$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/f_sRN_HBSB-M72TZi_5tuLDR7PE.roa File: f_sRN_HBSB-M72TZi_5tuLDR7PE.roa (raw, json) Hash identifier: 6jbi5TOH3Qet3J7OVCVHy+feiOUaLSDyKHkbVQnenE8= Subject key identifier: 7F:FB:11:37:F1:C1:48:1F:8C:EF:64:D9:8B:FE:6D:B8:B0:D1:EC:F1 Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9 Certificate serial: 75 Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/f_sRN_HBSB-M72TZi_5tuLDR7PE.roa Signing time: Tue 31 Mar 2026 07:51:59 +0000 ROA not before: Tue 31 Mar 2026 07:51:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 63789 IP address blocks: 202.9.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9 Validity Not Before: Mar 31 07:51:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7FFB1137F1C1481F8CEF64D98BFE6DB8B0D1ECF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:30:9c:09:03:22:ac:ac:2a:f8:db:80:af: 86:86:a1:a6:21:c4:11:aa:ce:0f:7e:a3:61:b2:49: 93:5f:84:3f:65:2c:13:a0:47:00:3f:fb:31:81:75: cd:6a:61:44:19:e2:bf:04:10:a9:9e:fc:b7:11:26: 16:33:d8:e5:e2:47:69:83:fe:6d:fb:2d:78:2a:52: 4b:73:27:bf:61:ab:fa:ad:88:67:9f:34:20:31:83: 27:78:44:41:de:f8:f3:d5:df:f0:9b:df:54:fb:21: 4b:c6:a3:78:3a:57:50:37:71:4f:2b:a0:0b:5f:0a: d4:17:a2:39:34:c8:c3:e3:74:2c:16:ec:da:e8:eb: 04:0f:26:1d:bb:30:be:3c:cc:d7:56:29:32:a8:e4: 15:bb:25:df:63:7a:96:c5:cb:ed:c7:29:b7:0f:75: 4c:47:59:82:60:a6:3b:47:5b:e5:ce:b0:4a:d9:f3: df:35:38:7d:6c:73:ac:59:e3:7b:ea:84:78:ab:63: 17:a7:8c:6f:d6:9b:28:b6:6f:aa:66:3c:e4:36:f1: c4:68:fa:b1:5f:ca:25:22:84:79:bc:f0:8d:ff:b0: 76:b2:3d:95:43:65:e5:57:79:7c:a3:cb:97:23:68: 91:07:78:1c:e0:7c:07:ea:e2:13:59:4f:17:37:d5: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FB:11:37:F1:C1:48:1F:8C:EF:64:D9:8B:FE:6D:B8:B0:D1:EC:F1 X509v3 Authority Key Identifier: keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/f_sRN_HBSB-M72TZi_5tuLDR7PE.roa sbgp-ipAddrBlock: critical IPv4: 202.9.208.0/24 Signature Algorithm: sha256WithRSAEncryption 71:53:3a:e6:e5:c4:b9:14:7b:9a:10:95:c4:24:9b:0f:69:ec: 3e:79:20:2b:9b:9f:e5:14:ba:4c:86:8c:0d:e6:0e:ce:27:71: e1:93:96:ad:7d:f7:f0:04:a1:13:6a:aa:e2:a2:80:96:bf:e6: 6a:85:0c:57:a8:a0:39:46:63:55:4f:03:91:54:03:b1:a3:49: 22:a6:a0:b3:63:3b:d4:51:e0:9d:fd:25:59:d3:47:a9:e0:ec: 9e:f8:bc:1e:05:64:04:aa:6a:9a:4c:6c:c6:9b:60:c9:59:df: 47:0c:fd:a7:6e:8a:de:56:a7:6e:7d:0f:42:e4:1b:58:b1:38: b6:88:97:94:8d:c2:fa:3a:57:0a:f6:28:9c:01:c6:74:7b:b6: 71:21:52:aa:bd:40:95:df:27:13:66:de:a7:8f:92:e3:73:cf: 60:7e:7c:19:d0:fd:58:4d:8f:1e:78:00:1f:d2:af:c6:cd:2f: b9:29:19:9b:80:37:a4:4d:57:38:5f:c1:08:96:17:bf:ac:7f: b2:81:09:55:cd:86:a8:80:0c:c2:3e:3b:5f:aa:1e:33:3a:38: d2:19:89:73:ed:8c:0a:91:3b:60:40:d5:56:c7:31:9f:8c:3c: 37:e4:40:8e:18:53:7c:7b:3e:77:bd:0e:d0:09:da:78:64:18: fc:d9:2a:ce -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEYx NTE0NTA4QUZDMzhFNTE3NDNCNkNCNThCQTY1NjFFREQzQkI5MB4XDTI2MDMzMTA3 NTE1OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0ZGQjExMzdGMUMxNDgx RjhDRUY2NEQ5OEJGRTZEQjhCMEQxRUNGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhPMJwJAyKsrCr424CvhoahpiHEEarOD36jYbJJk1+EP2UsE6BH AD/7MYF1zWphRBnivwQQqZ78txEmFjPY5eJHaYP+bfsteCpSS3Mnv2Gr+q2IZ580 IDGDJ3hEQd7489Xf8JvfVPshS8ajeDpXUDdxTyugC18K1BeiOTTIw+N0LBbs2ujr BA8mHbswvjzM11YpMqjkFbsl32N6lsXL7ccptw91TEdZgmCmO0db5c6wStnz3zU4 fWxzrFnje+qEeKtjF6eMb9abKLZvqmY85DbxxGj6sV/KJSKEebzwjf+wdrI9lUNl 5Vd5fKPLlyNokQd4HOB8B+riE1lPFzfVb+0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBR/+xE38cFIH4zvZNmL/m24sNHs8TAfBgNVHSMEGDAWgBTY8VFFCK/DjlF0O2y1 i6ZWHt07uTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjk5LzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3ZE83ay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3 ZE83ay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOTkvZl9zUk5fSEJTQi1NNzJUWmlfNXR1TERSN1BFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoJ0DANBgkqhkiG9w0BAQsFAAOCAQEA cVM65uXEuRR7mhCVxCSbD2nsPnkgK5uf5RS6TIaMDeYOzidx4ZOWrX338AShE2qq 4qKAlr/maoUMV6igOUZjVU8DkVQDsaNJIqags2M71FHgnf0lWdNHqeDsnvi8HgVk BKpqmkxsxptgyVnfRwz9p26K3lanbn0PQuQbWLE4toiXlI3C+jpXCvYonAHGdHu2 cSFSqr1Ald8nE2bep4+S43PPYH58GdD9WE2PHngAH9Kvxs0vuSkZm4A3pE1XOF/B CJYXv6x/soEJVc2GqIAMwj47X6oeMzo40hmJc+2MCpE7YEDVVscxn4w8N+RAjhhT fHs+d70O0AnaeGQY/Nkqzg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:40 2026 by rpki-client