$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rfonBip-eSLQ5Qh-5cpkgc8PciE.roa File: rfonBip-eSLQ5Qh-5cpkgc8PciE.roa (raw, json) Hash identifier: 04Tgqo9pyMUxsKuUMgjt+SKilakT2ddkNyp4+aTxhVo= Subject key identifier: AD:FA:27:06:2A:7E:79:22:D0:E5:08:7E:E5:CA:64:81:CF:0F:72:21 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 89 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rfonBip-eSLQ5Qh-5cpkgc8PciE.roa Signing time: Tue 31 Mar 2026 08:37:39 +0000 ROA not before: Tue 31 Mar 2026 08:37:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 17698 IP address blocks: 123.176.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Mar 31 08:37:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=ADFA27062A7E7922D0E5087EE5CA6481CF0F7221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:a6:cb:2e:e4:9f:a5:8a:7f:d6:e3:de:51: d2:40:24:e7:c1:c0:dd:85:84:a9:24:5a:6d:cd:a4: cf:ef:d8:0c:b6:44:3d:a4:88:77:e0:46:74:e3:cc: e8:d7:81:2d:70:90:50:72:20:94:65:07:ec:5b:33: 15:e3:08:83:e1:26:05:ee:28:fc:41:8f:d5:2b:ff: d2:6c:34:f8:6e:81:42:c2:4e:58:c6:41:c1:2f:28: e8:82:09:8d:46:f1:a0:52:ca:5f:18:91:bf:ac:8e: 31:2e:d6:b9:81:1d:2d:05:64:8f:8d:0a:f5:7c:b9: d3:9d:34:c9:f3:d4:8d:9f:0b:c3:14:05:81:e5:7b: 5c:90:13:39:69:73:f6:04:b9:69:20:1f:89:8b:a8: ea:ac:f1:eb:c9:3a:9a:0d:58:72:41:df:75:49:8f: 1c:a6:6f:90:e3:b1:12:e3:fe:c4:40:42:03:be:9b: fc:17:c6:e2:93:35:6b:65:d5:63:76:50:ef:1e:06: 54:01:a7:b9:b8:fb:cc:36:a9:b8:18:69:2f:09:2b: 22:0a:ac:10:af:56:fe:73:e4:a4:82:33:7c:5d:c0: d3:07:0d:eb:ef:0c:4f:bb:52:71:70:4c:93:cb:87: 4b:2d:86:be:aa:a9:03:d2:64:3a:68:2f:46:64:b0: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:27:06:2A:7E:79:22:D0:E5:08:7E:E5:CA:64:81:CF:0F:72:21 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rfonBip-eSLQ5Qh-5cpkgc8PciE.roa sbgp-ipAddrBlock: critical IPv4: 123.176.48.0/21 Signature Algorithm: sha256WithRSAEncryption 46:b8:67:d4:ed:c8:bb:e3:1f:84:88:b7:aa:88:49:de:76:dc: 67:a3:c2:ca:06:fb:0c:24:4d:3c:84:eb:0a:b8:df:b5:39:56: 33:7a:6e:02:88:52:e1:a2:1a:b3:3b:44:d3:1d:58:49:03:bf: 2a:86:c7:62:74:f6:bf:54:21:1c:b4:ea:c2:b0:43:2a:ce:c1: 23:60:3a:54:66:33:6b:95:4d:4e:30:07:4a:f4:76:01:1c:5f: fe:a7:12:3e:74:e2:cc:43:af:f4:4c:ec:9e:ac:74:d8:c3:1c: dd:24:9c:dc:af:6e:4d:82:aa:5d:90:86:bd:ae:2e:98:bf:40: 94:47:b7:a1:e7:36:bd:01:df:11:82:71:03:49:03:b3:eb:0d: e8:a8:a0:af:8d:0f:df:6a:86:9a:67:17:1a:54:72:8e:61:43: fd:b0:6c:dd:15:ae:2e:7f:a0:b8:ca:b7:af:c3:60:39:34:d1: 95:19:19:d4:b8:da:50:72:24:67:db:48:76:c1:e3:ba:84:c3: e8:fc:65:32:00:1f:36:db:84:54:a1:04:c0:6e:e6:4e:06:81: 3d:31:80:e7:67:9d:c3:d0:64:c9:88:94:fd:24:83:7f:e1:e9: 01:1a:0a:e7:39:9f:5b:a2:6d:51:fe:a4:63:f3:e0:fe:22:6c: dc:c6:15:06 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNE RjlCMjRGNTNCQkNBQzM0N0JBNUI1QThDNDlCRkY0MTY2NkEyNjAeFw0yNjAzMzEw ODM3MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFERkEyNzA2MkE3RTc5 MjJEMEU1MDg3RUU1Q0E2NDgxQ0YwRjcyMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6gabLLuSfpYp/1uPeUdJAJOfBwN2FhKkkWm3NpM/v2Ay2RD2k iHfgRnTjzOjXgS1wkFByIJRlB+xbMxXjCIPhJgXuKPxBj9Ur/9JsNPhugULCTljG QcEvKOiCCY1G8aBSyl8Ykb+sjjEu1rmBHS0FZI+NCvV8udOdNMnz1I2fC8MUBYHl e1yQEzlpc/YEuWkgH4mLqOqs8evJOpoNWHJB33VJjxymb5DjsRLj/sRAQgO+m/wX xuKTNWtl1WN2UO8eBlQBp7m4+8w2qbgYaS8JKyIKrBCvVv5z5KSCM3xdwNMHDevv DE+7UnFwTJPLh0sthr6qqQPSZDpoL0ZksPIrAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUrfonBip+eSLQ5Qh+5cpkgc8PciEwHwYDVR0jBBgwFoAUM9+bJPU7vKw0e6W1 qMSb/0FmaiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwODIyL005LWJKUFU3dkt3MGU2VzFxTVNiXzBGbWFpWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL005LWJKUFU3dkt3MGU2VzFxTVNi XzBGbWFpWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDgyMi9yZm9uQmlwLWVTTFE1UWgtNWNwa2djOFBjaUUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDe7AwMA0GCSqGSIb3DQEBCwUA A4IBAQBGuGfU7ci74x+EiLeqiEnedtxno8LKBvsMJE08hOsKuN+1OVYzem4CiFLh ohqzO0TTHVhJA78qhsdidPa/VCEctOrCsEMqzsEjYDpUZjNrlU1OMAdK9HYBHF/+ pxI+dOLMQ6/0TOyerHTYwxzdJJzcr25NgqpdkIa9ri6Yv0CUR7eh5za9Ad8RgnED SQOz6w3oqKCvjQ/faoaaZxcaVHKOYUP9sGzdFa4uf6C4yrevw2A5NNGVGRnUuNpQ ciRn20h2weO6hMPo/GUyAB8224RUoQTAbuZOBoE9MYDnZ53D0GTJiJT9JIN/4ekB GgrnOZ9bom1R/qRj8+D+ImzcxhUG -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:53 2026 by rpki-client