$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/2OL3aBrTbnyne7t6SOAvL0U1LdA.roa File: 2OL3aBrTbnyne7t6SOAvL0U1LdA.roa (raw, json) Hash identifier: bLM0B7yBj5mNmWd+hn7V55hCfQHIJh9Z1BgmJgKQ0cY= Subject key identifier: D8:E2:F7:68:1A:D3:6E:7C:A7:7B:BB:7A:48:E0:2F:2F:45:35:2D:D0 Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Certificate serial: 3A Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/2OL3aBrTbnyne7t6SOAvL0U1LdA.roa Signing time: Tue 31 Mar 2026 08:32:35 +0000 ROA not before: Tue 31 Mar 2026 08:32:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18283 IP address blocks: 218.223.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Validity Not Before: Mar 31 08:32:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D8E2F7681AD36E7CA77BBB7A48E02F2F45352DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:46:1a:a8:eb:56:83:ca:e9:99:16:ba:e8: 91:d2:32:f2:a3:fd:3f:23:7f:b8:39:0e:42:c3:12: 84:b5:5a:4c:49:75:16:0b:bc:33:00:c2:7d:b1:4e: 00:81:f2:f3:c9:1a:bb:11:3b:9f:e4:0e:74:22:3c: 82:8e:5d:fd:46:cc:39:df:ae:bd:a8:8e:97:9b:83: ee:b8:a7:ed:54:c3:d0:49:2f:70:0d:42:79:84:b2: ff:2b:f7:cc:aa:ca:74:6c:f5:cb:93:4e:71:c7:bd: 01:f7:f1:65:c7:d9:24:0c:bc:69:68:36:14:d2:10: ea:2a:1b:da:e7:ab:51:30:28:0a:cb:da:78:c6:e8: b9:2a:6f:9b:06:eb:89:50:e0:2d:a5:8e:da:40:d1: bc:f5:33:b9:83:d6:18:bc:e4:70:27:c2:23:74:23: fb:4e:3f:db:57:05:20:da:85:05:ce:65:2d:4a:e3: da:0c:89:aa:9e:b7:98:3b:5f:0c:13:10:eb:01:60: cb:75:dd:d0:b7:d0:84:e9:98:29:79:d6:e2:1c:e9: 24:75:a8:be:6d:e1:3b:15:b7:44:58:39:94:f1:5d: be:92:f7:5e:fb:45:ec:32:db:b2:d4:1d:ab:69:9d: 83:06:dd:9b:3f:f3:8b:6b:b8:c7:74:8d:86:0f:30: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:F7:68:1A:D3:6E:7C:A7:7B:BB:7A:48:E0:2F:2F:45:35:2D:D0 X509v3 Authority Key Identifier: keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/2OL3aBrTbnyne7t6SOAvL0U1LdA.roa sbgp-ipAddrBlock: critical IPv4: 218.223.224.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ca:03:75:bf:f3:21:42:37:8f:7b:93:f6:ff:43:86:a5:c2: d3:d2:df:70:8b:d8:86:69:bb:24:1c:87:9d:a6:16:79:f8:e0: 90:0a:e5:84:0c:b0:85:69:5b:1b:2c:52:33:0a:c1:62:45:32: af:cc:e5:6c:94:b9:5e:43:cc:c8:4d:91:d4:82:a2:24:4e:4d: e0:05:5b:ea:0d:d9:4c:d3:04:3e:2d:89:0c:a9:e4:74:ea:10: 4f:0a:f1:08:06:ed:58:7b:d2:cb:22:ab:93:cb:ce:5a:7b:17: 5d:3d:a5:07:8c:85:d4:69:17:44:47:18:0c:34:6c:4f:2b:6a: d4:e8:e7:97:01:2b:78:06:3b:8c:d3:20:8c:cc:68:da:ae:f2: cd:ee:15:33:c6:21:5d:00:c9:76:40:8d:33:07:43:54:e1:d3: 8f:db:a0:f9:4d:b4:18:b3:85:05:9b:48:53:5a:cb:6c:6e:d7: 7f:b6:c6:e9:1f:d3:71:79:86:ed:14:43:ee:2d:9a:f6:28:be: 95:61:1c:14:b1:84:aa:e0:6c:ed:ae:ff:6a:54:42:47:bb:ff: 9a:79:ec:e9:6e:10:c1:93:b7:b5:b2:dc:1d:08:b5:be:f5:e9: 8a:7b:8e:c8:7b:97:da:92:38:31:95:c5:70:c6:7c:24:52:fd: 8e:46:2c:6b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI2MDMzMTA4 MzIzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDhFMkY3NjgxQUQzNkU3 Q0E3N0JCQjdBNDhFMDJGMkY0NTM1MkREMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALrJRhqo61aDyumZFrrokdIy8qP9PyN/uDkOQsMShLVaTEl1Fgu8 MwDCfbFOAIHy88kauxE7n+QOdCI8go5d/UbMOd+uvaiOl5uD7rin7VTD0EkvcA1C eYSy/yv3zKrKdGz1y5NOcce9AffxZcfZJAy8aWg2FNIQ6iob2uerUTAoCsvaeMbo uSpvmwbriVDgLaWO2kDRvPUzuYPWGLzkcCfCI3Qj+04/21cFINqFBc5lLUrj2gyJ qp63mDtfDBMQ6wFgy3Xd0LfQhOmYKXnW4hzpJHWovm3hOxW3RFg5lPFdvpL3XvtF 7DLbstQdq2mdgwbdmz/zi2u4x3SNhg8wWbcCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTY4vdoGtNufKd7u3pI4C8vRTUt0DAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9 n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4 TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDcvMk9MM2FCclRibnluZTd0NlNPQXZMMFUxTGRBLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANrf4DANBgkqhkiG9w0BAQsFAAOCAQEA DMoDdb/zIUI3j3uT9v9DhqXC09LfcIvYhmm7JByHnaYWefjgkArlhAywhWlbGyxS MwrBYkUyr8zlbJS5XkPMyE2R1IKiJE5N4AVb6g3ZTNMEPi2JDKnkdOoQTwrxCAbt WHvSyyKrk8vOWnsXXT2lB4yF1GkXREcYDDRsTytq1OjnlwEreAY7jNMgjMxo2q7y ze4VM8YhXQDJdkCNMwdDVOHTj9ug+U20GLOFBZtIU1rLbG7Xf7bG6R/TcXmG7RRD 7i2a9ii+lWEcFLGEquBs7a7/alRCR7v/mnns6W4QwZO3tbLcHQi1vvXpinuOyHuX 2pI4MZXFcMZ8JFL9jkYsaw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:32 2026 by rpki-client