$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/2ZWoc0vfItRUHT-iHawd5xJ1AH0.roa File: 2ZWoc0vfItRUHT-iHawd5xJ1AH0.roa (raw, json) Hash identifier: 5oro9FPwuLX2h0lv/azTT6JOS1sD5Q97Gh46q0esP3A= Subject key identifier: D9:95:A8:73:4B:DF:22:D4:54:1D:3F:A2:1D:AC:1D:E7:12:75:00:7D Certificate issuer: /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA Certificate serial: 55 Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/2ZWoc0vfItRUHT-iHawd5xJ1AH0.roa Signing time: Tue 31 Mar 2026 08:16:15 +0000 ROA not before: Tue 31 Mar 2026 08:16:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23618 IP address blocks: 223.29.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA Validity Not Before: Mar 31 08:16:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D995A8734BDF22D4541D3FA21DAC1DE71275007D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:76:44:31:bb:6d:8b:3e:8d:a1:8c:1f:79: e7:fa:d6:88:d5:c5:bb:e8:de:d6:20:7e:2f:06:ea: b2:94:0b:11:1b:04:8f:fb:17:56:43:43:b2:d1:0f: 5f:01:72:94:f2:f3:ac:0d:1f:ad:ad:9e:50:8c:5e: db:6d:2a:2a:da:de:72:e7:e3:b7:91:36:83:c5:26: b7:d0:96:ab:cc:da:51:a4:dc:92:3e:d2:59:25:19: 4f:af:ca:ad:f2:48:b0:79:61:60:34:d0:b7:c7:53: d2:65:a4:1e:10:ef:50:ac:a3:20:bb:ea:39:45:88: 5d:17:0d:7a:9d:82:59:26:b2:e8:92:9c:bf:62:4d: 27:b0:93:4e:76:5c:3b:ee:8f:a5:27:e7:2a:ba:bc: ab:07:60:46:d9:e3:ac:ce:3b:04:c0:4e:fc:e1:53: 91:ec:b5:82:78:0b:b1:eb:cf:af:40:05:2e:16:59: 5d:58:e3:85:a2:85:31:31:96:2f:d7:55:a7:bd:0c: 89:65:db:4d:66:30:d4:1f:35:2f:57:60:bf:d7:0f: d3:27:2f:1b:02:35:79:ef:92:fa:69:a3:62:8e:70: ce:d9:a1:c5:8b:16:19:1b:68:dd:97:1a:e5:be:f5: 9b:a3:f4:17:bb:b5:de:95:42:36:bf:8a:7a:61:68: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:A8:73:4B:DF:22:D4:54:1D:3F:A2:1D:AC:1D:E7:12:75:00:7D X509v3 Authority Key Identifier: keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/2ZWoc0vfItRUHT-iHawd5xJ1AH0.roa sbgp-ipAddrBlock: critical IPv4: 223.29.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:7a:e1:e2:12:8c:95:d1:68:34:09:35:ba:3b:6f:07:e2:90: 53:9b:83:24:7c:e6:ae:ba:d0:e5:be:4f:a1:10:a8:e0:d8:92: 57:b9:79:39:30:60:a8:05:9e:0f:51:29:45:2f:41:cf:9f:96: 65:46:b3:d5:5a:a2:c4:8d:21:d9:1c:3b:05:3a:d3:30:71:49: 99:63:d9:4d:42:aa:85:13:44:87:3a:41:8e:2f:f4:e3:73:f3: 43:1c:24:c1:71:68:6b:11:79:c3:ba:56:fa:15:03:4c:08:fc: a6:99:ab:18:a9:59:80:87:28:84:6c:f9:01:3c:fb:de:f5:f5: ac:10:ea:c5:aa:61:b5:e1:17:8f:bf:cf:86:2b:e1:5b:c9:3c: 74:b3:26:44:38:2e:56:36:70:18:83:55:40:3d:5a:70:75:07: 63:5b:03:5a:74:bd:0c:2b:45:5c:ca:8c:93:6b:1e:2d:b7:61: 1f:cd:17:49:e6:4c:2e:a3:5c:b7:61:a5:83:ce:8b:81:ef:fe: 5e:47:ae:98:5a:02:29:d5:7e:fd:7b:82:59:1e:b8:b7:3f:ef: 46:b5:a7:bc:8a:51:e8:e2:ca:b8:ce:07:5c:ae:c8:6a:f3:cf: bc:77:84:88:a7:91:cd:f0:70:18:eb:c1:ae:91:c6:25:ab:9d: 8a:52:17:e1 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTcw OEU4NUIxMEFDNjAzQzA2RDc4NUI0MjE1M0RDRkUxNjYzQUVBMB4XDTI2MDMzMTA4 MTYxNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDk5NUE4NzM0QkRGMjJE NDU0MUQzRkEyMURBQzFERTcxMjc1MDA3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK6+dkQxu22LPo2hjB955/rWiNXFu+je1iB+LwbqspQLERsEj/sX VkNDstEPXwFylPLzrA0fra2eUIxe220qKtrecufjt5E2g8Umt9CWq8zaUaTckj7S WSUZT6/KrfJIsHlhYDTQt8dT0mWkHhDvUKyjILvqOUWIXRcNep2CWSay6JKcv2JN J7CTTnZcO+6PpSfnKrq8qwdgRtnjrM47BMBO/OFTkey1gngLsevPr0AFLhZZXVjj haKFMTGWL9dVp70MiWXbTWYw1B81L1dgv9cP0ycvGwI1ee+S+mmjYo5wztmhxYsW GRto3Zca5b71m6P0F7u13pVCNr+KemFoERMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTZlahzS98i1FQdP6IdrB3nEnUAfTAfBgNVHSMEGDAWgBRecI6FsQrGA8BteFtC FT3P4WY66jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODI2L1huQ09oYkVLeGdQQWJYaGJRaFU5ei1GbU91by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1huQ09oYkVLeGdQQWJYaGJRaFU5ei1G bU91by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MjYvMlpXb2MwdmZJdFJVSFQtaUhhd2Q1eEoxQUgwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt8d9DANBgkqhkiG9w0BAQsFAAOCAQEA Pnrh4hKMldFoNAk1ujtvB+KQU5uDJHzmrrrQ5b5PoRCo4NiSV7l5OTBgqAWeD1Ep RS9Bz5+WZUaz1VqixI0h2Rw7BTrTMHFJmWPZTUKqhRNEhzpBji/043PzQxwkwXFo axF5w7pW+hUDTAj8ppmrGKlZgIcohGz5ATz73vX1rBDqxaphteEXj7/PhivhW8k8 dLMmRDguVjZwGINVQD1acHUHY1sDWnS9DCtFXMqMk2seLbdhH80XSeZMLqNct2Gl g86Lge/+XkeumFoCKdV+/XuCWR64tz/vRrWnvIpR6OLKuM4HXK7IavPPvHeEiKeR zfBwGOvBrpHGJaudilIX4Q== -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:00 2026 by rpki-client