$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Z3XmfZgJx2kxyyGay58JJQSZeyo.roa File: Z3XmfZgJx2kxyyGay58JJQSZeyo.roa (raw, json) Hash identifier: s8J/R1f8g6qOhA5Pjb0OZyy/fmOOVoCIhgmEpBJ7/a8= Subject key identifier: 67:75:E6:7D:98:09:C7:69:31:CB:21:9A:CB:9F:09:25:04:99:7B:2A Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 02B1 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Z3XmfZgJx2kxyyGay58JJQSZeyo.roa Signing time: Tue 31 Mar 2026 07:33:57 +0000 ROA not before: Tue 31 Mar 2026 07:33:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 220.220.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6775E67D9809C76931CB219ACB9F092504997B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:18:f5:9e:ed:5d:95:8c:1e:11:80:4f:81: 19:f7:a0:4b:08:fd:76:53:e8:d2:69:eb:be:2d:4b: ca:39:13:da:1c:3d:38:aa:bf:16:1b:19:c8:e1:af: 79:2b:a2:aa:75:df:c5:90:dc:da:6c:09:97:1a:e5: 39:89:29:37:b2:1f:ad:70:26:67:8b:4f:20:07:2d: cc:4a:ab:eb:f3:1f:3b:b5:99:cb:16:97:21:58:73: 26:29:a3:06:b5:1e:1d:8c:f1:b5:27:59:e4:7b:ca: d2:3b:76:6f:8d:10:27:c9:30:37:83:9d:56:3c:7b: 8b:24:ec:f4:05:bb:81:14:6f:97:f2:b3:a1:3f:5d: 96:0c:95:07:ff:56:5d:0b:9a:63:64:e8:2e:c7:34: a6:e8:58:6f:0e:fd:31:dd:24:47:7d:9e:de:1b:3b: 5d:45:fa:1f:6b:06:45:cf:e3:2e:35:47:a1:bf:36: 7b:2b:fc:2e:d7:73:4b:d4:f7:f5:16:ad:c0:93:5b: 31:df:f9:c9:73:46:66:a1:3d:ed:ab:04:85:27:00: 61:20:bb:a1:69:e5:57:7a:3b:71:cd:8f:37:38:fd: dc:9a:2d:25:2e:ae:30:e4:9f:52:5f:fa:1d:e0:90: d6:5f:44:71:a1:4a:2c:6c:55:01:40:d3:7c:e2:13: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:75:E6:7D:98:09:C7:69:31:CB:21:9A:CB:9F:09:25:04:99:7B:2A X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Z3XmfZgJx2kxyyGay58JJQSZeyo.roa sbgp-ipAddrBlock: critical IPv4: 220.220.0.0/15 Signature Algorithm: sha256WithRSAEncryption d3:b1:b6:44:fa:e2:fc:f8:a2:32:0b:09:e4:13:8d:70:54:ed: d4:13:f5:a8:81:f2:3b:18:76:95:06:8e:13:5c:45:db:e1:48: 16:3e:44:c3:87:4a:05:44:6f:2c:3a:b2:e3:7f:ae:ad:bc:97: d7:1c:0a:51:3f:ea:ea:c9:75:4c:07:57:ae:54:54:9b:35:59: d5:25:da:01:bf:44:49:1f:8d:f2:e5:77:07:3d:48:12:5f:d0: c9:cf:d2:08:ae:9f:c0:ee:b5:a2:c4:24:b2:83:78:35:42:45: c5:d6:86:09:50:82:26:34:b3:6d:82:b7:9f:73:aa:22:4e:0b: 51:c2:2f:ed:30:1d:0e:a8:81:d4:1f:41:51:9a:27:96:f7:86: 90:df:8e:4e:90:47:a0:2a:d1:8f:08:0e:98:2e:bf:e8:cd:0a: 66:f1:cd:56:95:de:47:22:2f:e1:90:f6:25:11:91:86:75:27: 78:2f:4c:33:2b:c9:76:91:11:c6:59:c6:f3:7f:3f:73:53:85: 2f:b1:89:d7:1c:5a:65:e7:8e:23:54:9c:e4:1b:23:b0:25:97: 84:23:5c:1b:7a:0d:54:44:e7:9b:1e:5f:99:d7:31:d0:d8:1c: af:62:c5:13:93:e2:d6:c7:4c:d2:41:b4:e9:44:0d:60:81:0a: c2:58:22:87 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICArEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY3NzVFNjdEOTgwOUM3 NjkzMUNCMjE5QUNCOUYwOTI1MDQ5OTdCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNuBj1nu1dlYweEYBPgRn3oEsI/XZT6NJp674tS8o5E9ocPTiq vxYbGcjhr3kroqp138WQ3NpsCZca5TmJKTeyH61wJmeLTyAHLcxKq+vzHzu1mcsW lyFYcyYpowa1Hh2M8bUnWeR7ytI7dm+NECfJMDeDnVY8e4sk7PQFu4EUb5fys6E/ XZYMlQf/Vl0LmmNk6C7HNKboWG8O/THdJEd9nt4bO11F+h9rBkXP4y41R6G/Nnsr /C7Xc0vU9/UWrcCTWzHf+clzRmahPe2rBIUnAGEgu6Fp5Vd6O3HNjzc4/dyaLSUu rjDkn1Jf+h3gkNZfRHGhSixsVQFA03ziE4BtAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUZ3XmfZgJx2kxyyGay58JJQSZeyowHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL1ozWG1mWmdKeDJreHl5R2F5NThKSlFTWmV5by5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHc3DANBgkqhkiG9w0BAQsFAAOCAQEA 07G2RPri/PiiMgsJ5BONcFTt1BP1qIHyOxh2lQaOE1xF2+FIFj5Ew4dKBURvLDqy 43+urbyX1xwKUT/q6sl1TAdXrlRUmzVZ1SXaAb9ESR+N8uV3Bz1IEl/Qyc/SCK6f wO61osQksoN4NUJFxdaGCVCCJjSzbYK3n3OqIk4LUcIv7TAdDqiB1B9BUZonlveG kN+OTpBHoCrRjwgOmC6/6M0KZvHNVpXeRyIv4ZD2JRGRhnUneC9MMyvJdpERxlnG 838/c1OFL7GJ1xxaZeeOI1Sc5BsjsCWXhCNcG3oNVETnmx5fmdcx0Ngcr2LFE5Pi 1sdM0kG06UQNYIEKwlgihw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:19 2026 by rpki-client