$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/COSsFsuym6hVh8-1fKD0n_4SudA.roa File: COSsFsuym6hVh8-1fKD0n_4SudA.roa (raw, json) Hash identifier: 6NVpWjFdHT09G9pbZcCbv28n9Hb++Nb8lgVdiuSaqMs= Subject key identifier: 08:E4:AC:16:CB:B2:9B:A8:55:87:CF:B5:7C:A0:F4:9F:FE:12:B9:D0 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0626 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/COSsFsuym6hVh8-1fKD0n_4SudA.roa Signing time: Tue 31 Mar 2026 08:21:34 +0000 ROA not before: Tue 31 Mar 2026 08:21:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 0 IP address blocks: 59.156.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:21:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=08E4AC16CBB29BA85587CFB57CA0F49FFE12B9D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:ef:d6:76:ae:05:ea:b1:81:a7:64:d1:b5: eb:4b:00:60:88:ca:eb:8c:fc:19:ef:3b:c0:54:e2: 1a:5f:88:16:23:10:01:a2:b4:60:9b:04:87:6b:d2: 05:5c:59:16:ce:9b:00:f5:26:be:87:c8:2c:67:1b: c4:a8:0c:b9:68:ac:21:a1:23:c0:b3:ca:12:7e:71: e2:46:a1:fa:da:a8:aa:c0:f9:3b:f0:85:a5:f6:fe: a6:4d:80:3e:74:3f:ee:29:ea:47:f1:88:61:22:b6: 68:38:31:1a:72:82:fc:2a:f1:8d:74:7d:5f:9a:f8: 8b:10:72:a9:7c:4e:a7:ad:d2:2c:7a:12:ab:cc:31: be:23:be:1a:1d:6d:64:56:b2:6d:7c:31:00:4a:20: e8:ea:00:96:d1:a0:e5:04:b8:eb:42:05:fa:f2:e0: 7e:70:63:e8:63:7c:d6:da:ed:36:3c:f7:f3:95:2b: 4f:99:51:44:8a:51:e0:f8:9a:31:a0:2e:49:40:27: c8:95:d7:6b:dc:14:37:f4:11:12:71:90:0f:b8:13: 85:73:69:3a:42:fa:61:c4:a1:2e:c7:65:e5:e3:fc: 8d:be:f8:0a:c9:fc:29:b6:46:1b:43:3b:32:d8:cd: f0:ab:d8:ec:c5:d8:d0:c1:aa:53:6a:bf:18:56:e0: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E4:AC:16:CB:B2:9B:A8:55:87:CF:B5:7C:A0:F4:9F:FE:12:B9:D0 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/COSsFsuym6hVh8-1fKD0n_4SudA.roa sbgp-ipAddrBlock: critical IPv4: 59.156.22.0/23 Signature Algorithm: sha256WithRSAEncryption 20:c1:e5:d1:77:d4:fc:b0:16:ad:ad:60:ad:20:78:a7:f9:55: 6d:80:dc:23:f6:fe:b4:c1:a5:4c:ca:ed:66:11:70:f2:e8:e8: 8a:4c:fd:19:18:0d:cb:94:73:94:3c:a0:41:e4:ab:b2:92:f5: 72:66:26:ae:1d:eb:6c:92:81:4c:7f:0a:6a:7c:03:bf:b7:eb: a7:09:3d:e1:73:e8:13:02:57:97:7a:b8:a2:72:a5:7f:d3:e2: 59:7a:df:6d:c7:c0:e8:54:36:82:7a:ac:db:92:01:9d:78:94: a9:c1:6d:0e:c7:65:14:8d:2a:6e:fc:c1:84:a6:a9:07:5e:92: d9:d3:be:27:a6:c8:4f:98:73:e1:74:51:24:88:c3:73:6c:24: 68:08:9d:98:ff:60:93:df:4c:34:33:bd:f9:74:99:70:94:31: a9:03:2d:f8:af:9d:01:3f:97:79:85:ff:fb:9b:b6:8d:73:98: 44:ad:71:24:4e:c1:f6:03:dd:71:8a:97:9f:b6:a2:0d:91:fd: 4d:1f:a1:c1:0f:46:9c:53:23:c7:3b:50:85:99:89:65:c9:fc: 1d:01:9c:58:c1:51:86:9b:79:2a:77:73:43:07:75:77:86:c3: ec:b6:22:f4:d1:81:25:9a:1f:ea:7c:c8:c0:6c:af:4d:bc:9f: 74:90:a0:91 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIxMzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4RTRBQzE2Q0JCMjlC QTg1NTg3Q0ZCNTdDQTBGNDlGRkUxMkI5RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKju/Wdq4F6rGBp2TRtetLAGCIyuuM/BnvO8BU4hpfiBYjEAGi tGCbBIdr0gVcWRbOmwD1Jr6HyCxnG8SoDLlorCGhI8CzyhJ+ceJGofraqKrA+Tvw haX2/qZNgD50P+4p6kfxiGEitmg4MRpygvwq8Y10fV+a+IsQcql8Tqet0ix6EqvM Mb4jvhodbWRWsm18MQBKIOjqAJbRoOUEuOtCBfry4H5wY+hjfNba7TY89/OVK0+Z UUSKUeD4mjGgLklAJ8iV12vcFDf0ERJxkA+4E4VzaTpC+mHEoS7HZeXj/I2++ArJ /Cm2RhtDOzLYzfCr2OzF2NDBqlNqvxhW4EgXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUCOSsFsuym6hVh8+1fKD0n/4SudAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L0NPU3NGc3V5bTZoVmg4LTFmS0Qwbl80U3VkQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE7nBYwDQYJKoZIhvcNAQELBQADggEB ACDB5dF31PywFq2tYK0geKf5VW2A3CP2/rTBpUzK7WYRcPLo6IpM/RkYDcuUc5Q8 oEHkq7KS9XJmJq4d62ySgUx/Cmp8A7+366cJPeFz6BMCV5d6uKJypX/T4ll6323H wOhUNoJ6rNuSAZ14lKnBbQ7HZRSNKm78wYSmqQdektnTviemyE+Yc+F0USSIw3Ns JGgInZj/YJPfTDQzvfl0mXCUMakDLfivnQE/l3mF//ubto1zmEStcSROwfYD3XGK l5+2og2R/U0focEPRpxTI8c7UIWZiWXJ/B0BnFjBUYabeSp3c0MHdXeGw+y2IvTR gSWaH+p8yMBsr028n3SQoJE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:17 2026 by rpki-client