$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/H0bDZd1ZuUZncevIo2uS2Dnz4NA.roa File: H0bDZd1ZuUZncevIo2uS2Dnz4NA.roa (raw, json) Hash identifier: 6mlf9wWWw+6maEoIyGe5xv4x5MjfK3Zx0qnCI2bIdUM= Subject key identifier: 1F:46:C3:65:DD:59:B9:46:67:71:EB:C8:A3:6B:92:D8:39:F3:E0:D0 Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 72 Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/H0bDZd1ZuUZncevIo2uS2Dnz4NA.roa Signing time: Tue 31 Mar 2026 07:37:44 +0000 ROA not before: Tue 31 Mar 2026 07:37:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24295 IP address blocks: 103.28.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: Mar 31 07:37:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1F46C365DD59B9466771EBC8A36B92D839F3E0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:40:f8:c5:fc:dd:26:76:1c:fd:61:a8:a8: fc:c5:35:21:37:23:e4:92:be:e8:14:04:10:f5:a6: 3e:eb:5d:5e:7e:1e:47:a1:f3:8a:4c:f1:da:40:62: ca:29:f0:d0:10:2e:b9:81:7c:b0:be:14:5b:1b:c8: 54:94:64:d2:61:d4:d7:d0:7d:ef:d2:f8:32:71:4f: 0e:1f:35:a4:ad:62:16:74:07:78:8a:45:fb:60:2f: 8e:54:0e:2a:6b:ce:43:03:b4:55:a8:62:8d:e1:30: ee:bd:64:77:4a:7c:58:f1:d4:2d:60:f2:d2:09:ae: 86:a0:d4:f8:6a:bc:22:f0:32:1b:cb:6a:6a:bc:6e: ac:25:db:37:1a:2c:5b:a0:3c:d8:3e:c7:e9:68:6d: e7:b3:f9:1c:72:e3:21:8a:03:45:6d:ae:a4:05:d8: bb:8d:b6:e6:9a:f6:71:18:43:5f:66:08:61:15:13: af:89:d1:77:b7:28:1c:35:ee:02:f0:b6:4f:02:46: 96:62:f5:91:8b:76:54:ed:47:74:2b:5a:63:48:a4: 84:6c:25:46:0d:cb:e8:9a:b4:be:f6:29:d7:7a:cf: 57:12:7c:a6:3d:ee:a8:ee:a3:2e:e2:eb:44:b1:1e: 2f:55:f0:83:02:ea:a0:87:6b:44:1d:a7:30:8a:67: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:C3:65:DD:59:B9:46:67:71:EB:C8:A3:6B:92:D8:39:F3:E0:D0 X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/H0bDZd1ZuUZncevIo2uS2Dnz4NA.roa sbgp-ipAddrBlock: critical IPv4: 103.28.24.0/22 Signature Algorithm: sha256WithRSAEncryption 87:49:25:7a:a7:f0:59:7c:51:f5:55:ef:15:4e:4c:34:3a:0b: d9:77:8e:4f:2e:14:d9:38:57:d5:9e:14:c9:5b:e4:6d:23:4d: 58:e2:59:33:8b:f3:2c:11:1a:86:95:5c:08:ce:56:66:86:96: fe:d4:b9:66:09:f0:b0:13:70:4b:6c:ed:22:7b:41:33:89:57: 1e:68:f3:77:2f:7c:7b:a0:e1:5d:1d:1a:48:4b:49:44:5d:89: 33:8a:af:20:aa:27:44:15:2b:65:a9:89:a8:ee:5c:d9:b9:df: 58:51:51:12:5d:e9:cf:d6:55:cd:31:69:57:2a:2d:ab:21:30: 42:44:88:97:84:93:4c:03:7e:0b:25:77:f2:22:de:ba:fd:8f: f7:a2:4d:3a:2b:6f:48:5d:93:45:de:14:8e:47:1e:ed:7e:15: f2:5d:2b:35:21:d9:9a:f0:c1:fc:23:e5:0a:5c:5e:16:fb:8d: 99:a7:a2:a2:82:7a:d5:b0:84:d8:86:cc:a1:6f:0c:e3:ae:83: 81:2c:3a:ee:55:6e:4d:78:f8:90:ea:68:49:35:90:e3:6d:61: e2:1b:0d:a1:a5:f7:c8:8c:36:76:e8:ec:84:e7:e9:16:c8:30: e3:52:93:da:bf:dc:16:87:ee:99:ca:f4:c8:5e:b3:17:fd:e3: d1:64:a6:5e -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI2MDMzMTA3 Mzc0NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMUY0NkMzNjVERDU5Qjk0 NjY3NzFFQkM4QTM2QjkyRDgzOUYzRTBEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMrkQPjF/N0mdhz9Yaio/MU1ITcj5JK+6BQEEPWmPutdXn4eR6Hz ikzx2kBiyinw0BAuuYF8sL4UWxvIVJRk0mHU19B979L4MnFPDh81pK1iFnQHeIpF +2AvjlQOKmvOQwO0VahijeEw7r1kd0p8WPHULWDy0gmuhqDU+Gq8IvAyG8tqarxu rCXbNxosW6A82D7H6Wht57P5HHLjIYoDRW2upAXYu4225pr2cRhDX2YIYRUTr4nR d7coHDXuAvC2TwJGlmL1kYt2VO1HdCtaY0ikhGwlRg3L6Jq0vvYp13rPVxJ8pj3u qO6jLuLrRLEeL1XwgwLqoIdrRB2nMIpn8U0CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQfRsNl3Vm5Rmdx68ija5LYOfPg0DAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwNjAyL0gwYkRaZDFadVVabmNldklvMnVTMkRuejROQS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnHBgwDQYJKoZIhvcNAQELBQAD ggEBAIdJJXqn8Fl8UfVV7xVOTDQ6C9l3jk8uFNk4V9WeFMlb5G0jTVjiWTOL8ywR GoaVXAjOVmaGlv7UuWYJ8LATcEts7SJ7QTOJVx5o83cvfHug4V0dGkhLSURdiTOK ryCqJ0QVK2WpiajuXNm531hRURJd6c/WVc0xaVcqLashMEJEiJeEk0wDfgsld/Ii 3rr9j/eiTTorb0hdk0XeFI5HHu1+FfJdKzUh2Zrwwfwj5QpcXhb7jZmnoqKCetWw hNiGzKFvDOOug4EsOu5Vbk14+JDqaEk1kONtYeIbDaGl98iMNnbo7ITn6RbIMONS k9q/3BaH7pnK9Mhesxf949Fkpl4= -----END CERTIFICATE-----Generated at Mon Apr 13 02:20:34 2026 by rpki-client