$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/qhx6baly70fDtmntixlWsjZm0ho.roa File: qhx6baly70fDtmntixlWsjZm0ho.roa (raw, json) Hash identifier: jxOliXTl+YxyzPri7si4mXWa9ZlbvfvfANdfnv0J3ts= Subject key identifier: AA:1C:7A:6D:A9:72:EF:47:C3:B6:69:ED:8B:19:56:B2:36:66:D2:1A Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Certificate serial: B0 Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/qhx6baly70fDtmntixlWsjZm0ho.roa Signing time: Tue 31 Mar 2026 07:37:21 +0000 ROA not before: Tue 31 Mar 2026 07:37:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 55900 IP address blocks: 123.100.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437 Validity Not Before: Mar 31 07:37:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AA1C7A6DA972EF47C3B669ED8B1956B23666D21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:3b:bf:d4:18:a7:64:3a:e7:0e:fe:33:54: 92:84:99:00:ab:12:9e:af:19:bf:59:c9:e6:fd:89: fd:6e:45:0c:a9:9c:f3:5a:ca:15:9a:bb:db:94:a5: 23:33:a8:46:ce:96:43:c0:fa:9d:42:e5:80:aa:e5: b1:af:de:05:ff:2f:77:21:e8:d8:9d:7e:c1:aa:00: 0c:a9:23:91:e2:30:4d:8e:a9:db:ca:ab:51:49:79: d5:98:95:a5:0b:93:24:02:de:f1:e7:24:0b:e0:58: b5:e7:5f:f6:da:29:97:75:1d:46:ee:6d:10:25:52: d0:f3:0c:c3:29:a7:08:2f:de:86:7b:a8:bc:d2:a7: 85:99:c8:04:51:38:f6:43:4e:42:e4:45:0e:76:61: 66:ee:8f:e5:e6:00:dc:52:68:fc:05:a6:ef:ca:2f: 0c:db:59:57:6f:53:8b:7b:48:e7:21:2e:fc:94:08: 68:30:58:d5:95:69:c1:69:c5:fe:12:fc:6f:81:b3: a3:dc:d2:37:d0:ce:be:6f:34:df:24:49:56:91:a7: fc:94:47:7b:f8:4a:38:bb:80:3c:f3:23:a2:a4:ea: 01:94:46:63:88:18:dc:a6:60:a2:58:02:86:9a:51: f3:06:ad:c0:33:7a:5a:4f:56:72:ad:71:a4:e9:6e: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:7A:6D:A9:72:EF:47:C3:B6:69:ED:8B:19:56:B2:36:66:D2:1A X509v3 Authority Key Identifier: keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/qhx6baly70fDtmntixlWsjZm0ho.roa sbgp-ipAddrBlock: critical IPv4: 123.100.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:7e:64:2a:d4:95:d2:4b:f4:0e:f5:70:aa:78:f3:28:e0:26: 49:8f:c1:52:ea:24:0f:d6:47:e9:95:60:82:b8:f8:9f:4e:f8: 7e:8d:07:dd:ce:ad:30:b1:ef:d5:de:8d:10:1e:28:b2:0e:4a: 4a:aa:2f:fe:ef:5b:26:ad:fb:63:e0:e5:fb:f0:17:68:bf:35: 1a:f3:ff:4d:e3:0c:80:b1:58:0f:0e:29:c8:f2:5f:73:86:5c: ce:cd:14:bb:73:80:f5:82:ab:fa:a2:9a:48:04:3a:c8:db:06: f5:ab:a4:b9:c4:2f:32:cc:44:37:71:80:c1:5d:57:d0:01:63: 66:cb:ee:d3:88:af:d7:9e:bf:e3:c8:4f:85:35:d4:ed:bf:12: 5c:4d:7b:2a:a5:3c:a8:7e:b0:c3:6c:19:b2:9c:40:03:2b:a1: a4:e1:b5:5b:c2:7a:a3:3e:08:52:41:47:87:ac:6b:5e:cb:23: 8e:14:72:e3:2b:c7:48:53:16:57:27:d8:25:35:5c:73:69:56: d9:f9:c3:5e:df:5a:0d:1e:36:7e:a6:2b:7f:b2:eb:56:53:2b: 0b:72:82:e9:40:d5:49:ea:7d:b4:33:1c:4a:27:40:11:67:1c: 50:ba:c1:b9:e2:dd:b4:f3:59:a9:58:9c:1a:d9:00:2d:6c:17: 0a:03:3c:bf -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNjAzMzEw NzM3MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBMUM3QTZEQTk3MkVG NDdDM0I2NjlFRDhCMTk1NkIyMzY2NkQyMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3oju/1BinZDrnDv4zVJKEmQCrEp6vGb9Zyeb9if1uRQypnPNa yhWau9uUpSMzqEbOlkPA+p1C5YCq5bGv3gX/L3ch6NidfsGqAAypI5HiME2OqdvK q1FJedWYlaULkyQC3vHnJAvgWLXnX/baKZd1HUbubRAlUtDzDMMppwgv3oZ7qLzS p4WZyARROPZDTkLkRQ52YWbuj+XmANxSaPwFpu/KLwzbWVdvU4t7SOchLvyUCGgw WNWVacFpxf4S/G+Bs6Pc0jfQzr5vNN8kSVaRp/yUR3v4Sji7gDzzI6Kk6gGURmOI GNymYKJYAoaaUfMGrcAzelpPVnKtcaTpbvlTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUqhx6baly70fDtmntixlWsjZm0howHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTM5L3FoeDZiYWx5NzBmRHRtbnRpeGxXc2pabTBoby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7ZIgwDQYJKoZIhvcNAQELBQADggEB AHx+ZCrUldJL9A71cKp48yjgJkmPwVLqJA/WR+mVYIK4+J9O+H6NB93OrTCx79Xe jRAeKLIOSkqqL/7vWyat+2Pg5fvwF2i/NRrz/03jDICxWA8OKcjyX3OGXM7NFLtz gPWCq/qimkgEOsjbBvWrpLnELzLMRDdxgMFdV9ABY2bL7tOIr9eev+PIT4U11O2/ ElxNeyqlPKh+sMNsGbKcQAMroaThtVvCeqM+CFJBR4esa17LI44UcuMrx0hTFlcn 2CU1XHNpVtn5w17fWg0eNn6mK3+y61ZTKwtygulA1UnqfbQzHEonQBFnHFC6wbni 3bTzWalYnBrZAC1sFwoDPL8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:00 2026 by rpki-client