$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/fzO29l3zJr-0YQYFGTw1bqwCwtU.roa File: fzO29l3zJr-0YQYFGTw1bqwCwtU.roa (raw, json) Hash identifier: b3osILayNabu4b39ZBUYi/vEDn1uS2nCLvPJ1PPdtnc= Subject key identifier: 7F:33:B6:F6:5D:F3:26:BF:B4:61:06:05:19:3C:35:6E:AC:02:C2:D5 Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 76 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/fzO29l3zJr-0YQYFGTw1bqwCwtU.roa Signing time: Tue 31 Mar 2026 07:32:14 +0000 ROA not before: Tue 31 Mar 2026 07:32:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Mar 31 07:32:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7F33B6F65DF326BFB4610605193C356EAC02C2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:02:53:36:83:09:35:21:9d:9e:19:88:90: f8:b3:e4:6f:81:9e:83:ed:ae:1a:b6:f3:08:ce:e4: 55:13:47:ce:e2:5a:fc:89:47:35:a7:bb:2a:31:a5: 4c:7b:41:30:35:20:dd:64:00:98:af:b1:61:a3:12: 66:f7:96:2e:bc:ef:d4:f6:d7:1e:cb:7b:d4:e1:fc: 7c:62:9d:22:0c:c3:26:5d:c1:a9:8b:fa:46:f0:ec: b9:46:4c:0b:1b:98:14:96:f7:52:dd:42:3a:01:4f: 58:99:1c:6d:b8:99:68:60:2c:43:32:68:2a:50:d9: 9d:14:1f:d9:8a:0e:67:39:3a:90:5e:b1:bf:0d:10: 48:ff:fe:28:4e:d5:7c:8a:98:88:07:27:5e:25:e4: 1b:39:d9:98:93:50:91:ab:24:56:76:e8:04:62:ff: db:81:e8:60:c4:75:bf:63:76:79:ed:c9:ee:c7:a0: 1f:59:f9:33:9f:3e:5c:d6:e1:65:8f:04:34:ae:39: ad:16:a5:a2:a8:fa:a9:d0:f2:c9:88:a0:6d:bc:70: 43:45:2c:1e:4d:1b:3c:d0:89:38:48:1e:5c:2c:35: df:70:69:de:a0:70:a4:10:25:3a:84:e4:ac:8f:b6: f3:dd:06:ed:3a:28:a5:76:29:74:11:5a:cd:b1:17: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:B6:F6:5D:F3:26:BF:B4:61:06:05:19:3C:35:6E:AC:02:C2:D5 X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/fzO29l3zJr-0YQYFGTw1bqwCwtU.roa sbgp-ipAddrBlock: critical IPv4: 160.237.184.0/22 Signature Algorithm: sha256WithRSAEncryption 37:2f:24:76:d5:3d:73:bb:89:6b:ec:a7:98:a6:0f:c8:9a:a3: 77:0c:b2:58:76:a5:7c:bc:65:5c:a0:57:0c:f4:b7:7d:e4:77: 2d:74:df:93:8a:87:b0:4b:49:3b:7e:b4:3e:23:c9:84:91:98: 98:48:b0:c7:b3:74:70:61:ac:bb:90:4d:c5:ee:47:38:e0:ab: a2:d4:ab:a8:1b:9a:52:b3:e6:05:b4:4b:d9:8e:b6:ba:8c:61: de:ee:c2:47:9a:97:3b:be:39:2a:b8:2d:04:40:91:69:23:cd: 55:0b:e3:bf:2b:dc:e0:c7:50:c3:ab:fb:66:de:7e:21:23:83: eb:f1:71:a4:2f:45:b3:57:69:44:88:72:c1:0e:52:ea:a0:80: e5:c9:25:f0:1d:a6:f0:4f:a2:fa:a7:ad:8c:22:9a:79:ad:cf: 54:ba:f5:ab:b5:f5:8d:92:45:2b:70:f5:05:89:0a:5f:5b:34: 67:27:be:35:5a:d0:79:fa:b0:69:b1:6e:ee:71:2b:ae:e4:fe: 50:57:20:72:66:9e:38:dc:78:3f:40:a8:a5:e3:58:b6:c1:df: 93:f5:88:c9:9d:81:f0:af:79:99:4e:8b:bf:ae:d4:7b:25:21: 14:93:8a:d0:a6:9a:9c:d7:6a:66:0c:cb:3e:d4:ca:7e:f5:be: c0:2a:b0:df -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI2MDMzMTA3 MzIxNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YzM0I2RjY1REYzMjZC RkI0NjEwNjA1MTkzQzM1NkVBQzAyQzJENTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+3AlM2gwk1IZ2eGYiQ+LPkb4Geg+2uGrbzCM7kVRNHzuJa/IlH Nae7KjGlTHtBMDUg3WQAmK+xYaMSZveWLrzv1PbXHst71OH8fGKdIgzDJl3BqYv6 RvDsuUZMCxuYFJb3Ut1COgFPWJkcbbiZaGAsQzJoKlDZnRQf2YoOZzk6kF6xvw0Q SP/+KE7VfIqYiAcnXiXkGznZmJNQkaskVnboBGL/24HoYMR1v2N2ee3J7segH1n5 M58+XNbhZY8ENK45rRaloqj6qdDyyYigbbxwQ0UsHk0bPNCJOEgeXCw133Bp3qBw pBAlOoTkrI+2890G7ToopXYpdBFazbEXcmUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBR/M7b2XfMmv7RhBgUZPDVurALC1TAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC81MzAvZnpPMjlsM3pKci0wWVFZRkdUdzFicXdDd3RVLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDtuDANBgkqhkiG9w0BAQsFAAOCAQEA Ny8kdtU9c7uJa+ynmKYPyJqjdwyyWHalfLxlXKBXDPS3feR3LXTfk4qHsEtJO360 PiPJhJGYmEiwx7N0cGGsu5BNxe5HOOCrotSrqBuaUrPmBbRL2Y62uoxh3u7CR5qX O745KrgtBECRaSPNVQvjvyvc4MdQw6v7Zt5+ISOD6/FxpC9Fs1dpRIhywQ5S6qCA 5ckl8B2m8E+i+qetjCKaea3PVLr1q7X1jZJFK3D1BYkKX1s0Zye+NVrQefqwabFu 7nErruT+UFcgcmaeONx4P0CopeNYtsHfk/WIyZ2B8K95mU6Lv67UeyUhFJOK0Kaa nNdqZgzLPtTKfvW+wCqw3w== -----END CERTIFICATE-----Generated at Tue Apr 7 16:28:56 2026 by rpki-client