$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Bl7y9y4yGSvQr5WP2ezHJZk9syw.roa File: Bl7y9y4yGSvQr5WP2ezHJZk9syw.roa (raw, json) Hash identifier: imSFu2OtZxT4SdLS9W+N6EFwIDcpGtABJ+cBhhQ9AMo= Subject key identifier: 06:5E:F2:F7:2E:32:19:2B:D0:AF:95:8F:D9:EC:C7:25:99:3D:B3:2C Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0281 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Bl7y9y4yGSvQr5WP2ezHJZk9syw.roa Signing time: Tue 31 Mar 2026 07:33:35 +0000 ROA not before: Tue 31 Mar 2026 07:33:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 121.112.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=065EF2F72E32192BD0AF958FD9ECC725993DB32C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d3:d9:b5:fd:70:3a:d1:cd:2a:49:d6:12:4c: a4:24:dc:8e:ea:b8:7d:d7:ad:63:31:86:68:78:5a: b3:14:bd:3c:a6:23:a5:fa:cf:42:25:a5:1e:8b:b5: 52:86:6c:ee:1a:ea:0b:74:42:80:0b:f9:1c:8b:e5: 33:6d:bc:d1:8c:3c:37:aa:73:7b:f3:fc:39:9f:a0: d3:eb:e2:fc:2f:6b:51:a2:61:21:6d:4c:a4:df:02: 82:e8:8d:51:d2:a4:c7:cf:33:1f:84:ba:eb:ab:97: ec:7e:dd:ad:83:43:7a:ab:83:c1:89:2b:e9:01:3a: 68:4c:4c:f8:a7:a6:64:55:4c:7e:77:9d:ee:66:1c: 95:2e:01:67:9f:03:1d:17:d6:1d:6c:8a:57:ff:1b: 99:02:9c:c8:a5:5d:7c:25:46:e1:fd:01:d1:5f:a4: 75:09:16:b9:d5:af:d5:28:57:ce:9f:72:90:ba:4f: fa:57:29:cc:fa:1f:d6:c0:39:dc:b4:9b:27:6a:3b: fd:6b:ca:0d:a2:31:6b:d0:f8:6d:e6:39:4e:67:4d: 30:4f:79:e5:b5:34:ba:d3:ea:68:58:96:f8:b9:9b: 64:f3:f1:56:94:88:02:24:bc:f5:5a:e6:77:15:f5: 88:e8:74:bc:2f:f8:1d:a3:40:23:4d:c7:b6:fe:8c: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:F2:F7:2E:32:19:2B:D0:AF:95:8F:D9:EC:C7:25:99:3D:B3:2C X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Bl7y9y4yGSvQr5WP2ezHJZk9syw.roa sbgp-ipAddrBlock: critical IPv4: 121.112.0.0/13 Signature Algorithm: sha256WithRSAEncryption 91:f2:b5:ae:1a:3e:45:50:c4:fc:14:b6:b2:ae:eb:63:33:6e: 71:79:bb:63:03:fd:6f:c9:30:9e:9f:a3:07:ff:1f:b4:35:f0: b2:06:0e:02:98:0a:e8:f3:a1:80:9b:d7:6e:66:6b:a1:44:4d: 2b:72:fc:28:26:bf:ac:e9:4a:6c:6e:39:3c:35:45:b2:a7:3d: 76:a1:30:19:2c:b3:50:64:2b:20:89:be:d6:a5:60:59:26:b9: 33:59:46:5c:8c:dd:23:e6:a0:f8:2f:ba:a4:c0:6f:b7:b2:9e: 25:b1:9f:ea:41:da:1a:98:be:23:93:72:38:b7:84:7e:f3:da: b5:df:96:95:20:a8:3b:cf:a3:7b:7f:42:99:23:d8:1d:0e:de: f2:8c:9e:2d:f6:f2:15:72:b4:8b:0c:48:21:05:24:df:39:4d: 39:b8:a0:fb:5d:5e:da:79:49:f8:3e:b7:9d:cd:ed:95:11:ba: 81:c4:f6:69:21:9d:df:93:b4:bc:47:f9:1e:00:a1:a5:40:c5: 5c:61:5d:c6:24:b3:09:1b:19:e0:38:e1:f6:c0:5a:bd:bf:ca: 23:a7:76:0e:9e:36:6d:cd:ff:09:86:7d:e2:1f:ed:fa:35:33: 04:2c:e0:f2:ea:52:f6:2d:17:64:8c:ba:8d:cd:26:53:a5:95: 35:aa:9f:29 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2NUVGMkY3MkUzMjE5 MkJEMEFGOTU4RkQ5RUNDNzI1OTkzREIzMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe09m1/XA60c0qSdYSTKQk3I7quH3XrWMxhmh4WrMUvTymI6X6 z0IlpR6LtVKGbO4a6gt0QoAL+RyL5TNtvNGMPDeqc3vz/DmfoNPr4vwva1GiYSFt TKTfAoLojVHSpMfPMx+Euuurl+x+3a2DQ3qrg8GJK+kBOmhMTPinpmRVTH53ne5m HJUuAWefAx0X1h1silf/G5kCnMilXXwlRuH9AdFfpHUJFrnVr9UoV86fcpC6T/pX Kcz6H9bAOdy0mydqO/1ryg2iMWvQ+G3mOU5nTTBPeeW1NLrT6mhYlvi5m2Tz8VaU iAIkvPVa5ncV9YjodLwv+B2jQCNNx7b+jHHJAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUBl7y9y4yGSvQr5WP2ezHJZk9sywwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL0JsN3k5eTR5R1N2UXI1V1AyZXpISlprOXN5dy5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwN5cDANBgkqhkiG9w0BAQsFAAOCAQEA kfK1rho+RVDE/BS2sq7rYzNucXm7YwP9b8kwnp+jB/8ftDXwsgYOApgK6POhgJvX bmZroURNK3L8KCa/rOlKbG45PDVFsqc9dqEwGSyzUGQrIIm+1qVgWSa5M1lGXIzd I+ag+C+6pMBvt7KeJbGf6kHaGpi+I5NyOLeEfvPatd+WlSCoO8+je39CmSPYHQ7e 8oyeLfbyFXK0iwxIIQUk3zlNObig+11e2nlJ+D63nc3tlRG6gcT2aSGd35O0vEf5 HgChpUDFXGFdxiSzCRsZ4Djh9sBavb/KI6d2Dp42bc3/CYZ94h/t+jUzBCzg8upS 9i0XZIy6jc0mU6WVNaqfKQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:07 2026 by rpki-client