$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/Jf25Cu4bh1U6OvzJXrAQ_bBfu0c.roa File: Jf25Cu4bh1U6OvzJXrAQ_bBfu0c.roa (raw, json) Hash identifier: bl4v33/XS9SuwhFK1swXxMwrbrE9NUAtSMxyVMMhwdA= Subject key identifier: 25:FD:B9:0A:EE:1B:87:55:3A:3A:FC:C9:5E:B0:10:FD:B0:5F:BB:47 Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Certificate serial: 32 Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/Jf25Cu4bh1U6OvzJXrAQ_bBfu0c.roa Signing time: Tue 31 Mar 2026 08:38:57 +0000 ROA not before: Tue 31 Mar 2026 08:38:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23827 IP address blocks: 103.141.34.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Validity Not Before: Mar 31 08:38:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=25FDB90AEE1B87553A3AFCC95EB010FDB05FBB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:0e:54:a5:bf:c5:da:f8:02:3d:b5:bb:2d: 9b:02:81:27:a8:7a:06:e3:fe:77:2f:36:df:b5:b2: d4:59:0f:22:87:29:e0:73:29:00:b0:fb:0b:2a:5a: fd:74:c4:ce:2b:f8:e5:26:8e:34:21:36:0d:c6:12: a9:50:48:32:3e:bf:9a:06:62:74:26:f0:86:1d:fc: 00:78:99:e8:58:bd:61:2f:7d:ab:0b:c0:0d:46:9d: ea:0e:eb:1b:ea:4f:42:63:9d:56:e0:23:70:83:8c: 74:66:12:05:a3:a5:0f:58:6c:8a:e1:7f:35:ce:95: 9c:41:1a:da:bd:61:fa:4f:17:c6:38:8e:d3:4d:0e: 14:9d:31:94:cc:6f:3f:7d:5b:cb:a9:78:cc:b9:be: 8b:81:87:9a:32:c0:bf:d2:93:78:73:44:78:b7:fd: 1a:23:44:f0:99:77:3f:19:76:fa:a0:86:7d:56:19: 22:28:40:6f:0f:61:6c:0a:d4:3d:c9:ba:92:80:f2: 13:2c:e7:80:7d:1f:47:e1:61:c8:bb:28:ae:98:1a: 7b:83:7d:11:b5:66:ae:b5:1c:d5:af:4f:93:bc:c8: 1b:98:51:ac:06:f8:13:8e:6d:98:70:a4:89:fb:79: fd:c3:30:4a:af:d3:3e:af:38:95:10:33:df:9d:6c: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FD:B9:0A:EE:1B:87:55:3A:3A:FC:C9:5E:B0:10:FD:B0:5F:BB:47 X509v3 Authority Key Identifier: keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/Jf25Cu4bh1U6OvzJXrAQ_bBfu0c.roa sbgp-ipAddrBlock: critical IPv4: 103.141.34.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:e3:de:7d:8c:b3:78:e2:51:aa:08:74:90:89:aa:8a:8a:85: 58:f7:82:5c:fd:f1:f4:c1:62:e9:43:9a:9f:a0:15:a6:09:7c: a0:fe:e3:d1:c5:f3:bb:98:ab:29:e7:b5:46:76:7f:d0:1c:fe: c0:98:e0:93:bb:db:0f:ca:c3:f3:23:60:2a:50:a8:7b:a1:77: 69:fb:8e:8e:5e:f1:9c:fe:65:3f:42:e9:f1:51:b8:a5:60:d8: 9c:f8:e2:4f:66:b7:89:d4:92:6b:e6:8c:76:2b:f7:91:ff:b3: d0:ce:80:2b:c3:07:0c:16:43:2f:06:d8:87:7d:dc:35:e7:f1: e4:23:72:ae:f8:2a:fd:66:1a:7c:5c:f9:c2:90:91:ac:d7:98: c6:9a:cf:a3:0d:08:57:80:49:a4:3b:8b:e9:3c:9f:a9:ab:ef: b9:94:42:fe:98:83:fe:c8:c2:c2:f7:6c:49:cc:d8:d3:2d:8f: 5b:6f:2a:f0:6b:36:ce:ea:d4:b0:86:7e:a4:f1:ce:60:13:ad: 9f:8a:bd:07:0f:36:76:ba:9f:fc:84:23:65:e3:f4:c5:04:57: 5f:5c:dd:86:da:83:5b:b7:39:03:36:98:7d:be:47:bd:8c:3e: a3:85:17:b2:bd:db:42:98:91:4c:9c:d2:d4:7c:b1:92:6f:cd: d6:4e:a0:78 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERDgy OUQ2NDZENTNFQ0YyOTg5NTBCNjg3NTMyREU5MjZFQzdFQkMwMB4XDTI2MDMzMTA4 Mzg1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjVGREI5MEFFRTFCODc1 NTNBM0FGQ0M5NUVCMDEwRkRCMDVGQkI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0MDlSlv8Xa+AI9tbstmwKBJ6h6BuP+dy8237Wy1FkPIocp4HMp ALD7Cypa/XTEziv45SaONCE2DcYSqVBIMj6/mgZidCbwhh38AHiZ6Fi9YS99qwvA DUad6g7rG+pPQmOdVuAjcIOMdGYSBaOlD1hsiuF/Nc6VnEEa2r1h+k8XxjiO000O FJ0xlMxvP31by6l4zLm+i4GHmjLAv9KTeHNEeLf9GiNE8Jl3Pxl2+qCGfVYZIihA bw9hbArUPcm6koDyEyzngH0fR+FhyLsorpgae4N9EbVmrrUc1a9Pk7zIG5hRrAb4 E45tmHCkift5/cMwSq/TPq84lRAz351suakCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQl/bkK7huHVTo6/MlesBD9sF+7RzAfBgNVHSMEGDAWgBTdgp1kbVPs8piVC2h1 Mt6SbsfrwDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODkxLzNZS2RaRzFUN1BLWWxRdG9kVExla203SDY4QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzNZS2RaRzFUN1BLWWxRdG9kVExla203 SDY4QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84OTEvSmYyNUN1NGJoMVU2T3Z6SlhyQVFfYkJmdTBjLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeNIjANBgkqhkiG9w0BAQsFAAOCAQEA LOPefYyzeOJRqgh0kImqioqFWPeCXP3x9MFi6UOan6AVpgl8oP7j0cXzu5irKee1 RnZ/0Bz+wJjgk7vbD8rD8yNgKlCoe6F3afuOjl7xnP5lP0Lp8VG4pWDYnPjiT2a3 idSSa+aMdiv3kf+z0M6AK8MHDBZDLwbYh33cNefx5CNyrvgq/WYafFz5wpCRrNeY xprPow0IV4BJpDuL6TyfqavvuZRC/piD/sjCwvdsSczY0y2PW28q8Gs2zurUsIZ+ pPHOYBOtn4q9Bw82drqf/IQjZeP0xQRXX1zdhtqDW7c5AzaYfb5HvYw+o4UXsr3b QpiRTJzS1Hyxkm/N1k6geA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:51 2026 by rpki-client