$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/HVBLZc1tlrf_5WxXh6m5fD31RWg.roa File: HVBLZc1tlrf_5WxXh6m5fD31RWg.roa (raw, json) Hash identifier: Zgk448181rfacFNVSAMa8zRcltZVtJ+vTiGXyf1qpSU= Subject key identifier: 1D:50:4B:65:CD:6D:96:B7:FF:E5:6C:57:87:A9:B9:7C:3D:F5:45:68 Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 0164 Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/HVBLZc1tlrf_5WxXh6m5fD31RWg.roa Signing time: Tue 31 Mar 2026 07:30:32 +0000 ROA not before: Tue 31 Mar 2026 07:30:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9607 IP address blocks: 218.231.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Mar 31 07:30:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1D504B65CD6D96B7FFE56C5787A9B97C3DF54568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:12:cf:82:6a:76:c4:91:ca:ef:9f:80:f0: f6:b3:34:5a:63:c0:8d:ab:d9:45:6a:40:17:c9:9e: 93:94:a0:33:c4:44:3b:1d:c9:21:10:f3:5f:40:50: af:41:aa:a3:d7:40:e3:a9:82:d2:e3:f2:b4:a6:4a: 25:7f:5c:ed:1f:4f:e7:10:17:2c:38:40:9c:da:1b: 4e:59:d7:cd:19:00:71:60:fa:03:d3:95:c0:a7:d9: 4e:0c:17:4b:33:48:ff:a2:cc:ac:20:6b:29:3f:da: 44:7c:32:38:31:34:d3:39:be:81:cd:db:1b:d0:4b: b5:3f:ca:6e:57:68:c1:9a:50:19:aa:a3:6c:03:8a: 68:b6:9f:da:c9:84:22:c5:58:bc:2a:82:fe:2e:d2: bf:a6:32:6b:45:34:42:f1:53:ba:c7:a1:b2:76:d9: f1:f2:28:dd:a7:27:89:95:e6:1e:0c:04:34:e2:87: 01:50:cb:d5:bf:e8:41:cb:02:57:2f:3e:e4:62:35: 34:e5:73:65:6d:ca:60:b9:1e:e8:e4:e5:1d:51:53: 9f:17:bd:f1:bb:6f:69:b8:4b:03:8f:3d:14:1a:a2: 4f:e1:06:0c:2d:ea:af:24:8a:70:c0:0d:71:87:53: 20:4c:dc:3a:25:5f:5a:36:68:fa:e2:42:21:ce:d2: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:50:4B:65:CD:6D:96:B7:FF:E5:6C:57:87:A9:B9:7C:3D:F5:45:68 X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/HVBLZc1tlrf_5WxXh6m5fD31RWg.roa sbgp-ipAddrBlock: critical IPv4: 218.231.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:f2:66:3e:c9:80:18:5c:f8:46:96:cf:66:fa:73:1d:01:8d: c0:d3:e1:83:ae:27:92:78:25:6d:dd:a9:bd:ec:80:7c:0c:01: 76:1b:dd:a8:08:17:56:aa:25:b9:31:5b:d4:db:3d:3d:4e:18: 05:65:4a:04:d0:71:e5:25:41:66:c1:f9:5f:06:6b:2b:f2:9c: b1:db:df:04:80:ef:84:ef:cf:73:9b:74:8c:df:e9:b7:10:55: ef:3d:4c:c1:15:5d:c2:bc:47:64:a6:68:21:6c:f4:ad:c2:8a: 06:21:9f:b3:02:25:a8:49:7b:9e:af:8d:01:59:01:c8:70:d5: 5f:7f:98:a1:3e:46:88:1c:28:23:29:89:d7:df:9f:18:77:db: 87:cf:ae:7c:47:9b:c6:d5:4c:e3:0f:c5:63:2b:63:a6:4c:f3: 2d:73:03:52:15:b4:a6:af:29:9a:ff:e3:31:7d:e5:3a:e8:30: 88:7c:0b:8b:39:69:f5:69:1a:65:2b:cf:db:6d:e1:44:91:d9: c1:83:44:04:42:9e:cb:97:4b:72:1a:d9:83:5f:ef:c9:3b:d2: d6:9b:d1:45:88:e9:61:c3:67:e2:1c:f8:89:04:d2:ca:89:44: fa:c1:17:65:32:c7:d6:c8:ef:d3:03:af:d9:e3:74:c2:9c:be: 8d:f3:82:1c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNjAzMzEw NzMwMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFENTA0QjY1Q0Q2RDk2 QjdGRkU1NkM1Nzg3QTlCOTdDM0RGNTQ1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/ohLPgmp2xJHK75+A8PazNFpjwI2r2UVqQBfJnpOUoDPERDsd ySEQ819AUK9BqqPXQOOpgtLj8rSmSiV/XO0fT+cQFyw4QJzaG05Z180ZAHFg+gPT lcCn2U4MF0szSP+izKwgayk/2kR8MjgxNNM5voHN2xvQS7U/ym5XaMGaUBmqo2wD imi2n9rJhCLFWLwqgv4u0r+mMmtFNELxU7rHobJ22fHyKN2nJ4mV5h4MBDTihwFQ y9W/6EHLAlcvPuRiNTTlc2VtymC5Hujk5R1RU58XvfG7b2m4SwOPPRQaok/hBgwt 6q8kinDADXGHUyBM3DolX1o2aPriQiHO0m6dAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHVBLZc1tlrf/5WxXh6m5fD31RWgwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzU0L0hWQkxaYzF0bHJmXzVXeFhoNm01ZkQzMVJXZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALa5/wwDQYJKoZIhvcNAQELBQADggEB AF7yZj7JgBhc+EaWz2b6cx0BjcDT4YOuJ5J4JW3dqb3sgHwMAXYb3agIF1aqJbkx W9TbPT1OGAVlSgTQceUlQWbB+V8GayvynLHb3wSA74Tvz3ObdIzf6bcQVe89TMEV XcK8R2SmaCFs9K3CigYhn7MCJahJe56vjQFZAchw1V9/mKE+RogcKCMpidffnxh3 24fPrnxHm8bVTOMPxWMrY6ZM8y1zA1IVtKavKZr/4zF95TroMIh8C4s5afVpGmUr z9tt4USR2cGDRARCnsuXS3Ia2YNf78k70tab0UWI6WHDZ+Ic+IkE0sqJRPrBF2Uy x9bI79MDr9njdMKcvo3zghw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:17 2026 by rpki-client