$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/asClh6qm19WbPCQ6epAGmgRVXOc.roa File: asClh6qm19WbPCQ6epAGmgRVXOc.roa (raw, json) Hash identifier: aVXEeHnEAemcV58g/udkCOIIkw0HKpt+gKPWfXZ2q0g= Subject key identifier: 6A:C0:A5:87:AA:A6:D7:D5:9B:3C:24:3A:7A:90:06:9A:04:55:5C:E7 Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Certificate serial: 19 Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/asClh6qm19WbPCQ6epAGmgRVXOc.roa Signing time: Tue 31 Mar 2026 08:45:53 +0000 ROA not before: Tue 31 Mar 2026 08:45:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18070 IP address blocks: 218.223.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Validity Not Before: Mar 31 08:45:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6AC0A587AAA6D7D59B3C243A7A90069A04555CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:1e:10:49:a4:2b:a6:d6:38:bd:84:89:94: f2:43:bf:b9:65:7d:3d:ba:d8:eb:24:fb:12:83:2f: f0:6b:16:cb:ff:e3:ad:a9:81:12:67:ff:13:85:a4: c1:3a:34:bd:00:4c:6a:ec:0e:ce:61:c2:fe:46:66: 53:81:ba:06:ba:4b:6d:4a:b0:0b:5f:46:6a:ae:29: 8f:9d:ce:6e:5c:a5:80:46:80:1c:32:41:58:61:20: c3:d6:44:e2:1c:dd:d9:84:27:2d:13:26:14:ec:b3: 4d:1c:9c:3e:38:92:c8:18:53:cc:fc:4f:b8:0f:b5: 3e:62:da:cf:06:e1:28:8c:3f:aa:c8:77:ff:92:3a: 7d:b8:8d:f9:0c:24:48:66:dd:ea:23:1e:8c:c8:3e: 85:95:f0:81:9e:cd:a7:55:b1:82:57:f0:6a:3d:f7: 3d:45:69:9b:53:11:82:8e:3e:f9:93:e9:11:27:24: 74:b8:09:b4:ab:01:96:b4:36:ed:9e:ac:ed:a9:b0: 8a:ef:44:f1:4d:27:cc:3a:f4:c2:8c:08:f0:0b:b0: 26:27:89:db:5f:f0:da:2b:99:d2:d3:30:82:d8:cc: 3e:7c:0e:74:61:6b:09:c1:2b:7e:da:00:d6:33:48: 4a:f2:c0:60:4c:c3:be:36:ef:78:aa:2a:e4:02:4b: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C0:A5:87:AA:A6:D7:D5:9B:3C:24:3A:7A:90:06:9A:04:55:5C:E7 X509v3 Authority Key Identifier: keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/asClh6qm19WbPCQ6epAGmgRVXOc.roa sbgp-ipAddrBlock: critical IPv4: 218.223.32.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:7e:39:7c:eb:fd:71:9a:86:9a:39:7a:86:f4:30:2c:c0:3d: 02:ab:ea:ee:e4:48:66:d8:eb:0d:81:98:c8:f8:b9:2c:52:94: be:95:a6:aa:ac:c8:35:ff:2a:ce:d5:6c:7d:ff:7d:0b:d5:6e: 89:97:36:43:32:58:1b:75:e4:70:77:64:35:22:ca:28:79:5f: a0:73:6b:e3:78:26:3b:66:e5:be:a8:37:be:2a:0f:98:9e:cb: 10:bf:ff:0e:52:5b:74:12:f3:c2:11:a6:c9:d8:2b:93:04:6c: 97:9c:3b:bc:53:26:7e:f8:0e:3f:3b:b4:81:53:ed:a9:98:20: aa:62:b0:07:21:4d:1d:ac:a0:1d:97:56:47:67:72:2b:be:6c: f7:66:b7:18:94:7c:4e:ec:1f:42:5f:2b:2e:ac:34:91:ac:b6: 2d:9e:9a:36:bc:8d:ba:1f:2f:07:6c:f1:35:e4:ff:40:75:cf: 43:69:5c:d2:3f:d0:0d:fe:4b:62:a3:be:6c:77:6c:69:5b:9e: 26:e1:5b:1d:67:ee:80:df:14:a3:87:c6:54:7b:5a:01:3b:95: 3d:bd:06:44:e3:42:58:cc:f3:11:a7:c0:d0:06:f9:c9:88:72: 47:50:63:0b:82:de:1c:ab:36:ef:fd:67:42:e4:0c:14:60:a5: 9e:90:ca:a4 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1 RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI2MDMzMTA4 NDU1M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkFDMEE1ODdBQUE2RDdE NTlCM0MyNDNBN0E5MDA2OUEwNDU1NUNFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALoyHhBJpCum1ji9hImU8kO/uWV9PbrY6yT7EoMv8GsWy//jramB Emf/E4WkwTo0vQBMauwOzmHC/kZmU4G6BrpLbUqwC19Gaq4pj53OblylgEaAHDJB WGEgw9ZE4hzd2YQnLRMmFOyzTRycPjiSyBhTzPxPuA+1PmLazwbhKIw/qsh3/5I6 fbiN+QwkSGbd6iMejMg+hZXwgZ7Np1Wxglfwaj33PUVpm1MRgo4++ZPpESckdLgJ tKsBlrQ27Z6s7amwiu9E8U0nzDr0wowI8AuwJieJ21/w2iuZ0tMwgtjMPnwOdGFr CcErftoA1jNISvLAYEzDvjbveKoq5AJLUS0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRqwKWHqqbX1Zs8JDp6kAaaBFVc5zAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN 1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82NzcvYXNDbGg2cW0xOVdiUENRNmVwQUdtZ1JWWE9jLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNrfIDANBgkqhkiG9w0BAQsFAAOCAQEA K345fOv9cZqGmjl6hvQwLMA9Aqvq7uRIZtjrDYGYyPi5LFKUvpWmqqzINf8qztVs ff99C9VuiZc2QzJYG3XkcHdkNSLKKHlfoHNr43gmO2blvqg3vioPmJ7LEL//DlJb dBLzwhGmydgrkwRsl5w7vFMmfvgOPzu0gVPtqZggqmKwByFNHaygHZdWR2dyK75s 92a3GJR8TuwfQl8rLqw0kay2LZ6aNryNuh8vB2zxNeT/QHXPQ2lc0j/QDf5LYqO+ bHdsaVueJuFbHWfugN8Uo4fGVHtaATuVPb0GRONCWMzzEafA0Ab5yYhyR1BjC4Le HKs27/1nQuQMFGClnpDKpA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:24 2026 by rpki-client