$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/hedtzzYF2CWpQFyr145QujDru4w.roa File: hedtzzYF2CWpQFyr145QujDru4w.roa (raw, json) Hash identifier: pFC/puLBeQKhPgSJs4LtoZ9D069YEghPpWxaYAVG+0g= Subject key identifier: 85:E7:6D:CF:36:05:D8:25:A9:40:5C:AB:D7:8E:50:BA:30:EB:BB:8C Certificate issuer: /CN=7B49A8775994827975AB37E6DF96064C924783F1 Certificate serial: 3E Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/hedtzzYF2CWpQFyr145QujDru4w.roa Signing time: Tue 31 Mar 2026 08:39:29 +0000 ROA not before: Tue 31 Mar 2026 08:39:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18129 IP address blocks: 180.200.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1 Validity Not Before: Mar 31 08:39:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=85E76DCF3605D825A9405CABD78E50BA30EBBB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:e2:ff:62:43:8b:f3:5d:dd:0c:04:49:00: 30:ec:7a:44:b9:fa:52:49:eb:66:9c:bc:b0:f6:db: 21:40:93:a9:2d:5a:f2:3e:34:70:c0:68:21:cf:97: 26:71:88:70:69:07:b5:34:11:39:68:39:90:2c:70: a7:6d:01:fb:f9:ea:e6:90:a8:b0:59:7b:d0:d8:39: df:b2:98:1e:37:20:a6:89:41:d1:ee:fb:8d:c7:96: 71:3e:2e:a0:1d:b6:53:29:ec:13:b7:23:cf:2d:aa: d4:90:79:fa:27:b5:89:8b:d3:0c:58:dd:d6:b1:bc: 0e:dd:46:82:a3:dd:55:cf:3e:15:23:77:fd:96:94: 0c:3a:55:21:0b:3d:49:29:7a:70:5b:f9:c2:ec:5c: 8d:18:ed:e0:d6:63:b3:62:f4:24:ff:8c:00:28:21: 40:b5:9d:90:8d:08:a6:24:be:8d:06:59:a1:19:aa: 41:b2:56:79:f2:0b:db:37:91:8b:cd:b2:ba:ce:32: 96:4b:87:d7:ac:4a:5d:54:20:e1:f2:db:4a:aa:a0: f2:fe:1c:8f:18:eb:5b:45:62:44:88:22:10:fe:b8: a3:e7:17:3c:c3:06:7a:a3:41:00:a1:eb:a7:be:b2: 42:39:57:c1:1e:1b:75:90:cf:c2:9d:11:c0:04:dc: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E7:6D:CF:36:05:D8:25:A9:40:5C:AB:D7:8E:50:BA:30:EB:BB:8C X509v3 Authority Key Identifier: keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/hedtzzYF2CWpQFyr145QujDru4w.roa sbgp-ipAddrBlock: critical IPv4: 180.200.248.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:9a:fe:89:bb:9d:0c:da:22:f9:ab:7a:45:c2:db:b0:b1:9a: 41:38:42:5c:8e:88:ba:c3:e5:59:59:5a:75:69:a6:36:bc:2a: cb:ce:83:74:a6:3c:3d:e2:3f:7c:d8:cf:ea:61:ee:16:89:b6: ff:2b:42:52:6a:31:8d:f8:06:b7:3c:3e:d8:25:cd:1a:cb:fb: 10:a5:69:14:96:bd:62:62:18:63:44:45:f3:de:51:cf:37:51: a6:d2:7d:1b:8c:7d:14:78:3c:70:7f:a5:1f:f3:dc:97:dc:de: f7:7b:3c:0d:ab:cf:41:0a:55:c5:7d:01:49:ce:30:04:f1:d7: 38:28:9c:14:07:78:34:b6:43:67:c9:62:bc:95:4e:f4:b5:83: a7:c3:9a:da:31:bf:0e:b5:f9:61:ca:12:9e:3a:86:4d:f2:cb: 05:14:8c:1d:55:9e:e3:1e:b3:be:dc:84:17:a7:3b:f2:49:4f: 9c:03:fe:cb:5c:88:df:04:59:24:30:e8:62:37:09:92:0e:d4: 9f:4b:d6:61:15:12:82:a5:bc:c2:5a:65:e9:b4:f9:8f:b2:de: 6a:aa:fc:95:ec:d1:ce:95:69:2b:32:5f:47:47:88:1b:cd:86: 61:eb:ee:75:90:d4:8c:98:a7:57:31:cf:61:0a:5f:ec:12:dc: 2b:88:cc:c5 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QjQ5 QTg3NzU5OTQ4Mjc5NzVBQjM3RTZERjk2MDY0QzkyNDc4M0YxMB4XDTI2MDMzMTA4 MzkyOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODVFNzZEQ0YzNjA1RDgy NUE5NDA1Q0FCRDc4RTUwQkEzMEVCQkI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKuH4v9iQ4vzXd0MBEkAMOx6RLn6UknrZpy8sPbbIUCTqS1a8j40 cMBoIc+XJnGIcGkHtTQROWg5kCxwp20B+/nq5pCosFl70Ng537KYHjcgpolB0e77 jceWcT4uoB22UynsE7cjzy2q1JB5+ie1iYvTDFjd1rG8Dt1GgqPdVc8+FSN3/ZaU DDpVIQs9SSl6cFv5wuxcjRjt4NZjs2L0JP+MACghQLWdkI0IpiS+jQZZoRmqQbJW efIL2zeRi82yus4ylkuH16xKXVQg4fLbSqqg8v4cjxjrW0ViRIgiEP64o+cXPMMG eqNBAKHrp76yQjlXwR4bdZDPwp0RwATc8nECAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSF523PNgXYJalAXKvXjlC6MOu7jDAfBgNVHSMEGDAWgBR7Sah3WZSCeXWrN+bf lgZMkkeD8TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzUxL2UwbW9kMW1VZ25sMXF6Zm0zNVlHVEpKSGdfRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2UwbW9kMW1VZ25sMXF6Zm0zNVlHVEpK SGdfRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC83NTEvaGVkdHp6WUYyQ1dwUUZ5cjE0NVF1akRydTR3LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArTI+DANBgkqhkiG9w0BAQsFAAOCAQEA nZr+ibudDNoi+at6RcLbsLGaQThCXI6IusPlWVladWmmNrwqy86DdKY8PeI/fNjP 6mHuFom2/ytCUmoxjfgGtzw+2CXNGsv7EKVpFJa9YmIYY0RF895RzzdRptJ9G4x9 FHg8cH+lH/Pcl9ze93s8DavPQQpVxX0BSc4wBPHXOCicFAd4NLZDZ8livJVO9LWD p8Oa2jG/DrX5YcoSnjqGTfLLBRSMHVWe4x6zvtyEF6c78klPnAP+y1yI3wRZJDDo YjcJkg7Un0vWYRUSgqW8wlpl6bT5j7Leaqr8lezRzpVpKzJfR0eIG82GYevudZDU jJinVzHPYQpf7BLcK4jMxQ== -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:10 2026 by rpki-client