$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/vXKKkbIPaJizgT48KecY_mgVeT0.roa File: vXKKkbIPaJizgT48KecY_mgVeT0.roa (raw, json) Hash identifier: kZlZi6ADAYZKHY2f8DjN3CgaKkshkiMGvvVdNUGSSeM= Subject key identifier: BD:72:8A:91:B2:0F:68:98:B3:81:3E:3C:29:E7:18:FE:68:15:79:3D Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Certificate serial: 74 Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/vXKKkbIPaJizgT48KecY_mgVeT0.roa Signing time: Tue 31 Mar 2026 08:31:25 +0000 ROA not before: Tue 31 Mar 2026 08:31:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9619 IP address blocks: 211.125.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 23:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1 Validity Not Before: Mar 31 08:31:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BD728A91B20F6898B3813E3C29E718FE6815793D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:2d:b4:85:f3:5a:44:68:7a:6b:3d:e5:a2: cc:bb:7b:e5:b9:6b:88:3e:b5:d4:f5:f5:3a:c7:0e: 11:05:96:10:98:c6:49:3d:27:ec:70:50:5d:e9:2d: ca:4c:dd:4f:d8:8f:e4:51:2f:4f:de:10:d3:36:de: b7:d1:54:5f:7b:b5:70:87:35:91:67:92:e5:67:aa: e2:37:10:4e:95:95:fc:cd:08:5b:74:99:0e:9c:b1: 3e:4f:22:02:a8:c1:7d:39:a7:f0:a3:25:74:02:f1: 8c:c8:79:b4:da:3c:f8:9f:dd:a2:7d:18:7d:77:1d: b4:4b:0f:e3:ee:d3:7f:ab:fd:51:71:8a:81:60:07: ac:16:2f:6b:d4:a8:28:34:52:34:d6:86:9c:3f:be: bb:31:7c:e3:5e:3d:f9:46:71:20:3e:26:c2:26:94: d8:2c:e7:0a:57:c5:dd:e6:10:9f:76:de:c0:ad:67: 29:c1:9b:6c:cf:38:3b:ae:0a:fc:83:5d:a1:52:d4: 3a:6c:70:f5:f4:e0:50:bd:46:ee:9c:cf:f1:a1:91: 3c:d5:b8:7e:26:1e:b4:ee:73:44:18:a8:85:e2:29: ea:f6:9a:f2:a8:d0:40:b4:e8:db:40:c8:f9:81:dc: ad:0e:6b:71:e4:2b:1b:47:0f:2a:ec:a0:ee:3f:47: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:72:8A:91:B2:0F:68:98:B3:81:3E:3C:29:E7:18:FE:68:15:79:3D X509v3 Authority Key Identifier: keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/vXKKkbIPaJizgT48KecY_mgVeT0.roa sbgp-ipAddrBlock: critical IPv4: 211.125.136.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1c:df:2d:b2:59:d5:53:60:5d:34:86:1f:64:ac:e4:0d:68: 10:6f:4a:87:2f:52:f2:8e:93:62:3e:fe:3f:23:39:1c:ca:a4: f1:d0:1e:78:f9:55:81:b6:91:b6:cc:aa:e4:c3:6a:af:fb:81: e1:e6:fc:c6:7f:c9:0e:89:6b:76:e1:ce:b4:71:c4:41:43:36: 51:08:92:28:0c:2d:6a:88:34:60:7b:d5:62:9d:08:89:95:d1: b1:9b:c7:56:d6:d6:49:4b:5d:be:3e:96:05:bd:20:80:46:2c: 48:d9:59:8a:47:c0:96:ca:31:e3:bf:97:e2:49:64:cd:a8:87: 12:b5:c5:3d:c0:45:dc:44:72:99:5e:15:d0:8b:96:75:a6:51: 51:d3:f4:41:4e:c2:d8:e6:c2:e8:0d:24:54:79:06:c9:22:fe: 9e:d0:f5:9a:e0:46:65:81:1e:7b:d7:49:03:92:18:42:60:4e: 5d:4f:d7:01:ac:06:76:22:93:0f:c0:72:4a:f7:bf:43:fc:34: dc:5a:78:ff:42:c7:25:0d:de:32:78:b3:a0:d8:35:94:6a:16: 91:db:70:7e:f1:ce:f3:b2:f7:b6:d3:74:df:8e:6b:3d:4c:58: 8c:32:89:71:ba:a5:ef:ff:45:af:1d:f0:d4:c2:c3:16:75:ea: cf:8a:cd:1b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTI2MDMzMTA4 MzEyNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQkQ3MjhBOTFCMjBGNjg5 OEIzODEzRTNDMjlFNzE4RkU2ODE1NzkzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALltLbSF81pEaHprPeWizLt75blriD611PX1OscOEQWWEJjGST0n 7HBQXektykzdT9iP5FEvT94Q0zbet9FUX3u1cIc1kWeS5Weq4jcQTpWV/M0IW3SZ DpyxPk8iAqjBfTmn8KMldALxjMh5tNo8+J/don0YfXcdtEsP4+7Tf6v9UXGKgWAH rBYva9SoKDRSNNaGnD++uzF84149+UZxID4mwiaU2CznClfF3eYQn3bewK1nKcGb bM84O64K/INdoVLUOmxw9fTgUL1G7pzP8aGRPNW4fiYetO5zRBioheIp6vaa8qjQ QLTo20DI+YHcrQ5rceQrG0cPKuyg7j9HLY8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBS9coqRsg9omLOBPjwp5xj+aBV5PTAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8zOTUvdlhLS2tiSVBhSml6Z1Q0OEtlY1lfbWdWZVQwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANN9iDANBgkqhkiG9w0BAQsFAAOCAQEA bhzfLbJZ1VNgXTSGH2Ss5A1oEG9Khy9S8o6TYj7+PyM5HMqk8dAeePlVgbaRtsyq 5MNqr/uB4eb8xn/JDolrduHOtHHEQUM2UQiSKAwtaog0YHvVYp0IiZXRsZvHVtbW SUtdvj6WBb0ggEYsSNlZikfAlsox47+X4klkzaiHErXFPcBF3ERymV4V0IuWdaZR UdP0QU7C2ObC6A0kVHkGySL+ntD1muBGZYEee9dJA5IYQmBOXU/XAawGdiKTD8By Sve/Q/w03Fp4/0LHJQ3eMnizoNg1lGoWkdtwfvHO87L3ttN0345rPUxYjDKJcbql 7/9Frx3w1MLDFnXqz4rNGw== -----END CERTIFICATE-----Generated at Wed Apr 8 01:18:32 2026 by rpki-client