$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/NDX0LYyWIZ_RjHk3V13r0mKbHo4.roa File: NDX0LYyWIZ_RjHk3V13r0mKbHo4.roa (raw, json) Hash identifier: jEXWAvuU4XYRoLmcYY1rgbg6uI0kuj2fuY5lxPI1kz0= Subject key identifier: 34:35:F4:2D:8C:96:21:9F:D1:8C:79:37:57:5D:EB:D2:62:9B:1E:8E Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 59 Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/NDX0LYyWIZ_RjHk3V13r0mKbHo4.roa Signing time: Tue 31 Mar 2026 07:49:48 +0000 ROA not before: Tue 31 Mar 2026 07:49:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18068 IP address blocks: 133.88.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Mar 31 07:49:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3435F42D8C96219FD18C7937575DEBD2629B1E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:bd:93:f8:52:c5:d8:96:db:ad:94:13:23: 58:fc:0e:73:0b:69:d9:00:d2:69:bb:73:5e:c0:ec: 42:18:37:a0:12:f3:b0:80:b9:f1:df:12:d3:a2:5c: 10:94:de:1d:5a:ca:1a:91:3a:f9:98:46:d8:57:c4: 0b:7d:26:9e:0c:ef:60:78:40:7c:8a:3c:5a:9e:4b: e7:e4:04:58:d5:93:54:2b:dd:47:e0:81:c7:9f:d7: f4:9b:51:b2:42:40:52:91:b1:e8:4a:e2:c5:72:58: 82:dc:8f:89:02:49:aa:d9:9e:4c:2f:4c:6e:89:c0: ab:0f:a5:42:43:7a:5b:53:32:d1:11:dd:b0:37:6f: dc:c6:11:6d:5b:99:60:38:11:44:77:6e:90:d5:c6: 2a:b7:88:ca:c1:06:6a:67:c8:e7:69:3d:1d:75:3b: 97:e3:10:ab:12:36:1d:2a:39:12:8e:a1:fd:78:08: 80:4f:1f:b9:40:e6:45:50:30:e5:da:e7:61:63:e3: 2a:6f:ea:7d:8a:52:c9:3f:c2:e4:b3:ea:fa:aa:d9: 44:7f:dc:4d:75:24:59:92:90:15:fc:8c:34:10:28: f8:5d:7f:94:ab:ab:d5:54:44:85:a6:e4:ec:da:b0: 97:68:4e:d4:67:75:a6:55:47:f5:e5:94:da:d3:69: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:F4:2D:8C:96:21:9F:D1:8C:79:37:57:5D:EB:D2:62:9B:1E:8E X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/NDX0LYyWIZ_RjHk3V13r0mKbHo4.roa sbgp-ipAddrBlock: critical IPv4: 133.88.16.0/22 Signature Algorithm: sha256WithRSAEncryption 57:6e:10:14:b4:75:a3:3d:3f:53:06:f9:99:11:57:c3:93:02: 64:79:bd:50:dc:2b:b4:c2:d6:40:ae:f2:17:d9:6e:8e:91:b0: ca:b7:5e:04:47:2e:49:3e:eb:06:f0:77:d1:7d:f3:55:3b:c7: bf:c6:f9:03:7e:f7:4b:d3:9e:7d:8a:44:02:04:f6:1d:bd:32: 7e:6a:45:e7:c7:71:10:4c:92:15:6b:6e:9a:4f:b0:d6:0b:44: e3:b1:3f:f0:1b:1c:c1:ef:06:72:31:a4:8e:bd:53:43:4d:76: dc:6c:d2:77:70:90:10:14:cb:a5:cd:bd:6c:69:a7:29:73:b5: ce:52:f2:fc:35:b3:f8:e9:be:d0:a1:52:37:94:4a:6c:20:ab: 18:16:0c:79:6a:a6:c6:e9:97:c3:6f:56:59:f6:23:ef:3a:13: ee:23:ce:f2:31:87:80:3d:b2:a3:96:95:c1:b6:e0:1a:d3:cb: fe:87:bc:a3:0a:62:11:e8:68:54:34:76:19:e6:8b:c1:7e:d1: cf:c4:ba:98:4d:ab:52:12:07:08:61:fe:6f:f8:46:3a:4c:d4: a1:74:4b:83:3c:1d:a3:c7:cb:da:1b:c7:1a:9b:ab:5e:69:66: 9a:a1:4f:5c:88:fa:f8:fd:27:c3:63:5b:95:42:31:91:55:ae: 11:a5:aa:f0 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI2MDMzMTA3 NDk0OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzQzNUY0MkQ4Qzk2MjE5 RkQxOEM3OTM3NTc1REVCRDI2MjlCMUU4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKRavZP4UsXYltutlBMjWPwOcwtp2QDSabtzXsDsQhg3oBLzsIC5 8d8S06JcEJTeHVrKGpE6+ZhG2FfEC30mngzvYHhAfIo8Wp5L5+QEWNWTVCvdR+CB x5/X9JtRskJAUpGx6ErixXJYgtyPiQJJqtmeTC9MbonAqw+lQkN6W1My0RHdsDdv 3MYRbVuZYDgRRHdukNXGKreIysEGamfI52k9HXU7l+MQqxI2HSo5Eo6h/XgIgE8f uUDmRVAw5drnYWPjKm/qfYpSyT/C5LPq+qrZRH/cTXUkWZKQFfyMNBAo+F1/lKur 1VREhabk7Nqwl2hO1Gd1plVH9eWU2tNp0P8CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQ0NfQtjJYhn9GMeTdXXevSYpsejjAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMDc1L05EWDBMWXlXSVpfUmpIazNWMTNyMG1LYkhvNC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFWBAwDQYJKoZIhvcNAQELBQAD ggEBAFduEBS0daM9P1MG+ZkRV8OTAmR5vVDcK7TC1kCu8hfZbo6RsMq3XgRHLkk+ 6wbwd9F981U7x7/G+QN+90vTnn2KRAIE9h29Mn5qRefHcRBMkhVrbppPsNYLROOx P/AbHMHvBnIxpI69U0NNdtxs0ndwkBAUy6XNvWxppylztc5S8vw1s/jpvtChUjeU SmwgqxgWDHlqpsbpl8NvVln2I+86E+4jzvIxh4A9sqOWlcG24BrTy/6HvKMKYhHo aFQ0dhnmi8F+0c/EuphNq1ISBwhh/m/4RjpM1KF0S4M8HaPHy9obxxqbq15pZpqh T1yI+vj9J8NjW5VCMZFVrhGlqvA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:10 2026 by rpki-client