$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o156ebh5M2pD7oN8L12Ka6w9LOM.roa File: o156ebh5M2pD7oN8L12Ka6w9LOM.roa (raw, json) Hash identifier: XZwwWWtN+s5r+nEc4Z4SLp9rwIIXllF/70EWwlfmFkk= Subject key identifier: A3:5E:7A:79:B8:79:33:6A:43:EE:83:7C:2F:5D:8A:6B:AC:3D:2C:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15AF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o156ebh5M2pD7oN8L12Ka6w9LOM.roa Signing time: Tue 31 Mar 2026 08:00:09 +0000 ROA not before: Tue 31 Mar 2026 08:00:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5551 (0x15af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A35E7A79B879336A43EE837C2F5D8A6BAC3D2CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:76:93:b7:b1:56:d1:c7:6a:08:cd:7d:59: 2e:16:72:e0:ff:be:2a:8b:e2:0a:5d:2c:b3:0a:c7: ce:c4:2e:e0:7a:7c:a2:7c:c4:a6:28:2e:d6:35:a4: 02:38:16:e0:89:32:fe:67:0d:26:7d:6a:0d:31:d6: 99:ce:98:8c:5d:57:4f:51:e5:a5:20:d6:29:6a:06: f4:c9:51:15:49:0e:7a:aa:60:54:16:46:40:23:38: bc:aa:8a:1f:d5:36:4a:e1:e7:71:04:3c:28:53:7b: 04:88:36:0d:e4:81:f4:57:f9:13:bb:8a:ae:61:3c: d4:9d:9a:54:5d:6d:27:09:41:da:ed:63:be:2d:31: 9f:c2:cc:24:ce:4d:4b:b4:77:2a:58:36:07:3c:a7: 78:fb:de:2d:dd:85:25:a7:de:51:4f:6b:52:86:3c: 5f:eb:e5:c3:c5:0a:60:80:67:f0:74:89:f4:f8:2e: ed:44:de:06:ab:32:8a:df:34:ce:7b:53:dc:3d:19: 11:bf:d6:ce:96:b9:7c:03:ad:cc:b3:dc:93:f2:4f: 5f:9a:22:07:27:72:b1:e4:4e:62:18:a8:6d:5a:cf: 4c:62:c4:7a:ce:34:3e:4a:2b:b0:60:de:6e:ed:97: c0:9a:2c:96:c9:a1:ed:84:1d:ab:86:9a:d6:9c:19: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5E:7A:79:B8:79:33:6A:43:EE:83:7C:2F:5D:8A:6B:AC:3D:2C:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o156ebh5M2pD7oN8L12Ka6w9LOM.roa sbgp-ipAddrBlock: critical IPv4: 211.14.92.0/23 Signature Algorithm: sha256WithRSAEncryption 28:b3:34:8b:19:e5:b4:f9:b4:86:43:e9:34:0e:34:77:b9:b7: 69:0d:89:ce:8f:17:8a:b3:61:b3:f8:ec:d9:e4:0e:5c:24:ad: b0:30:a4:ec:b3:68:06:84:d0:54:51:0e:cf:75:d6:9a:1d:eb: f2:12:02:a1:ba:0d:80:82:a3:30:5b:96:fb:a9:5e:69:0f:4e: 0b:c6:25:48:12:33:55:b3:52:a0:ad:6e:03:27:5e:3b:24:d7: e9:69:2f:22:b5:fb:d7:78:7e:ab:34:58:95:cc:55:a8:77:60: af:ae:6c:0c:3e:8c:da:28:55:8b:b7:33:29:52:e7:aa:d1:9d: 47:4c:33:42:79:00:ad:85:70:3b:c8:37:96:e0:d4:88:60:14: ec:9d:d0:25:2e:a3:2f:fa:5d:46:be:21:33:7e:98:c7:d1:3f: c7:e6:c6:4e:87:78:b4:a8:fb:74:a1:97:39:f2:9c:b3:03:0d: 7e:ae:64:9d:b0:f2:86:46:f7:f6:37:6b:c6:c7:49:47:c7:c6: 28:8c:32:60:fc:1a:f7:9e:fe:bf:99:47:cf:4c:64:91:3e:48: 9a:fe:bb:91:4d:08:f0:78:74:77:af:ca:69:45:a0:fc:ef:de: 4e:7b:e4:13:2c:ea:70:cf:33:30:e5:ae:cb:27:92:5b:a0:81: 37:23:0c:a9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzNUU3QTc5Qjg3OTMz NkE0M0VFODM3QzJGNUQ4QTZCQUMzRDJDRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLkXaTt7FW0cdqCM19WS4WcuD/viqL4gpdLLMKx87ELuB6fKJ8 xKYoLtY1pAI4FuCJMv5nDSZ9ag0x1pnOmIxdV09R5aUg1ilqBvTJURVJDnqqYFQW RkAjOLyqih/VNkrh53EEPChTewSINg3kgfRX+RO7iq5hPNSdmlRdbScJQdrtY74t MZ/CzCTOTUu0dypYNgc8p3j73i3dhSWn3lFPa1KGPF/r5cPFCmCAZ/B0ifT4Lu1E 3garMorfNM57U9w9GRG/1s6WuXwDrcyz3JPyT1+aIgcncrHkTmIYqG1az0xixHrO ND5KK7Bg3m7tl8CaLJbJoe2EHauGmtacGQ+xAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUo156ebh5M2pD7oN8L12Ka6w9LOMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L28xNTZlYmg1TTJwRDdvTjhMMTJLYTZ3OUxPTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTDlwwDQYJKoZIhvcNAQELBQADggEB ACizNIsZ5bT5tIZD6TQONHe5t2kNic6PF4qzYbP47NnkDlwkrbAwpOyzaAaE0FRR Ds911pod6/ISAqG6DYCCozBblvupXmkPTgvGJUgSM1WzUqCtbgMnXjsk1+lpLyK1 +9d4fqs0WJXMVah3YK+ubAw+jNooVYu3MylS56rRnUdMM0J5AK2FcDvIN5bg1Ihg FOyd0CUuoy/6XUa+ITN+mMfRP8fmxk6HeLSo+3ShlznynLMDDX6uZJ2w8oZG9/Y3 a8bHSUfHxiiMMmD8Gvee/r+ZR89MZJE+SJr+u5FNCPB4dHevymlFoPzv3k575BMs 6nDPMzDlrssnkluggTcjDKk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:50 2026 by rpki-client