$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/aVHfArO0gpEhif0V2LKDRN-7Ioo.roa File: aVHfArO0gpEhif0V2LKDRN-7Ioo.roa (raw, json) Hash identifier: CUGp5qqODrxwc1Yn8auz6m3dBoTBqNY8JndgqOHtmUw= Subject key identifier: 69:51:DF:02:B3:B4:82:91:21:89:FD:15:D8:B2:83:44:DF:BB:22:8A Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Certificate serial: B1 Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/aVHfArO0gpEhif0V2LKDRN-7Ioo.roa Signing time: Tue 31 Mar 2026 07:37:22 +0000 ROA not before: Tue 31 Mar 2026 07:37:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 55900 IP address blocks: 123.100.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Validity Not Before: Mar 31 07:37:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6951DF02B3B482912189FD15D8B28344DFBB228A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:52:98:85:7d:82:96:81:13:0d:fa:c5:85: 2b:ff:ee:e3:b0:7d:71:07:d1:f4:7a:66:4d:28:b4: 83:8c:ad:1d:0d:24:60:e7:d9:f1:62:cd:ab:51:9c: 22:c9:ec:19:4e:53:80:6d:89:cf:bf:96:25:fc:61: 1b:12:56:22:d8:2e:ba:2c:b7:b3:31:46:84:58:5d: 44:f3:9e:38:a7:e4:84:fb:f6:d3:60:7d:bb:95:84: 5d:41:81:39:69:ed:e3:02:fc:53:aa:e0:6c:88:aa: 3d:5a:48:21:79:d5:10:c9:e2:9d:74:36:58:87:44: be:b6:1f:21:b9:ff:47:19:96:d0:fb:e2:a0:39:72: e1:3d:35:41:57:48:b9:e8:f0:08:44:38:3e:a9:1a: 86:85:30:a6:b1:98:8b:32:f6:71:5a:2b:0e:81:36: c6:4f:af:c4:04:98:e1:e1:cc:8f:d8:ed:17:b3:de: e1:ea:c2:f3:17:53:34:61:db:f2:ae:c3:7e:31:bd: e9:46:3b:4f:8b:ec:a2:d4:5c:d5:ae:ba:4e:08:59: 81:d5:1f:06:5e:18:5b:f5:85:8b:e7:bf:0d:31:7d: ac:42:53:84:96:f9:f8:c5:84:2c:a7:d4:7a:54:fb: 0b:13:2b:61:b7:f6:71:cd:c8:0e:65:f6:9d:de:82: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:51:DF:02:B3:B4:82:91:21:89:FD:15:D8:B2:83:44:DF:BB:22:8A X509v3 Authority Key Identifier: keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/aVHfArO0gpEhif0V2LKDRN-7Ioo.roa sbgp-ipAddrBlock: critical IPv4: 123.100.156.0/22 Signature Algorithm: sha256WithRSAEncryption c4:88:19:36:e3:86:56:49:1e:9b:4f:5e:13:aa:5d:36:7f:60: c0:c4:32:77:6c:ff:b6:aa:cd:23:38:98:f5:46:72:94:d4:29: 35:07:ed:1e:ea:fc:98:5b:a6:cb:3f:57:2f:ed:9e:f5:01:52: 8b:c6:d0:43:3c:ea:8a:2c:02:8c:fb:46:d1:e4:a4:41:2f:64: 40:7c:13:19:6d:a6:16:5c:17:48:cb:b2:3d:01:ae:17:c9:c3: 2a:af:04:90:af:1f:2b:e8:a1:8c:24:77:6b:bc:3d:1e:fd:0b: ef:e3:2c:62:ab:f3:45:26:39:3a:da:5e:55:8a:6f:8d:83:b4: dd:1a:67:05:de:f2:37:82:fd:a7:cc:7b:43:d2:c4:db:c6:68: b4:d4:b4:e6:1f:3f:7a:6f:32:2e:2c:56:2d:a2:44:6c:d2:1b: be:00:21:b2:8f:b3:c4:65:01:91:d7:5d:c4:26:bf:c2:72:eb: bb:f2:fe:2b:5b:94:8d:f7:97:18:8c:a4:91:e8:1a:e9:4e:6d: a8:14:e4:94:90:63:ec:5d:0a:f8:35:f2:ff:d9:cf:4a:b4:c4: 6e:ef:44:11:9e:d3:d2:5c:fe:e0:c7:80:05:cb:e3:4b:fe:71: f5:30:a7:1f:fd:b1:f0:c9:a8:a8:bc:a4:dc:a6:00:6f:8a:f6: 23:6e:b1:e8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNjAzMzEw NzM3MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY5NTFERjAyQjNCNDgy OTEyMTg5RkQxNUQ4QjI4MzQ0REZCQjIyOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0y1KYhX2CloETDfrFhSv/7uOwfXEH0fR6Zk0otIOMrR0NJGDn 2fFizatRnCLJ7BlOU4Btic+/liX8YRsSViLYLrost7MxRoRYXUTznjin5IT79tNg fbuVhF1BgTlp7eMC/FOq4GyIqj1aSCF51RDJ4p10NliHRL62HyG5/0cZltD74qA5 cuE9NUFXSLno8AhEOD6pGoaFMKaxmIsy9nFaKw6BNsZPr8QEmOHhzI/Y7Rez3uHq wvMXUzRh2/Kuw34xvelGO0+L7KLUXNWuuk4IWYHVHwZeGFv1hYvnvw0xfaxCU4SW +fjFhCyn1HpU+wsTK2G39nHNyA5l9p3egsNxAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUaVHfArO0gpEhif0V2LKDRN+7IoowHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTM5L2FWSGZBck8wZ3BFaGlmMFYyTEtEUk4tN0lvby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7ZJwwDQYJKoZIhvcNAQELBQADggEB AMSIGTbjhlZJHptPXhOqXTZ/YMDEMnds/7aqzSM4mPVGcpTUKTUH7R7q/Jhbpss/ Vy/tnvUBUovG0EM86oosAoz7RtHkpEEvZEB8ExltphZcF0jLsj0BrhfJwyqvBJCv HyvooYwkd2u8PR79C+/jLGKr80UmOTraXlWKb42DtN0aZwXe8jeC/afMe0PSxNvG aLTUtOYfP3pvMi4sVi2iRGzSG74AIbKPs8RlAZHXXcQmv8Jy67vy/itblI33lxiM pJHoGulObagU5JSQY+xdCvg18v/Zz0q0xG7vRBGe09Jc/uDHgAXL40v+cfUwpx/9 sfDJqKi8pNymAG+K9iNuseg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:43 2026 by rpki-client