$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/vts7NLqQErgnEEhO-SNVPD8YBQ4.roa File: vts7NLqQErgnEEhO-SNVPD8YBQ4.roa (raw, json) Hash identifier: 2p9hMI95NbLrILvZsoqdvyWXN5lpQnpL3P6NZ3gKZ3Q= Subject key identifier: BE:DB:3B:34:BA:90:12:B8:27:10:48:4E:F9:23:55:3C:3F:18:05:0E Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 5B Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/vts7NLqQErgnEEhO-SNVPD8YBQ4.roa Signing time: Tue 31 Mar 2026 08:31:07 +0000 ROA not before: Tue 31 Mar 2026 08:31:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131923 IP address blocks: 133.247.240.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Mar 31 08:31:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BEDB3B34BA9012B82710484EF923553C3F18050E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:96:ae:a4:f8:c1:89:d7:39:79:0d:16:90:90: fc:66:72:ff:c8:b6:a0:67:9e:a0:97:d0:39:58:76: 5c:6f:f8:a0:38:ec:4f:29:27:17:89:e2:32:14:06: 9c:3a:c1:b9:23:e8:9b:59:33:28:3d:00:95:19:bf: da:f8:b7:45:4f:c6:33:6f:9c:11:56:69:28:7a:18: 3c:54:b7:98:1a:c5:86:ed:0d:6b:03:5b:e2:c8:92: 39:13:04:c1:35:99:43:05:7c:d9:6a:92:d1:1e:8e: 9e:55:62:f3:e1:06:ce:77:c8:cd:77:43:2c:df:e9: 35:e9:2d:cc:64:58:4c:07:7f:62:26:b8:85:6b:fc: fe:41:1a:eb:30:6f:ea:0b:24:71:e9:06:da:09:65: 23:d8:ef:b6:4b:dd:b7:5b:00:89:36:4a:c9:49:6b: fe:59:6a:a3:4e:94:77:2f:6a:cc:35:83:f6:06:0f: 3f:cc:1e:8e:6a:f8:66:06:20:7c:32:70:f9:be:5e: 29:af:14:8a:11:df:e0:9f:19:07:75:36:86:49:be: 1d:69:78:96:b3:91:3c:d7:a2:5e:32:30:67:38:2f: 0f:4d:51:d8:2c:7d:86:ea:c1:16:6c:ac:e0:cf:b2: b6:57:56:40:d0:a6:5b:09:54:01:20:50:90:37:ef: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DB:3B:34:BA:90:12:B8:27:10:48:4E:F9:23:55:3C:3F:18:05:0E X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/vts7NLqQErgnEEhO-SNVPD8YBQ4.roa sbgp-ipAddrBlock: critical IPv4: 133.247.240.0/20 Signature Algorithm: sha256WithRSAEncryption 87:d8:f1:e4:64:b2:a1:20:c0:9b:22:35:a7:67:5a:8b:d9:8c: b1:66:79:3c:73:3f:55:2b:66:a5:73:54:33:0c:f2:50:4c:6f: bc:42:4c:62:fb:ea:89:e1:02:4a:5b:c8:30:83:97:3f:45:b6: 45:68:91:f0:4b:4a:d2:41:57:66:01:d0:21:dc:6b:4a:b2:5b: 7b:97:b5:44:23:b6:7d:79:61:88:47:c5:15:48:ff:d3:a0:e9: a0:e9:cc:74:ad:8d:27:3a:82:0c:0c:8b:7e:e4:b9:db:7d:e4: 94:88:5f:ce:c9:37:3b:cc:4e:fe:05:69:ae:1a:35:26:90:d7: 51:55:57:69:a9:e0:0a:9a:b0:8c:8c:05:47:ec:30:15:98:8f: 2f:93:01:f3:01:4f:ea:cb:68:cf:e9:79:ac:a7:59:91:8c:bd: fa:3e:14:dc:83:9d:b4:c3:92:4b:d3:31:86:d5:f6:f7:e6:d2: 87:5d:b9:be:77:29:68:27:33:ea:16:46:b3:4d:19:f3:8f:d7: 72:82:c3:f6:4b:6c:b6:b9:48:d3:9e:bb:9d:83:6a:6d:fc:fe: df:30:6e:1a:0e:6f:39:e0:e2:6b:12:3f:53:43:d1:55:27:ad: ee:86:71:8c:ef:f5:0c:9d:0f:23:5b:c3:e4:82:83:fc:14:51: 2e:91:c7:4b -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI2MDMzMTA4 MzEwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQkVEQjNCMzRCQTkwMTJC ODI3MTA0ODRFRjkyMzU1M0MzRjE4MDUwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJmWrqT4wYnXOXkNFpCQ/GZy/8i2oGeeoJfQOVh2XG/4oDjsTykn F4niMhQGnDrBuSPom1kzKD0AlRm/2vi3RU/GM2+cEVZpKHoYPFS3mBrFhu0NawNb 4siSORMEwTWZQwV82WqS0R6OnlVi8+EGznfIzXdDLN/pNektzGRYTAd/Yia4hWv8 /kEa6zBv6gskcekG2gllI9jvtkvdt1sAiTZKyUlr/llqo06Udy9qzDWD9gYPP8we jmr4ZgYgfDJw+b5eKa8UihHf4J8ZB3U2hkm+HWl4lrORPNeiXjIwZzgvD01R2Cx9 hurBFmys4M+ytldWQNCmWwlUASBQkDfvOA0CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBS+2zs0upASuCcQSE75I1U8PxgFDjAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDM0L3Z0czdOTHFRRXJnbkVFaE8tU05WUEQ4WUJRNC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASF9/AwDQYJKoZIhvcNAQELBQAD ggEBAIfY8eRksqEgwJsiNadnWovZjLFmeTxzP1UrZqVzVDMM8lBMb7xCTGL76onh AkpbyDCDlz9FtkVokfBLStJBV2YB0CHca0qyW3uXtUQjtn15YYhHxRVI/9Og6aDp zHStjSc6ggwMi37kudt95JSIX87JNzvMTv4Faa4aNSaQ11FVV2mp4AqasIyMBUfs MBWYjy+TAfMBT+rLaM/peaynWZGMvfo+FNyDnbTDkkvTMYbV9vfm0oddub53KWgn M+oWRrNNGfOP13KCw/ZLbLa5SNOeu52Dam38/t8wbhoObzng4msSP1ND0VUnre6G cYzv9QydDyNbw+SCg/wUUS6Rx0s= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:00 2026 by rpki-client