$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/i_dmaeJ4mZtoYEpf8t9XbCgExvw.roa File: i_dmaeJ4mZtoYEpf8t9XbCgExvw.roa (raw, json) Hash identifier: EdmqWZMdvfE2iWqUkSX329oLUjxhnFh96zTgUek8hdE= Subject key identifier: 8B:F7:66:69:E2:78:99:9B:68:60:4A:5F:F2:DF:57:6C:28:04:C6:FC Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 73 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/i_dmaeJ4mZtoYEpf8t9XbCgExvw.roa Signing time: Tue 31 Mar 2026 07:32:12 +0000 ROA not before: Tue 31 Mar 2026 07:32:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Mar 31 07:32:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8BF76669E278999B68604A5FF2DF576C2804C6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:73:bf:b3:7a:96:32:1b:b2:19:21:3c:03: 48:cb:79:03:45:ec:c3:61:46:fd:dc:71:c3:1f:98: 76:7f:71:cb:a1:4d:46:26:e9:f7:ad:c8:4b:d1:31: a2:1e:05:05:f0:91:df:ff:24:e0:b0:90:9a:94:e7: 12:79:6a:65:44:51:3e:7b:8e:de:04:f2:0e:01:cf: 33:b3:89:b4:bb:f1:f8:19:84:fd:1e:14:c0:c8:ce: c3:0d:40:7f:f8:20:c0:3e:17:09:b7:12:96:ce:52: 45:d5:d4:71:da:05:a7:fa:ab:13:3c:54:91:92:ed: 8c:17:ae:9e:64:2f:db:23:d6:44:47:4d:09:c9:27: 1a:71:3c:42:08:b2:8a:24:22:99:4a:92:e2:4e:6c: 85:ed:da:e8:f2:79:d8:9e:fc:d0:90:80:7a:9d:85: 10:d4:e5:9b:94:6c:2e:5f:c4:ef:65:1f:4f:5d:0c: cc:d0:74:99:db:18:93:90:d6:37:69:d6:9e:de:56: 0a:d7:01:cd:1d:1e:95:70:b9:58:bc:e1:21:72:8d: a7:89:d8:bf:e4:b1:b0:cf:bd:84:ae:1c:fe:5f:b1: cf:bc:49:2e:01:ca:42:ea:d9:36:f6:7a:32:f3:04: f3:a9:cc:53:da:ad:0b:7b:34:e6:1a:5c:e0:b0:72: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F7:66:69:E2:78:99:9B:68:60:4A:5F:F2:DF:57:6C:28:04:C6:FC X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/i_dmaeJ4mZtoYEpf8t9XbCgExvw.roa sbgp-ipAddrBlock: critical IPv4: 160.237.96.0/19 Signature Algorithm: sha256WithRSAEncryption d0:99:f0:a2:b9:bc:94:0b:98:67:b4:48:03:bb:29:a3:ea:c3: 71:7b:55:a7:42:8f:99:04:62:01:61:b8:ef:9a:ac:23:c7:0a: db:79:e8:92:14:a6:84:b7:4e:89:12:c0:27:17:77:16:e2:64: 91:01:b0:8e:62:25:51:c7:b5:10:f4:14:45:c3:7e:04:f9:b7: 54:a4:86:27:0b:ca:3b:64:f9:e6:69:12:c0:6f:fc:2f:73:5d: c5:80:cc:8d:c6:60:7d:ad:29:e5:50:5e:c5:ec:f7:87:b2:d4: a8:33:fb:b8:ef:8c:19:d8:63:6c:43:93:5a:83:4e:1c:7b:12: 2d:af:11:b1:12:4a:2e:c4:55:52:7a:b2:1d:cd:9a:5e:60:c1: c5:56:f2:9e:f7:46:63:3b:dd:a4:6c:f8:50:1d:25:b2:a1:d9: d3:e2:e9:9b:24:c2:c7:1a:e2:a3:f2:bb:44:2b:dc:e2:96:11: 84:ba:61:2c:0d:a0:09:c0:3f:54:82:2b:46:17:2f:1d:7d:1e: 34:ec:ce:7a:4c:77:92:7a:e6:40:b7:4e:8a:c5:b6:e1:31:cf: 47:c6:6c:68:dd:ae:e6:b7:1d:70:59:4c:02:a7:af:dc:1a:40: a3:8b:36:7a:f8:89:b9:14:98:ab:c4:ae:c1:a4:8a:8d:6f:55: 82:69:74:09 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI2MDMzMTA3 MzIxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEJGNzY2NjlFMjc4OTk5 QjY4NjA0QTVGRjJERjU3NkMyODA0QzZGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKImc7+zepYyG7IZITwDSMt5A0Xsw2FG/dxxwx+Ydn9xy6FNRibp 963IS9Exoh4FBfCR3/8k4LCQmpTnEnlqZURRPnuO3gTyDgHPM7OJtLvx+BmE/R4U wMjOww1Af/ggwD4XCbcSls5SRdXUcdoFp/qrEzxUkZLtjBeunmQv2yPWREdNCckn GnE8QgiyiiQimUqS4k5she3a6PJ52J780JCAep2FENTlm5RsLl/E72UfT10MzNB0 mdsYk5DWN2nWnt5WCtcBzR0elXC5WLzhIXKNp4nYv+SxsM+9hK4c/l+xz7xJLgHK QurZNvZ6MvME86nMU9qtC3s05hpc4LByO1UCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSL92Zp4niZm2hgSl/y31dsKATG/DAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC81MzAvaV9kbWFlSjRtWnRvWUVwZjh0OVhiQ2dFeHZ3LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBaDtYDANBgkqhkiG9w0BAQsFAAOCAQEA 0Jnworm8lAuYZ7RIA7spo+rDcXtVp0KPmQRiAWG475qsI8cK23nokhSmhLdOiRLA Jxd3FuJkkQGwjmIlUce1EPQURcN+BPm3VKSGJwvKO2T55mkSwG/8L3NdxYDMjcZg fa0p5VBexez3h7LUqDP7uO+MGdhjbEOTWoNOHHsSLa8RsRJKLsRVUnqyHc2aXmDB xVbynvdGYzvdpGz4UB0lsqHZ0+LpmyTCxxrio/K7RCvc4pYRhLphLA2gCcA/VIIr RhcvHX0eNOzOekx3knrmQLdOisW24THPR8ZsaN2u5rcdcFlMAqev3BpAo4s2eviJ uRSYq8SuwaSKjW9Vgml0CQ== -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:58 2026 by rpki-client