$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/jjHM73SkwaaGbjq1-dFWaJaaw9w.roa File: jjHM73SkwaaGbjq1-dFWaJaaw9w.roa (raw, json) Hash identifier: EBpbjj5FrCSGRGRhUYSv36L+EDQn36dMhZ5VYXcBC9k= Subject key identifier: 8E:31:CC:EF:74:A4:C1:A6:86:6E:3A:B5:F9:D1:56:68:96:9A:C3:DC Certificate issuer: /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Certificate serial: 31 Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/jjHM73SkwaaGbjq1-dFWaJaaw9w.roa Signing time: Tue 31 Mar 2026 08:38:08 +0000 ROA not before: Tue 31 Mar 2026 08:38:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 131928 IP address blocks: 133.226.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Validity Not Before: Mar 31 08:38:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8E31CCEF74A4C1A6866E3AB5F9D15668969AC3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ca:30:70:f9:28:a1:cc:02:4b:fe:c4:e6:ba: 7f:91:79:b1:17:96:ad:ae:54:cf:83:ae:ca:95:a3: 86:ff:c2:c7:ef:19:51:2a:d1:31:76:3f:5b:05:0f: e0:c1:1f:87:f0:94:1c:3c:80:36:d6:80:72:51:ae: 47:51:81:d5:14:94:af:15:78:f3:6c:a3:02:cf:e7: 8f:4b:d6:a7:ff:4c:0c:20:79:d7:55:9d:08:11:28: 4d:f7:56:f5:08:96:9c:24:c1:34:04:32:18:f6:4e: b6:3a:51:00:d8:54:25:fd:3d:31:a6:38:ab:cb:19: f0:bf:49:b3:39:4c:ad:7e:22:79:37:53:bd:ff:7f: fe:86:f8:1b:9f:5a:ef:3e:19:16:18:d5:1b:74:64: b4:b4:63:f4:37:aa:68:5d:17:83:50:8e:b2:0c:e7: a9:bc:77:ff:66:a4:d5:dd:39:f9:d8:84:1a:7f:64: dc:8d:aa:26:b6:42:fe:37:c5:11:79:a5:c6:2d:a8: 72:d2:2c:b8:93:bf:1a:78:90:f5:b8:6e:e9:31:4f: 01:56:88:c8:ae:6e:31:c8:a5:6e:dd:96:64:b2:e8: 19:ee:c5:5b:f1:a1:fd:35:f5:83:37:ba:7e:6b:95: 01:70:24:c5:de:69:58:4f:2a:bb:f7:ef:46:49:6d: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:31:CC:EF:74:A4:C1:A6:86:6E:3A:B5:F9:D1:56:68:96:9A:C3:DC X509v3 Authority Key Identifier: keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/jjHM73SkwaaGbjq1-dFWaJaaw9w.roa sbgp-ipAddrBlock: critical IPv4: 133.226.130.0/23 Signature Algorithm: sha256WithRSAEncryption 38:ea:87:21:f9:fe:ae:2e:d1:9f:54:0b:03:67:c2:a7:ad:a7: 6e:f4:31:4c:ce:04:31:63:8c:ab:49:e7:4b:b6:bc:6e:3a:4d: 70:2f:f1:6e:a8:6a:39:84:09:0d:ad:da:7d:96:bb:bd:02:c4: 99:9c:48:d6:fa:ad:37:20:45:23:03:09:35:ba:2c:60:31:89: e7:1a:ca:2a:4a:4b:22:8b:1e:26:7d:50:6d:1c:7c:af:37:b0: c9:d3:5e:45:8e:df:b3:fc:5f:6c:f5:f5:bf:d5:1a:0a:35:c8: cc:23:ab:fb:0b:58:88:fb:4f:77:bc:36:14:f1:44:02:25:7a: 32:9b:49:ba:2d:e7:81:c0:8b:b8:1c:90:e0:03:49:4d:9b:aa: 44:7f:59:f3:2e:e1:a0:d2:5a:91:bb:97:3c:81:74:61:1c:ca: 25:22:70:57:e6:12:58:e2:e2:46:33:fe:a9:d0:0f:bb:4d:6f: 48:36:83:87:4d:85:72:84:38:39:be:6c:cf:a5:08:8b:9a:fc: 73:64:e6:0a:ec:a6:63:46:d3:65:73:88:10:be:e3:7a:a0:0c: 25:55:f1:4c:12:71:42:07:cb:1d:51:ea:b3:02:21:4d:d1:27: b1:d7:5c:91:88:7f:42:81:31:e4:b3:69:27:6d:fb:b7:f6:8f: 9c:6a:5b:6f -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMTYz QTMzODc1OTJGOTZCMUJDQzc3RjhBQ0ZDRjRGMUYxMUZBOTlEMB4XDTI2MDMzMTA4 MzgwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEUzMUNDRUY3NEE0QzFB Njg2NkUzQUI1RjlEMTU2Njg5NjlBQzNEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOLKMHD5KKHMAkv+xOa6f5F5sReWra5Uz4OuypWjhv/Cx+8ZUSrR MXY/WwUP4MEfh/CUHDyANtaAclGuR1GB1RSUrxV482yjAs/nj0vWp/9MDCB511Wd CBEoTfdW9QiWnCTBNAQyGPZOtjpRANhUJf09MaY4q8sZ8L9JszlMrX4ieTdTvf9/ /ob4G59a7z4ZFhjVG3RktLRj9DeqaF0Xg1COsgznqbx3/2ak1d05+diEGn9k3I2q JrZC/jfFEXmlxi2octIsuJO/GniQ9bhu6TFPAVaIyK5uMcilbt2WZLLoGe7FW/Gh /TX1gze6fmuVAXAkxd5pWE8qu/fvRklthacCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBSOMczvdKTBpoZuOrX50VZolprD3DAfBgNVHSMEGDAWgBTBY6M4dZL5axvMd/is /PTx8R+pnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjAvd1dPak9IV1MtV3NiekhmNHJQejA4ZkVmcVowLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd1dPak9IV1MtV3NiekhmNHJQejA4 ZkVmcVowLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDYwL2pqSE03M1Nrd2FhR2JqcTEtZEZXYUphYXc5dy5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGF4oIwDQYJKoZIhvcNAQELBQAD ggEBADjqhyH5/q4u0Z9UCwNnwqetp270MUzOBDFjjKtJ50u2vG46TXAv8W6oajmE CQ2t2n2Wu70CxJmcSNb6rTcgRSMDCTW6LGAxiecayipKSyKLHiZ9UG0cfK83sMnT XkWO37P8X2z19b/VGgo1yMwjq/sLWIj7T3e8NhTxRAIlejKbSbot54HAi7gckOAD SU2bqkR/WfMu4aDSWpG7lzyBdGEcyiUicFfmElji4kYz/qnQD7tNb0g2g4dNhXKE ODm+bM+lCIua/HNk5grspmNG02VziBC+43qgDCVV8UwScUIHyx1R6rMCIU3RJ7HX XJGIf0KBMeSzaSdt+7f2j5xqW28= -----END CERTIFICATE-----Generated at Tue Apr 7 20:04:27 2026 by rpki-client