$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzWD3IgSE-ytfI9wUvJLdW3zdZc.roa File: NzWD3IgSE-ytfI9wUvJLdW3zdZc.roa (raw, json) Hash identifier: PGuGxzGupttuDnU876R+tPNllEPuDfmGoUlEGyzeHms= Subject key identifier: 37:35:83:DC:88:12:13:EC:AD:7C:8F:70:52:F2:4B:75:6D:F3:75:97 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: A2 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzWD3IgSE-ytfI9wUvJLdW3zdZc.roa Signing time: Tue 31 Mar 2026 07:55:14 +0000 ROA not before: Tue 31 Mar 2026 07:55:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 148.67.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 31 07:55:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=373583DC881213ECAD7C8F7052F24B756DF37597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:16:c4:3b:44:8f:d5:6b:c7:e3:d9:35:ac: e7:6d:a2:2c:68:8f:a2:91:2d:41:38:6e:a6:cf:eb: 46:72:49:a8:33:9b:4d:ad:a4:69:fc:17:78:88:43: cf:dc:22:0c:2d:89:e5:76:9b:4a:9c:50:ad:96:61: 07:37:f3:fb:01:25:34:a7:64:64:5f:86:4b:21:5a: 98:01:de:6d:2c:ee:eb:d7:77:ec:a5:1c:b9:69:60: c8:97:0c:82:e1:d8:be:03:9f:ee:1d:4c:ed:69:ef: 21:00:ca:04:59:0b:2e:83:ec:04:0b:52:7e:96:e3: b2:a6:d6:c1:93:8a:43:d3:cb:55:03:e8:57:9c:ec: 26:61:f5:f3:f5:56:a2:2a:e5:9a:21:22:09:cc:38: 10:dd:28:22:fa:77:6f:e4:7b:cc:d3:60:d3:d5:a0: af:15:f5:70:60:4b:9f:ee:83:5d:62:1b:78:98:73: b4:50:b5:75:74:85:79:b8:de:6b:3c:fd:c5:22:2b: c1:29:df:7b:de:c2:b4:50:d4:46:34:e7:56:7f:47: 1c:31:d1:05:56:03:99:0e:dd:7f:fa:6d:cf:5e:3f: 3f:d5:02:11:a5:aa:f4:9b:59:77:b3:c0:0d:7c:48: d0:29:29:2b:6d:ce:24:0f:67:27:53:55:8e:7b:9e: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:35:83:DC:88:12:13:EC:AD:7C:8F:70:52:F2:4B:75:6D:F3:75:97 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzWD3IgSE-ytfI9wUvJLdW3zdZc.roa sbgp-ipAddrBlock: critical IPv4: 148.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8a:2f:66:0d:2f:72:1d:32:bd:2f:d7:d5:2d:b3:52:e7:19:0f: 24:94:92:fe:16:36:b6:51:e0:d8:a6:c6:6f:e9:ec:4b:bb:54: ff:5f:57:ca:99:17:68:75:c2:c3:be:ad:8c:7a:e4:9c:ad:85: 10:3f:3e:72:6a:57:a1:19:fa:bf:e2:8c:7a:eb:ab:d7:1f:af: f4:62:38:4a:86:f9:b8:99:d1:77:24:0b:39:9d:e0:8c:2e:de: 1f:db:fd:97:94:0e:82:ec:7a:8b:c4:e7:e7:68:bd:a8:d3:b9: ff:ec:78:b7:32:df:df:a8:75:e1:a4:39:9a:42:7c:68:dc:68: b5:9a:c5:ce:38:05:96:73:8e:39:6a:b6:3b:b0:b2:04:48:bf: a9:6d:42:a7:91:6a:e2:19:25:65:1a:8d:51:9b:6f:65:87:ca: f9:2d:d5:3f:7f:68:a5:bd:a2:1a:96:95:5d:57:3f:bd:7f:d6: 3b:86:c7:f5:eb:5f:9d:a4:13:9b:24:05:33:e8:a3:0a:60:f4: 18:01:16:c1:9d:58:0b:8d:ea:1e:45:45:d0:e0:87:d1:53:2b: 3f:73:c0:8f:66:7b:ae:af:b3:14:b8:d9:ab:13:90:8f:fd:00: 27:3c:bf:a0:5a:cf:6a:15:84:cd:3f:06:de:1e:92:06:5f:67: 49:f8:77:03 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw NzU1MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3MzU4M0RDODgxMjEz RUNBRDdDOEY3MDUyRjI0Qjc1NkRGMzc1OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3LRbEO0SP1WvH49k1rOdtoixoj6KRLUE4bqbP60ZySagzm02t pGn8F3iIQ8/cIgwtieV2m0qcUK2WYQc38/sBJTSnZGRfhkshWpgB3m0s7uvXd+yl HLlpYMiXDILh2L4Dn+4dTO1p7yEAygRZCy6D7AQLUn6W47Km1sGTikPTy1UD6Fec 7CZh9fP1VqIq5ZohIgnMOBDdKCL6d2/ke8zTYNPVoK8V9XBgS5/ug11iG3iYc7RQ tXV0hXm43ms8/cUiK8Ep33vewrRQ1EY051Z/Rxwx0QVWA5kO3X/6bc9ePz/VAhGl qvSbWXezwA18SNApKSttziQPZydTVY57nsVTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUNzWD3IgSE+ytfI9wUvJLdW3zdZcwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L056V0QzSWdTRS15dGZJOXdVdkpMZFczemRaYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeUQwAwDQYJKoZIhvcNAQELBQADggEB AIovZg0vch0yvS/X1S2zUucZDySUkv4WNrZR4Nimxm/p7Eu7VP9fV8qZF2h1wsO+ rYx65JythRA/PnJqV6EZ+r/ijHrrq9cfr/RiOEqG+biZ0XckCzmd4Iwu3h/b/ZeU DoLseovE5+dovajTuf/seLcy39+odeGkOZpCfGjcaLWaxc44BZZzjjlqtjuwsgRI v6ltQqeRauIZJWUajVGbb2WHyvkt1T9/aKW9ohqWlV1XP71/1juGx/XrX52kE5sk BTPoowpg9BgBFsGdWAuN6h5FRdDgh9FTKz9zwI9me66vsxS42asTkI/9ACc8v6Ba z2oVhM0/Bt4ekgZfZ0n4dwM= -----END CERTIFICATE-----Generated at Tue Apr 7 22:25:48 2026 by rpki-client