$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/oaJJcry2PaJK3Iofjvn3Uwyc60s.roa File: oaJJcry2PaJK3Iofjvn3Uwyc60s.roa (raw, json) Hash identifier: 5EsHPfzsFpcezJZG2nSr+t1AfDbQsClmPPK351ZLIE4= Subject key identifier: A1:A2:49:72:BC:B6:3D:A2:4A:DC:8A:1F:8E:F9:F7:53:0C:9C:EB:4B Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Certificate serial: 8C Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/oaJJcry2PaJK3Iofjvn3Uwyc60s.roa Signing time: Tue 31 Mar 2026 07:31:47 +0000 ROA not before: Tue 31 Mar 2026 07:31:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 45680 IP address blocks: 103.235.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D Validity Not Before: Mar 31 07:31:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A1A24972BCB63DA24ADC8A1F8EF9F7530C9CEB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:4c:3d:bf:4a:e6:8b:08:37:a8:c0:62:8a: b6:0a:5e:d0:cd:ed:81:d7:18:8e:e2:c4:79:45:cd: f4:2f:ce:71:0c:d0:2c:9d:88:d6:46:5d:d5:06:7a: 1a:a8:6d:39:22:be:a7:49:13:00:27:dd:05:1a:a9: 2e:9a:50:c9:a5:5b:d7:0c:68:e6:34:7d:ef:bf:df: 45:0c:76:ae:f9:ad:1b:67:17:85:25:ef:05:36:63: 30:f8:91:65:e7:1b:9b:d6:bf:2b:16:99:28:1c:89: 38:e9:87:39:da:78:7b:50:d5:f8:2d:bb:d8:85:c5: 29:48:54:9e:30:67:7c:e1:b4:a6:49:94:1d:80:15: b6:9c:f6:e4:0c:db:d8:3f:f7:19:f9:b6:04:a2:f3: 63:c8:3f:b2:3a:64:b4:f6:2f:78:ce:3a:6f:33:22: 6d:15:a1:d8:23:04:03:f0:fd:68:8b:05:12:63:6c: c0:9e:9e:cd:99:77:8b:61:41:ce:56:c8:c1:a2:54: 55:35:c8:eb:49:29:05:84:a4:1a:e5:48:4e:94:93: d7:fe:f3:70:d4:d4:53:14:25:8f:a1:b6:44:99:ab: 39:1d:75:b1:ed:c1:9d:c1:b4:0f:83:79:ed:47:35: cd:29:13:fa:dd:a6:e9:b4:d3:b4:c4:9f:70:6b:2a: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A2:49:72:BC:B6:3D:A2:4A:DC:8A:1F:8E:F9:F7:53:0C:9C:EB:4B X509v3 Authority Key Identifier: keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/oaJJcry2PaJK3Iofjvn3Uwyc60s.roa sbgp-ipAddrBlock: critical IPv4: 103.235.40.0/22 Signature Algorithm: sha256WithRSAEncryption 72:f3:97:ba:5f:b0:4c:8d:59:4c:b3:d5:b5:cf:0d:80:6b:95: f7:d0:0d:b5:4e:1d:32:81:2c:a7:d8:5d:6b:a4:1a:48:82:07: bc:98:2c:c0:dd:1d:99:9f:d9:51:51:b5:6b:1f:0c:24:7e:64: f6:46:77:b9:bf:85:d3:04:96:cf:21:ad:11:e7:eb:2f:eb:54: e7:ca:92:7a:4d:a9:1e:b2:38:e1:ad:51:ca:17:1b:b1:69:da: d6:c4:1a:59:fd:17:c1:a3:0c:65:dc:97:6e:14:fd:bd:0f:9d: 1b:db:0a:92:0f:46:2d:93:3e:36:ab:7e:dd:d9:d3:10:7c:f4: 0d:a7:1d:d1:b4:28:23:b5:68:29:ab:12:45:a7:1e:d4:16:5b: 61:7e:e9:9e:64:a1:b0:48:c9:26:6c:a3:75:7e:a0:b8:0a:81: 98:61:58:66:23:88:a9:24:10:41:66:71:1b:6d:5f:d5:f9:dd: bf:fe:6b:16:2d:35:2f:19:ca:10:ec:4d:ec:78:c8:ca:59:d4: 90:cb:df:03:22:71:48:a9:9c:ac:19:1a:a8:46:65:5f:4f:e5: 87:bd:e5:14:ac:64:20:10:53:b8:2b:1d:08:f0:ef:5c:be:12: 00:90:e1:af:6c:25:46:2d:58:e3:12:9f:b4:2d:7d:d4:9c:50: c6:a0:72:ed -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQy NkUwRDE3RTMwRDhCRjU3MTRGNEJBOTJFRUVCMEQyMkREREIxRDAeFw0yNjAzMzEw NzMxNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEExQTI0OTcyQkNCNjNE QTI0QURDOEExRjhFRjlGNzUzMEM5Q0VCNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOckw9v0rmiwg3qMBiirYKXtDN7YHXGI7ixHlFzfQvznEM0Cyd iNZGXdUGehqobTkivqdJEwAn3QUaqS6aUMmlW9cMaOY0fe+/30UMdq75rRtnF4Ul 7wU2YzD4kWXnG5vWvysWmSgciTjphznaeHtQ1fgtu9iFxSlIVJ4wZ3zhtKZJlB2A Fbac9uQM29g/9xn5tgSi82PIP7I6ZLT2L3jOOm8zIm0VodgjBAPw/WiLBRJjbMCe ns2Zd4thQc5WyMGiVFU1yOtJKQWEpBrlSE6Uk9f+83DU1FMUJY+htkSZqzkddbHt wZ3BtA+Dee1HNc0pE/rdpum007TEn3BrKv/rAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUoaJJcry2PaJK3Iofjvn3Uwyc60swHwYDVR0jBBgwFoAUjSbg0X4w2L9XFPS6 ku7rDSLd2x0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzk4OS9qU2JnMFg0dzJMOVhGUFM2a3U3ckRTTGQyeDAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qU2JnMFg0dzJMOVhGUFM2a3U3ckRT TGQyeDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvOTg5L29hSkpjcnkyUGFKSzNJb2Zqdm4zVXd5YzYwcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn6ygwDQYJKoZIhvcNAQELBQADggEB AHLzl7pfsEyNWUyz1bXPDYBrlffQDbVOHTKBLKfYXWukGkiCB7yYLMDdHZmf2VFR tWsfDCR+ZPZGd7m/hdMEls8hrRHn6y/rVOfKknpNqR6yOOGtUcoXG7Fp2tbEGln9 F8GjDGXcl24U/b0PnRvbCpIPRi2TPjarft3Z0xB89A2nHdG0KCO1aCmrEkWnHtQW W2F+6Z5kobBIySZso3V+oLgKgZhhWGYjiKkkEEFmcRttX9X53b/+axYtNS8ZyhDs Tex4yMpZ1JDL3wMicUipnKwZGqhGZV9P5Ye95RSsZCAQU7grHQjw71y+EgCQ4a9s JUYtWOMSn7QtfdScUMagcu0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:53 2026 by rpki-client