$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/yIjC91s8RiKMaNygRm84Q4jp61k.roa File: yIjC91s8RiKMaNygRm84Q4jp61k.roa (raw, json) Hash identifier: xv9FdR5SSxRAtSDt/yZsxu3PUeTEKUMaU76Li0pvlNc= Subject key identifier: C8:88:C2:F7:5B:3C:46:22:8C:68:DC:A0:46:6F:38:43:88:E9:EB:59 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 028E Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yIjC91s8RiKMaNygRm84Q4jp61k.roa Signing time: Tue 31 Mar 2026 07:33:39 +0000 ROA not before: Tue 31 Mar 2026 07:33:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 153.240.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C888C2F75B3C46228C68DCA0466F384388E9EB59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:d4:88:8f:fd:61:eb:1c:f1:42:5b:b1:98: fe:86:bd:c4:9f:56:45:9c:4a:b8:c7:8c:b8:12:92: 7f:6d:1d:77:97:24:8e:31:12:2d:62:a3:67:de:63: d1:b6:b3:b4:52:f8:02:3f:bf:7b:84:c7:ef:e7:7e: 63:42:45:8a:ec:a9:51:4f:dc:b0:3a:eb:9d:bf:52: f6:85:3e:50:de:67:9a:d0:08:ce:83:c1:ab:42:29: 1b:fb:f1:bb:e8:41:25:e6:23:38:10:f8:b3:be:39: cd:ae:df:3a:c1:51:7a:4b:a9:a2:d0:9f:b3:8d:30: d5:fe:f9:d1:f0:76:9f:75:00:b2:68:98:a9:68:79: 50:c2:26:f4:2f:1e:66:98:f8:ad:41:74:e7:27:fb: 35:9b:fc:eb:f8:42:b2:2b:fd:ce:48:f3:ad:2f:30: 14:b9:8e:22:26:99:7a:96:8c:e8:00:21:9a:33:d6: 58:d7:81:bb:10:b8:17:bb:6b:df:37:ea:b4:3d:c7: 13:0b:bf:49:ad:75:c2:39:db:16:a8:97:23:de:91: 90:42:b6:de:8e:71:c9:c2:9b:5f:93:cb:7d:1b:b6: 15:76:d2:b4:14:9a:cf:4d:52:17:87:12:70:01:92: f2:cd:fd:56:6b:56:5a:20:db:53:1b:e7:22:c4:95: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:88:C2:F7:5B:3C:46:22:8C:68:DC:A0:46:6F:38:43:88:E9:EB:59 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yIjC91s8RiKMaNygRm84Q4jp61k.roa sbgp-ipAddrBlock: critical IPv4: 153.240.0.0/13 Signature Algorithm: sha256WithRSAEncryption 99:ee:59:34:84:0b:82:85:96:e5:6e:38:14:b5:0b:14:13:cb: 85:99:06:42:54:3b:9f:fb:85:f4:9c:1b:f5:15:b7:2e:8f:4a: 4c:6a:83:e5:82:51:0e:a2:6f:e8:0b:6d:f8:35:a6:c8:81:b0: 42:af:a1:a9:79:61:a3:e2:45:a4:32:22:fb:cb:77:ef:dd:17: 63:5d:a3:2c:8d:25:21:50:4d:6c:1f:9e:41:3b:8b:22:74:4c: 61:9e:67:ad:b4:0e:ba:0d:ed:c2:6a:0d:65:3f:73:25:b6:d1: 23:20:a0:33:7b:8d:5a:55:2f:4d:64:6b:2d:76:c4:c1:e5:67: 86:51:29:c2:aa:bc:fe:8b:a2:36:11:cf:8e:03:87:6d:7d:53: b9:ec:28:f9:ff:55:17:23:61:ae:f2:ef:05:1b:77:19:bc:b4: bd:4d:f0:5e:ca:6b:e1:89:1a:99:9e:dd:b1:bd:92:31:9d:1e: 3c:c1:4c:48:d7:26:49:29:cf:e3:c7:cc:fb:30:41:72:a7:e1: 78:cd:2d:9a:e9:5f:41:2b:eb:a6:a5:20:87:5a:87:68:2e:77: 5d:77:ee:13:fc:03:17:d1:8a:00:6a:f7:51:e3:5a:62:2d:69: a8:59:1e:05:b4:d1:dc:81:24:59:25:cd:5c:90:f8:45:04:84: 7a:c4:f6:b9 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzMzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4ODhDMkY3NUIzQzQ2 MjI4QzY4RENBMDQ2NkYzODQzODhFOUVCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxItSIj/1h6xzxQluxmP6GvcSfVkWcSrjHjLgSkn9tHXeXJI4x Ei1io2feY9G2s7RS+AI/v3uEx+/nfmNCRYrsqVFP3LA6652/UvaFPlDeZ5rQCM6D watCKRv78bvoQSXmIzgQ+LO+Oc2u3zrBUXpLqaLQn7ONMNX++dHwdp91ALJomKlo eVDCJvQvHmaY+K1BdOcn+zWb/Ov4QrIr/c5I860vMBS5jiImmXqWjOgAIZoz1ljX gbsQuBe7a9836rQ9xxMLv0mtdcI52xaolyPekZBCtt6OccnCm1+Ty30bthV20rQU ms9NUheHEnABkvLN/VZrVlog21Mb5yLElQxrAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUyIjC91s8RiKMaNygRm84Q4jp61kwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL3lJakM5MXM4UmlLTWFOeWdSbTg0UTRqcDYxay5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwOZ8DANBgkqhkiG9w0BAQsFAAOCAQEA me5ZNIQLgoWW5W44FLULFBPLhZkGQlQ7n/uF9Jwb9RW3Lo9KTGqD5YJRDqJv6Att +DWmyIGwQq+hqXlho+JFpDIi+8t3790XY12jLI0lIVBNbB+eQTuLInRMYZ5nrbQO ug3twmoNZT9zJbbRIyCgM3uNWlUvTWRrLXbEweVnhlEpwqq8/ouiNhHPjgOHbX1T uewo+f9VFyNhrvLvBRt3Gby0vU3wXspr4YkamZ7dsb2SMZ0ePMFMSNcmSSnP48fM +zBBcqfheM0tmulfQSvrpqUgh1qHaC53XXfuE/wDF9GKAGr3UeNaYi1pqFkeBbTR 3IEkWSXNXJD4RQSEesT2uQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:01 2026 by rpki-client