$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/3GZ6KPcEBnnqdlYjmPKoidv49no.roa File: 3GZ6KPcEBnnqdlYjmPKoidv49no.roa (raw, json) Hash identifier: KkxtAZ/QhLCL2FXhkehVrGPebILL9Z/TW1yTW8numU0= Subject key identifier: DC:66:7A:28:F7:04:06:79:EA:76:56:23:98:F2:A8:89:DB:F8:F6:7A Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: A4 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/3GZ6KPcEBnnqdlYjmPKoidv49no.roa Signing time: Tue 31 Mar 2026 07:50:49 +0000 ROA not before: Tue 31 Mar 2026 07:50:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18144 IP address blocks: 221.12.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Mar 31 07:50:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DC667A28F7040679EA76562398F2A889DBF8F67A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:22:d6:07:f9:57:7a:71:0a:7b:13:fc:b6:7a: bf:5d:63:2c:86:58:2c:4c:b0:51:29:cf:30:9b:b5: ab:6c:16:5f:61:d6:e2:ef:6a:0b:a8:59:48:b5:59: 60:b7:fd:95:e3:a1:4d:f0:af:7e:55:38:52:50:15: 1c:06:fc:66:4e:08:41:25:5a:3e:96:f3:16:0d:ce: 43:f1:79:0e:48:88:68:ea:4e:aa:c6:75:5d:59:7a: 16:26:67:c4:e3:e3:30:75:df:e4:aa:e3:2c:23:61: 71:76:d7:30:a0:5d:62:c2:32:19:08:26:b9:c4:35: 19:4b:85:e6:79:e1:c5:4b:02:72:5b:3e:2c:cb:19: 0c:2f:2f:7a:03:17:e2:9e:f3:b0:da:b4:e9:56:fa: 14:98:2f:eb:e7:f7:a7:79:1a:be:eb:81:84:c7:33: d8:ed:be:d9:35:7c:26:00:a1:e7:38:56:f2:41:a3: c5:91:7e:0b:c4:cc:e4:04:e9:28:55:e1:cc:aa:a4: a5:8b:97:74:b9:1f:84:ce:3a:04:95:47:6a:b4:5e: d1:19:e1:51:31:75:fe:44:71:65:02:4b:81:ee:c0: 1f:41:cd:bf:ce:f7:e5:d1:29:f9:61:19:b2:4a:c1: 7b:a8:0d:1f:ba:27:97:61:ee:55:41:97:f5:97:0b: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:66:7A:28:F7:04:06:79:EA:76:56:23:98:F2:A8:89:DB:F8:F6:7A X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/3GZ6KPcEBnnqdlYjmPKoidv49no.roa sbgp-ipAddrBlock: critical IPv4: 221.12.192.0/18 Signature Algorithm: sha256WithRSAEncryption 44:bd:84:ae:76:6d:87:ff:ab:ec:9c:69:a3:58:a9:25:92:e8: ff:a5:53:5f:3d:ad:99:54:b8:dd:ed:b9:f1:61:34:87:a4:5b: a2:89:de:71:51:f1:17:7c:93:47:2a:01:12:0e:6e:c0:43:19: 4c:f8:00:3e:16:de:8f:c4:4a:1a:8d:15:82:dd:d6:d8:fd:3e: db:6a:d4:38:68:9f:24:8a:cc:0e:f1:25:1b:9e:3a:53:2c:d0: 23:2a:14:57:29:3b:3e:0e:0e:77:0a:6c:85:bc:e0:92:ff:fa: 34:a9:0f:2c:3d:13:48:66:ed:c6:02:df:54:93:8f:47:60:51: 34:07:46:0a:7c:6c:66:23:f3:d5:d9:d3:25:35:b1:51:c1:7a: d8:68:ce:19:76:88:5e:cd:af:4e:93:aa:3b:d2:72:60:9d:79: 4c:99:60:00:6c:94:0c:88:d4:6e:3c:97:57:66:bb:a3:78:b5: e1:06:8b:ed:60:b8:f6:52:c6:38:34:d4:fb:60:3e:0e:e4:1c: f8:9d:6e:c2:a6:b3:c5:76:b0:b5:89:f4:ff:aa:3e:bd:37:6f: be:4e:4b:07:4b:da:2e:c1:14:3b:66:9c:59:02:5d:6e:11:96: 4a:3f:b6:e1:7e:27:37:39:24:28:13:18:6d:59:c8:5c:8a:a7: 03:08:99:66 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4 MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw NzUwNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDNjY3QTI4RjcwNDA2 NzlFQTc2NTYyMzk4RjJBODg5REJGOEY2N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwItYH+Vd6cQp7E/y2er9dYyyGWCxMsFEpzzCbtatsFl9h1uLv aguoWUi1WWC3/ZXjoU3wr35VOFJQFRwG/GZOCEElWj6W8xYNzkPxeQ5IiGjqTqrG dV1ZehYmZ8Tj4zB13+Sq4ywjYXF21zCgXWLCMhkIJrnENRlLheZ54cVLAnJbPizL GQwvL3oDF+Ke87DatOlW+hSYL+vn96d5Gr7rgYTHM9jtvtk1fCYAoec4VvJBo8WR fgvEzOQE6ShV4cyqpKWLl3S5H4TOOgSVR2q0XtEZ4VExdf5EcWUCS4HuwB9Bzb/O 9+XRKflhGbJKwXuoDR+6J5dh7lVBl/WXCwYFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3GZ6KPcEBnnqdlYjmPKoidv49nowHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNzgzLzNHWjZLUGNFQm5ucWRsWWptUEtvaWR2NDluby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbdDMAwDQYJKoZIhvcNAQELBQADggEB AES9hK52bYf/q+ycaaNYqSWS6P+lU189rZlUuN3tufFhNIekW6KJ3nFR8Rd8k0cq ARIObsBDGUz4AD4W3o/EShqNFYLd1tj9Pttq1DhonySKzA7xJRueOlMs0CMqFFcp Oz4ODncKbIW84JL/+jSpDyw9E0hm7cYC31STj0dgUTQHRgp8bGYj89XZ0yU1sVHB ethozhl2iF7Nr06TqjvScmCdeUyZYABslAyI1G48l1dmu6N4teEGi+1guPZSxjg0 1PtgPg7kHPidbsKms8V2sLWJ9P+qPr03b75OSwdL2i7BFDtmnFkCXW4Rlko/tuF+ Jzc5JCgTGG1ZyFyKpwMImWY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:22 2026 by rpki-client