$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/olSBNUJ_lzBLnCuCSBxDlqLAM1I.roa File: olSBNUJ_lzBLnCuCSBxDlqLAM1I.roa (raw, json) Hash identifier: wBWJMdwtn04gZAPR7gj14BewwUXWUZvXYeypNK+OH6A= Subject key identifier: A2:54:81:35:42:7F:97:30:4B:9C:2B:82:48:1C:43:96:A2:C0:33:52 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 92 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/olSBNUJ_lzBLnCuCSBxDlqLAM1I.roa Signing time: Tue 31 Mar 2026 07:50:40 +0000 ROA not before: Tue 31 Mar 2026 07:50:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18144 IP address blocks: 36.52.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Mar 31 07:50:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A2548135427F97304B9C2B82481C4396A2C03352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:77:b0:62:9f:56:28:1e:4d:75:dc:32:c5: 08:4b:fe:2b:98:5c:9b:2f:e2:c5:21:1b:8d:32:47: 04:84:ec:c2:43:f4:07:a3:80:6e:4f:d1:3c:b1:17: 8b:ef:bf:fd:7f:06:c6:f1:b6:76:86:0c:bf:60:d1: 77:d9:b9:be:61:53:05:d9:94:e6:50:88:ee:c5:e4: 21:bf:1f:9e:66:40:3e:a7:50:d6:ad:34:52:68:40: 5a:9e:bc:a8:14:7d:77:c0:1a:ae:5b:04:c6:a3:5e: 89:d8:63:39:f9:e5:1a:54:d5:eb:86:f4:82:27:c6: 85:04:a0:ff:9a:25:65:5b:d2:63:29:82:3e:07:50: 28:9d:a8:db:03:e4:ea:13:0f:42:17:e7:3c:a7:6a: 89:40:48:80:c6:15:08:f5:ce:1a:3c:5a:f9:b0:dc: 67:e2:74:42:52:d4:c1:6c:9f:27:d9:3f:13:70:54: 12:72:0e:4a:88:41:33:14:a3:90:aa:67:49:81:6f: 09:ad:49:76:c4:24:1e:ea:38:3c:8f:ad:07:a5:d8: 9f:0a:33:bf:25:55:c5:5a:b5:66:8f:7d:29:29:69: 47:e4:53:6d:2d:ec:0c:c2:6d:de:eb:40:81:48:2c: ab:32:54:96:b4:dc:18:ec:70:3b:70:f3:8a:fa:98: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:81:35:42:7F:97:30:4B:9C:2B:82:48:1C:43:96:A2:C0:33:52 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/olSBNUJ_lzBLnCuCSBxDlqLAM1I.roa sbgp-ipAddrBlock: critical IPv4: 36.52.136.0/21 Signature Algorithm: sha256WithRSAEncryption 74:bd:3b:da:48:3d:ba:0c:23:5a:f2:e9:75:d4:25:31:62:06: eb:41:f9:64:67:c4:f2:ed:92:20:ff:dd:36:1a:a5:ac:83:39: ef:78:e3:44:56:8e:a7:3c:43:1f:9e:78:fd:64:fc:0b:21:d4: 56:fd:c9:23:6e:65:18:16:fe:a9:42:06:49:8d:1e:81:a5:b8: dd:08:47:88:fe:e3:30:3d:ca:ba:d8:63:02:b1:8c:2a:61:8d: 35:52:76:9a:5f:a1:6a:1c:19:f6:1a:f3:d3:e3:c8:d0:b7:4f: 1a:54:bc:ee:06:90:12:b6:80:10:30:63:fd:12:98:56:5d:7c: e5:5d:e3:57:a1:4e:31:c2:59:96:5e:83:1b:4c:2e:fc:b8:12: 2c:a3:7a:d8:3a:bc:99:6f:c2:32:d1:f0:56:83:b5:da:9f:f2: 79:0c:8f:27:b1:4f:3e:50:51:a2:8b:a9:a3:3d:23:b7:63:1e: fd:27:6d:7a:d6:0e:a6:14:f8:3e:c7:4f:cf:a9:e8:c0:3c:36: 61:9e:54:5f:65:17:3b:52:23:03:69:48:68:43:78:60:85:c3: 57:e7:c3:9b:14:a7:62:ac:74:ad:82:22:5a:c5:bd:98:64:88: 8f:25:13:1f:70:b9:94:dc:e2:52:3c:f0:cf:a3:ba:1c:29:74: 10:e6:33:8c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4 MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNjAzMzEw NzUwNDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyNTQ4MTM1NDI3Rjk3 MzA0QjlDMkI4MjQ4MUM0Mzk2QTJDMDMzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCia3ewYp9WKB5NddwyxQhL/iuYXJsv4sUhG40yRwSE7MJD9Aej gG5P0TyxF4vvv/1/BsbxtnaGDL9g0XfZub5hUwXZlOZQiO7F5CG/H55mQD6nUNat NFJoQFqevKgUfXfAGq5bBMajXonYYzn55RpU1euG9IInxoUEoP+aJWVb0mMpgj4H UCidqNsD5OoTD0IX5zynaolASIDGFQj1zho8Wvmw3GfidEJS1MFsnyfZPxNwVBJy DkqIQTMUo5CqZ0mBbwmtSXbEJB7qODyPrQel2J8KM78lVcVatWaPfSkpaUfkU20t 7AzCbd7rQIFILKsyVJa03BjscDtw84r6mPC3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUolSBNUJ/lzBLnCuCSBxDlqLAM1IwHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNzgzL29sU0JOVUpfbHpCTG5DdUNTQnhEbHFMQU0xSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMkNIgwDQYJKoZIhvcNAQELBQADggEB AHS9O9pIPboMI1ry6XXUJTFiButB+WRnxPLtkiD/3TYapayDOe9440RWjqc8Qx+e eP1k/Ash1Fb9ySNuZRgW/qlCBkmNHoGluN0IR4j+4zA9yrrYYwKxjCphjTVSdppf oWocGfYa89PjyNC3TxpUvO4GkBK2gBAwY/0SmFZdfOVd41ehTjHCWZZegxtMLvy4 Eiyjetg6vJlvwjLR8FaDtdqf8nkMjyexTz5QUaKLqaM9I7djHv0nbXrWDqYU+D7H T8+p6MA8NmGeVF9lFztSIwNpSGhDeGCFw1fnw5sUp2KsdK2CIlrFvZhkiI8lEx9w uZTc4lI88M+juhwpdBDmM4w= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:38 2026 by rpki-client