$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/-KzflEBRv5cP7Og2PHa-HiG8k2k.roa File: -KzflEBRv5cP7Og2PHa-HiG8k2k.roa (raw, json) Hash identifier: TcN9Wrg1xeYM9Ud8cPLb5gwiNc0f73BystgZfzk4yxo= Subject key identifier: F8:AC:DF:94:40:51:BF:97:0F:EC:E8:36:3C:76:BE:1E:21:BC:93:69 Certificate issuer: /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Certificate serial: 45 Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/-KzflEBRv5cP7Og2PHa-HiG8k2k.roa Signing time: Tue 31 Mar 2026 08:18:39 +0000 ROA not before: Tue 31 Mar 2026 08:18:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 63782 IP address blocks: 133.186.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Validity Not Before: Mar 31 08:18:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F8ACDF944051BF970FECE8363C76BE1E21BC9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:43:07:0b:a4:80:bb:26:5c:20:c3:48:ce: 5b:c8:43:6b:36:ac:8e:f9:62:24:44:f0:68:98:2f: 24:a6:26:9d:c2:c3:ed:e2:a8:51:92:1c:3f:85:b5: 8f:fb:ac:e2:cc:ed:a2:41:c4:73:e6:80:b2:95:6f: ac:7a:21:b1:05:f5:a7:ea:f0:1f:8a:01:51:04:12: c2:ed:d6:a9:cf:99:7b:5d:35:9f:fb:fe:b9:53:9d: e7:03:58:1b:08:9d:42:04:39:b7:6f:25:5f:fc:eb: 9d:4a:2b:a4:7f:53:c4:87:99:b4:9b:06:1b:3c:6d: 14:cf:c5:b4:aa:0c:69:26:ce:e0:f9:44:e3:15:9c: 37:b6:61:98:95:4c:c3:34:10:0e:19:b6:3c:eb:e4: 4a:88:12:d9:7d:98:50:47:07:64:ed:39:8f:70:81: ba:c7:b3:f4:40:60:6e:00:d4:12:ce:bd:54:86:2d: 4c:b9:95:2b:d6:9b:e9:0a:d6:03:78:6b:5d:d4:de: 05:66:da:53:b4:1a:5d:a2:0a:3c:f2:de:19:3a:cd: 43:dc:2d:cd:4a:33:28:52:5c:ce:2f:b5:e0:5c:47: f7:76:e6:20:95:e8:24:9c:25:e7:76:b5:b5:ad:53: b6:05:00:c6:dd:0b:e3:4b:b6:6e:e9:95:d7:07:77: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AC:DF:94:40:51:BF:97:0F:EC:E8:36:3C:76:BE:1E:21:BC:93:69 X509v3 Authority Key Identifier: keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/-KzflEBRv5cP7Og2PHa-HiG8k2k.roa sbgp-ipAddrBlock: critical IPv4: 133.186.52.0/22 Signature Algorithm: sha256WithRSAEncryption af:76:f9:f9:42:a3:73:29:c0:6a:1a:3b:cb:ee:ee:4b:6a:f4: a4:4c:68:b0:5e:20:43:95:d0:7c:c1:27:9a:3b:32:bf:a6:58: 1c:20:04:f9:ec:b8:ca:42:6f:47:62:f0:39:63:12:c0:a8:1c: e5:f0:19:da:28:dd:43:13:e8:b5:e1:05:e8:4e:d9:e4:eb:25: 55:d6:9e:b2:a9:81:15:45:76:4e:b3:5f:68:d5:61:98:d0:da: 7b:fe:91:40:4b:45:88:2a:91:81:79:38:7f:15:02:07:a5:0a: 8f:8e:95:f7:0f:28:6d:83:97:f2:7b:dd:d8:1c:b5:2a:1d:4f: f1:24:88:74:38:e1:ef:e3:8a:04:d1:4d:0d:5e:07:de:c4:2c: 1b:fe:1b:5e:f2:96:1e:cc:f6:25:1a:3e:aa:c0:dd:4e:87:c2: 8a:dd:3c:ad:73:b9:b5:18:da:a8:1a:4a:07:94:81:5c:90:df: 4f:a7:c8:38:5a:09:37:bf:f3:7a:0d:ab:b7:a1:5f:db:70:a5: bd:40:27:15:c5:4d:d6:61:7a:0d:2f:1e:f1:ac:c0:69:87:31: 70:f4:7e:57:32:66:7f:65:87:5a:6d:78:a0:af:c5:e4:fb:a8: 7c:a9:55:9c:d9:bc:77:b4:6b:d9:61:1f:0c:dd:f5:41:22:c5: e8:0e:6d:d4 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTI2MDMzMTA4 MTgzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjhBQ0RGOTQ0MDUxQkY5 NzBGRUNFODM2M0M3NkJFMUUyMUJDOTM2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKrqQwcLpIC7Jlwgw0jOW8hDazasjvliJETwaJgvJKYmncLD7eKo UZIcP4W1j/us4sztokHEc+aAspVvrHohsQX1p+rwH4oBUQQSwu3Wqc+Ze101n/v+ uVOd5wNYGwidQgQ5t28lX/zrnUorpH9TxIeZtJsGGzxtFM/FtKoMaSbO4PlE4xWc N7ZhmJVMwzQQDhm2POvkSogS2X2YUEcHZO05j3CBusez9EBgbgDUEs69VIYtTLmV K9ab6QrWA3hrXdTeBWbaU7QaXaIKPPLeGTrNQ9wtzUozKFJczi+14FxH93bmIJXo JJwl53a1ta1TtgUAxt0L40u2bumV1wd3W20CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBT4rN+UQFG/lw/s6DY8dr4eIbyTaTAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV 8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2 RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDc0Ly1LemZsRUJSdjVjUDdPZzJQSGEtSGlHOGsyay5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFujQwDQYJKoZIhvcNAQELBQAD ggEBAK92+flCo3MpwGoaO8vu7ktq9KRMaLBeIEOV0HzBJ5o7Mr+mWBwgBPnsuMpC b0di8DljEsCoHOXwGdoo3UMT6LXhBehO2eTrJVXWnrKpgRVFdk6zX2jVYZjQ2nv+ kUBLRYgqkYF5OH8VAgelCo+OlfcPKG2Dl/J73dgctSodT/EkiHQ44e/jigTRTQ1e B97ELBv+G17ylh7M9iUaPqrA3U6HwordPK1zubUY2qgaSgeUgVyQ30+nyDhaCTe/ 83oNq7ehX9twpb1AJxXFTdZheg0vHvGswGmHMXD0flcyZn9lh1pteKCvxeT7qHyp VZzZvHe0a9lhHwzd9UEixegObdQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:24 2026 by rpki-client