$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/a7CqMUF1BfyJET2ABiG_gIntNfs.roa File: a7CqMUF1BfyJET2ABiG_gIntNfs.roa (raw, json) Hash identifier: dmi1shKaUigSInf2CKd5BqOruqOCnNcUYV2ORKrHZQ0= Subject key identifier: 6B:B0:AA:31:41:75:05:FC:89:11:3D:80:06:21:BF:80:89:ED:35:FB Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 3E Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/a7CqMUF1BfyJET2ABiG_gIntNfs.roa Signing time: Tue 31 Mar 2026 08:49:25 +0000 ROA not before: Tue 31 Mar 2026 08:49:25 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 180.144.0.0/14 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 31 08:49:25 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=6BB0AA31417505FC89113D800621BF8089ED35FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:50:27:42:78:48:8e:99:70:d8:bf:42:95: 4a:1f:e4:b6:01:92:55:02:5e:02:54:5c:dd:e1:14: 7d:dd:0d:6d:0d:97:71:f0:61:08:09:fa:2c:d1:1a: a3:56:ab:ac:d8:45:62:74:03:ce:52:87:53:5e:1b: 77:77:77:89:5a:a8:17:b1:fc:f8:f1:81:b8:5e:61: af:08:e6:23:cc:99:54:2b:fe:3b:b0:6f:be:bf:fe: 04:2f:01:f6:71:ae:2f:ef:94:fb:81:a4:7a:d8:4b: f3:02:b1:6a:be:9b:30:4c:f4:70:32:11:b9:6d:c1: 0b:02:35:88:21:a7:22:12:eb:15:c7:34:74:73:0b: f8:17:5c:f6:87:18:0c:a2:e2:eb:0c:36:cc:47:e0: e8:e3:e6:27:86:da:7f:2a:b9:10:95:fd:eb:53:14: 62:1f:fd:36:40:ae:f0:b4:fe:61:9a:40:f6:86:3e: 46:d4:1c:0d:94:f7:28:6b:1f:7e:80:df:0e:55:d1: b2:18:8d:eb:57:76:b8:1f:be:c7:b9:2d:1e:c8:7b: 3f:d6:c5:14:e1:de:41:e9:e9:3d:35:e4:72:09:0d: 03:bf:52:84:11:99:5b:f1:2f:e4:9d:d6:49:05:2e: 65:11:59:2b:0d:06:0a:2c:22:62:a9:2a:67:a5:2b: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B0:AA:31:41:75:05:FC:89:11:3D:80:06:21:BF:80:89:ED:35:FB X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/a7CqMUF1BfyJET2ABiG_gIntNfs.roa sbgp-ipAddrBlock: critical IPv4: 180.144.0.0/14 Signature Algorithm: sha256WithRSAEncryption 97:04:38:8e:58:14:44:d7:ca:57:2e:ca:4e:5c:d5:c4:9a:3d: 4b:7f:0e:34:68:94:7d:c5:2f:a8:a6:a4:6e:72:ea:f5:5e:fb: 46:4a:9e:e2:65:7c:ba:0a:95:23:c0:d1:96:0f:21:9d:d6:3e: 3f:a1:23:1f:df:6e:8f:1e:6b:48:7a:58:10:47:54:0a:34:5c: 7b:51:04:1b:70:85:06:e7:1e:52:00:e0:d0:3d:41:ea:e6:10: 31:3a:3b:3f:ed:c7:c0:95:79:9f:29:dd:b8:37:d7:e7:cc:9d: 93:84:c3:7b:70:1c:b7:07:78:96:81:10:92:58:35:3c:5c:88: f5:1e:9d:08:51:c8:f8:ca:47:f3:80:c4:8a:46:9a:05:e7:d4: 84:b3:1f:63:bb:47:6c:ce:60:88:7e:fa:68:a6:a6:8a:40:6a: d6:10:e4:71:72:9f:51:30:71:fe:c6:02:31:e0:21:04:b6:b7: aa:91:b2:f6:52:fc:b1:1e:0e:56:1e:53:b1:d1:e6:ae:11:df: 3e:e6:82:ce:73:f2:c6:19:73:62:79:57:f3:90:8d:8a:cf:04: e2:52:ab:58:1f:fe:a6:b6:9b:d7:d6:c4:d7:5c:93:d0:76:59: 3f:08:c0:c8:65:01:5b:6e:f8:c0:3e:de:49:e7:94:a9:ef:9a: c4:4b:69:dd -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4 NDkyNVoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoNkJCMEFBMzE0MTc1MDVG Qzg5MTEzRDgwMDYyMUJGODA4OUVEMzVGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKFBUCdCeEiOmXDYv0KVSh/ktgGSVQJeAlRc3eEUfd0NbQ2XcfBh CAn6LNEao1arrNhFYnQDzlKHU14bd3d3iVqoF7H8+PGBuF5hrwjmI8yZVCv+O7Bv vr/+BC8B9nGuL++U+4GkethL8wKxar6bMEz0cDIRuW3BCwI1iCGnIhLrFcc0dHML +Bdc9ocYDKLi6ww2zEfg6OPmJ4bafyq5EJX961MUYh/9NkCu8LT+YZpA9oY+RtQc DZT3KGsffoDfDlXRshiN61d2uB++x7ktHsh7P9bFFOHeQenpPTXkcgkNA79ShBGZ W/Ev5J3WSQUuZRFZKw0GCiwiYqkqZ6UrgwcCAwEAAaOCAdgwggHUMB0GA1UdDgQW BBRrsKoxQXUF/IkRPYAGIb+Aie01+zAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMvYTdDcU1VRjFCZnlKRVQyQUJpR19nSW50TmZzLnJvYTAeBggr BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDArSQMA0GCSqGSIb3DQEBCwUAA4IBAQCX BDiOWBRE18pXLspOXNXEmj1Lfw40aJR9xS+opqRucur1XvtGSp7iZXy6CpUjwNGW DyGd1j4/oSMf326PHmtIelgQR1QKNFx7UQQbcIUG5x5SAODQPUHq5hAxOjs/7cfA lXmfKd24N9fnzJ2ThMN7cBy3B3iWgRCSWDU8XIj1Hp0IUcj4ykfzgMSKRpoF59SE sx9ju0dszmCIfvpopqaKQGrWEORxcp9RMHH+xgIx4CEEtreqkbL2UvyxHg5WHlOx 0eauEd8+5oLOc/LGGXNieVfzkI2KzwTiUqtYH/6mtpvX1sTXXJPQdlk/CMDIZQFb bvjAPt5J55Sp75rES2nd -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:46 2026 by rpki-client