$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/Q4by9OhGkATTKeJaPi1mBLOE1EE.roa File: Q4by9OhGkATTKeJaPi1mBLOE1EE.roa (raw, json) Hash identifier: kMDELKyKNVUf3FqhvNNDTZXWA0btLQ4qVu33GqyJmYs= Subject key identifier: 43:86:F2:F4:E8:46:90:04:D3:29:E2:5A:3E:2D:66:04:B3:84:D4:41 Certificate issuer: /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A Certificate serial: 58 Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/Q4by9OhGkATTKeJaPi1mBLOE1EE.roa Signing time: Tue 31 Mar 2026 07:47:01 +0000 ROA not before: Tue 31 Mar 2026 07:47:01 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18131 IP address blocks: 192.47.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A Validity Not Before: Mar 31 07:47:01 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4386F2F4E8469004D329E25A3E2D6604B384D441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:5a:c7:46:cd:27:64:c9:86:56:4c:49:44: 95:61:d5:96:f6:15:6f:18:33:11:44:e7:af:09:5b: 11:33:8e:57:2c:18:c9:3b:5a:ea:5b:a3:13:c7:0f: 99:a4:70:9c:86:d2:00:ed:6d:59:ba:a1:8e:fb:fa: ed:2b:03:91:d3:b3:fb:55:d2:f5:96:f6:20:29:42: 3d:c0:0f:1b:5f:37:33:e8:3a:e2:f7:67:5f:07:d1: 6f:20:00:cb:83:db:63:e4:82:f3:00:8c:94:e3:a3: 08:f9:9b:fd:43:5f:7e:95:ad:d5:a2:11:29:16:79: ba:c7:19:f6:30:83:dc:a5:07:e2:a0:fc:57:63:60: ca:b0:58:3c:e3:f2:36:7f:62:5e:cb:6c:d9:dc:23: e8:96:b7:45:bf:5b:4a:a3:6c:4a:ef:98:45:84:b3: f5:69:47:4f:d1:5c:28:54:eb:c7:f3:1d:82:e6:34: 41:9c:67:8c:bd:45:5f:1c:46:b6:74:0e:2b:b6:ab: 07:2a:5b:62:8b:bd:45:4b:68:dc:48:58:bc:bc:8a: 85:08:a0:48:14:f4:4b:e9:87:01:34:a5:28:82:99: a7:a5:54:ce:17:67:ff:c0:fc:87:4b:a1:5d:e7:61: e5:a3:a9:5a:67:0f:21:18:61:d6:7a:e5:97:e1:42: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:86:F2:F4:E8:46:90:04:D3:29:E2:5A:3E:2D:66:04:B3:84:D4:41 X509v3 Authority Key Identifier: keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/Q4by9OhGkATTKeJaPi1mBLOE1EE.roa sbgp-ipAddrBlock: critical IPv4: 192.47.166.0/24 Signature Algorithm: sha256WithRSAEncryption 85:c1:e0:52:e8:38:ba:57:58:38:de:73:61:fa:10:98:81:43: d6:2b:ca:49:e8:cc:67:25:02:d0:78:63:be:7a:37:88:e2:0f: dd:c9:70:22:5d:3f:a8:1f:1d:8d:26:f8:00:3e:38:47:c8:25: 61:f7:c8:de:6f:e0:00:17:93:0c:da:57:39:b0:c8:32:60:fa: 30:c2:37:82:5f:db:6d:a3:f1:d9:93:22:f5:be:ba:0c:f2:d8: 3d:16:b4:7a:d1:91:bb:9e:f3:98:96:d4:26:a9:2c:8e:fb:86: 96:bd:6f:74:85:f6:14:2d:4b:e0:5d:3e:75:bd:9e:30:ff:5e: 17:46:40:02:a1:fe:42:ec:72:08:fe:3a:cf:8a:33:a3:a6:61: d0:e7:7e:1a:17:31:6e:98:43:2d:84:dc:ae:56:44:56:5c:c0: 53:15:cd:ad:7d:ae:69:61:02:60:5f:9a:5e:78:d6:39:9e:28: b5:70:b5:2f:9f:44:99:04:67:7b:74:c8:81:56:ee:a3:13:7d: 48:f5:dc:4e:25:28:b8:7d:78:32:95:90:96:91:64:6a:f7:5f: 61:d2:04:c1:36:1a:72:ce:96:0d:ba:20:60:58:8d:e1:d6:e6: b4:84:01:54:56:05:85:c6:cd:bd:a6:00:05:e8:c7:60:82:d5: e3:bb:32:ed -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjA4 MjE0M0JDRUY1MkU3MTJCNEE1QkQ1RDZFNUMxOTUzNzlEOTFBMB4XDTI2MDMzMTA3 NDcwMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDM4NkYyRjRFODQ2OTAw NEQzMjlFMjVBM0UyRDY2MDRCMzg0RDQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMb8WsdGzSdkyYZWTElElWHVlvYVbxgzEUTnrwlbETOOVywYyTta 6lujE8cPmaRwnIbSAO1tWbqhjvv67SsDkdOz+1XS9Zb2IClCPcAPG183M+g64vdn XwfRbyAAy4PbY+SC8wCMlOOjCPmb/UNffpWt1aIRKRZ5uscZ9jCD3KUH4qD8V2Ng yrBYPOPyNn9iXsts2dwj6Ja3Rb9bSqNsSu+YRYSz9WlHT9FcKFTrx/MdguY0QZxn jL1FXxxGtnQOK7arBypbYou9RUto3EhYvLyKhQigSBT0S+mHATSlKIKZp6VUzhdn /8D8h0uhXedh5aOpWmcPIRhh1nrll+FCOzUCAwEAAaOCAdswggHXMB0GA1UdDgQW BBRDhvL06EaQBNMp4lo+LWYEs4TUQTAfBgNVHSMEGDAWgBSmCCFDvO9S5xK0pb1d blwZU3nZGjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjcxNi9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dWTjUyUm8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dW TjUyUm8uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjcxNi9RNGJ5OU9oR2tBVFRLZUphUGkxbUJMT0UxRUUucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC+mMA0GCSqGSIb3DQEBCwUAA4IB AQCFweBS6Di6V1g43nNh+hCYgUPWK8pJ6MxnJQLQeGO+ejeI4g/dyXAiXT+oHx2N JvgAPjhHyCVh98jeb+AAF5MM2lc5sMgyYPowwjeCX9tto/HZkyL1vroM8tg9FrR6 0ZG7nvOYltQmqSyO+4aWvW90hfYULUvgXT51vZ4w/14XRkACof5C7HII/jrPijOj pmHQ534aFzFumEMthNyuVkRWXMBTFc2tfa5pYQJgX5peeNY5nii1cLUvn0SZBGd7 dMiBVu6jE31I9dxOJSi4fXgylZCWkWRq919h0gTBNhpyzpYNuiBgWI3h1ua0hAFU VgWFxs29pgAF6MdggtXjuzLt -----END CERTIFICATE-----Generated at Tue Mar 31 12:51:26 2026 by rpki-client