$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/OcNf3_ge2YGuZQ2SsIoeKaR2VEc.roa File: OcNf3_ge2YGuZQ2SsIoeKaR2VEc.roa (raw, json) Hash identifier: gz9kpeglAK6XL1AnP46itd7Cxx6t09Kiard5dhqMKJI= Subject key identifier: 39:C3:5F:DF:F8:1E:D9:81:AE:65:0D:92:B0:8A:1E:29:A4:76:54:47 Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4 Certificate serial: 90 Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/OcNf3_ge2YGuZQ2SsIoeKaR2VEc.roa Signing time: Tue 31 Mar 2026 07:35:29 +0000 ROA not before: Tue 31 Mar 2026 07:35:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2497 IP address blocks: 157.65.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4 Validity Not Before: Mar 31 07:35:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=39C35FDFF81ED981AE650D92B08A1E29A4765447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:67:0f:df:13:e2:cc:75:0e:b1:65:9e:8b: b2:66:07:fd:a4:4d:6d:2e:4f:9d:dd:5f:f0:e4:bb: ed:7d:ab:62:f1:0a:92:61:2e:56:09:58:50:03:8e: 6a:5a:d6:f0:15:5d:b6:b8:6a:79:f1:42:b1:78:5c: 3d:4c:63:7b:39:af:3a:2c:21:f5:e2:cd:99:20:fb: b0:d9:de:51:93:8c:eb:1a:4c:0c:0f:43:2b:f5:8e: d5:1e:17:02:ad:e3:00:c0:b8:ad:4d:c7:42:c0:fa: 43:b2:bc:57:e5:a4:82:6d:32:ce:22:7f:cf:a2:59: 82:8c:8e:af:e2:0e:27:2f:b8:0f:32:4a:ba:b9:37: 73:59:d3:3c:15:01:fe:4a:86:a3:9f:5d:73:e2:3c: 1a:13:5b:c5:69:9a:f1:e0:20:0f:1d:a5:47:0f:47: 8b:ee:81:3b:82:c2:0b:a6:01:65:73:c5:5a:c7:f2: 86:92:a3:ba:d9:7c:91:cb:7f:74:d7:85:37:6f:69: 38:d9:4f:46:d4:e8:c4:1f:93:84:7f:1a:1b:33:f6: 81:7e:fa:d3:fb:80:8b:82:f4:68:05:02:2a:53:da: 24:53:15:bd:12:d4:26:24:7d:e0:a0:8a:bc:49:7a: e5:d1:56:11:99:1c:4a:4b:39:95:6d:d0:b3:53:74: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:5F:DF:F8:1E:D9:81:AE:65:0D:92:B0:8A:1E:29:A4:76:54:47 X509v3 Authority Key Identifier: keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/OcNf3_ge2YGuZQ2SsIoeKaR2VEc.roa sbgp-ipAddrBlock: critical IPv4: 157.65.8.0/21 Signature Algorithm: sha256WithRSAEncryption 63:c4:84:13:4e:8d:e5:98:1a:c8:a6:37:7a:7d:9d:99:68:db: be:18:b0:16:80:6f:ce:88:1a:ee:98:98:54:fc:c0:e8:6b:65: 23:a8:61:79:48:8a:01:5a:dc:c0:a4:b2:59:c5:10:c2:8a:ac: 94:1c:7b:45:20:97:15:19:fe:4b:a2:01:48:99:5c:43:03:d7: d6:17:e9:7e:36:6c:ec:a9:3d:06:b6:08:43:9c:3a:da:2b:4d: 4c:53:21:81:e9:14:13:ee:3c:ba:ef:56:b7:11:f1:44:95:14: 99:a9:88:e4:27:a3:c5:76:d6:da:89:5b:70:ce:91:6a:9c:50: af:3b:a1:02:9a:81:fa:b9:d5:72:94:cd:92:32:1d:46:3c:1b: f7:d4:47:65:eb:f0:fb:81:b8:eb:90:46:02:d6:e3:65:9b:eb: 52:ec:b1:3f:23:31:71:66:f7:04:a5:ed:b9:a6:a7:d3:39:3e: 29:de:2a:31:48:10:8d:5c:60:40:64:e0:a7:ce:a0:a3:17:d9: 4f:82:e0:59:ca:8d:5c:56:0f:35:b7:7d:16:9d:d4:65:16:9a: 0d:a4:2e:bd:ac:08:f4:61:68:a9:5b:5d:bd:f6:a1:92:e7:64: 45:00:59:11:96:b8:bb:7d:fe:c5:dd:4e:12:0e:9a:8e:bc:37: e2:83:98:c6 -----BEGIN CERTIFICATE----- MIIEuTCCA6GgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk2 OTY2REQ3MjBDMzA1NzVGNjJEOEZENDE0OTQ1OEE5MEFBQ0FBNDAeFw0yNjAzMzEw NzM1MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5QzM1RkRGRjgxRUQ5 ODFBRTY1MEQ5MkIwOEExRTI5QTQ3NjU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ5mcP3xPizHUOsWWei7JmB/2kTW0uT53dX/Dku+19q2LxCpJh LlYJWFADjmpa1vAVXba4annxQrF4XD1MY3s5rzosIfXizZkg+7DZ3lGTjOsaTAwP Qyv1jtUeFwKt4wDAuK1Nx0LA+kOyvFflpIJtMs4if8+iWYKMjq/iDicvuA8ySrq5 N3NZ0zwVAf5KhqOfXXPiPBoTW8VpmvHgIA8dpUcPR4vugTuCwgumAWVzxVrH8oaS o7rZfJHLf3TXhTdvaTjZT0bU6MQfk4R/Ghsz9oF++tP7gIuC9GgFAipT2iRTFb0S 1CYkfeCgirxJeuXRVhGZHEpLOZVt0LNTdA4JAgMBAAGjggHVMIIB0TAdBgNVHQ4E FgQUOcNf3/ge2YGuZQ2SsIoeKaR2VEcwHwYDVR0jBBgwFoAUKWlm3XIMMFdfYtj9 QUlFipCqyqQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENxeXFRLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENx eXFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvT2NOZjNfZ2UyWUd1WlEyU3NJb2VLYVIyVkVjLnJvYTAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEA51BCDANBgkqhkiG9w0BAQsFAAOCAQEAY8SE E06N5ZgayKY3en2dmWjbvhiwFoBvzoga7piYVPzA6GtlI6hheUiKAVrcwKSyWcUQ woqslBx7RSCXFRn+S6IBSJlcQwPX1hfpfjZs7Kk9BrYIQ5w62itNTFMhgekUE+48 uu9WtxHxRJUUmamI5CejxXbW2olbcM6RapxQrzuhApqB+rnVcpTNkjIdRjwb99RH Zevw+4G465BGAtbjZZvrUuyxPyMxcWb3BKXtuaan0zk+Kd4qMUgQjVxgQGTgp86g oxfZT4LgWcqNXFYPNbd9Fp3UZRaaDaQuvawI9GFoqVtdvfahkudkRQBZEZa4u33+ xd1OEg6ajrw34oOYxg== -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:04 2026 by rpki-client