$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/9vOpbZDZ0bo0Ah20fhlOp122Hqs.roa File: 9vOpbZDZ0bo0Ah20fhlOp122Hqs.roa (raw, json) Hash identifier: MIpJSthu6Wu6PE928MPCefkwC8Cr/xWMXtSjNMmqRhw= Subject key identifier: F6:F3:A9:6D:90:D9:D1:BA:34:02:1D:B4:7E:19:4E:A7:5D:B6:1E:AB Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0247 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/9vOpbZDZ0bo0Ah20fhlOp122Hqs.roa Signing time: Tue 31 Mar 2026 07:36:05 +0000 ROA not before: Tue 31 Mar 2026 07:36:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Mar 31 07:36:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F6F3A96D90D9D1BA34021DB47E194EA75DB61EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:2b:8a:9e:4c:a9:61:b1:6f:c3:b8:03:db: a6:d2:26:13:35:b8:b5:23:d2:f9:93:d0:44:bd:f4: b6:c9:24:4f:65:4f:17:ed:2b:43:66:83:78:8e:52: 78:7d:76:71:d8:bc:e9:32:72:79:4b:fd:82:c4:de: a7:6b:35:00:c4:c5:b0:1f:b3:fe:2d:ee:2f:f7:81: ae:7c:c3:13:91:60:66:9a:df:29:b0:d5:f8:33:8c: c6:73:93:df:cf:cf:8d:3d:8f:68:40:db:43:26:75: 3f:f3:4d:77:84:b9:25:68:5a:c7:5e:23:83:10:39: 02:77:b0:a3:10:2e:83:93:ce:1f:62:1b:b0:ef:1f: 46:20:e2:e1:a3:20:45:0c:0a:88:c8:32:7c:aa:d8: 2f:30:83:85:b4:85:af:03:94:41:f9:34:af:89:4a: 28:44:23:e5:21:07:cb:53:9b:43:58:5d:af:c5:64: 47:a1:7d:59:d3:22:c8:c2:52:a2:16:e4:ec:3a:bc: 6a:61:50:7d:ee:cb:23:4b:f1:1a:b9:9f:eb:e1:f3: 58:dd:f6:03:52:a9:80:a2:23:dc:91:b0:d1:4e:1f: 5b:ee:d0:02:3a:f8:cd:c9:67:0e:37:2f:b1:1a:a2: 14:bd:75:15:4b:eb:ac:4e:5c:e7:fe:c6:a1:f3:c3: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:A9:6D:90:D9:D1:BA:34:02:1D:B4:7E:19:4E:A7:5D:B6:1E:AB X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/9vOpbZDZ0bo0Ah20fhlOp122Hqs.roa sbgp-ipAddrBlock: critical IPv4: 133.238.16.0/20 Signature Algorithm: sha256WithRSAEncryption 57:11:07:1e:74:c7:02:21:ac:23:d7:6e:80:92:da:6a:ba:5a: 55:ba:da:e6:66:4c:ae:0d:53:a8:f9:05:38:1a:58:3d:88:da: 6d:04:c7:c9:de:d4:f8:ad:9c:04:b6:e9:5a:53:c0:ec:71:d5: 57:19:49:20:50:69:e4:2c:0d:4c:8e:5d:e3:db:65:aa:51:a0: dc:0b:87:df:e6:cd:59:bc:a1:cd:d8:df:d8:a3:0c:4e:ea:a9: 11:5d:a6:61:89:c5:ed:47:19:7c:3f:29:71:9e:62:4f:94:4b: bc:d8:65:7b:f1:99:f7:50:7d:1d:d3:6d:e4:fd:ab:3d:2a:f1: 37:fa:5b:fb:12:47:e8:b1:6d:32:fd:25:2d:1d:24:62:cc:4e: 67:94:cf:47:cd:24:b3:a9:cc:99:72:fd:ae:06:a7:b8:be:eb: 8c:3e:ca:b0:9a:d7:09:e8:06:8f:1b:b9:f7:e2:81:18:a7:25: 76:53:46:86:a9:3f:82:e9:e4:c7:32:09:9d:cd:36:36:c8:7c: 8e:3c:ea:32:d5:06:32:95:81:13:0f:b2:da:af:40:0d:93:f2: f1:7d:46:de:b0:be:93:5d:f6:36:16:30:e8:ff:d6:2e:55:c5: f7:da:50:b4:e1:85:0a:d5:e1:0f:1b:cb:b1:c2:b2:8b:12:4a: f1:be:8b:1e -----BEGIN CERTIFICATE----- MIIEuTCCA6GgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw NzM2MDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2RjNBOTZEOTBEOUQx QkEzNDAyMURCNDdFMTk0RUE3NURCNjFFQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBkyuKnkypYbFvw7gD26bSJhM1uLUj0vmT0ES99LbJJE9lTxft K0Nmg3iOUnh9dnHYvOkycnlL/YLE3qdrNQDExbAfs/4t7i/3ga58wxORYGaa3ymw 1fgzjMZzk9/Pz409j2hA20MmdT/zTXeEuSVoWsdeI4MQOQJ3sKMQLoOTzh9iG7Dv H0Yg4uGjIEUMCojIMnyq2C8wg4W0ha8DlEH5NK+JSihEI+UhB8tTm0NYXa/FZEeh fVnTIsjCUqIW5Ow6vGphUH3uyyNL8Rq5n+vh81jd9gNSqYCiI9yRsNFOH1vu0AI6 +M3JZw43L7EaohS9dRVL66xOXOf+xqHzw2DHAgMBAAGjggHVMIIB0TAdBgNVHQ4E FgQU9vOpbZDZ0bo0Ah20fhlOp122HqswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvOXZPcGJaRFowYm8wQWgyMGZobE9wMTIySHFzLnJvYTAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEBIXuEDANBgkqhkiG9w0BAQsFAAOCAQEAVxEH HnTHAiGsI9dugJLaarpaVbra5mZMrg1TqPkFOBpYPYjabQTHyd7U+K2cBLbpWlPA 7HHVVxlJIFBp5CwNTI5d49tlqlGg3AuH3+bNWbyhzdjf2KMMTuqpEV2mYYnF7UcZ fD8pcZ5iT5RLvNhle/GZ91B9HdNt5P2rPSrxN/pb+xJH6LFtMv0lLR0kYsxOZ5TP R80ks6nMmXL9rganuL7rjD7KsJrXCegGjxu59+KBGKcldlNGhqk/gunkxzIJnc02 Nsh8jjzqMtUGMpWBEw+y2q9ADZPy8X1G3rC+k132NhYw6P/WLlXF99pQtOGFCtXh DxvLscKyixJK8b6LHg== -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:02 2026 by rpki-client