$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oxTp3NhLA3iLxy225jHifO6G8to.roa File: oxTp3NhLA3iLxy225jHifO6G8to.roa (raw, json) Hash identifier: s7l6kWeiNsMsfaZDYb8DuuI0oWWrSDaT1+vnEY8uqYc= Subject key identifier: A3:14:E9:DC:D8:4B:03:78:8B:C7:2D:B6:E6:31:E2:7C:EE:86:F2:DA Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 9C Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oxTp3NhLA3iLxy225jHifO6G8to.roa Signing time: Tue 31 Mar 2026 07:55:11 +0000 ROA not before: Tue 31 Mar 2026 07:55:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 157.112.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 31 07:55:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A314E9DCD84B03788BC72DB6E631E27CEE86F2DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:07:b4:5a:99:95:45:41:70:d6:e9:04:11: da:a1:3d:67:b9:99:3c:d4:17:e2:c3:7c:63:69:2c: 3c:75:b0:aa:9d:03:02:34:d9:f5:c8:ac:0a:ed:c3: 78:cd:c1:f4:0a:b9:28:82:73:e3:a4:b1:5a:10:00: fc:bf:4a:25:4d:94:fd:44:bf:91:1b:d2:b9:ae:d2: f5:95:d0:2a:60:64:65:c0:4e:90:7c:50:42:44:49: 7f:04:8e:17:10:59:75:cc:3a:99:8f:9e:31:be:97: e7:7a:c5:58:35:63:50:b5:05:70:06:14:83:3b:35: 48:da:e4:e2:98:5a:cf:e0:63:84:d9:93:ec:ef:63: 67:8f:75:32:8a:a6:7c:29:f2:f7:5f:1a:29:14:fa: 24:c0:ce:af:66:ae:3b:7a:04:57:cf:03:09:7a:e2: 79:e8:9f:53:c6:03:bf:af:8f:a8:a6:d0:fa:7c:5f: 60:39:64:1c:b4:09:67:76:e4:4c:0c:fd:1b:1b:de: 6e:e6:e4:4a:81:b7:50:41:6c:a4:e1:08:34:dc:af: 93:6f:5e:97:59:cf:ea:2e:7c:05:a0:f1:ef:2f:b8: 3a:9b:b1:e6:70:ce:fc:97:07:e2:7a:91:e2:82:11: 67:25:73:bc:f0:19:45:d3:97:dc:52:c5:6b:1f:91: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:14:E9:DC:D8:4B:03:78:8B:C7:2D:B6:E6:31:E2:7C:EE:86:F2:DA X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oxTp3NhLA3iLxy225jHifO6G8to.roa sbgp-ipAddrBlock: critical IPv4: 157.112.0.0/18 Signature Algorithm: sha256WithRSAEncryption 59:ce:62:2b:20:cd:a3:ac:6c:4a:70:6f:0e:07:09:f4:7f:73: 43:36:ca:a5:e8:2f:69:77:c5:68:8a:58:0e:da:99:67:60:03: 00:43:d8:89:cd:a8:81:e1:17:cf:e7:fe:10:c2:a7:81:c1:24: 47:d7:15:f4:98:6a:07:a4:29:d7:7f:88:7f:57:7c:2a:27:ba: ec:0a:fe:a5:9c:24:8a:40:ad:f4:f1:50:9e:7d:2b:f6:ec:5e: f5:a7:2e:a9:c8:25:a0:ef:26:e2:20:6d:53:1a:17:b5:ae:7a: ed:8e:7a:82:e1:6b:fc:3b:bf:c1:8b:18:80:13:fb:0b:e9:3e: 86:4c:48:8d:b3:dd:6b:58:ba:41:9f:9a:f7:2d:e7:6f:d2:54: bd:2b:8e:16:db:8b:74:59:f8:33:8d:b5:0c:55:48:15:d8:1f: bd:05:e8:c1:8b:bb:5b:bd:a0:7b:0e:24:d5:0c:7a:12:c9:3f: c8:14:26:7c:f9:11:84:8d:d0:d5:aa:9a:0a:79:10:b9:b8:51: 82:bc:cf:64:46:11:31:7b:1f:76:1b:92:ae:93:10:94:bc:40: 0b:50:94:42:47:73:87:64:0d:0c:ec:6a:3f:40:66:3a:71:e8: 28:bf:9f:77:2f:02:3e:f0:02:e7:52:b6:76:5c:a7:72:94:3e: f9:21:7e:81 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw NzU1MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzMTRFOURDRDg0QjAz Nzg4QkM3MkRCNkU2MzFFMjdDRUU4NkYyREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDrAe0WpmVRUFw1ukEEdqhPWe5mTzUF+LDfGNpLDx1sKqdAwI0 2fXIrArtw3jNwfQKuSiCc+OksVoQAPy/SiVNlP1Ev5Eb0rmu0vWV0CpgZGXATpB8 UEJESX8EjhcQWXXMOpmPnjG+l+d6xVg1Y1C1BXAGFIM7NUja5OKYWs/gY4TZk+zv Y2ePdTKKpnwp8vdfGikU+iTAzq9mrjt6BFfPAwl64nnon1PGA7+vj6im0Pp8X2A5 ZBy0CWd25EwM/Rsb3m7m5EqBt1BBbKThCDTcr5NvXpdZz+oufAWg8e8vuDqbseZw zvyXB+J6keKCEWclc7zwGUXTl9xSxWsfkYSTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUoxTp3NhLA3iLxy225jHifO6G8towHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L294VHAzTmhMQTNpTHh5MjI1akhpZk82Rzh0by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAadcAAwDQYJKoZIhvcNAQELBQADggEB AFnOYisgzaOsbEpwbw4HCfR/c0M2yqXoL2l3xWiKWA7amWdgAwBD2InNqIHhF8/n /hDCp4HBJEfXFfSYagekKdd/iH9XfConuuwK/qWcJIpArfTxUJ59K/bsXvWnLqnI JaDvJuIgbVMaF7Wueu2OeoLha/w7v8GLGIAT+wvpPoZMSI2z3WtYukGfmvct52/S VL0rjhbbi3RZ+DONtQxVSBXYH70F6MGLu1u9oHsOJNUMehLJP8gUJnz5EYSN0NWq mgp5ELm4UYK8z2RGETF7H3Ybkq6TEJS8QAtQlEJHc4dkDQzsaj9AZjpx6Ci/n3cv Aj7wAudStnZcp3KUPvkhfoE= -----END CERTIFICATE-----Generated at Tue Apr 7 22:29:30 2026 by rpki-client