$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ve4bZ89dOcCoRo6A-WtyOXY1aH4.roa File: Ve4bZ89dOcCoRo6A-WtyOXY1aH4.roa (raw, json) Hash identifier: cogMbYdd3CfFJWKfm+LFA7MSKRKMJebhnb/KqIDMTYA= Subject key identifier: 55:EE:1B:67:CF:5D:39:C0:A8:46:8E:80:F9:6B:72:39:76:35:68:7E Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 02AF Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ve4bZ89dOcCoRo6A-WtyOXY1aH4.roa Signing time: Tue 31 Mar 2026 07:33:56 +0000 ROA not before: Tue 31 Mar 2026 07:33:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 219.96.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=55EE1B67CF5D39C0A8468E80F96B72397635687E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:de:00:97:04:65:3b:89:1a:26:64:27:9b: fe:0f:15:6a:69:b4:cd:a0:a8:af:d9:58:37:fe:1d: 95:12:e2:44:50:b9:b8:47:0a:0f:fd:b5:be:a7:bf: 01:1c:96:d8:b0:47:ec:ef:c2:cd:7c:80:aa:20:d9: 90:fb:58:7d:f1:23:bd:21:ac:ea:d0:48:6c:53:f1: 62:c4:0a:ce:41:52:44:18:7c:5e:0c:46:9f:0e:86: d0:2f:c3:80:ef:7b:f5:21:a4:b4:53:d4:d9:f5:d5: f1:48:87:7c:5a:51:7a:4d:97:c2:fc:55:98:ff:8f: f6:bf:99:d3:18:b6:9f:88:d8:1b:4f:4b:a5:f8:e7: 08:db:26:3e:02:b0:d1:c9:1d:fb:f2:95:d0:55:24: 80:43:d9:fd:33:47:79:75:0f:55:27:93:f7:25:8a: 82:b3:31:5d:4a:4f:c2:73:eb:3a:5c:23:2e:88:64: fe:80:91:27:2d:e2:b7:99:02:df:2b:b2:f5:8b:2b: e6:06:65:1c:3f:67:31:43:f3:d1:d4:8b:87:31:1f: c5:af:34:da:59:0b:66:03:8d:a2:9a:5d:0b:14:96: 53:bb:a2:0e:93:f4:6a:bd:1f:e7:51:b4:b4:12:6a: 79:3d:f8:58:2d:cb:c4:67:2d:fb:ae:71:d2:eb:14: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EE:1B:67:CF:5D:39:C0:A8:46:8E:80:F9:6B:72:39:76:35:68:7E X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ve4bZ89dOcCoRo6A-WtyOXY1aH4.roa sbgp-ipAddrBlock: critical IPv4: 219.96.128.0/17 Signature Algorithm: sha256WithRSAEncryption a6:8b:1b:7a:99:1d:70:32:99:f0:e2:a5:b0:32:af:fc:d2:da: ef:07:1d:3e:a0:41:99:cf:7c:78:64:2f:02:af:8a:53:30:a8: 38:93:44:c8:c3:e9:6a:c5:e5:02:ce:d1:e6:c3:af:f7:94:68: a3:93:b2:ab:4b:a0:e0:49:6a:c0:52:ad:9c:c0:31:b0:1a:3a: 6a:5a:13:23:2d:f0:d3:1c:65:e1:59:4e:fb:38:9e:6a:1d:7d: f6:b2:cb:65:24:5c:c3:d4:8f:50:82:a6:0d:89:ed:12:3f:49: 88:de:d7:06:e4:9c:13:cc:97:1a:dd:4e:1c:fa:7a:db:ec:8f: 52:7d:15:06:fb:9c:18:39:c1:98:f8:c9:71:49:05:e8:8c:55: d5:d8:79:5b:52:9a:43:5e:14:6f:22:42:5b:96:51:fe:88:5d: d5:11:d6:96:bf:d3:79:bf:d0:29:3f:c5:3a:c3:98:69:ad:a9: fe:19:cf:7b:5d:ba:cb:72:ec:dd:79:97:ac:02:e3:34:f4:10: fa:e7:2f:93:cd:cc:76:e9:9e:d3:05:f4:27:b7:fb:ca:a8:8c: 2a:00:ad:ce:66:e9:a5:ad:01:49:49:81:f5:c1:16:ac:30:38: c1:92:31:18:b0:45:0e:7a:43:57:79:cf:76:33:bd:ae:67:94: 4a:c0:82:e7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU1RUUxQjY3Q0Y1RDM5 QzBBODQ2OEU4MEY5NkI3MjM5NzYzNTY4N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbmt4AlwRlO4kaJmQnm/4PFWpptM2gqK/ZWDf+HZUS4kRQubhH Cg/9tb6nvwEcltiwR+zvws18gKog2ZD7WH3xI70hrOrQSGxT8WLECs5BUkQYfF4M Rp8OhtAvw4Dve/UhpLRT1Nn11fFIh3xaUXpNl8L8VZj/j/a/mdMYtp+I2BtPS6X4 5wjbJj4CsNHJHfvyldBVJIBD2f0zR3l1D1Unk/clioKzMV1KT8Jz6zpcIy6IZP6A kSct4reZAt8rsvWLK+YGZRw/ZzFD89HUi4cxH8WvNNpZC2YDjaKaXQsUllO7og6T 9Gq9H+dRtLQSank9+Fgty8RnLfuucdLrFCoTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUVe4bZ89dOcCoRo6A+WtyOXY1aH4wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL1ZlNGJaODlkT2NDb1JvNkEtV3R5T1hZMWFINC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfbYIAwDQYJKoZIhvcNAQELBQADggEB AKaLG3qZHXAymfDipbAyr/zS2u8HHT6gQZnPfHhkLwKvilMwqDiTRMjD6WrF5QLO 0ebDr/eUaKOTsqtLoOBJasBSrZzAMbAaOmpaEyMt8NMcZeFZTvs4nmodffayy2Uk XMPUj1CCpg2J7RI/SYje1wbknBPMlxrdThz6etvsj1J9FQb7nBg5wZj4yXFJBeiM VdXYeVtSmkNeFG8iQluWUf6IXdUR1pa/03m/0Ck/xTrDmGmtqf4Zz3tdusty7N15 l6wC4zT0EPrnL5PNzHbpntMF9Ce3+8qojCoArc5m6aWtAUlJgfXBFqwwOMGSMRiw RQ56Q1d5z3Yzva5nlErAguc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:06 2026 by rpki-client