$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/x4BOzsnkrpYCs22fQ1m0TW8VnCA.roa File: x4BOzsnkrpYCs22fQ1m0TW8VnCA.roa (raw, json) Hash identifier: Ru+5piR2rCJY6aOhLQ1CvZHC0nRyAcjtamrUzin/fwk= Subject key identifier: C7:80:4E:CE:C9:E4:AE:96:02:B3:6D:9F:43:59:B4:4D:6F:15:9C:20 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 023D Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x4BOzsnkrpYCs22fQ1m0TW8VnCA.roa Signing time: Tue 31 Mar 2026 07:35:59 +0000 ROA not before: Tue 31 Mar 2026 07:35:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2497 IP address blocks: 220.156.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Mar 31 07:35:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C7804ECEC9E4AE9602B36D9F4359B44D6F159C20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:25:80:ce:13:86:ba:67:5f:81:a0:3f:b6: a9:1e:24:7c:6c:35:b5:d7:82:ab:9c:d2:9c:1b:40: 45:24:b7:c7:a8:56:d1:f7:8c:a7:ac:e6:cb:14:a7: 2b:7a:72:5b:79:4d:b3:b8:64:d3:93:1a:ba:1e:a0: 7c:5f:10:e3:3a:17:c0:47:23:09:4b:90:bd:bf:84: 18:ff:49:fc:16:0c:43:07:24:8e:00:75:6e:df:ea: 56:1d:f4:ac:bf:c4:6c:3f:23:96:39:37:e4:a8:20: 67:5b:82:ea:11:88:26:ab:5d:e1:ae:ad:78:e3:fc: bd:4e:87:4f:58:c2:c9:56:92:b0:cd:c1:2f:d1:77: 65:c9:0a:97:1b:e2:d0:af:a3:22:2c:23:6b:75:5f: db:26:46:2f:e6:20:c1:3b:95:7e:b2:d7:83:96:45: a1:3e:37:e6:1d:b9:43:aa:59:58:ad:27:66:98:d3: 3d:ce:d2:79:28:d0:df:7c:62:81:bb:e1:32:2b:ed: 5e:f3:fc:4b:51:f1:92:b1:3a:95:b9:bb:6d:21:4e: 13:e3:a4:13:6e:61:bb:d2:ee:0d:94:c4:e2:b7:e4: 6c:1e:7e:f5:79:e3:73:ee:dd:93:ae:a9:d9:49:67: 17:3b:21:92:05:86:84:67:1d:3c:f1:b0:87:08:b0: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:80:4E:CE:C9:E4:AE:96:02:B3:6D:9F:43:59:B4:4D:6F:15:9C:20 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x4BOzsnkrpYCs22fQ1m0TW8VnCA.roa sbgp-ipAddrBlock: critical IPv4: 220.156.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:ef:6d:8c:2f:f1:09:15:39:d6:f8:89:b0:64:bb:d5:5e:73: b3:4c:d1:2b:1b:3f:40:ce:b2:c3:66:65:9b:f5:d7:a6:8b:d7: 98:46:2f:36:e6:ab:62:f0:7c:cc:74:90:7b:96:57:52:86:c8: 58:70:8b:56:e3:63:d9:fa:a8:25:92:03:4e:d5:ff:05:8a:ef: 74:79:fc:67:b5:38:5e:24:c1:dc:5f:ee:fa:2b:d3:30:44:d7: d7:9b:3c:85:ea:49:cf:d1:b8:f0:e4:db:73:da:60:6a:ea:64: 60:0b:3f:1f:ca:25:92:ba:31:9a:ae:4c:44:b3:f4:55:96:d7: d4:3d:5a:e2:6a:7f:dd:c0:d8:aa:fa:2c:b9:dc:5d:c4:35:b1: 9c:08:52:a0:46:a4:e9:43:c4:f3:ec:e9:ab:8a:45:91:c1:d8: 71:f4:48:d2:a8:d8:7e:24:e0:c4:df:a2:91:42:11:59:3e:d0: c0:62:88:66:d3:6d:42:a7:e0:cb:33:a2:08:93:0a:be:68:47: 67:c7:23:a6:ff:73:71:a3:f5:4f:68:65:0b:28:49:07:d0:21: a7:63:56:b9:33:36:2a:26:69:a2:f8:0b:7c:d8:53:80:62:69: 29:c8:85:48:a4:7b:67:ad:74:23:c6:73:43:93:9f:fd:47:63: 29:ef:52:56 -----BEGIN CERTIFICATE----- MIIEuTCCA6GgAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw NzM1NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3ODA0RUNFQzlFNEFF OTYwMkIzNkQ5RjQzNTlCNDRENkYxNTlDMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXPCWAzhOGumdfgaA/tqkeJHxsNbXXgquc0pwbQEUkt8eoVtH3 jKes5ssUpyt6clt5TbO4ZNOTGroeoHxfEOM6F8BHIwlLkL2/hBj/SfwWDEMHJI4A dW7f6lYd9Ky/xGw/I5Y5N+SoIGdbguoRiCarXeGurXjj/L1Oh09YwslWkrDNwS/R d2XJCpcb4tCvoyIsI2t1X9smRi/mIME7lX6y14OWRaE+N+YduUOqWVitJ2aY0z3O 0nko0N98YoG74TIr7V7z/EtR8ZKxOpW5u20hThPjpBNuYbvS7g2UxOK35GwefvV5 43Pu3ZOuqdlJZxc7IZIFhoRnHTzxsIcIsAz1AgMBAAGjggHVMIIB0TAdBgNVHQ4E FgQUx4BOzsnkrpYCs22fQ1m0TW8VnCAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYveDRCT3pzbmtycFlDczIyZlExbTBUVzhWbkNBLnJvYTAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEBtycADANBgkqhkiG9w0BAQsFAAOCAQEAnu9t jC/xCRU51viJsGS71V5zs0zRKxs/QM6yw2Zlm/XXpovXmEYvNuarYvB8zHSQe5ZX UobIWHCLVuNj2fqoJZIDTtX/BYrvdHn8Z7U4XiTB3F/u+ivTMETX15s8hepJz9G4 8OTbc9pgaupkYAs/H8olkroxmq5MRLP0VZbX1D1a4mp/3cDYqvosudxdxDWxnAhS oEak6UPE8+zpq4pFkcHYcfRI0qjYfiTgxN+ikUIRWT7QwGKIZtNtQqfgyzOiCJMK vmhHZ8cjpv9zcaP1T2hlCyhJB9Ahp2NWuTM2KiZpovgLfNhTgGJpKciFSKR7Z610 I8ZzQ5Of/UdjKe9SVg== -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:13 2026 by rpki-client