$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/FLOhFCIyxZI1Y-mosPGKHqdUFkQ.roa File: FLOhFCIyxZI1Y-mosPGKHqdUFkQ.roa (raw, json) Hash identifier: WrLjVkD+mNDPfsMVQ3GxGKe4LGv88s3arfVa9J7IakI= Subject key identifier: 14:B3:A1:14:22:32:C5:92:35:63:E9:A8:B0:F1:8A:1E:A7:54:16:44 Certificate issuer: /CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF Certificate serial: 62 Authority key identifier: 86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FLOhFCIyxZI1Y-mosPGKHqdUFkQ.roa Signing time: Tue 31 Mar 2026 07:30:18 +0000 ROA not before: Tue 31 Mar 2026 07:30:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9607 IP address blocks: 208.111.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF Validity Not Before: Mar 31 07:30:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=14B3A1142232C5923563E9A8B0F18A1EA7541644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:4f:53:a8:4b:2a:9d:b1:32:91:7b:74:3f: b3:3a:c6:52:70:7a:02:bd:55:81:34:59:e1:1e:d0: ad:fe:05:e0:3e:5e:ae:79:d4:0f:23:94:d9:9e:1e: ba:88:2d:db:60:f4:1c:59:b2:46:0d:85:3b:34:91: 45:78:f8:f7:2d:8e:6c:28:d5:65:4a:4b:01:20:93: 59:bf:64:cb:73:09:f9:07:2f:0d:79:19:77:b7:98: 51:49:48:d9:d0:21:db:c5:31:5a:c8:16:2b:49:fb: 78:81:69:90:a2:0e:85:08:0c:85:7b:06:50:29:91: 25:19:a2:fb:34:41:47:60:18:da:38:95:42:2a:60: a7:74:3b:fe:c8:7b:e1:1d:f8:af:90:9f:1a:a8:2a: 83:62:59:f0:8c:bf:8f:e9:a7:31:06:df:fa:15:6d: 79:ee:06:43:99:63:68:09:03:6d:50:5e:9a:2a:10: e3:fb:1e:92:f5:a0:22:c5:b6:c5:c8:5d:9e:a3:35: ec:e0:5f:c6:a2:14:f4:9b:a8:69:2b:55:bb:c9:d7: bb:4b:d2:f1:b5:57:11:39:bb:a3:94:94:a1:ed:8d: 65:30:86:42:96:58:36:a9:4c:ee:ec:0d:cf:b1:04: 90:68:f9:5b:48:46:a0:35:9e:d0:b7:c5:8e:aa:af: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B3:A1:14:22:32:C5:92:35:63:E9:A8:B0:F1:8A:1E:A7:54:16:44 X509v3 Authority Key Identifier: keyid:86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FLOhFCIyxZI1Y-mosPGKHqdUFkQ.roa sbgp-ipAddrBlock: critical IPv4: 208.111.48.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:d6:06:e7:7b:79:de:37:f3:25:90:83:3d:a9:fa:b1:61:29: 22:be:79:c0:93:dc:96:95:da:a1:84:e1:5d:8a:06:28:ea:2f: b9:f1:4b:08:f0:4e:29:bb:18:e3:3c:55:b9:da:3c:8c:66:02: e5:88:ba:c3:f8:69:cb:11:f1:f2:0a:de:f5:71:31:c9:17:10: 1f:d2:3e:98:d3:f9:c8:fe:74:42:34:df:dc:54:d5:6d:2d:4d: 3b:52:4d:d7:bf:0f:bf:15:f7:9e:79:b4:56:6d:8b:d5:0a:e4: 6b:51:83:64:09:e5:71:54:9b:4b:d4:df:8e:c2:c9:7b:68:f8: af:97:d5:76:51:3a:c1:64:9a:6b:4c:81:a0:53:63:ed:8b:9c: 75:bb:f0:ac:44:dc:b4:e4:1e:11:eb:38:fd:23:c5:be:5e:60: e9:5e:80:d5:9a:98:c0:51:82:5c:6c:e4:0e:50:e6:7c:d6:ba: f7:61:4b:88:28:37:5b:fe:2b:b4:98:d9:0d:2d:2d:71:81:7a: bb:28:88:00:a1:11:30:3d:14:a5:81:15:e8:01:13:f5:93:8d: 5f:00:2f:9c:db:66:65:b4:c4:81:3b:37:4e:11:1c:29:f9:8c: 8d:b0:60:27:90:c6:8d:86:3e:c8:fd:44:72:71:29:44:2a:5d: 18:cf:61:b8 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NkEw QkUwMkQ0OTFGMzVBNTYxQ0M0OTA0QkVCN0VCMUFENEVDMkZGMB4XDTI2MDMzMTA3 MzAxOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTRCM0ExMTQyMjMyQzU5 MjM1NjNFOUE4QjBGMThBMUVBNzU0MTY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ2+T1OoSyqdsTKRe3Q/szrGUnB6Ar1VgTRZ4R7Qrf4F4D5ernnU DyOU2Z4euogt22D0HFmyRg2FOzSRRXj49y2ObCjVZUpLASCTWb9ky3MJ+QcvDXkZ d7eYUUlI2dAh28UxWsgWK0n7eIFpkKIOhQgMhXsGUCmRJRmi+zRBR2AY2jiVQipg p3Q7/sh74R34r5CfGqgqg2JZ8Iy/j+mnMQbf+hVtee4GQ5ljaAkDbVBemioQ4/se kvWgIsW2xchdnqM17OBfxqIU9JuoaStVu8nXu0vS8bVXETm7o5SUoe2NZTCGQpZY NqlM7uwNz7EEkGj5W0hGoDWe0LfFjqqv51cCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQUs6EUIjLFkjVj6aiw8Yoep1QWRDAfBgNVHSMEGDAWgBSGoL4C1JHzWlYcxJBL 636xrU7C/zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzU0L2hxQy1BdFNSODFwV0hNU1FTLXQtc2ExT3d2OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hxQy1BdFNSODFwV0hNU1FTLXQtc2Ex T3d2OC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8zNTQvRkxPaEZDSXl4WkkxWS1tb3NQR0tIcWRVRmtRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9BvMDANBgkqhkiG9w0BAQsFAAOCAQEA DdYG53t53jfzJZCDPan6sWEpIr55wJPclpXaoYThXYoGKOovufFLCPBOKbsY4zxV udo8jGYC5Yi6w/hpyxHx8gre9XExyRcQH9I+mNP5yP50QjTf3FTVbS1NO1JN178P vxX3nnm0Vm2L1Qrka1GDZAnlcVSbS9TfjsLJe2j4r5fVdlE6wWSaa0yBoFNj7Yuc dbvwrETctOQeEes4/SPFvl5g6V6A1ZqYwFGCXGzkDlDmfNa692FLiCg3W/4rtJjZ DS0tcYF6uyiIAKERMD0UpYEV6AET9ZONXwAvnNtmZbTEgTs3ThEcKfmMjbBgJ5DG jYY+yP1EcnEpRCpdGM9huA== -----END CERTIFICATE-----Generated at Tue Apr 7 22:27:23 2026 by rpki-client