$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/KQ16xaI2qam-PV0nYrb92IH9qg4.roa File: KQ16xaI2qam-PV0nYrb92IH9qg4.roa (raw, json) Hash identifier: 5jWfhVVgJODNmAIxbpyGfKeT4hrkTr9aLtkWgfwKQT8= Subject key identifier: 29:0D:7A:C5:A2:36:A9:A9:BE:3D:5D:27:62:B6:FD:D8:81:FD:AA:0E Certificate issuer: /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407 Certificate serial: 47 Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/KQ16xaI2qam-PV0nYrb92IH9qg4.roa Signing time: Tue 31 Mar 2026 08:24:25 +0000 ROA not before: Tue 31 Mar 2026 08:24:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 55376 IP address blocks: 202.223.24.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407 Validity Not Before: Mar 31 08:24:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=290D7AC5A236A9A9BE3D5D2762B6FDD881FDAA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:12:5b:05:61:e1:44:ea:99:d6:af:0f:5c: c3:0f:92:1b:6d:13:fa:2c:68:18:eb:73:aa:b3:0a: d9:1e:52:2e:ce:66:33:77:4b:81:5f:b6:12:f0:55: 73:f6:c0:e4:22:00:b6:1f:5e:25:b7:ac:3c:6b:70: 41:0b:71:74:3a:e9:ca:07:6e:fa:6b:72:6d:ed:7e: f6:dd:a8:f2:26:0b:5d:c0:e2:a5:98:36:0c:15:ca: 3f:1d:ef:20:4b:c5:5e:28:32:76:70:db:54:77:9e: d8:26:eb:0e:d9:2a:f7:fa:cf:0c:d3:82:d4:65:e7: aa:c4:22:ee:b8:3c:fe:6a:12:19:ff:56:c9:52:1b: 69:64:5b:0e:ec:be:63:0e:91:ba:9d:2e:2a:af:5d: 55:3f:59:56:1f:96:4a:61:17:8a:fb:4a:76:15:29: 3b:9d:98:b2:5e:f5:60:f3:70:c3:98:7a:60:c9:b9: 04:7f:71:b5:86:70:73:04:a6:ec:aa:8d:9d:21:09: d7:1a:db:98:a6:2b:c6:8b:a0:59:e8:e3:03:60:7f: 8b:d1:be:50:83:d8:af:99:73:a2:f4:87:0d:6f:17: 7a:53:88:98:48:7c:47:31:75:be:1c:35:69:d7:f4: a1:54:db:2d:91:09:6e:50:ff:c6:ac:92:b8:a5:ec: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0D:7A:C5:A2:36:A9:A9:BE:3D:5D:27:62:B6:FD:D8:81:FD:AA:0E X509v3 Authority Key Identifier: keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/KQ16xaI2qam-PV0nYrb92IH9qg4.roa sbgp-ipAddrBlock: critical IPv4: 202.223.24.0/22 Signature Algorithm: sha256WithRSAEncryption bb:1a:9b:14:7f:18:b0:87:07:80:b8:fa:a4:95:7e:39:43:7b: 79:e0:94:d4:2a:34:cc:c1:32:e2:12:0c:ba:97:b0:fb:a4:2f: 22:b0:8c:68:0c:eb:d1:cc:9c:3a:e0:0e:27:e0:11:f3:aa:22: af:8b:da:97:13:e9:a8:98:c3:2d:2e:05:a8:7c:c7:f0:87:17: 9f:de:3b:e1:fc:8c:05:7c:f5:ab:f3:84:dd:4b:e0:14:4d:e1: 41:a3:63:3a:ea:e1:12:2f:2b:a2:df:5d:2c:8a:09:ee:98:65: 07:2f:32:98:85:e5:bf:71:53:db:88:13:d5:31:c3:39:64:76: 67:84:4d:6f:4a:d6:84:91:78:73:0e:7e:a4:41:23:df:f6:83: 91:7f:be:b5:4e:df:c5:d0:e6:44:b4:2f:dc:bb:99:d9:35:31: 15:88:33:c4:73:73:3a:16:78:e0:c8:83:01:7c:58:4f:85:84: ca:c4:90:40:1a:f9:d9:be:39:6d:98:02:65:85:8e:ea:df:db: 78:6e:08:76:e7:0a:af:db:da:c5:63:da:6a:85:cb:11:0b:88: b8:ab:73:fa:21:2a:49:c1:a3:e8:cc:78:82:dd:6c:43:06:3b: cd:db:1b:d9:4c:88:d9:35:fa:35:58:10:9a:7c:d7:a6:4e:4b: 4b:7c:9e:fb -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQUVE MEUzNUE3QjU4REFDMjE1OUY3RjFDRDc0MEE1NEI5RThCNDA3MB4XDTI2MDMzMTA4 MjQyNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjkwRDdBQzVBMjM2QTlB OUJFM0Q1RDI3NjJCNkZERDg4MUZEQUEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKloElsFYeFE6pnWrw9cww+SG20T+ixoGOtzqrMK2R5SLs5mM3dL gV+2EvBVc/bA5CIAth9eJbesPGtwQQtxdDrpygdu+mtybe1+9t2o8iYLXcDipZg2 DBXKPx3vIEvFXigydnDbVHee2CbrDtkq9/rPDNOC1GXnqsQi7rg8/moSGf9WyVIb aWRbDuy+Yw6Rup0uKq9dVT9ZVh+WSmEXivtKdhUpO52Ysl71YPNww5h6YMm5BH9x tYZwcwSm7KqNnSEJ1xrbmKYrxougWejjA2B/i9G+UIPYr5lzovSHDW8XelOImEh8 RzF1vhw1adf0oVTbLZEJblD/xqySuKXs2E8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQpDXrFojapqb49XSditv3Ygf2qDjAfBgNVHSMEGDAWgBS67Q41p7WNrCFZ9/HN dApUuei0BzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTEyL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxub3RBYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxu b3RBYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC81MTIvS1ExNnhhSTJxYW0tUFYwbllyYjkySUg5cWc0LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsrfGDANBgkqhkiG9w0BAQsFAAOCAQEA uxqbFH8YsIcHgLj6pJV+OUN7eeCU1Co0zMEy4hIMupew+6QvIrCMaAzr0cycOuAO J+AR86oir4valxPpqJjDLS4FqHzH8IcXn9474fyMBXz1q/OE3UvgFE3hQaNjOurh Ei8rot9dLIoJ7phlBy8ymIXlv3FT24gT1THDOWR2Z4RNb0rWhJF4cw5+pEEj3/aD kX++tU7fxdDmRLQv3LuZ2TUxFYgzxHNzOhZ44MiDAXxYT4WEysSQQBr52b45bZgC ZYWO6t/beG4IducKr9vaxWPaaoXLEQuIuKtz+iEqScGj6Mx4gt1sQwY7zdsb2UyI 2TX6NVgQmnzXpk5LS3ye+w== -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:55 2026 by rpki-client