$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/2YFECeABtzUlpBECO3YPx4lsXbs.roa File: 2YFECeABtzUlpBECO3YPx4lsXbs.roa (raw, json) Hash identifier: 4yH6vAsq4QiPW2CKVSPuDZgcgP8fyU9qkJpJT0tLpGQ= Subject key identifier: D9:81:44:09:E0:01:B7:35:25:A4:11:02:3B:76:0F:C7:89:6C:5D:BB Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0285 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2YFECeABtzUlpBECO3YPx4lsXbs.roa Signing time: Tue 31 Mar 2026 07:33:36 +0000 ROA not before: Tue 31 Mar 2026 07:33:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 123.224.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D9814409E001B73525A411023B760FC7896C5DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:02:c2:91:1b:39:4a:1d:31:ad:5f:08:11: 2b:93:23:e6:3a:bd:e6:32:4f:53:c9:61:16:db:0e: 20:f5:38:fd:fe:20:ef:79:ab:f9:cd:83:5d:a4:61: 05:8f:8c:a9:62:b7:8e:9a:80:34:65:64:77:a5:ce: b9:78:65:aa:23:c7:fa:ce:9e:d9:7d:65:ab:0f:1c: 9d:28:84:dc:b2:ec:c4:5c:73:72:68:88:7f:fe:4f: 16:58:a4:b1:60:94:83:19:21:bf:5b:c0:f6:8c:cd: 5b:0f:41:c5:ff:84:c1:76:d7:31:c3:c0:54:18:1d: 46:2c:74:a8:e7:18:3f:e1:24:f4:0f:27:93:ff:6d: 8a:fd:9b:ad:85:ce:75:97:77:dd:2e:65:c2:90:42: 58:2d:a1:93:d6:28:96:da:e1:61:7f:68:22:93:36: 7c:e6:fa:32:d2:c7:b2:81:f7:f1:81:be:d6:4d:7a: 45:31:82:b4:66:ad:ff:5a:c4:10:fa:f1:6b:00:ce: ff:13:67:ae:f1:b3:59:37:f4:4b:21:3c:9f:2a:12: b9:3e:f7:80:a9:16:13:9b:1b:ed:1a:14:50:92:c5: 9c:80:d7:b4:8f:d2:44:78:98:18:b4:6a:02:b9:55: 10:7e:b7:bb:b0:ab:6a:09:31:e0:6a:4b:3a:8d:9a: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:44:09:E0:01:B7:35:25:A4:11:02:3B:76:0F:C7:89:6C:5D:BB X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2YFECeABtzUlpBECO3YPx4lsXbs.roa sbgp-ipAddrBlock: critical IPv4: 123.224.0.0/14 Signature Algorithm: sha256WithRSAEncryption 81:47:27:b5:b7:c9:78:e7:5b:79:59:f1:33:97:d4:f1:ff:18: c0:45:af:78:d9:14:41:71:12:c2:da:9d:81:23:e2:bf:11:61: ea:dc:7c:38:c0:f0:17:0e:fb:68:8f:6a:87:da:16:be:12:81: 86:79:c6:de:b1:a9:62:ea:14:12:ab:a6:d1:48:71:a9:94:28: 76:b7:16:aa:90:0c:84:4f:1e:3e:11:35:68:ce:e5:43:97:0d: ab:a3:19:c3:24:b2:4c:4f:1f:60:88:45:1c:49:fd:94:83:b8: 5b:06:cf:86:b9:47:ef:ba:c8:e6:c5:cd:8a:69:2a:82:1f:3c: 70:65:27:9f:83:24:6f:2c:d3:be:01:57:da:f5:3a:da:ef:c5: 02:3b:5a:40:6f:f3:b9:0c:f6:de:df:92:ed:ef:0a:4e:b6:89: 6e:12:ac:45:fb:8f:48:45:d2:f8:ca:e3:aa:6b:93:d1:60:c0: 80:b6:34:86:a9:e7:2d:33:8e:94:91:ce:fa:7e:6f:99:c3:f9: 14:7f:f0:60:0a:51:bf:f8:4e:2a:4b:06:19:a6:70:1e:4b:44: 88:4e:75:f5:fc:47:d4:f7:b8:60:54:17:da:44:ca:0a:a7:a8: b3:44:f3:c7:dc:cf:ad:ac:1f:25:69:5a:8f:3e:b3:09:d8:99: c8:7f:e2:0e -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5ODE0NDA5RTAwMUI3 MzUyNUE0MTEwMjNCNzYwRkM3ODk2QzVEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdLALCkRs5Sh0xrV8IESuTI+Y6veYyT1PJYRbbDiD1OP3+IO95 q/nNg12kYQWPjKlit46agDRlZHelzrl4Zaojx/rOntl9ZasPHJ0ohNyy7MRcc3Jo iH/+TxZYpLFglIMZIb9bwPaMzVsPQcX/hMF21zHDwFQYHUYsdKjnGD/hJPQPJ5P/ bYr9m62FznWXd90uZcKQQlgtoZPWKJba4WF/aCKTNnzm+jLSx7KB9/GBvtZNekUx grRmrf9axBD68WsAzv8TZ67xs1k39EshPJ8qErk+94CpFhObG+0aFFCSxZyA17SP 0kR4mBi0agK5VRB+t7uwq2oJMeBqSzqNmnZTAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQU2YFECeABtzUlpBECO3YPx4lsXbswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxLzJZRkVDZUFCdHpVbHBCRUNPM1lQeDRsc1hicy5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ74DANBgkqhkiG9w0BAQsFAAOCAQEA gUcntbfJeOdbeVnxM5fU8f8YwEWveNkUQXESwtqdgSPivxFh6tx8OMDwFw77aI9q h9oWvhKBhnnG3rGpYuoUEqum0UhxqZQodrcWqpAMhE8ePhE1aM7lQ5cNq6MZwySy TE8fYIhFHEn9lIO4WwbPhrlH77rI5sXNimkqgh88cGUnn4MkbyzTvgFX2vU62u/F AjtaQG/zuQz23t+S7e8KTraJbhKsRfuPSEXS+MrjqmuT0WDAgLY0hqnnLTOOlJHO +n5vmcP5FH/wYApRv/hOKksGGaZwHktEiE519fxH1Pe4YFQX2kTKCqeos0Tzx9zP rawfJWlajz6zCdiZyH/iDg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:53 2026 by rpki-client