$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/952/p8c5zKbXspZB67eXpP9eYAO8vMM.roa File: p8c5zKbXspZB67eXpP9eYAO8vMM.roa (raw, json) Hash identifier: /pJocfzWhiTEOG9m4m1KNXWlshMXHt3lNQdcdXJDSY0= Subject key identifier: A7:C7:39:CC:A6:D7:B2:96:41:EB:B7:97:A4:FF:5E:60:03:BC:BC:C3 Certificate issuer: /CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D Certificate serial: 25 Authority key identifier: 9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/p8c5zKbXspZB67eXpP9eYAO8vMM.roa Signing time: Tue 31 Mar 2026 08:40:23 +0000 ROA not before: Tue 31 Mar 2026 08:40:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 37922 IP address blocks: 103.239.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D Validity Not Before: Mar 31 08:40:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A7C739CCA6D7B29641EBB797A4FF5E6003BCBCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:f4:77:f0:ca:2b:ae:6a:8f:fd:6e:f1:07: e6:99:d2:e0:93:47:b7:24:b1:50:8f:16:2d:5b:80: 4f:c8:d3:66:c3:7d:31:95:4d:2d:77:52:37:40:4d: 9c:23:ea:f0:d5:4f:a1:c2:ea:55:19:e9:d9:f1:12: 8c:a9:af:47:2b:c3:60:05:7f:69:f4:45:ae:6a:da: 1b:7f:ca:de:5a:33:78:42:8a:85:4a:f5:88:bc:7a: 1f:3f:a1:24:ad:92:f3:c3:6f:d6:b8:b2:f7:1e:28: ec:1d:7b:e5:f5:02:8b:94:a2:e3:69:94:40:7d:8c: c4:e6:00:5f:05:b1:11:a2:46:08:37:32:6c:fc:0d: 50:4c:3a:bf:7f:29:69:0c:be:62:dd:18:8c:8d:52: 19:df:75:95:03:96:de:11:80:79:b3:bc:56:d0:54: 06:b7:e7:05:93:3e:da:87:ca:fb:fb:48:c6:20:d4: 36:34:36:07:dd:9b:48:a4:63:14:68:a5:e6:6c:90: 2e:8a:15:1f:b7:0e:13:c0:46:09:3c:8c:b8:b9:cd: a4:d0:40:04:af:5f:d3:10:79:0a:df:3b:62:1b:fc: 60:69:45:7d:58:eb:9e:9c:e2:ef:5b:fb:67:99:f8: 55:72:29:91:d5:55:59:06:db:3b:b2:c3:f2:6a:31: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:39:CC:A6:D7:B2:96:41:EB:B7:97:A4:FF:5E:60:03:BC:BC:C3 X509v3 Authority Key Identifier: keyid:9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/p8c5zKbXspZB67eXpP9eYAO8vMM.roa sbgp-ipAddrBlock: critical IPv4: 103.239.108.0/22 Signature Algorithm: sha256WithRSAEncryption 54:10:f1:8c:c2:8b:97:70:fa:7e:20:e8:16:c2:6d:c5:66:a7: 5a:90:3b:d1:b5:d2:25:46:0f:5d:1f:62:57:0d:35:8b:4e:05: be:a0:99:cd:42:3f:6c:04:e9:d7:26:06:65:4c:99:77:d2:58: 37:fe:68:a3:85:ff:d6:42:1b:59:86:d1:bd:6e:f0:7d:6a:7a: 30:39:b4:db:81:9d:68:47:65:75:8c:1b:60:98:34:35:34:bc: 73:6c:ff:5e:36:40:b7:57:42:ab:c7:3c:14:f1:ca:03:05:88: c1:cd:58:ae:57:49:20:fc:cb:06:25:69:dd:cd:7a:0d:e1:b2: ea:c8:67:72:2e:4e:7c:31:95:74:13:6a:02:11:cf:2d:fe:98: 00:d9:ea:7a:c9:21:5c:64:d8:45:8f:76:85:4e:26:1c:e4:a6: bd:0e:4b:dd:b7:77:eb:7b:72:e0:e9:42:88:aa:25:c1:0d:6c: f6:00:4f:13:4e:42:c5:ee:7a:b7:3f:d5:6a:10:dd:1e:d4:40: 89:95:b6:20:bf:c6:96:30:b1:63:03:aa:8c:0c:60:d7:8f:d1: 8a:99:17:14:0e:1c:23:13:cf:f1:09:80:f9:e2:30:28:74:b2: d0:e2:3a:0e:6e:5e:e3:ba:61:1b:c9:25:b6:36:00:2b:14:ba: 03:47:ff:5c -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTZB RkFCMDRFMTBFOTlDMzIyQjU2QzYwM0NCM0M5NTQ3RjIyQjREMB4XDTI2MDMzMTA4 NDAyM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTdDNzM5Q0NBNkQ3QjI5 NjQxRUJCNzk3QTRGRjVFNjAwM0JDQkNDMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJVD9Hfwyiuuao/9bvEH5pnS4JNHtySxUI8WLVuAT8jTZsN9MZVN LXdSN0BNnCPq8NVPocLqVRnp2fESjKmvRyvDYAV/afRFrmraG3/K3lozeEKKhUr1 iLx6Hz+hJK2S88Nv1riy9x4o7B175fUCi5Si42mUQH2MxOYAXwWxEaJGCDcybPwN UEw6v38paQy+Yt0YjI1SGd91lQOW3hGAebO8VtBUBrfnBZM+2ofK+/tIxiDUNjQ2 B92bSKRjFGil5myQLooVH7cOE8BGCTyMuLnNpNBABK9f0xB5Ct87Yhv8YGlFfVjr npzi71v7Z5n4VXIpkdVVWQbbO7LD8moxV5UCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSnxznMpteylkHrt5ek/15gA7y8wzAfBgNVHSMEGDAWgBSeavqwThDpnDIrVsYD yzyVR/IrTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTUyL25tcjZzRTRRNlp3eUsxYkdBOHM4bFVmeUswMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25tcjZzRTRRNlp3eUsxYkdBOHM4bFVm eUswMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85NTIvcDhjNXpLYlhzcFpCNjdlWHBQOWVZQU84dk1NLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfvbDANBgkqhkiG9w0BAQsFAAOCAQEA VBDxjMKLl3D6fiDoFsJtxWanWpA70bXSJUYPXR9iVw01i04FvqCZzUI/bATp1yYG ZUyZd9JYN/5oo4X/1kIbWYbRvW7wfWp6MDm024GdaEdldYwbYJg0NTS8c2z/XjZA t1dCq8c8FPHKAwWIwc1YrldJIPzLBiVp3c16DeGy6shnci5OfDGVdBNqAhHPLf6Y ANnqeskhXGTYRY92hU4mHOSmvQ5L3bd363ty4OlCiKolwQ1s9gBPE05Cxe56tz/V ahDdHtRAiZW2IL/GljCxYwOqjAxg14/RipkXFA4cIxPP8QmA+eIwKHSy0OI6Dm5e 47phG8kltjYAKxS6A0f/XA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:18 2026 by rpki-client