$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/0QnaFGdoYrF5B9dJFPHLKrZDi9s.roa File: 0QnaFGdoYrF5B9dJFPHLKrZDi9s.roa (raw, json) Hash identifier: Vma1A5On5qvSj7Ob6CoNtPFMLOpj1IJhZ0viRRXiTm0= Subject key identifier: D1:09:DA:14:67:68:62:B1:79:07:D7:49:14:F1:CB:2A:B6:43:8B:DB Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Certificate serial: 8F Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/0QnaFGdoYrF5B9dJFPHLKrZDi9s.roa Signing time: Tue 31 Mar 2026 07:50:15 +0000 ROA not before: Tue 31 Mar 2026 07:50:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131896 IP address blocks: 103.239.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Validity Not Before: Mar 31 07:50:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D109DA14676862B17907D74914F1CB2AB6438BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:eb:4e:9a:5d:38:5a:3f:e5:69:bb:ce:da: 17:75:30:53:46:16:b5:19:ce:c4:fb:6a:ac:b4:ac: 86:f1:11:30:d8:40:09:54:1e:83:db:2f:62:d5:5a: 92:8e:fd:33:5a:29:0e:ef:26:d1:7c:f0:d8:14:ca: 8a:ea:78:f0:3b:fb:1b:26:aa:05:a5:99:c0:51:06: 4b:57:43:e7:72:b2:90:3d:49:11:ae:3a:f5:59:2d: c6:f4:28:e2:f3:8b:bd:e1:e6:fe:d7:52:f3:87:02: 5f:8b:88:56:dd:2a:ac:66:67:01:29:a2:73:30:e9: 10:fe:54:1e:ee:62:9f:b3:09:3a:29:e5:94:a0:c1: 77:f3:9e:68:03:7c:76:7e:39:ef:35:e5:cd:0c:5c: 3c:0b:80:01:04:5f:9e:90:b3:1e:c4:72:39:01:f8: 9f:f5:c3:40:f1:aa:1b:57:8b:0a:94:40:27:ea:6c: 63:4d:6e:75:3f:bf:0d:a4:0c:bf:30:8c:98:95:c3: 1b:b1:0e:42:9a:cf:bd:c0:d6:ce:bd:d0:13:ed:8e: dc:45:e2:f6:86:cd:e5:fe:55:03:51:da:9c:16:06: b7:fa:26:e6:63:5a:12:6d:7b:19:17:56:86:aa:34: 7b:f5:56:fc:5e:02:3c:1f:03:76:0b:06:c6:d6:32: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:DA:14:67:68:62:B1:79:07:D7:49:14:F1:CB:2A:B6:43:8B:DB X509v3 Authority Key Identifier: keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/0QnaFGdoYrF5B9dJFPHLKrZDi9s.roa sbgp-ipAddrBlock: critical IPv4: 103.239.16.0/23 Signature Algorithm: sha256WithRSAEncryption 85:5b:25:33:2a:67:13:d7:98:d4:1d:cb:8d:7c:d8:b2:f4:26: c6:09:67:2f:ad:75:42:9b:da:b5:07:ac:c3:4b:50:69:f2:6c: af:ab:5d:e5:5b:c4:d5:c8:77:24:bc:7d:39:05:e5:ba:1a:8a: a1:75:5b:43:d1:e5:73:2e:29:ab:cb:e6:e4:07:f4:d8:b0:34: 8e:06:7b:ab:20:90:45:db:f1:ae:ff:77:44:5c:87:c0:40:42: 68:05:0b:ca:6a:eb:6d:ea:5d:1b:8b:4c:42:b8:2d:2b:26:d3: ac:a2:18:54:fc:62:3c:3e:30:64:92:c4:ac:4f:ce:e1:d8:92: c5:9c:84:1d:c2:12:9e:22:79:39:db:ef:78:f6:2c:5b:9d:ca: 89:a1:b5:a1:de:2b:34:02:96:72:12:e1:e3:58:77:15:41:8d: e2:e1:1a:94:3d:99:77:79:db:5a:ae:5a:70:8a:59:a1:06:10: d4:ed:ed:15:48:ec:c5:b5:e1:c4:0d:49:c3:33:a0:92:dd:38: e0:17:00:cb:0b:7c:7d:8c:2f:d9:32:52:f5:28:7d:68:19:a4: 51:a6:7e:5d:69:76:36:90:b5:ea:e0:52:f7:8a:49:70:98:bc: c4:67:7d:f8:75:b3:5b:03:08:3b:51:b8:bf:24:85:fe:58:fd: 1c:4a:56:8b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx NEQ4NUJENDgzNjBBNjVEOUQ0MTQ0RUM2RDIwNzUyQzFFREM3RDAeFw0yNjAzMzEw NzUwMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxMDlEQTE0Njc2ODYy QjE3OTA3RDc0OTE0RjFDQjJBQjY0MzhCREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC83utOml04Wj/labvO2hd1MFNGFrUZzsT7aqy0rIbxETDYQAlU HoPbL2LVWpKO/TNaKQ7vJtF88NgUyorqePA7+xsmqgWlmcBRBktXQ+dyspA9SRGu OvVZLcb0KOLzi73h5v7XUvOHAl+LiFbdKqxmZwEponMw6RD+VB7uYp+zCTop5ZSg wXfznmgDfHZ+Oe815c0MXDwLgAEEX56Qsx7EcjkB+J/1w0DxqhtXiwqUQCfqbGNN bnU/vw2kDL8wjJiVwxuxDkKaz73A1s690BPtjtxF4vaGzeX+VQNR2pwWBrf6JuZj WhJtexkXVoaqNHv1VvxeAjwfA3YLBsbWMmN9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU0QnaFGdoYrF5B9dJFPHLKrZDi9swHwYDVR0jBBgwFoAUyBTYW9SDYKZdnUFE 7G0gdSwe3H0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU3My95QlRZVzlTRFlLWmRuVUZFN0cwZ2RTd2UzSDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95QlRZVzlTRFlLWmRuVUZFN0cwZ2RT d2UzSDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTczLzBRbmFGR2RvWXJGNUI5ZEpGUEhMS3JaRGk5cy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7xAwDQYJKoZIhvcNAQELBQADggEB AIVbJTMqZxPXmNQdy4182LL0JsYJZy+tdUKb2rUHrMNLUGnybK+rXeVbxNXIdyS8 fTkF5boaiqF1W0PR5XMuKavL5uQH9NiwNI4Ge6sgkEXb8a7/d0Rch8BAQmgFC8pq 623qXRuLTEK4LSsm06yiGFT8Yjw+MGSSxKxPzuHYksWchB3CEp4ieTnb73j2LFud yomhtaHeKzQClnIS4eNYdxVBjeLhGpQ9mXd521quWnCKWaEGENTt7RVI7MW14cQN ScMzoJLdOOAXAMsLfH2ML9kyUvUofWgZpFGmfl1pdjaQtergUveKSXCYvMRnffh1 s1sDCDtRuL8khf5Y/RxKVos= -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:45 2026 by rpki-client