$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/fy-EFHORp5fyKWbLUUxgKa4JNnE.roa File: fy-EFHORp5fyKWbLUUxgKa4JNnE.roa (raw, json) Hash identifier: Ctga9AkW/EUljOjUAz+iLCvhzO7Vgk4pQKHctu8rTMg= Subject key identifier: 7F:2F:84:14:73:91:A7:97:F2:29:66:CB:51:4C:60:29:AE:09:36:71 Certificate issuer: /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Certificate serial: 46 Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/fy-EFHORp5fyKWbLUUxgKa4JNnE.roa Signing time: Tue 31 Mar 2026 08:18:40 +0000 ROA not before: Tue 31 Mar 2026 08:18:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 63782 IP address blocks: 133.186.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Validity Not Before: Mar 31 08:18:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7F2F84147391A797F22966CB514C6029AE093671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:1a:0a:d4:49:25:d5:15:b0:76:e1:d8:ef: 67:33:a1:c1:da:dd:ba:ff:89:fa:f9:b1:1f:41:09: 17:a8:1c:73:e3:4a:61:d8:cf:9e:37:19:15:63:9f: 85:9c:f3:ef:ad:2e:98:32:59:02:9c:99:65:eb:53: 4b:f8:da:28:cd:c5:3c:b0:ba:78:a9:f0:ac:4a:3d: c0:0d:a9:e2:f5:97:b8:db:ef:0b:c2:55:06:57:76: 36:9e:b4:54:2c:e0:0f:98:b2:4a:8f:24:05:b5:c8: 57:fe:75:71:d2:b2:56:0b:0f:52:45:6c:29:e5:e7: b0:34:96:f1:c7:9a:bc:7e:13:6a:14:ef:9f:19:b6: 4a:4c:03:70:21:f3:c0:f1:27:36:82:f1:5f:f5:4e: f4:8f:8a:5c:43:2a:47:88:38:ee:8b:24:1a:b1:7d: cf:bf:ca:30:fa:ca:b5:1b:82:b8:4e:1e:3a:17:ce: f9:d8:d1:44:7f:82:cc:1b:6d:b8:42:ba:82:3d:e2: f5:1d:9b:84:2b:96:c6:56:a9:15:84:72:70:3e:15: 00:c4:59:9d:bf:8a:cb:82:b9:f1:c2:8c:c0:5c:06: 2a:2b:a1:51:d9:7e:f2:b7:0f:e5:51:84:fa:5b:7b: ca:6d:e9:2b:9b:24:ce:49:32:df:9a:05:fc:c4:b9: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2F:84:14:73:91:A7:97:F2:29:66:CB:51:4C:60:29:AE:09:36:71 X509v3 Authority Key Identifier: keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/fy-EFHORp5fyKWbLUUxgKa4JNnE.roa sbgp-ipAddrBlock: critical IPv4: 133.186.56.0/21 Signature Algorithm: sha256WithRSAEncryption ba:04:22:26:e3:50:fd:78:4e:14:10:8a:7c:5f:e4:8c:b3:96: 4c:06:b6:9f:58:d1:b1:20:e6:ad:4a:6f:f7:fc:5f:c8:3d:48: c2:5a:7a:ec:84:27:45:63:2b:a9:1a:3a:f1:5a:e8:81:b5:69: 4c:c9:67:11:e6:d3:f6:52:b7:b1:54:d6:81:ab:0a:7d:52:f8: 3a:c0:a5:9b:77:51:72:01:27:50:96:13:6f:49:29:41:2b:27: 14:60:23:09:e5:07:f9:f2:7f:a0:35:5b:0d:fa:4c:71:ac:27: 62:1c:fe:9a:42:12:d4:b9:f0:3b:b9:3b:00:7e:3a:54:b4:cd: ef:bc:4a:c1:06:09:fa:a4:dc:7e:75:fe:2f:fa:44:ab:80:03: 8c:02:d5:62:5a:c0:65:a7:19:56:84:67:e3:ea:91:f1:74:77: f3:cd:d9:b4:d5:96:8e:19:af:bd:14:53:a6:9c:dd:c7:e7:cd: 5a:ee:1b:10:ba:32:6c:d2:e7:eb:2c:27:6b:52:91:a6:8b:91: 3b:df:1b:b8:1f:a1:91:7b:ba:a6:96:28:82:7e:0a:83:f6:82: ab:9d:8e:77:3a:76:ad:08:40:54:c3:8e:ea:37:c4:68:22:a6: 96:a6:c7:f3:2c:25:86:1e:0c:88:73:53:93:24:67:8a:70:2b: 91:68:8d:4b -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTI2MDMzMTA4 MTg0MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YyRjg0MTQ3MzkxQTc5 N0YyMjk2NkNCNTE0QzYwMjlBRTA5MzY3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALsrGgrUSSXVFbB24djvZzOhwdrduv+J+vmxH0EJF6gcc+NKYdjP njcZFWOfhZzz760umDJZApyZZetTS/jaKM3FPLC6eKnwrEo9wA2p4vWXuNvvC8JV Bld2Np60VCzgD5iySo8kBbXIV/51cdKyVgsPUkVsKeXnsDSW8ceavH4TahTvnxm2 SkwDcCHzwPEnNoLxX/VO9I+KXEMqR4g47oskGrF9z7/KMPrKtRuCuE4eOhfO+djR RH+CzBttuEK6gj3i9R2bhCuWxlapFYRycD4VAMRZnb+Ky4K58cKMwFwGKiuhUdl+ 8rcP5VGE+lt7ym3pK5skzkky35oF/MS5ZV8CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBR/L4QUc5Gnl/IpZstRTGAprgk2cTAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV 8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2 RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDc0L2Z5LUVGSE9ScDVmeUtXYkxVVXhnS2E0Sk5uRS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOFujgwDQYJKoZIhvcNAQELBQAD ggEBALoEIibjUP14ThQQinxf5IyzlkwGtp9Y0bEg5q1Kb/f8X8g9SMJaeuyEJ0Vj K6kaOvFa6IG1aUzJZxHm0/ZSt7FU1oGrCn1S+DrApZt3UXIBJ1CWE29JKUErJxRg IwnlB/nyf6A1Ww36THGsJ2Ic/ppCEtS58Du5OwB+OlS0ze+8SsEGCfqk3H51/i/6 RKuAA4wC1WJawGWnGVaEZ+PqkfF0d/PN2bTVlo4Zr70UU6ac3cfnzVruGxC6MmzS 5+ssJ2tSkaaLkTvfG7gfoZF7uqaWKIJ+CoP2gqudjnc6dq0IQFTDjuo3xGgippam x/MsJYYeDIhzU5MkZ4pwK5FojUs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:53 2026 by rpki-client