$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/ocrGCBBt5WYcEsDFWnH8t32LFA8.roa File: ocrGCBBt5WYcEsDFWnH8t32LFA8.roa (raw, json) Hash identifier: DtgPQ7ZopH4+dmCqGbOp4goztrPfZKAJCnva77PF32s= Subject key identifier: A1:CA:C6:08:10:6D:E5:66:1C:12:C0:C5:5A:71:FC:B7:7D:8B:14:0F Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B Certificate serial: 6B Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/ocrGCBBt5WYcEsDFWnH8t32LFA8.roa Signing time: Tue 31 Mar 2026 07:50:31 +0000 ROA not before: Tue 31 Mar 2026 07:50:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17707 IP address blocks: 218.223.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 10:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B Validity Not Before: Mar 31 07:50:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A1CAC608106DE5661C12C0C55A71FCB77D8B140F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:8c:85:15:21:7b:65:96:fd:6c:25:24:1a: 8d:26:aa:f5:74:48:ad:29:af:4d:5a:af:c3:12:81: 6d:85:37:6f:43:56:11:df:e9:4a:08:cb:a1:7d:ee: 41:c2:93:c0:c8:5e:ff:d2:29:92:70:20:70:6c:bb: e9:56:d3:e9:47:47:22:a4:78:aa:50:ad:02:d1:ae: 1b:93:bd:73:08:e3:42:e0:12:df:b5:61:af:e7:5c: c5:c2:43:61:fc:e9:6d:61:ea:a7:eb:af:b4:18:b8: f0:30:3e:b9:11:f9:8e:dc:cc:07:52:0c:2c:f2:10: 82:ed:a7:4d:f7:54:37:94:7b:80:c5:12:90:1d:7c: 1d:28:59:16:66:15:f6:3f:1c:29:1b:1f:c6:26:81: f8:cf:ee:9a:42:e9:c9:a1:1a:f8:11:38:58:ab:55: 84:0a:67:f5:78:b0:6a:ef:dd:18:44:5a:43:f8:f7: b6:82:83:0a:1b:5d:d3:1b:37:6e:8c:5b:78:d7:de: 5e:22:7c:f0:9e:b7:6b:50:9c:48:65:b6:d1:86:4d: 8d:79:c3:33:62:3c:b9:d0:b6:30:b4:64:92:9d:5d: b4:a3:30:e0:ee:c6:9d:9a:dc:8c:27:55:90:17:05: d8:a2:27:b0:9d:88:78:2d:c4:67:03:06:c5:c4:e8: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:C6:08:10:6D:E5:66:1C:12:C0:C5:5A:71:FC:B7:7D:8B:14:0F X509v3 Authority Key Identifier: keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/ocrGCBBt5WYcEsDFWnH8t32LFA8.roa sbgp-ipAddrBlock: critical IPv4: 218.223.16.0/20 Signature Algorithm: sha256WithRSAEncryption 24:51:c7:c0:df:82:6c:8e:50:2e:c8:78:c5:04:a6:91:78:24: 89:30:5b:1c:c1:2d:f0:1b:74:04:4d:2e:1c:dd:d0:54:b4:3c: c1:8f:0b:12:53:37:e8:1c:38:05:95:02:70:53:44:75:23:61: 12:0f:58:38:7f:19:e0:b0:d8:62:1e:e7:3d:9b:23:33:6c:3e: ee:37:25:3a:63:3e:4e:41:ac:df:ac:84:96:87:2d:0f:2f:7f: 59:48:5f:14:69:ee:33:9c:3a:11:8a:6e:07:bc:ae:58:ab:0f: 8e:8e:5f:73:15:d5:2b:3b:5c:0e:77:ce:de:34:74:7f:3e:51: 7f:17:74:69:b0:11:8a:65:31:96:a8:85:73:6b:33:30:e9:b4: 40:86:18:5c:ed:67:df:19:c5:8b:2e:d6:77:53:1a:4e:1b:87: a8:33:20:70:70:47:22:a8:c2:ff:92:1b:e8:3e:9e:21:04:d2: 5e:6a:48:4b:58:3c:59:83:1d:85:64:58:f0:01:e6:97:c9:22: 0d:c7:99:f7:89:ac:8c:93:13:de:82:3c:a1:6a:04:8d:60:82: 1b:a7:bd:0c:32:9e:d0:35:b8:9c:e2:bf:11:f3:31:13:ad:51: 7e:ea:fc:b1:cb:2a:87:30:db:15:42:b2:1c:70:e7:39:d5:3f: 11:b2:5f:3b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzE4 N0M0RDRCRERENDM1NzI4QjQxMjg4OEUwNjU1MzM0MjA4RTBCMB4XDTI2MDMzMTA3 NTAzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTFDQUM2MDgxMDZERTU2 NjFDMTJDMEM1NUE3MUZDQjc3RDhCMTQwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN7WjIUVIXtllv1sJSQajSaq9XRIrSmvTVqvwxKBbYU3b0NWEd/p SgjLoX3uQcKTwMhe/9IpknAgcGy76VbT6UdHIqR4qlCtAtGuG5O9cwjjQuAS37Vh r+dcxcJDYfzpbWHqp+uvtBi48DA+uRH5jtzMB1IMLPIQgu2nTfdUN5R7gMUSkB18 HShZFmYV9j8cKRsfxiaB+M/umkLpyaEa+BE4WKtVhApn9Xiwau/dGERaQ/j3toKD Chtd0xs3boxbeNfeXiJ88J63a1CcSGW20YZNjXnDM2I8udC2MLRkkp1dtKMw4O7G nZrcjCdVkBcF2KInsJ2IeC3EZwMGxcTooAECAwEAAaOCAdkwggHVMB0GA1UdDgQW BBShysYIEG3lZhwSwMVacfy3fYsUDzAfBgNVHSMEGDAWgBS3GHxNS93UNXKLQSiI 4GVTNCCOCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk3L3R4aDhUVXZkMURWeWkwRW9pT0JsVXpRZ2pncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3R4aDhUVXZkMURWeWkwRW9pT0JsVXpR Z2pncy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85OTcvb2NyR0NCQnQ1V1ljRXNERlduSDh0MzJMRkE4LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNrfEDANBgkqhkiG9w0BAQsFAAOCAQEA JFHHwN+CbI5QLsh4xQSmkXgkiTBbHMEt8Bt0BE0uHN3QVLQ8wY8LElM36Bw4BZUC cFNEdSNhEg9YOH8Z4LDYYh7nPZsjM2w+7jclOmM+TkGs36yEloctDy9/WUhfFGnu M5w6EYpuB7yuWKsPjo5fcxXVKztcDnfO3jR0fz5Rfxd0abARimUxlqiFc2szMOm0 QIYYXO1n3xnFiy7Wd1MaThuHqDMgcHBHIqjC/5Ib6D6eIQTSXmpIS1g8WYMdhWRY 8AHml8kiDceZ94msjJMT3oI8oWoEjWCCG6e9DDKe0DW4nOK/EfMxE61Rfur8scsq hzDbFUKyHHDnOdU/EbJfOw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:51:59 2026 by rpki-client