$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/K-Fq8kwwzre0qm0yAwWYKBLow7s.roa File: K-Fq8kwwzre0qm0yAwWYKBLow7s.roa (raw, json) Hash identifier: +hIMLs6Usf53JAkdIzgDWWe5jtDdGb6r9wN9BXh7+TQ= Subject key identifier: 2B:E1:6A:F2:4C:30:CE:B7:B4:AA:6D:32:03:05:98:28:12:E8:C3:BB Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 75 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/K-Fq8kwwzre0qm0yAwWYKBLow7s.roa Signing time: Tue 31 Mar 2026 08:31:26 +0000 ROA not before: Tue 31 Mar 2026 08:31:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9619 IP address blocks: 211.125.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 23:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Mar 31 08:31:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2BE16AF24C30CEB7B4AA6D320305982812E8C3BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:56:dd:43:18:6f:40:0d:d8:2e:2d:c5:0c: 36:3e:0d:be:30:e0:d0:4c:31:59:67:17:ca:2d:30: 0d:ad:24:62:3d:f6:5a:e6:db:4d:35:15:f6:2b:4b: fe:bc:53:70:4f:a3:ea:9e:39:87:3a:af:5a:9c:d6: 42:6b:e8:00:e3:ef:35:62:d0:e3:0b:97:3b:bd:71: 52:81:2d:ee:05:f9:7e:a4:0d:97:a2:65:ff:14:34: 85:06:14:c8:d5:36:4a:5b:d4:65:80:53:5c:aa:3c: 51:29:ac:c9:4a:06:b1:85:60:83:f9:96:ca:16:bc: 7e:1f:57:0d:4b:a2:b2:d0:e5:8a:b0:6a:1c:b4:15: a5:6e:9e:73:6f:96:9d:10:70:bf:ae:8e:04:b1:d0: 77:34:14:ce:85:04:9b:82:04:61:a3:3f:29:49:15: 20:1e:85:ef:4e:80:ea:cc:35:7a:35:47:30:48:dd: 65:8e:4f:1d:24:4e:75:05:dc:70:b9:b3:a8:13:c8: f0:dd:c4:3b:11:d7:7f:8c:89:3b:59:d8:92:02:72: 41:c3:82:4e:31:f2:6c:d7:0b:c9:ad:91:03:df:4e: b2:90:8b:b5:b7:24:88:a3:33:b7:a5:2b:2c:d0:8b: 95:1f:af:14:e9:01:9a:0e:db:79:17:2f:3a:76:b1: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:6A:F2:4C:30:CE:B7:B4:AA:6D:32:03:05:98:28:12:E8:C3:BB X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/K-Fq8kwwzre0qm0yAwWYKBLow7s.roa sbgp-ipAddrBlock: critical IPv4: 211.125.137.0/24 Signature Algorithm: sha256WithRSAEncryption ae:6b:b1:c1:a9:53:a1:75:f1:f2:af:a7:47:fb:99:e2:a5:ee: 6d:39:da:20:a5:56:17:6e:cb:4f:2c:93:f7:73:36:74:cf:fc: 58:45:98:8b:81:d5:43:95:f2:32:69:59:b2:fa:03:8b:c1:6f: b1:f6:06:71:53:fe:f4:9a:a5:f4:8c:36:72:50:2b:3c:6c:00: 5a:e9:43:8d:c7:5b:25:77:a5:03:81:6b:71:d8:d8:d4:78:44: 4b:61:12:5a:38:75:87:b3:49:54:d3:60:fe:b3:d4:94:b2:cb: 6e:18:17:4e:21:30:b0:26:c7:c7:6b:bb:f1:9c:b1:14:dc:6b: 5a:51:b6:69:f6:e8:89:4a:aa:75:bb:5e:7a:60:9b:5f:92:ae: 00:a8:1f:ac:c7:18:f2:d5:5e:5a:2b:cf:3d:fb:6c:8e:9d:e1: df:a2:b5:51:0c:84:25:1f:17:98:e8:e6:5c:a1:85:5d:df:e7: 80:e7:03:88:82:a1:10:67:0b:e8:4f:a8:cf:0c:29:ce:96:43: b1:4f:2a:48:c7:18:06:38:58:4d:6a:4b:52:0f:30:2f:b5:8f: a7:bf:7e:03:09:20:fd:1c:6b:b2:15:67:83:aa:e9:d5:c7:96: 10:d2:c6:c8:e9:af:e5:c1:a2:65:09:cb:24:df:f1:e5:cf:18: 1e:2d:73:2e -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI2MDMzMTA4 MzEyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkJFMTZBRjI0QzMwQ0VC N0I0QUE2RDMyMDMwNTk4MjgxMkU4QzNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCYVt1DGG9ADdguLcUMNj4NvjDg0EwxWWcXyi0wDa0kYj32Wubb TTUV9itL/rxTcE+j6p45hzqvWpzWQmvoAOPvNWLQ4wuXO71xUoEt7gX5fqQNl6Jl /xQ0hQYUyNU2SlvUZYBTXKo8USmsyUoGsYVgg/mWyha8fh9XDUuistDlirBqHLQV pW6ec2+WnRBwv66OBLHQdzQUzoUEm4IEYaM/KUkVIB6F706A6sw1ejVHMEjdZY5P HSROdQXccLmzqBPI8N3EOxHXf4yJO1nYkgJyQcOCTjHybNcLya2RA99OspCLtbck iKMzt6UrLNCLlR+vFOkBmg7beRcvOnaxhqsCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQr4WryTDDOt7SqbTIDBZgoEujDuzAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8zOTUvSy1GcThrd3d6cmUwcW0weUF3V1lLQkxvdzdzLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANN9iTANBgkqhkiG9w0BAQsFAAOCAQEA rmuxwalToXXx8q+nR/uZ4qXubTnaIKVWF27LTyyT93M2dM/8WEWYi4HVQ5XyMmlZ svoDi8FvsfYGcVP+9Jql9Iw2clArPGwAWulDjcdbJXelA4FrcdjY1HhES2ESWjh1 h7NJVNNg/rPUlLLLbhgXTiEwsCbHx2u78ZyxFNxrWlG2afboiUqqdbteemCbX5Ku AKgfrMcY8tVeWivPPftsjp3h36K1UQyEJR8XmOjmXKGFXd/ngOcDiIKhEGcL6E+o zwwpzpZDsU8qSMcYBjhYTWpLUg8wL7WPp79+Awkg/RxrshVng6rp1ceWENLGyOmv 5cGiZQnLJN/x5c8YHi1zLg== -----END CERTIFICATE-----Generated at Wed Apr 8 01:19:52 2026 by rpki-client