$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/3v2QmnXViL6AEpi9gCsZEdD4Gbg.roa File: 3v2QmnXViL6AEpi9gCsZEdD4Gbg.roa (raw, json) Hash identifier: ay0GN9SJ7nVvwffCrqeBxTbV8JABCYtajqUhK47xT+M= Subject key identifier: DE:FD:90:9A:75:D5:88:BE:80:12:98:BD:80:2B:19:11:D0:F8:19:B8 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0249 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/3v2QmnXViL6AEpi9gCsZEdD4Gbg.roa Signing time: Tue 31 Mar 2026 07:36:06 +0000 ROA not before: Tue 31 Mar 2026 07:36:06 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.238.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Mar 31 07:36:06 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DEFD909A75D588BE801298BD802B1911D0F819B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:39:bb:e7:57:05:26:93:29:d4:1a:0b:d9: 73:f8:b5:c6:47:26:92:bc:8d:fa:68:68:a2:95:54: 70:97:c8:40:7f:79:c5:bc:7d:08:11:d2:47:ed:9c: c0:c9:aa:f5:8c:1f:01:c2:6a:ad:57:5b:44:df:54: e1:b5:c7:dd:58:38:47:7f:09:8e:4f:9f:18:ee:34: 74:ec:17:65:25:08:8d:41:0c:5a:30:9f:2a:26:c1: 2d:40:bf:9a:9c:e9:84:b8:ab:6e:df:29:26:6a:91: a0:36:34:2e:c3:24:86:61:71:85:f4:0e:ed:df:be: c3:7f:38:d9:d8:26:d7:db:96:d1:0b:3b:90:1a:2f: 8c:60:37:d1:18:3c:ef:a1:2a:d3:e4:d2:b1:b9:7b: a3:61:97:5d:00:18:c7:18:d4:01:9e:77:38:06:f9: c5:e5:69:39:78:eb:d0:4f:89:9c:28:26:31:c9:15: ad:18:b8:23:1f:0b:7d:48:6b:b9:9c:48:d2:b9:c9: 54:3f:d7:ac:9f:01:91:67:8f:c3:3f:f7:62:03:22: 38:6c:62:c9:d9:53:2d:86:91:a6:22:90:f0:9a:95: 1c:8c:dd:1b:b9:8e:92:9b:51:95:93:ab:7d:7b:66: 62:b5:81:29:26:e3:92:01:a2:ae:f6:f5:54:9a:95: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:90:9A:75:D5:88:BE:80:12:98:BD:80:2B:19:11:D0:F8:19:B8 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/3v2QmnXViL6AEpi9gCsZEdD4Gbg.roa sbgp-ipAddrBlock: critical IPv4: 133.238.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5e:f0:4f:4a:ae:9e:38:c8:b6:d8:0f:b5:6f:bb:2f:ec:c2:ac: 0b:94:21:2f:d4:e2:9c:34:d8:f4:79:f2:e6:3e:46:9c:86:7a: c0:09:f8:9d:7c:3f:19:ef:17:d2:ba:a0:61:b7:e2:56:90:ad: a3:37:a2:c9:88:95:3f:c6:6d:ab:0a:cf:ad:7c:ad:01:0a:88: 1d:3b:a5:0c:18:71:07:70:5f:d2:a8:f1:dd:b0:eb:3d:9b:cc: 39:ff:a0:cc:ee:4c:ea:fe:3f:5d:72:7e:b9:ab:5d:c1:b0:bc: bb:43:38:a7:70:a2:ae:df:f7:f3:40:43:9b:e9:cc:96:b7:58: 49:e8:29:66:f9:32:3b:76:ba:8d:13:f9:0e:6a:a5:3b:c2:54: ee:74:93:3e:8a:3c:e3:52:a6:e3:82:7c:ca:58:76:cf:e5:05: 08:dc:27:4f:b6:b5:75:3a:3d:d3:39:bb:73:03:bb:83:af:c7: c0:be:ed:d1:0e:f8:bf:49:65:6e:95:53:69:1f:69:fa:ed:ba: dd:1f:78:8c:8d:84:ee:4a:7f:25:00:3a:9e:70:b9:b4:3a:ed: e3:20:7b:d7:bf:c2:05:76:a2:f2:1f:03:03:4d:a4:b7:46:f0: c1:17:6e:92:c0:5f:08:4a:0f:55:ec:70:41:5a:03:37:92:f9: 5f:a4:a7:77 -----BEGIN CERTIFICATE----- MIIEuTCCA6GgAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw NzM2MDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFRkQ5MDlBNzVENTg4 QkU4MDEyOThCRDgwMkIxOTExRDBGODE5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX4jm751cFJpMp1BoL2XP4tcZHJpK8jfpoaKKVVHCXyEB/ecW8 fQgR0kftnMDJqvWMHwHCaq1XW0TfVOG1x91YOEd/CY5PnxjuNHTsF2UlCI1BDFow nyomwS1Av5qc6YS4q27fKSZqkaA2NC7DJIZhcYX0Du3fvsN/ONnYJtfbltELO5Aa L4xgN9EYPO+hKtPk0rG5e6Nhl10AGMcY1AGedzgG+cXlaTl469BPiZwoJjHJFa0Y uCMfC31Ia7mcSNK5yVQ/16yfAZFnj8M/92IDIjhsYsnZUy2GkaYikPCalRyM3Ru5 jpKbUZWTq317ZmK1gSkm45IBoq729VSalWXJAgMBAAGjggHVMIIB0TAdBgNVHQ4E FgQU3v2QmnXViL6AEpi9gCsZEdD4GbgwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvM3YyUW1uWFZpTDZBRXBpOWdDc1pFZEQ0R2JnLnJvYTAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEB4XugDANBgkqhkiG9w0BAQsFAAOCAQEAXvBP Sq6eOMi22A+1b7sv7MKsC5QhL9TinDTY9Hny5j5GnIZ6wAn4nXw/Ge8X0rqgYbfi VpCtozeiyYiVP8ZtqwrPrXytAQqIHTulDBhxB3Bf0qjx3bDrPZvMOf+gzO5M6v4/ XXJ+uatdwbC8u0M4p3Cirt/380BDm+nMlrdYSegpZvkyO3a6jRP5DmqlO8JU7nST Poo841Km44J8ylh2z+UFCNwnT7a1dTo90zm7cwO7g6/HwL7t0Q74v0llbpVTaR9p +u263R94jI2E7kp/JQA6nnC5tDrt4yB717/CBXai8h8DA02kt0bwwRduksBfCEoP VexwQVoDN5L5X6Sndw== -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:04 2026 by rpki-client