe3dJs6tnoMIqedHPL7gnT4b29x0Iu2sTw3JrE eBhUnEloz76AUZLwYkdqNhfY0SIRyI+ucRTlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQpk6RxnvJOnAge8/jXPCJttQF5MwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1FwazZSeG52Sk9uQWdlOF9qWFBDSnR0UUY1TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASexzAwDQYJKoZIhvcNAQELBQADggEB AKqld3dTXWktoId8fVAo0X2EnWVLA3TBUYVVgOpiA882vz3VGi6RYbB5KZFMqnbE 8q6QXVfcAsnK9Ilbaoj/NcdQcFUlrw91ZHuUSzhX4Cj3B6UPnIdnhcMPvo8uyYRh oAEyre9DIDQ2EAhYOJsbxoFC03L/ZVV7XoGS205RT4PesQP69ooD7IcnYBdcVET5 9b7E+8aBfWEi1krgU/crOtMcPGyAcYGdOVRIihgvfXUYsKh7VjUPPYaelfwfigOA 30lJC9v4nwW+HEkB2WHWU4x5gm0vknoRPWecRR/2pPVo30UHMrneojxRdcNOgScP juvycWFQCt6Sf617QsuRqU8= -----END CERTIFICATE-----Generated at Tue Apr 7 22:25:04 2026 by rpki-client