$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/PD6fSIFk4sfvIdSD6EYcBW2-MEc.roa File: PD6fSIFk4sfvIdSD6EYcBW2-MEc.roa (raw, json) Hash identifier: p1azgLRId20XgxIWzsYpvSQh51DUHT+0OZzCKiTOXYM= Subject key identifier: 3C:3E:9F:48:81:64:E2:C7:EF:21:D4:83:E8:46:1C:05:6D:BE:30:47 Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Certificate serial: AB Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/PD6fSIFk4sfvIdSD6EYcBW2-MEc.roa Signing time: Tue 31 Mar 2026 07:37:20 +0000 ROA not before: Tue 31 Mar 2026 07:37:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 55900 IP address blocks: 43.248.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Validity Not Before: Mar 31 07:37:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3C3E9F488164E2C7EF21D483E8461C056DBE3047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:7a:bc:99:df:7e:cc:60:08:34:61:34:fe: 39:e1:c0:08:bd:16:9f:ed:50:96:b2:06:9d:09:e3: 29:40:e7:ae:6e:1f:63:08:84:9f:d7:c3:77:eb:8c: 49:0c:3e:fb:97:4f:68:90:13:47:73:ae:c2:93:22: 40:bd:92:8b:96:b6:24:e8:0a:5c:4f:3f:16:7e:63: 68:74:3c:8f:8a:73:ef:65:0a:64:d4:e9:b0:96:7b: dd:90:65:9d:29:d1:c0:42:1b:f9:2a:96:27:c0:d6: f0:e6:0d:2e:5b:7f:89:f7:05:53:12:0f:11:88:7d: 70:6e:74:7e:1f:27:46:af:16:8e:3b:6b:fb:d1:12: 5d:39:71:ab:2d:56:51:fe:9c:0d:ea:85:b3:80:78: 8a:38:48:13:20:c0:0c:9b:e5:00:8e:e5:9b:e5:72: 2d:36:ca:5d:84:80:bc:2e:d2:a7:1d:8d:22:22:75: e0:74:8f:82:90:e5:46:dd:fd:1d:ef:f9:6f:6a:44: 18:e5:43:00:71:f1:6d:df:d9:59:01:a7:5e:33:26: 0f:c3:13:cd:44:17:ca:06:df:9c:56:17:dd:c9:cc: 8d:5e:19:7b:a1:2b:92:01:e2:35:ab:ec:a0:e6:3e: a0:c1:ae:35:23:12:91:e9:7e:95:52:e0:5a:1b:e3: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3E:9F:48:81:64:E2:C7:EF:21:D4:83:E8:46:1C:05:6D:BE:30:47 X509v3 Authority Key Identifier: keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/PD6fSIFk4sfvIdSD6EYcBW2-MEc.roa sbgp-ipAddrBlock: critical IPv4: 43.248.160.0/22 Signature Algorithm: sha256WithRSAEncryption 35:8e:2d:26:8d:ef:55:33:fb:73:df:81:37:ae:2a:f1:08:47: c8:34:18:d9:1e:3b:34:9a:b5:26:cb:df:46:61:09:e6:51:6f: d5:49:a1:9b:ef:f0:5a:1c:a3:e6:b2:fe:3f:ff:87:14:b8:9a: 58:24:48:8b:7d:5c:04:69:6f:dc:21:0e:d5:00:4d:2c:aa:80: c1:f9:12:06:ab:63:0b:33:bb:fc:8c:2b:fb:9e:9a:77:21:61: 3f:7b:e2:63:37:ef:46:ae:77:a3:ff:c0:93:e4:ab:57:84:c3: 34:12:6f:b4:2c:b7:63:4b:47:6a:bf:b6:dd:d9:d4:16:98:ca: 3d:55:65:14:12:92:ad:18:4e:d4:64:d3:9c:1d:ce:f6:02:3b: 27:05:05:95:e6:dd:e8:10:3a:d3:cf:80:31:0a:13:86:58:80: 70:e5:5d:0d:15:61:71:05:8a:19:25:f6:26:2a:9c:51:05:40: de:a0:78:71:b0:ea:7f:de:b2:c6:4d:2e:4f:1a:11:88:80:bb: a6:01:32:0d:cb:a4:18:62:93:6f:6b:ff:67:c7:51:b7:3d:af: 20:c0:bd:f3:17:40:8c:88:4e:8a:d4:ce:89:64:8a:d8:df:31: c1:7e:16:c8:8f:a9:2d:98:11:ac:47:e0:05:8b:0a:d8:b9:29: eb:0a:b8:c2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNjAzMzEw NzM3MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDM0U5RjQ4ODE2NEUy QzdFRjIxRDQ4M0U4NDYxQzA1NkRCRTMwNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHDXq8md9+zGAINGE0/jnhwAi9Fp/tUJayBp0J4ylA565uH2MI hJ/Xw3frjEkMPvuXT2iQE0dzrsKTIkC9kouWtiToClxPPxZ+Y2h0PI+Kc+9lCmTU 6bCWe92QZZ0p0cBCG/kqlifA1vDmDS5bf4n3BVMSDxGIfXBudH4fJ0avFo47a/vR El05castVlH+nA3qhbOAeIo4SBMgwAyb5QCO5Zvlci02yl2EgLwu0qcdjSIideB0 j4KQ5Ubd/R3v+W9qRBjlQwBx8W3f2VkBp14zJg/DE81EF8oG35xWF93JzI1eGXuh K5IB4jWr7KDmPqDBrjUjEpHpfpVS4Fob490DAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUPD6fSIFk4sfvIdSD6EYcBW2+MEcwHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTM5L1BENmZTSUZrNHNmdklkU0Q2RVljQlcyLU1FYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr+KAwDQYJKoZIhvcNAQELBQADggEB ADWOLSaN71Uz+3PfgTeuKvEIR8g0GNkeOzSatSbL30ZhCeZRb9VJoZvv8Foco+ay /j//hxS4mlgkSIt9XARpb9whDtUATSyqgMH5EgarYwszu/yMK/uemnchYT974mM3 70aud6P/wJPkq1eEwzQSb7Qst2NLR2q/tt3Z1BaYyj1VZRQSkq0YTtRk05wdzvYC OycFBZXm3egQOtPPgDEKE4ZYgHDlXQ0VYXEFihkl9iYqnFEFQN6geHGw6n/essZN Lk8aEYiAu6YBMg3LpBhik29r/2fHUbc9ryDAvfMXQIyITorUzolkitjfMcF+FsiP qS2YEaxH4AWLCti5KesKuMI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:57 2026 by rpki-client