$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/RZxM-zFZqslfRaUzAEDoM7FgqbU.roa File: RZxM-zFZqslfRaUzAEDoM7FgqbU.roa (raw, json) Hash identifier: HOeCo1P42VuqmSWjZczbEk8RGEfx5OsoSfS33OPU38o= Subject key identifier: 45:9C:4C:FB:31:59:AA:C9:5F:45:A5:33:00:40:E8:33:B1:60:A9:B5 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 5D Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/RZxM-zFZqslfRaUzAEDoM7FgqbU.roa Signing time: Tue 31 Mar 2026 08:31:07 +0000 ROA not before: Tue 31 Mar 2026 08:31:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131923 IP address blocks: 133.88.88.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Mar 31 08:31:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=459C4CFB3159AAC95F45A5330040E833B160A9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:f5:5c:fd:dc:c4:72:9e:34:a8:b5:1a:f3: ce:07:a1:ef:bb:3d:3f:db:6c:87:1f:d4:17:68:32: a5:8d:47:50:7b:0c:29:c2:68:ff:22:09:0c:6f:ef: e2:e5:b8:39:b4:8b:c0:92:19:a7:51:71:63:bd:8d: 6d:bf:79:bf:7f:84:fe:7f:83:cc:74:b7:fb:16:3a: 59:43:5c:59:37:dc:b9:52:82:99:a9:ec:3a:1e:46: b1:f4:b0:38:4a:27:fd:7f:bb:6b:5c:74:d5:37:b1: 18:99:b0:aa:cc:b4:a1:60:ea:91:72:db:28:94:d3: f8:09:a6:dd:c8:11:35:c9:96:20:b4:7b:2c:38:cd: 53:29:2b:29:fb:1e:e5:21:3a:f1:30:ef:63:5d:95: 9c:62:17:ef:1c:2f:fd:b9:e5:28:ed:c9:03:f4:0f: 4c:1d:5a:5b:28:6e:d8:23:76:49:78:ab:d3:c3:95: 2d:7a:e6:77:db:b0:c8:bf:17:18:19:3c:36:45:8c: fc:bb:fb:42:ee:c3:78:13:bd:aa:c3:ed:51:f4:6b: d5:69:23:f9:88:21:33:79:52:5f:a9:ba:80:a1:be: 48:ef:23:ab:be:8b:aa:76:7a:da:ab:87:3e:2d:61: de:bf:b3:e9:88:f6:b5:db:74:d2:36:1e:98:cb:76: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9C:4C:FB:31:59:AA:C9:5F:45:A5:33:00:40:E8:33:B1:60:A9:B5 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/RZxM-zFZqslfRaUzAEDoM7FgqbU.roa sbgp-ipAddrBlock: critical IPv4: 133.88.88.0/22 Signature Algorithm: sha256WithRSAEncryption a8:2c:bf:af:c1:9a:c6:a4:63:0c:0a:80:47:a5:f0:94:f5:23: b1:15:b6:ba:95:ce:ad:95:42:92:7b:b4:92:b2:2b:ad:f0:c7: 38:d6:5d:71:d1:c7:20:8b:ce:9f:a6:6b:7d:dc:db:72:02:ff: 1b:ee:bc:94:6e:60:f7:20:54:11:b4:d1:7b:b2:12:4f:f6:a5: fd:64:04:9a:b0:02:f1:e7:4c:85:4b:ba:89:73:7f:44:33:d1: e1:bc:64:82:86:6b:10:d1:5c:c1:3b:e6:2c:40:04:40:0f:40: dc:43:e4:25:b6:24:56:14:2d:69:59:ec:eb:ee:11:1e:39:fa: b8:09:59:5e:21:63:de:c9:78:ad:b5:4c:37:b4:fb:31:60:32: ec:1d:56:b7:04:44:a8:f0:04:2c:e4:dd:88:a2:0e:2e:fe:c5: 25:aa:6a:0e:9d:ef:21:b3:b0:31:36:8c:18:3d:45:19:7f:3b: 99:46:24:62:50:02:fd:0e:c1:a7:e5:fb:4f:84:a3:f6:ea:75: 62:3e:65:b6:fc:8e:ea:d5:4d:83:04:73:2f:c1:bb:7a:3f:94: a3:13:8a:1b:1f:7e:fc:c6:a9:b8:47:de:73:8b:2b:36:41:a5: 9c:a9:1d:a2:68:7b:ac:b2:9a:a4:98:27:03:39:47:d4:da:e3: a4:38:fd:2f -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI2MDMzMTA4 MzEwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDU5QzRDRkIzMTU5QUFD OTVGNDVBNTMzMDA0MEU4MzNCMTYwQTlCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMm+9Vz93MRynjSotRrzzgeh77s9P9tshx/UF2gypY1HUHsMKcJo /yIJDG/v4uW4ObSLwJIZp1FxY72Nbb95v3+E/n+DzHS3+xY6WUNcWTfcuVKCmans Oh5GsfSwOEon/X+7a1x01TexGJmwqsy0oWDqkXLbKJTT+Amm3cgRNcmWILR7LDjN UykrKfse5SE68TDvY12VnGIX7xwv/bnlKO3JA/QPTB1aWyhu2CN2SXir08OVLXrm d9uwyL8XGBk8NkWM/Lv7Qu7DeBO9qsPtUfRr1Wkj+YghM3lSX6m6gKG+SO8jq76L qnZ62quHPi1h3r+z6Yj2tdt00jYemMt2i0ECAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRFnEz7MVmqyV9FpTMAQOgzsWCptTAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDM0L1JaeE0tekZacXNsZlJhVXpBRURvTTdGZ3FiVS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFWFgwDQYJKoZIhvcNAQELBQAD ggEBAKgsv6/BmsakYwwKgEel8JT1I7EVtrqVzq2VQpJ7tJKyK63wxzjWXXHRxyCL zp+ma33c23IC/xvuvJRuYPcgVBG00XuyEk/2pf1kBJqwAvHnTIVLuolzf0Qz0eG8 ZIKGaxDRXME75ixABEAPQNxD5CW2JFYULWlZ7OvuER45+rgJWV4hY97JeK21TDe0 +zFgMuwdVrcERKjwBCzk3YiiDi7+xSWqag6d7yGzsDE2jBg9RRl/O5lGJGJQAv0O wafl+0+Eo/bqdWI+Zbb8jurVTYMEcy/Bu3o/lKMTihsffvzGqbhH3nOLKzZBpZyp HaJoe6yymqSYJwM5R9Ta46Q4/S8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:27 2026 by rpki-client