$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/o_7Cg-GAE4RuytKVMdl8T086BZ8.roa File: o_7Cg-GAE4RuytKVMdl8T086BZ8.roa (raw, json) Hash identifier: mVUFe7qQxVgDmyNHNJgnaE99DjoMm5CRf5cGQINStMQ= Subject key identifier: A3:FE:C2:83:E1:80:13:84:6E:CA:D2:95:31:D9:7C:4F:4F:3A:05:9F Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 99 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/o_7Cg-GAE4RuytKVMdl8T086BZ8.roa Signing time: Tue 31 Mar 2026 07:50:44 +0000 ROA not before: Tue 31 Mar 2026 07:50:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18144 IP address blocks: 103.205.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Mar 31 07:50:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A3FEC283E18013846ECAD29531D97C4F4F3A059F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:7e:4b:48:db:0f:6e:d5:f6:1f:5f:d1:b1: fd:b2:05:f6:6e:73:4f:e7:5e:71:88:d5:98:7d:8a: 5d:e5:65:6a:39:bb:0c:f0:0e:17:34:d9:67:06:42: 4d:72:96:6b:e7:49:c5:e0:1b:37:d5:3b:90:ce:d3: 83:87:fc:52:1e:1d:24:3b:dc:33:94:a4:3f:8a:20: 3b:ba:ad:1b:f1:d8:92:6c:c1:d8:ed:1f:a0:0e:88: cc:0b:b7:87:b7:a3:89:a6:35:91:94:43:20:01:89: 00:e1:27:dc:c9:c9:2b:87:c8:53:e4:9d:18:3e:23: a5:45:55:21:a6:d6:f2:e2:42:db:90:b9:7d:f0:5f: 6a:e3:5b:54:d8:17:cb:22:86:bf:c8:62:2b:ed:c7: 09:62:fc:6f:f8:ba:2c:f8:1d:18:6f:08:fb:c3:bc: d0:98:6f:90:7a:5b:be:a7:56:df:1f:f7:2c:0e:5b: 2c:c8:78:15:92:55:ea:7b:c9:f2:f0:bd:be:07:1f: fb:96:a3:da:58:91:6b:07:64:b4:29:a1:46:c4:33: 46:d4:4e:0b:59:64:0a:b6:e9:1b:60:44:5c:40:e4: 88:ce:52:d4:dc:33:f1:8f:c2:98:28:54:92:90:bf: e4:d1:3a:6e:d1:4b:a0:27:ed:44:ee:13:49:a0:f3: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FE:C2:83:E1:80:13:84:6E:CA:D2:95:31:D9:7C:4F:4F:3A:05:9F X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/o_7Cg-GAE4RuytKVMdl8T086BZ8.roa sbgp-ipAddrBlock: critical IPv4: 103.205.168.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:89:58:6d:1b:55:50:46:cd:4b:da:b5:4e:6c:2e:ac:28:d6: 14:b0:6d:ee:89:bd:d9:ac:3c:b2:c6:a0:ed:c7:7b:67:91:06: f3:e5:98:92:05:13:2a:0b:25:7d:19:51:6b:f3:19:74:31:2d: d5:0d:3e:ec:19:3f:0c:d6:c2:40:28:c2:42:d9:f4:73:13:25: 82:49:29:b1:8c:46:8a:6f:b4:98:8b:af:fc:ab:e1:dd:b7:98: 9f:47:dc:31:0a:81:28:06:7b:f3:f8:cb:e7:92:b4:30:d1:dc: f1:dc:46:80:62:94:68:3b:23:30:47:6c:54:f7:38:46:69:ea: 2c:eb:94:a9:7e:d2:d3:9a:5c:99:4e:c1:d5:29:2c:3b:03:89: 64:70:6e:6a:95:c6:e0:f6:24:0e:12:d0:d8:08:1f:18:5e:a3: 7d:87:93:4c:e7:a6:77:48:37:ba:e3:e1:a8:bc:8c:1d:4a:28: 90:ef:25:c1:6f:ed:20:7f:64:a0:1c:77:3e:63:04:45:df:c8: 17:31:9c:25:98:85:94:11:b1:27:c5:62:e4:04:a8:8d:b1:31: 7f:e0:56:b3:28:ba:9c:d6:33:4f:35:bc:97:c4:32:1e:87:7f: d4:d7:e6:d6:67:2d:ad:4c:36:55:cb:dc:3b:84:3e:74:46:95: 84:5c:3c:6b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4 MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw NzUwNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzRkVDMjgzRTE4MDEz ODQ2RUNBRDI5NTMxRDk3QzRGNEYzQTA1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP835LSNsPbtX2H1/Rsf2yBfZuc0/nXnGI1Zh9il3lZWo5uwzw Dhc02WcGQk1ylmvnScXgGzfVO5DO04OH/FIeHSQ73DOUpD+KIDu6rRvx2JJswdjt H6AOiMwLt4e3o4mmNZGUQyABiQDhJ9zJySuHyFPknRg+I6VFVSGm1vLiQtuQuX3w X2rjW1TYF8sihr/IYivtxwli/G/4uiz4HRhvCPvDvNCYb5B6W76nVt8f9ywOWyzI eBWSVep7yfLwvb4HH/uWo9pYkWsHZLQpoUbEM0bUTgtZZAq26RtgRFxA5IjOUtTc M/GPwpgoVJKQv+TROm7RS6An7UTuE0mg85AHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUo/7Cg+GAE4RuytKVMdl8T086BZ8wHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNzgzL29fN0NnLUdBRTRSdXl0S1ZNZGw4VDA4NkJaOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnzagwDQYJKoZIhvcNAQELBQADggEB AJuJWG0bVVBGzUvatU5sLqwo1hSwbe6JvdmsPLLGoO3He2eRBvPlmJIFEyoLJX0Z UWvzGXQxLdUNPuwZPwzWwkAowkLZ9HMTJYJJKbGMRopvtJiLr/yr4d23mJ9H3DEK gSgGe/P4y+eStDDR3PHcRoBilGg7IzBHbFT3OEZp6izrlKl+0tOaXJlOwdUpLDsD iWRwbmqVxuD2JA4S0NgIHxheo32Hk0znpndIN7rj4ai8jB1KKJDvJcFv7SB/ZKAc dz5jBEXfyBcxnCWYhZQRsSfFYuQEqI2xMX/gVrMoupzWM081vJfEMh6Hf9TX5tZn La1MNlXL3DuEPnRGlYRcPGs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:49 2026 by rpki-client