$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/CBodOw996OeQkh-L46oHu_G3H1Q.roa File: CBodOw996OeQkh-L46oHu_G3H1Q.roa (raw, json) Hash identifier: Bc00Qbz7lRJ3oELi6/OxtaxN/1fpYsKCga5ePuC2lr4= Subject key identifier: 08:1A:1D:3B:0F:7D:E8:E7:90:92:1F:8B:E3:AA:07:BB:F1:B7:1F:54 Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 77 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/CBodOw996OeQkh-L46oHu_G3H1Q.roa Signing time: Tue 31 Mar 2026 08:31:27 +0000 ROA not before: Tue 31 Mar 2026 08:31:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9619 IP address blocks: 211.125.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 23:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Mar 31 08:31:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=081A1D3B0F7DE8E790921F8BE3AA07BBF1B71F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:de:25:d4:b8:ae:f9:43:8b:43:46:a1:bf: 17:d1:2d:d2:18:77:c9:c3:5c:b7:da:47:31:91:cc: 68:b8:55:25:d9:8b:a1:2a:40:fc:e1:5b:39:e0:fd: 51:a2:2f:3c:b8:1f:16:a3:7e:69:f0:4b:48:b9:76: 3e:63:a0:3a:f9:a6:cb:cc:ea:f1:7a:3d:98:89:84: f5:44:61:16:ce:be:6f:61:c9:7c:a3:38:a9:38:42: 2a:fb:e6:cf:70:a7:de:4e:03:51:d1:e7:ea:3e:2f: ac:82:43:2b:40:f4:26:ee:e5:6b:76:1b:86:d6:87: eb:1d:66:7f:d2:30:e2:db:1c:3c:26:1f:e8:43:22: d8:e1:11:1d:a4:93:9b:de:3d:20:0a:c3:28:59:0f: c1:3c:80:4d:02:97:28:e4:aa:41:e4:59:8a:7d:e1: ed:de:7b:73:2e:9d:2c:1b:c4:fc:18:1d:d4:f0:21: c4:66:96:c5:d5:7d:09:65:ab:56:b5:9d:b8:29:6a: 2d:ec:33:2c:fc:53:cf:33:3f:52:89:95:4f:e4:58: e6:0d:6b:dd:4a:51:37:74:44:79:44:75:53:08:fe: 6d:71:9e:43:ca:33:3a:5f:e7:68:5e:ef:6e:e8:7b: 57:ec:0c:ba:33:b5:ce:0e:ac:ca:62:a2:f9:74:30: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:1D:3B:0F:7D:E8:E7:90:92:1F:8B:E3:AA:07:BB:F1:B7:1F:54 X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/CBodOw996OeQkh-L46oHu_G3H1Q.roa sbgp-ipAddrBlock: critical IPv4: 211.125.139.0/24 Signature Algorithm: sha256WithRSAEncryption a5:c4:86:65:2b:45:57:db:c4:5a:68:58:d3:e7:cd:f2:3a:a5: 6b:99:aa:15:3d:65:24:b9:48:80:12:06:e7:37:13:da:ad:61: a4:07:f6:9d:50:32:6c:18:bd:50:5f:5e:5a:b0:8d:5a:95:13: 38:e1:8e:59:ad:10:73:0e:b3:03:b3:37:d2:cd:69:1e:78:7f: f5:09:3a:35:ae:d5:85:58:8a:c8:e6:ba:61:15:2b:0d:b6:26: b8:4f:c5:bb:45:fc:e6:df:47:8f:b1:07:01:73:bc:70:d9:da: 9b:55:ea:86:2a:e2:9d:ca:f3:22:81:d4:9c:85:2d:49:d1:73: e0:56:a8:81:cd:26:c4:37:47:e8:f0:a2:d0:f9:40:e1:f9:7c: 35:97:a9:fc:05:e6:06:d0:cd:82:0e:e5:a9:13:ee:7e:9b:4d: c9:86:a2:97:4f:69:09:8b:20:7c:d6:8a:68:c5:f9:6c:05:b8: df:02:29:22:be:74:a6:8f:c9:93:0f:ed:25:2f:d4:68:a4:84: 45:5f:a5:ee:a6:92:c2:e4:1c:e1:79:da:e2:b2:45:b6:12:c2: 2e:93:2a:e8:66:b0:b1:03:8c:29:23:d4:da:5b:3e:2f:33:e2: 71:73:cc:b6:f3:43:80:79:4d:b8:17:13:3a:eb:99:fc:c8:d0: 11:5b:0c:1d -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI2MDMzMTA4 MzEyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDgxQTFEM0IwRjdERThF NzkwOTIxRjhCRTNBQTA3QkJGMUI3MUY1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJdu3iXUuK75Q4tDRqG/F9Et0hh3ycNct9pHMZHMaLhVJdmLoSpA /OFbOeD9UaIvPLgfFqN+afBLSLl2PmOgOvmmy8zq8Xo9mImE9URhFs6+b2HJfKM4 qThCKvvmz3Cn3k4DUdHn6j4vrIJDK0D0Ju7la3YbhtaH6x1mf9Iw4tscPCYf6EMi 2OERHaSTm949IArDKFkPwTyATQKXKOSqQeRZin3h7d57cy6dLBvE/Bgd1PAhxGaW xdV9CWWrVrWduClqLewzLPxTzzM/UomVT+RY5g1r3UpRN3REeUR1Uwj+bXGeQ8oz Ol/naF7vbuh7V+wMujO1zg6symKi+XQw7c0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQIGh07D33o55CSH4vjqge78bcfVDAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8zOTUvQ0JvZE93OTk2T2VRa2gtTDQ2b0h1X0czSDFRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANN9izANBgkqhkiG9w0BAQsFAAOCAQEA pcSGZStFV9vEWmhY0+fN8jqla5mqFT1lJLlIgBIG5zcT2q1hpAf2nVAybBi9UF9e WrCNWpUTOOGOWa0Qcw6zA7M30s1pHnh/9Qk6Na7VhViKyOa6YRUrDbYmuE/Fu0X8 5t9Hj7EHAXO8cNnam1XqhirincrzIoHUnIUtSdFz4Faogc0mxDdH6PCi0PlA4fl8 NZep/AXmBtDNgg7lqRPufptNyYail09pCYsgfNaKaMX5bAW43wIpIr50po/Jkw/t JS/UaKSERV+l7qaSwuQc4Xna4rJFthLCLpMq6GawsQOMKSPU2ls+LzPicXPMtvND gHlNuBcTOuuZ/MjQEVsMHQ== -----END CERTIFICATE-----Generated at Wed Apr 8 01:19:52 2026 by rpki-client