$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/p-tNes8_YTp5fA09vNUHMF08Rqg.roa File: p-tNes8_YTp5fA09vNUHMF08Rqg.roa (raw, json) Hash identifier: T65zo6CiTYOyu7P267TjYiXzLFNwR+IsmK+Wdwgn1Y8= Subject key identifier: A7:EB:4D:7A:CF:3F:61:3A:79:7C:0D:3D:BC:D5:07:30:5D:3C:46:A8 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 02AD Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/p-tNes8_YTp5fA09vNUHMF08Rqg.roa Signing time: Tue 31 Mar 2026 07:33:55 +0000 ROA not before: Tue 31 Mar 2026 07:33:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 219.114.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A7EB4D7ACF3F613A797C0D3DBCD507305D3C46A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:be:53:19:09:1f:0c:e6:62:9b:14:b0:6a: fb:4f:93:d4:43:f4:bd:5d:c4:50:51:b7:4e:96:a7: e5:2c:2b:88:6f:b8:56:27:13:ab:e2:fc:61:40:d1: 79:97:54:55:f6:c1:89:4f:df:1c:6c:d8:ca:21:6a: 7d:ab:d2:3c:67:7d:2c:a5:e4:d1:ee:96:e7:13:9a: 5b:a3:5b:b1:84:27:89:75:2f:c9:71:78:a4:82:93: 76:f0:55:82:69:83:49:8b:45:dd:7d:1a:e4:a6:3d: f7:2d:30:02:35:2b:2e:e7:03:28:91:a5:30:ff:04: 81:d9:2b:48:a8:a0:9b:b0:dc:1f:50:0e:de:6b:b6: 9d:8d:8c:da:e5:28:36:fc:79:d2:c3:71:a7:60:c9: af:a6:eb:fc:57:8b:fb:f7:1a:46:d5:50:a4:58:58: 06:71:61:24:3a:14:cd:0d:d8:07:c7:d0:18:3d:d2: a8:97:a4:c1:da:7b:98:24:0b:97:a7:f1:e2:49:1f: 13:b4:93:f5:0a:bc:71:cb:8f:1c:3c:70:7b:0f:60: 0f:1c:19:59:fa:9c:8a:3b:73:f4:fa:dc:09:c4:c4: b2:db:2a:10:0b:fa:20:a9:f6:b9:8c:51:13:c0:79: d6:8d:01:45:c2:91:f0:30:36:de:2f:5f:68:cc:76: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EB:4D:7A:CF:3F:61:3A:79:7C:0D:3D:BC:D5:07:30:5D:3C:46:A8 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/p-tNes8_YTp5fA09vNUHMF08Rqg.roa sbgp-ipAddrBlock: critical IPv4: 219.114.0.0/17 Signature Algorithm: sha256WithRSAEncryption 79:ec:6b:42:94:73:67:37:9c:fa:4e:ba:87:cf:c9:2a:4c:8b: 16:de:b1:76:ae:69:2c:8d:5f:d1:77:ae:e5:bc:a9:d9:f6:9a: 0a:a5:85:50:fd:7c:77:04:e3:cd:71:fe:56:dc:65:ee:b4:ba: f4:04:9e:aa:ac:82:23:a7:44:f4:4e:5d:76:4b:1f:ba:57:30: ab:fa:93:bb:99:db:dd:2f:45:ac:33:c9:0c:65:71:86:b7:f6: c6:6e:d9:3f:d3:5c:89:8d:84:76:f8:12:cd:13:03:df:13:2c: 3a:ff:8c:95:c2:da:c0:e4:15:ef:82:25:bb:9f:87:67:20:72: ce:c1:8c:d9:74:95:82:0d:dd:97:13:90:de:0e:9a:54:66:15: f0:03:6b:6a:06:c9:15:ea:c6:c4:a5:25:a6:e7:a0:ed:0f:58: 77:c6:95:d6:d0:c2:2e:62:f1:c1:34:a2:fe:4d:bf:ef:00:ea: e6:fb:1c:1c:71:72:11:81:a4:a0:20:09:bd:8d:c6:b8:27:78: 30:47:40:3b:33:63:06:c6:4d:4e:67:04:af:f0:82:83:14:72: 73:52:f1:7a:c6:96:ee:39:7d:9e:0d:7e:12:15:ea:27:58:a8: 17:56:d1:9d:54:2b:28:78:fa:3a:43:c3:d4:55:07:3a:21:9a: 77:3f:e6:09 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3RUI0RDdBQ0YzRjYx M0E3OTdDMEQzREJDRDUwNzMwNUQzQzQ2QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCRUb5TGQkfDOZimxSwavtPk9RD9L1dxFBRt06Wp+UsK4hvuFYn E6vi/GFA0XmXVFX2wYlP3xxs2Mohan2r0jxnfSyl5NHulucTmlujW7GEJ4l1L8lx eKSCk3bwVYJpg0mLRd19GuSmPfctMAI1Ky7nAyiRpTD/BIHZK0iooJuw3B9QDt5r tp2NjNrlKDb8edLDcadgya+m6/xXi/v3GkbVUKRYWAZxYSQ6FM0N2AfH0Bg90qiX pMHae5gkC5en8eJJHxO0k/UKvHHLjxw8cHsPYA8cGVn6nIo7c/T63AnExLLbKhAL +iCp9rmMURPAedaNAUXCkfAwNt4vX2jMdhhNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUp+tNes8/YTp5fA09vNUHMF08RqgwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL3AtdE5lczhfWVRwNWZBMDl2TlVITUYwOFJxZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfbcgAwDQYJKoZIhvcNAQELBQADggEB AHnsa0KUc2c3nPpOuofPySpMixbesXauaSyNX9F3ruW8qdn2mgqlhVD9fHcE481x /lbcZe60uvQEnqqsgiOnRPROXXZLH7pXMKv6k7uZ290vRawzyQxlcYa39sZu2T/T XImNhHb4Es0TA98TLDr/jJXC2sDkFe+CJbufh2cgcs7BjNl0lYIN3ZcTkN4OmlRm FfADa2oGyRXqxsSlJabnoO0PWHfGldbQwi5i8cE0ov5Nv+8A6ub7HBxxchGBpKAg Cb2NxrgneDBHQDszYwbGTU5nBK/wgoMUcnNS8XrGlu45fZ4NfhIV6idYqBdW0Z1U Kyh4+jpDw9RVBzohmnc/5gk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:59 2026 by rpki-client