$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/O4PfQFEStHaW1YJVR6InSWtGxXU.roa File: O4PfQFEStHaW1YJVR6InSWtGxXU.roa (raw, json) Hash identifier: pY4NULqH35yBwmjHd0zZ8yFFRvecaztl+hEJJoDJOjg= Subject key identifier: 3B:83:DF:40:51:12:B4:76:96:D5:82:55:47:A2:27:49:6B:46:C5:75 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 014B Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/O4PfQFEStHaW1YJVR6InSWtGxXU.roa Signing time: Tue 31 Mar 2026 07:47:55 +0000 ROA not before: Tue 31 Mar 2026 07:47:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2914 IP address blocks: 153.254.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 12:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Mar 31 07:47:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3B83DF405112B47696D5825547A227496B46C575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:90:f4:14:47:19:d7:a6:9d:75:e5:eb:92: 57:97:ea:6a:da:21:32:3c:f4:89:a0:a6:92:b4:b3: 45:6c:77:62:78:1a:03:e6:8b:2f:d5:c4:1c:26:a1: d3:6b:13:cf:e2:a0:0e:9d:4b:cc:ee:a5:c1:44:42: be:91:54:7b:be:9f:ac:cf:b5:a7:e8:9b:ef:41:7e: c9:1b:d8:75:74:f3:88:04:58:13:b1:57:5e:c0:1e: 53:04:aa:50:e2:e1:f1:ad:37:88:7c:e8:64:a3:a1: 53:72:84:df:40:da:36:8c:c0:30:92:27:7f:0b:d6: 61:db:4c:d3:16:19:41:50:2e:30:1e:f8:68:d9:21: f4:f3:e8:90:b4:c1:1e:76:85:0c:d0:3b:df:03:5c: 74:c0:24:94:01:38:14:0c:c5:9e:97:1a:43:1d:2e: f9:9a:1c:94:7a:52:d3:52:73:c8:6f:62:49:8e:ba: 07:20:21:2c:c0:0f:6d:6e:c0:3d:54:ec:67:0c:9e: 0b:fd:9c:74:2b:05:b7:a5:85:45:3d:b9:36:18:bd: 2d:09:ef:f2:d7:58:2e:f3:d3:0c:57:63:72:66:68: 67:62:00:4e:e5:92:94:bd:c6:1b:f9:85:92:52:34: 88:63:c2:11:30:4d:33:17:31:77:15:0e:2f:cd:7e: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:DF:40:51:12:B4:76:96:D5:82:55:47:A2:27:49:6B:46:C5:75 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/O4PfQFEStHaW1YJVR6InSWtGxXU.roa sbgp-ipAddrBlock: critical IPv4: 153.254.0.0/15 Signature Algorithm: sha256WithRSAEncryption b5:d2:bc:49:8b:cc:65:02:68:cc:25:ee:d9:fd:ef:b5:fc:3b: e7:7f:2c:fb:42:e4:6e:a3:6f:86:ae:1d:ce:af:4f:32:eb:40: 15:0f:ad:89:07:62:50:69:88:46:e9:69:6f:9b:22:c2:0e:9c: 9b:b1:ec:7e:80:73:0c:35:6b:39:98:d4:71:4d:31:9f:a4:a9: 3f:e8:e8:2c:75:4e:0e:fa:55:6b:86:de:3a:a1:4c:26:d0:8c: 30:de:d0:1c:b3:9c:7b:bd:ee:56:4e:05:71:27:71:6c:82:2d: 0a:58:9b:12:a3:f3:1e:ff:57:fc:e2:2c:8c:89:16:d1:40:23: 40:61:09:b9:45:df:5b:5b:98:50:76:d9:d2:09:f6:ce:67:8c: 24:63:eb:07:04:d1:64:d7:8f:a3:b4:ab:f6:f5:67:9b:a9:7a: 5d:d0:d3:6a:af:84:f3:14:d6:ae:47:69:e6:75:e5:c8:39:ba: 98:08:53:c5:f5:39:6a:97:8f:1b:c7:ea:fe:fc:ba:1f:da:e3: 4b:1d:bf:5b:fa:c0:5b:49:c6:09:cb:9c:a9:dc:b2:18:19:62: d5:eb:fa:3b:d6:dc:c5:9d:5c:63:20:b8:79:01:4a:90:7a:5f: ef:1c:4e:e6:8a:0e:35:da:61:ee:a1:a0:2c:51:78:ee:bd:bb: 36:70:da:44 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgICAUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw NzQ3NTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCODNERjQwNTExMkI0 NzY5NkQ1ODI1NTQ3QTIyNzQ5NkI0NkM1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwtZD0FEcZ16addeXrkleX6mraITI89ImgppK0s0Vsd2J4GgPm iy/VxBwmodNrE8/ioA6dS8zupcFEQr6RVHu+n6zPtafom+9Bfskb2HV084gEWBOx V17AHlMEqlDi4fGtN4h86GSjoVNyhN9A2jaMwDCSJ38L1mHbTNMWGUFQLjAe+GjZ IfTz6JC0wR52hQzQO98DXHTAJJQBOBQMxZ6XGkMdLvmaHJR6UtNSc8hvYkmOugcg ISzAD21uwD1U7GcMngv9nHQrBbelhUU9uTYYvS0J7/LXWC7z0wxXY3JmaGdiAE7l kpS9xhv5hZJSNIhjwhEwTTMXMXcVDi/NfoxpAgMBAAGjggHcMIIB2DAdBgNVHQ4E FgQUO4PfQFEStHaW1YJVR6InSWtGxXUwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDEyOC9PNFBmUUZFU3RIYVcxWUpWUjZJblNXdEd4WFUucm9h MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBmf4wDQYJKoZIhvcNAQELBQAD ggEBALXSvEmLzGUCaMwl7tn977X8O+d/LPtC5G6jb4auHc6vTzLrQBUPrYkHYlBp iEbpaW+bIsIOnJux7H6Acww1azmY1HFNMZ+kqT/o6Cx1Tg76VWuG3jqhTCbQjDDe 0ByznHu97lZOBXEncWyCLQpYmxKj8x7/V/ziLIyJFtFAI0BhCblF31tbmFB22dIJ 9s5njCRj6wcE0WTXj6O0q/b1Z5upel3Q02qvhPMU1q5HaeZ15cg5upgIU8X1OWqX jxvH6v78uh/a40sdv1v6wFtJxgnLnKncshgZYtXr+jvW3MWdXGMguHkBSpB6X+8c TuaKDjXaYe6hoCxReO69uzZw2kQ= -----END CERTIFICATE-----Generated at Wed Apr 8 14:50:16 2026 by rpki-client