$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/bhdKx_-OTS4T-i7C9NTnXu1qOsc.roa File: bhdKx_-OTS4T-i7C9NTnXu1qOsc.roa (raw, json) Hash identifier: F9CmgRwqutF3wnGQYWXfITGHMy/wnemYgPMnAF61bt0= Subject key identifier: 6E:17:4A:C7:FF:8E:4D:2E:13:FA:2E:C2:F4:D4:E7:5E:ED:6A:3A:C7 Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Certificate serial: AD Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/bhdKx_-OTS4T-i7C9NTnXu1qOsc.roa Signing time: Tue 31 Mar 2026 07:37:20 +0000 ROA not before: Tue 31 Mar 2026 07:37:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 55900 IP address blocks: 103.100.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Validity Not Before: Mar 31 07:37:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6E174AC7FF8E4D2E13FA2EC2F4D4E75EED6A3AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:c3:a8:47:06:9d:21:85:45:31:d8:43:4e: 61:e9:ed:93:3a:a4:7a:34:f0:d2:73:bb:47:f6:cb: 6b:c4:3b:a4:ca:1f:eb:c8:99:c3:0b:a3:fe:4b:40: 9a:9c:64:e7:66:9a:e9:4b:c2:8d:c1:d6:50:c2:f3: 42:fc:6b:62:ec:4c:34:e4:82:00:0c:81:cc:ae:89: be:76:fe:24:d8:61:fc:8a:92:33:cc:72:e6:42:e6: 28:87:1e:c5:fa:f4:76:a1:4b:e1:a1:7f:4e:5a:db: 50:e8:ae:22:8a:ae:1f:29:12:5b:68:d9:45:51:64: 1e:d8:8b:95:d5:3b:95:b3:fa:e1:5c:57:b5:1e:de: ce:1b:78:0e:22:00:36:c0:7a:a8:4c:ae:d5:48:2c: b9:a0:8e:60:15:50:eb:b5:92:26:ad:dc:8d:dd:6e: 32:97:d7:5b:40:01:d2:fd:5f:d6:b4:fc:ae:91:0c: 60:d5:77:38:17:ad:c7:d0:a7:8c:90:bc:b1:b6:f5: dc:4c:80:f9:1c:82:22:c1:7a:74:40:29:f9:d9:7a: ef:f9:da:0a:8f:26:df:0c:48:41:ea:42:64:2f:83: c2:82:f9:54:e2:5f:72:23:b6:af:a2:8b:e4:b0:fd: a3:ff:c4:d9:41:e7:54:76:4e:d7:ce:91:21:98:19: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:4A:C7:FF:8E:4D:2E:13:FA:2E:C2:F4:D4:E7:5E:ED:6A:3A:C7 X509v3 Authority Key Identifier: keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/bhdKx_-OTS4T-i7C9NTnXu1qOsc.roa sbgp-ipAddrBlock: critical IPv4: 103.100.189.0/24 Signature Algorithm: sha256WithRSAEncryption bb:8d:d0:bb:a5:7c:cd:87:f3:37:3f:22:1e:ac:7d:ae:39:91: 0a:a0:3e:c9:b1:8f:39:af:79:5d:76:28:6e:08:02:e9:05:ec: 88:28:95:69:64:fb:73:4f:46:f4:08:98:27:5f:f5:b9:a2:77: 3e:3c:57:1e:bf:81:be:a2:39:4a:17:67:b1:1e:6f:e4:bb:f4: 11:a0:46:52:04:72:40:70:36:2c:ce:fd:cd:73:c9:81:0f:d3: bf:36:10:72:b9:e8:c7:ef:fd:01:8e:70:9d:db:73:36:73:8f: e0:31:ad:2e:90:2e:99:c8:ed:30:5d:92:69:ab:a8:4e:c5:73: ed:c0:35:4c:ff:97:df:38:60:e8:49:d2:c8:ec:04:34:9b:b3: f5:ab:fe:01:12:e1:a5:20:3a:8e:d4:21:45:b0:d1:f3:88:c9: e9:81:13:9d:1c:41:9b:40:57:f0:b3:45:28:85:90:b2:90:29: fb:eb:c0:cc:2c:31:4f:39:d7:13:63:2e:c7:30:ca:f3:ef:d6: f2:0d:74:0d:ec:bd:e0:c3:fd:1b:5f:0c:d9:9b:97:a1:79:3a: bb:ec:23:d5:61:98:ee:8e:ad:3d:89:0d:04:61:c2:d8:5e:d9: 63:fd:4c:b1:b8:09:6d:bc:54:f0:8b:a2:33:60:6c:99:93:fc: 09:ef:44:a9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNjAzMzEw NzM3MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZFMTc0QUM3RkY4RTRE MkUxM0ZBMkVDMkY0RDRFNzVFRUQ2QTNBQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAIMOoRwadIYVFMdhDTmHp7ZM6pHo08NJzu0f2y2vEO6TKH+vI mcMLo/5LQJqcZOdmmulLwo3B1lDC80L8a2LsTDTkggAMgcyuib52/iTYYfyKkjPM cuZC5iiHHsX69HahS+Ghf05a21DoriKKrh8pElto2UVRZB7Yi5XVO5Wz+uFcV7Ue 3s4beA4iADbAeqhMrtVILLmgjmAVUOu1kiat3I3dbjKX11tAAdL9X9a0/K6RDGDV dzgXrcfQp4yQvLG29dxMgPkcgiLBenRAKfnZeu/52gqPJt8MSEHqQmQvg8KC+VTi X3Ijtq+ii+Sw/aP/xNlB51R2TtfOkSGYGQkzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUbhdKx/+OTS4T+i7C9NTnXu1qOscwHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTM5L2JoZEt4Xy1PVFM0VC1pN0M5TlRuWHUxcU9zYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZL0wDQYJKoZIhvcNAQELBQADggEB ALuN0LulfM2H8zc/Ih6sfa45kQqgPsmxjzmveV12KG4IAukF7IgolWlk+3NPRvQI mCdf9bmidz48Vx6/gb6iOUoXZ7Eeb+S79BGgRlIEckBwNizO/c1zyYEP0782EHK5 6Mfv/QGOcJ3bczZzj+AxrS6QLpnI7TBdkmmrqE7Fc+3ANUz/l984YOhJ0sjsBDSb s/Wr/gES4aUgOo7UIUWw0fOIyemBE50cQZtAV/CzRSiFkLKQKfvrwMwsMU851xNj LscwyvPv1vINdA3sveDD/RtfDNmbl6F5OrvsI9VhmO6OrT2JDQRhwthe2WP9TLG4 CW28VPCLojNgbJmT/AnvRKk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:17 2026 by rpki-client