$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qq2M-29Gf917MKLQ7fZDU8U5dqw.roa File: Qq2M-29Gf917MKLQ7fZDU8U5dqw.roa (raw, json) Hash identifier: ph6DPlGjWQZwG2gfcq7m5RfGpgocI8NTMd0or9MsvMg= Subject key identifier: 42:AD:8C:FB:6F:46:7F:DD:7B:30:A2:D0:ED:F6:43:53:C5:39:76:AC Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: AB Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qq2M-29Gf917MKLQ7fZDU8U5dqw.roa Signing time: Tue 31 Mar 2026 07:55:18 +0000 ROA not before: Tue 31 Mar 2026 07:55:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 146.160.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 31 07:55:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=42AD8CFB6F467FDD7B30A2D0EDF64353C53976AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:ae:80:f6:3b:4f:8d:65:e7:d8:c9:d2:32: b7:36:d4:12:0b:d2:12:d7:0c:13:86:f4:af:7f:29: 4a:3d:2e:d6:c9:16:26:13:0a:c9:4c:a7:e1:aa:2d: 5a:04:e0:cd:3d:03:e3:a0:2b:04:20:81:aa:37:45: b5:21:fe:9e:51:aa:ff:5e:78:2d:da:24:2b:ae:1a: 5d:ee:a7:e2:8e:07:b0:19:4f:e6:00:af:86:01:ad: 51:6c:03:fe:3a:59:a6:63:5d:42:ed:98:93:50:42: 64:41:9a:36:98:77:f1:0f:f9:c1:6a:f7:04:16:62: 6a:0b:47:52:f2:a1:7d:a5:e9:46:ee:d0:9f:78:7d: d5:c5:a9:57:aa:39:c3:cb:dd:d9:f9:c9:80:be:0e: bc:fd:40:21:bb:e5:72:fe:c9:1f:53:1d:a8:3b:83: 51:70:00:d6:4f:79:c6:db:c6:f3:9e:f1:a1:98:c6: 98:90:0b:70:e1:bf:72:69:6a:f6:99:3b:33:c6:72: 30:c8:ad:64:a8:f9:fd:c3:7c:be:e1:61:cc:33:30: 24:1b:02:bc:36:a6:2e:35:d2:c1:9b:51:55:03:14: 22:d1:17:f9:0b:d9:4f:68:bf:47:e0:77:53:3f:76: 0d:85:d4:00:f2:36:e3:aa:9e:b0:4b:a1:12:79:d4: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:8C:FB:6F:46:7F:DD:7B:30:A2:D0:ED:F6:43:53:C5:39:76:AC X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qq2M-29Gf917MKLQ7fZDU8U5dqw.roa sbgp-ipAddrBlock: critical IPv4: 146.160.0.0/17 Signature Algorithm: sha256WithRSAEncryption 01:4b:a6:c2:83:77:ee:60:91:9a:da:d0:b8:4b:31:b4:72:87: 6f:17:de:92:ca:fc:38:49:88:c3:77:b3:ed:8c:2a:9c:47:3d: 3e:77:4e:25:13:ae:84:b4:00:eb:22:0f:42:65:8e:4b:a4:fb: 3c:2b:05:46:db:ab:e7:16:d7:34:0e:f5:73:f9:43:eb:3d:d1: e9:bf:69:43:e2:19:be:76:fd:36:5a:ba:a1:f1:e3:31:11:2b: 0b:07:39:01:e0:95:d5:5d:70:b8:c6:34:86:aa:4c:f1:f5:6c: 00:c5:93:2a:07:55:2c:ff:a5:8a:4e:b9:ff:b2:0b:ad:86:17: 6f:23:b1:e7:2e:1d:b7:3d:e2:c0:45:20:63:cb:c9:ea:75:24: f8:78:66:50:91:06:e1:0f:92:46:31:8d:4c:d6:bf:0b:8b:64: 10:e2:63:ce:d2:ad:84:92:9d:c7:7a:c1:6c:64:f0:31:b7:91: d9:eb:c4:35:86:ad:bb:82:8f:d6:50:c8:28:57:c7:d8:32:4e: 64:80:6f:30:e9:92:cc:aa:82:77:5b:e7:fe:c5:25:79:c0:6c: e0:c6:cd:26:25:c6:dd:ea:d3:8d:ca:fb:c9:b7:6d:69:03:5f: b6:ed:87:22:0a:ec:27:3e:25:b7:b4:2f:8c:6f:61:38:fd:d6: 61:c6:02:9f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw NzU1MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQyQUQ4Q0ZCNkY0NjdG REQ3QjMwQTJEMEVERjY0MzUzQzUzOTc2QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvwa6A9jtPjWXn2MnSMrc21BIL0hLXDBOG9K9/KUo9LtbJFiYT CslMp+GqLVoE4M09A+OgKwQggao3RbUh/p5Rqv9eeC3aJCuuGl3up+KOB7AZT+YA r4YBrVFsA/46WaZjXULtmJNQQmRBmjaYd/EP+cFq9wQWYmoLR1LyoX2l6Ubu0J94 fdXFqVeqOcPL3dn5yYC+Drz9QCG75XL+yR9THag7g1FwANZPecbbxvOe8aGYxpiQ C3Dhv3JpavaZOzPGcjDIrWSo+f3DfL7hYcwzMCQbArw2pi410sGbUVUDFCLRF/kL 2U9ov0fgd1M/dg2F1ADyNuOqnrBLoRJ51KSHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQq2M+29Gf917MKLQ7fZDU8U5dqwwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1FxMk0tMjlHZjkxN01LTFE3ZlpEVThVNWRxdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeSoAAwDQYJKoZIhvcNAQELBQADggEB AAFLpsKDd+5gkZra0LhLMbRyh28X3pLK/DhJiMN3s+2MKpxHPT53TiUTroS0AOsi D0Jljkuk+zwrBUbbq+cW1zQO9XP5Q+s90em/aUPiGb52/TZauqHx4zERKwsHOQHg ldVdcLjGNIaqTPH1bADFkyoHVSz/pYpOuf+yC62GF28jsecuHbc94sBFIGPLyep1 JPh4ZlCRBuEPkkYxjUzWvwuLZBDiY87SrYSSncd6wWxk8DG3kdnrxDWGrbuCj9ZQ yChXx9gyTmSAbzDpksyqgndb5/7FJXnAbODGzSYlxt3q043K+8m3bWkDX7bthyIK 7Cc+Jbe0L4xvYTj91mHGAp8= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:28 2026 by rpki-client