$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/KTFSYkJrO7HfySAO-nIOCm_bNvE.roa File: KTFSYkJrO7HfySAO-nIOCm_bNvE.roa (raw, json) Hash identifier: iZjQHVCK7+3afLL/6IXcNHtd73PG5oQfB7Wqg2b21gk= Subject key identifier: 29:31:52:62:42:6B:3B:B1:DF:C9:20:0E:FA:72:0E:0A:6F:DB:36:F1 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 02A4 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/KTFSYkJrO7HfySAO-nIOCm_bNvE.roa Signing time: Tue 31 Mar 2026 07:33:50 +0000 ROA not before: Tue 31 Mar 2026 07:33:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 211.122.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=29315262426B3BB1DFC9200EFA720E0A6FDB36F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:fe:37:36:88:c6:c0:06:76:19:74:7e:dc: 93:33:ff:3b:16:b0:df:55:c4:a6:2c:b0:d1:8b:bc: 1c:45:d8:3b:2b:a7:29:b5:27:9d:c5:25:0a:8b:32: 2c:d9:c5:b3:77:b6:f1:a2:fe:bc:f3:0b:7a:51:6f: 9f:03:5c:f8:e7:89:68:cf:45:cd:88:7e:3c:de:55: 84:c6:19:11:91:37:8a:73:1e:8b:f3:70:ec:b7:25: 97:76:f5:d0:69:d9:2c:44:4d:8a:47:1e:35:b6:5b: fe:47:4a:e3:fb:bf:48:59:50:f7:06:19:96:83:8f: b7:eb:a2:0e:7b:ef:c6:0b:34:e0:92:16:e2:3a:58: 5e:42:98:1a:32:09:9c:d0:0c:2a:86:38:9b:63:66: d8:ea:b4:ca:19:47:dc:d0:14:cf:c6:83:16:f7:b9: ed:34:69:9d:a0:31:29:92:5b:ef:04:38:df:3a:f4: 64:35:8a:5e:5f:69:38:11:d9:5a:e8:aa:f9:74:5e: e8:fd:c4:46:0a:bb:59:06:8c:1f:7a:42:e0:1b:b7: c1:4d:75:5a:cf:e2:1e:cb:2c:09:43:2d:58:8f:cd: 1e:78:8c:38:ad:b0:56:d3:42:27:cf:c5:81:0d:a2: 2d:4a:5c:29:d1:b3:7b:41:f1:66:71:26:2c:db:ce: ad:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:31:52:62:42:6B:3B:B1:DF:C9:20:0E:FA:72:0E:0A:6F:DB:36:F1 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/KTFSYkJrO7HfySAO-nIOCm_bNvE.roa sbgp-ipAddrBlock: critical IPv4: 211.122.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6d:c5:d3:19:09:34:b0:ad:74:7b:37:26:20:1a:4a:82:cf:30: 6a:dd:c0:3d:7d:64:d1:a5:ad:65:8f:8a:6f:d7:1f:76:12:1b: f4:f1:88:5d:3d:16:cf:5e:cd:06:dc:c9:dc:28:17:ed:d1:6f: 72:cd:6b:6a:d7:ac:50:9c:23:83:d0:cf:5b:e3:4d:2c:69:0c: 4d:33:20:2b:01:b9:da:0c:55:78:79:05:41:72:2c:74:46:f4: dc:77:a0:04:8d:b3:0e:13:36:fe:72:a9:56:55:7c:39:e0:3a: 28:ab:ac:6e:48:e2:23:f9:72:a9:02:69:00:4c:22:dd:30:63: 68:cd:6f:2e:f4:f3:6e:e6:3d:04:6c:36:81:47:d3:46:9c:6d: e0:37:dc:dc:fc:17:1f:99:0b:22:f4:ad:5e:bf:75:44:bd:2d: e5:1b:8a:9f:eb:22:12:f8:b1:cf:4e:3a:fe:57:c5:17:fd:c0: f4:bb:01:76:f6:82:b8:e3:7e:76:19:62:8f:32:0f:d0:e6:c0: 59:60:4b:7f:75:0e:12:44:65:b9:e8:89:bb:70:6a:41:85:16: 52:3c:77:cc:82:e5:01:39:0e:21:c5:f1:a5:6d:00:79:1c:fe: 39:20:14:a4:90:74:04:02:b0:b2:92:f5:26:da:41:aa:7e:57: b6:d5:11:8f -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI5MzE1MjYyNDI2QjNC QjFERkM5MjAwRUZBNzIwRTBBNkZEQjM2RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw7v43NojGwAZ2GXR+3JMz/zsWsN9VxKYssNGLvBxF2Dsrpym1 J53FJQqLMizZxbN3tvGi/rzzC3pRb58DXPjniWjPRc2IfjzeVYTGGRGRN4pzHovz cOy3JZd29dBp2SxETYpHHjW2W/5HSuP7v0hZUPcGGZaDj7frog5778YLNOCSFuI6 WF5CmBoyCZzQDCqGOJtjZtjqtMoZR9zQFM/Ggxb3ue00aZ2gMSmSW+8EON869GQ1 il5faTgR2Vroqvl0Xuj9xEYKu1kGjB96QuAbt8FNdVrP4h7LLAlDLViPzR54jDit sFbTQifPxYENoi1KXCnRs3tB8WZxJizbzq21AgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUKTFSYkJrO7HfySAO+nIOCm/bNvEwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL0tURlNZa0pyTzdIZnlTQU8tbklPQ21fYk52RS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHTejANBgkqhkiG9w0BAQsFAAOCAQEA bcXTGQk0sK10ezcmIBpKgs8wat3APX1k0aWtZY+Kb9cfdhIb9PGIXT0Wz17NBtzJ 3CgX7dFvcs1ratesUJwjg9DPW+NNLGkMTTMgKwG52gxVeHkFQXIsdEb03HegBI2z DhM2/nKpVlV8OeA6KKusbkjiI/lyqQJpAEwi3TBjaM1vLvTzbuY9BGw2gUfTRpxt 4Dfc3PwXH5kLIvStXr91RL0t5RuKn+siEvixz046/lfFF/3A9LsBdvaCuON+dhli jzIP0ObAWWBLf3UOEkRlueiJu3BqQYUWUjx3zILlATkOIcXxpW0AeRz+OSAUpJB0 BAKwspL1JtpBqn5XttURjw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:41 2026 by rpki-client