$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/tbWu_csQgVDo-ASWXg5hWBoU_CQ.roa File: tbWu_csQgVDo-ASWXg5hWBoU_CQ.roa (raw, json) Hash identifier: B0QuYCRTsd9FYzmt0ccStCQRogiRSSVC9PfVR6/zYQs= Subject key identifier: B5:B5:AE:FD:CB:10:81:50:E8:F8:04:96:5E:0E:61:58:1A:14:FC:24 Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Certificate serial: 78 Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/tbWu_csQgVDo-ASWXg5hWBoU_CQ.roa Signing time: Tue 31 Mar 2026 07:51:37 +0000 ROA not before: Tue 31 Mar 2026 07:51:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23778 IP address blocks: 103.18.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Validity Not Before: Mar 31 07:51:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B5B5AEFDCB108150E8F804965E0E61581A14FC24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:df:04:29:c0:d5:9e:39:a2:46:14:a7:63: 24:8b:fa:77:7e:f8:fd:55:81:06:4e:2a:a0:98:51: ba:98:f7:d5:65:78:e6:01:71:7e:aa:30:1a:6a:a4: 21:52:b1:87:10:ce:42:07:6d:7e:70:3b:46:4a:57: fd:07:c9:2d:77:8f:8c:30:04:b6:8a:56:85:60:dd: d9:f7:ec:54:c5:be:14:f2:0e:90:2c:4d:00:91:ac: 5a:cf:e8:16:a8:d9:c1:f2:cc:6b:cf:e3:e4:73:9e: 05:cd:40:26:54:ef:0c:b4:d0:a3:11:3c:9f:11:39: ac:84:c0:7b:87:45:57:5a:aa:1b:9f:e3:f5:b6:9e: db:6d:d8:af:d8:2a:92:07:e5:d0:f9:1c:c6:0a:1b: 57:87:19:b6:4b:c8:78:e7:f6:d8:70:93:fd:c0:52: 8b:d5:2b:aa:4f:09:28:fe:f8:61:be:41:92:40:87: 45:c9:dc:1b:14:11:6a:3a:11:e8:78:8d:db:14:21: 07:51:cb:c1:91:89:01:46:6a:88:40:f0:b8:d0:43: d8:1e:7d:00:eb:d8:26:73:26:10:71:d0:44:1d:ee: a6:40:32:78:c0:46:35:19:89:d3:ae:15:9a:40:c6: 98:8d:96:b0:cb:6c:a6:48:ce:13:aa:ef:5e:1c:86: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B5:AE:FD:CB:10:81:50:E8:F8:04:96:5E:0E:61:58:1A:14:FC:24 X509v3 Authority Key Identifier: keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/tbWu_csQgVDo-ASWXg5hWBoU_CQ.roa sbgp-ipAddrBlock: critical IPv4: 103.18.24.0/22 Signature Algorithm: sha256WithRSAEncryption 20:c4:8c:02:cf:57:df:80:41:e2:bd:93:27:77:ea:1e:4f:17: 73:0e:18:f6:38:8c:e3:14:ba:34:53:2a:fe:ac:0d:4f:81:36: b1:39:c7:29:7b:af:5e:8d:a8:e5:df:f1:a4:2a:03:cc:a4:16: 4c:f7:f7:cb:87:ac:95:75:2e:ed:2b:6c:26:80:c2:48:1c:7f: b1:3a:fe:16:e6:79:5d:30:c7:df:86:93:cd:58:5b:df:ed:98: f6:e1:71:c3:11:ca:cd:9d:3e:61:da:5f:f1:22:8d:2c:58:43: ad:03:8a:f6:7d:b6:b4:d7:4b:b4:fe:bf:ce:61:2c:eb:89:13: f7:36:fc:a3:32:7b:11:ca:65:1e:84:c8:f3:03:55:ab:86:26: 94:93:ed:51:15:41:35:52:bc:c7:3b:38:4b:33:37:7c:d6:9b: 3a:23:4d:d1:6e:f7:e5:3c:f8:75:72:3f:b4:fc:c0:74:d8:43: 4c:2b:d4:8e:45:d0:ae:51:6f:30:69:a1:b5:62:2c:85:88:ff: 94:3b:41:40:33:1a:06:8e:0c:58:b5:f7:a3:dc:a8:b3:df:94: d5:31:19:92:57:60:8f:18:1c:0e:af:fe:8f:6a:0f:87:e6:c3: 57:ed:73:79:2f:a6:9f:eb:9a:6a:b9:6d:20:b9:a0:61:94:7f: 26:45:7a:ca -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTI2MDMzMTA3 NTEzN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjVCNUFFRkRDQjEwODE1 MEU4RjgwNDk2NUUwRTYxNTgxQTE0RkMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJrj3wQpwNWeOaJGFKdjJIv6d374/VWBBk4qoJhRupj31WV45gFx fqowGmqkIVKxhxDOQgdtfnA7RkpX/QfJLXePjDAEtopWhWDd2ffsVMW+FPIOkCxN AJGsWs/oFqjZwfLMa8/j5HOeBc1AJlTvDLTQoxE8nxE5rITAe4dFV1qqG5/j9bae 223Yr9gqkgfl0PkcxgobV4cZtkvIeOf22HCT/cBSi9Urqk8JKP74Yb5BkkCHRcnc GxQRajoR6HiN2xQhB1HLwZGJAUZqiEDwuNBD2B59AOvYJnMmEHHQRB3upkAyeMBG NRmJ064VmkDGmI2WsMtspkjOE6rvXhyG9lMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBS1ta79yxCBUOj4BJZeDmFYGhT8JDAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NTkvdGJXdV9jc1FnVkRvLUFTV1hnNWhXQm9VX0NRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcSGDANBgkqhkiG9w0BAQsFAAOCAQEA IMSMAs9X34BB4r2TJ3fqHk8Xcw4Y9jiM4xS6NFMq/qwNT4E2sTnHKXuvXo2o5d/x pCoDzKQWTPf3y4eslXUu7StsJoDCSBx/sTr+FuZ5XTDH34aTzVhb3+2Y9uFxwxHK zZ0+Ydpf8SKNLFhDrQOK9n22tNdLtP6/zmEs64kT9zb8ozJ7EcplHoTI8wNVq4Ym lJPtURVBNVK8xzs4SzM3fNabOiNN0W735Tz4dXI/tPzAdNhDTCvUjkXQrlFvMGmh tWIshYj/lDtBQDMaBo4MWLX3o9yos9+U1TEZkldgjxgcDq/+j2oPh+bDV+1zeS+m n+uaarltILmgYZR/JkV6yg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:46 2026 by rpki-client