$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/oEbydNRAqjiBRDwKADCY7J9MpSY.roa File: oEbydNRAqjiBRDwKADCY7J9MpSY.roa (raw, json) Hash identifier: AiZL4qA26CopqFvv/tlegHgqi7k4zdbRTr1btYQrdJ8= Subject key identifier: A0:46:F2:74:D4:40:AA:38:81:44:3C:0A:00:30:98:EC:9F:4C:A5:26 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 8C Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/oEbydNRAqjiBRDwKADCY7J9MpSY.roa Signing time: Tue 31 Mar 2026 08:24:35 +0000 ROA not before: Tue 31 Mar 2026 08:24:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10000 IP address blocks: 218.216.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Mar 31 08:24:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A046F274D440AA3881443C0A003098EC9F4CA526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:73:fa:32:0a:c5:72:5f:b8:5d:3c:26:b7: e1:77:2f:65:83:d9:93:1a:dc:fa:4d:0b:43:9d:72: 48:93:58:c3:e7:7a:33:9a:c8:16:7b:d0:90:5a:d3: 7a:cf:9d:2c:b3:c4:ed:29:52:9d:45:d7:e5:49:99: 42:60:0e:4d:9e:db:f0:3d:76:47:c1:cd:71:7e:75: c5:0e:ff:a7:42:33:e0:e4:00:31:d5:87:5f:6d:f0: ef:b3:4c:c9:2f:5d:9c:2a:8d:ec:fa:75:1e:53:e1: 7f:55:ad:67:ee:ec:c7:03:e1:39:75:dc:02:9d:62: 3d:a8:0d:f1:fb:f2:6f:04:12:fd:42:d8:02:ae:12: c3:78:d3:ed:5d:b4:80:95:66:f6:f1:29:14:8e:1e: c7:ed:54:44:3a:ea:6e:91:31:d0:e9:69:64:70:12: b9:5e:2f:40:16:f8:57:41:09:69:4e:52:d7:b9:3f: 93:b1:e4:21:53:60:c3:30:e7:cf:14:6f:94:0a:95: 1b:2b:4c:86:34:ef:55:b5:7d:1b:a3:e1:be:f6:c3: ad:f5:38:12:f6:8c:a6:fd:e2:f4:74:b0:05:7c:ac: fd:cc:79:cc:02:f4:18:2e:f9:26:d7:b0:1f:55:93: 54:2b:79:bb:f7:6b:b1:d6:4a:74:66:13:94:a9:45: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:F2:74:D4:40:AA:38:81:44:3C:0A:00:30:98:EC:9F:4C:A5:26 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/oEbydNRAqjiBRDwKADCY7J9MpSY.roa sbgp-ipAddrBlock: critical IPv4: 218.216.0.0/20 Signature Algorithm: sha256WithRSAEncryption b1:19:00:3a:be:0d:28:14:51:85:74:37:da:44:0f:dd:92:6a: e5:10:84:76:35:16:04:a8:89:c3:c3:d5:db:21:8b:f5:35:a6: d4:b4:2b:3e:38:14:40:bb:95:6f:06:77:b3:31:fc:68:04:d7: 85:25:57:e2:f8:51:36:6f:4e:44:6b:eb:cb:93:88:f2:c7:72: 2c:4d:af:1d:66:d2:01:73:c1:f2:54:c2:5f:d9:3b:c3:0d:1c: e8:f8:03:46:d9:76:73:e8:4e:bb:28:66:5e:91:96:6d:39:e1: 4c:66:e7:68:a4:d6:88:d2:23:56:ae:f6:dc:b0:6b:9f:07:eb: 52:ba:f7:ec:36:43:1d:9a:00:56:7a:4c:f8:7b:92:c5:6d:02: 39:9c:2a:10:77:02:61:70:21:9e:f3:29:69:6d:b1:fe:e4:25: 33:bd:28:b5:26:56:0c:79:a2:0b:94:2e:d0:5e:48:85:e2:cc: 82:fa:f2:02:2c:57:d4:71:67:5c:61:94:e2:f1:3b:f4:2d:92: 9e:6b:13:5a:e6:17:56:e0:93:31:3b:c1:c6:45:4f:ea:86:8a: 0f:ce:9a:4e:d2:6b:f9:d0:3f:b8:1c:9f:87:f2:9a:89:b6:a8: aa:dc:b1:e1:a4:e5:6a:2d:27:06:b7:f8:a8:47:82:e3:ed:65: b9:a7:e9:69 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUQ0 NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURFMDAeFw0yNjAzMzEw ODI0MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwNDZGMjc0RDQ0MEFB Mzg4MTQ0M0MwQTAwMzA5OEVDOUY0Q0E1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClXHP6MgrFcl+4XTwmt+F3L2WD2ZMa3PpNC0OdckiTWMPnejOa yBZ70JBa03rPnSyzxO0pUp1F1+VJmUJgDk2e2/A9dkfBzXF+dcUO/6dCM+DkADHV h19t8O+zTMkvXZwqjez6dR5T4X9VrWfu7McD4Tl13AKdYj2oDfH78m8EEv1C2AKu EsN40+1dtICVZvbxKRSOHsftVEQ66m6RMdDpaWRwErleL0AW+FdBCWlOUte5P5Ox 5CFTYMMw588Ub5QKlRsrTIY071W1fRuj4b72w631OBL2jKb94vR0sAV8rP3MecwC 9Bgu+SbXsB9Vk1Qrebv3a7HWSnRmE5SpRU5tAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUoEbydNRAqjiBRDwKADCY7J9MpSYwHwYDVR0jBBgwFoAUrUdB8DSfvBWnCOKK LOMHkGysXeAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ1NC9yVWRCOERTZnZCV25DT0tLTE9NSGtHeXNYZUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9yVWRCOERTZnZCV25DT0tLTE9NSGtH eXNYZUEuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDU0L29FYnlkTlJBcWppQlJEd0tBRENZN0o5TXBTWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa2AAwDQYJKoZIhvcNAQELBQADggEB ALEZADq+DSgUUYV0N9pED92SauUQhHY1FgSoicPD1dshi/U1ptS0Kz44FEC7lW8G d7Mx/GgE14UlV+L4UTZvTkRr68uTiPLHcixNrx1m0gFzwfJUwl/ZO8MNHOj4A0bZ dnPoTrsoZl6Rlm054Uxm52ik1ojSI1au9tywa58H61K69+w2Qx2aAFZ6TPh7ksVt AjmcKhB3AmFwIZ7zKWltsf7kJTO9KLUmVgx5oguULtBeSIXizIL68gIsV9RxZ1xh lOLxO/Qtkp5rE1rmF1bgkzE7wcZFT+qGig/Omk7Sa/nQP7gcn4fymom2qKrcseGk 5WotJwa3+KhHguPtZbmn6Wk= -----END CERTIFICATE-----Generated at Tue Apr 7 16:28:50 2026 by rpki-client