$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kf5BFX6CMzWJL22FiMiz8yVEGYk.roa File: Kf5BFX6CMzWJL22FiMiz8yVEGYk.roa (raw, json) Hash identifier: DBC6e92uG+V4hJLMYRMHSqQyp++NW6X1CYYsxaKJl4I= Subject key identifier: 29:FE:41:15:7E:82:33:35:89:2F:6D:85:88:C8:B3:F3:25:44:19:89 Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 8D Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kf5BFX6CMzWJL22FiMiz8yVEGYk.roa Signing time: Tue 31 Mar 2026 08:24:57 +0000 ROA not before: Tue 31 Mar 2026 08:24:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9374 IP address blocks: 116.89.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Mar 31 08:24:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=29FE41157E823335892F6D8588C8B3F325441989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:d6:ed:7a:a9:bc:43:7e:df:70:b9:66:9a: da:7c:d4:0d:2c:8c:89:13:5f:08:45:3b:58:11:2c: 74:ae:49:2e:89:80:37:1f:a9:45:c7:3b:23:3d:8f: 11:4c:f4:03:d1:20:b5:fb:4d:29:b1:16:cf:6b:00: ff:e2:0b:0d:73:19:9b:80:ff:c0:90:f0:21:18:e3: b3:46:9b:5e:9b:3c:c1:59:2c:02:e4:08:47:d9:aa: db:1b:74:88:05:9a:df:48:db:d6:ce:db:a9:43:b2: 6c:86:6e:43:bf:7f:7b:db:9c:83:30:62:f0:98:68: 2b:dd:7b:3b:5f:5e:e9:cb:3e:d5:69:9d:93:db:98: 3e:13:8c:1a:f3:fd:52:e8:59:24:01:19:e1:86:a2: c5:89:cb:93:57:a6:60:60:51:bc:c1:9c:e6:8d:6f: 09:fd:c4:85:79:47:db:a8:f5:a1:6b:e9:1e:a6:99: 33:66:cd:ef:97:b3:5e:25:07:c6:4f:42:df:2c:3e: 2e:76:c3:7e:7e:22:47:1d:b6:aa:13:d7:f1:8f:22: e4:dd:65:64:60:5e:13:56:49:76:f7:03:b2:bf:62: c4:9f:cf:86:6e:89:bc:4b:a6:4c:ca:22:4b:cc:fc: 85:b9:4b:8e:9f:2a:ab:07:f7:f6:6c:15:30:86:a4: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FE:41:15:7E:82:33:35:89:2F:6D:85:88:C8:B3:F3:25:44:19:89 X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kf5BFX6CMzWJL22FiMiz8yVEGYk.roa sbgp-ipAddrBlock: critical IPv4: 116.89.192.0/20 Signature Algorithm: sha256WithRSAEncryption 52:85:c2:c8:1b:07:11:3d:1a:3a:b5:00:f5:e5:97:71:50:27: 3b:d4:9b:c8:7d:85:ca:ce:3d:d3:a8:aa:23:7e:38:b8:22:a0: 7e:cd:14:9e:9a:bc:86:9d:6d:21:4f:2e:f6:d4:b8:f7:7d:bd: 86:4a:a3:d7:5f:06:ab:52:ae:cf:93:76:06:97:54:14:8f:5f: ba:a1:54:98:c2:49:7f:e1:75:a6:a5:a0:09:c7:89:51:b9:d5: 2b:51:49:0e:58:54:7c:ad:6c:2e:64:24:56:10:5b:79:98:30: 98:e0:b6:d7:6e:44:7a:76:03:4c:05:1b:fa:08:39:69:90:82: 72:cf:e3:b1:7b:50:e0:f9:05:f8:cc:fc:d1:72:b1:61:6c:3f: 30:42:ec:98:fd:68:7a:22:f9:5c:61:ec:b7:ac:0d:5f:e6:46: c6:0a:61:28:c1:cd:5f:8a:a7:05:d2:c3:82:0f:3f:ab:b1:1f: 70:7e:c5:75:11:37:14:86:9c:2d:b9:3d:27:f0:f6:eb:41:41: 9f:31:d0:5b:ea:bf:b9:d7:6d:08:60:cb:ae:10:12:28:16:42: 25:ce:b2:d7:0c:4d:87:1e:bc:b0:8f:da:39:73:7b:04:71:28: 42:88:f2:ea:a0:ff:19:f1:a7:64:1e:aa:b3:70:a4:87:33:4b: 44:2a:12:7a -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE RTUyRTY0QkU0M0UzMjhBQTY5RjNBQjJEMzQ3Rjg4MzNFQzYzNzAeFw0yNjAzMzEw ODI0NTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI5RkU0MTE1N0U4MjMz MzU4OTJGNkQ4NTg4QzhCM0YzMjU0NDE5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz4dbteqm8Q37fcLlmmtp81A0sjIkTXwhFO1gRLHSuSS6JgDcf qUXHOyM9jxFM9APRILX7TSmxFs9rAP/iCw1zGZuA/8CQ8CEY47NGm16bPMFZLALk CEfZqtsbdIgFmt9I29bO26lDsmyGbkO/f3vbnIMwYvCYaCvdeztfXunLPtVpnZPb mD4TjBrz/VLoWSQBGeGGosWJy5NXpmBgUbzBnOaNbwn9xIV5R9uo9aFr6R6mmTNm ze+Xs14lB8ZPQt8sPi52w35+IkcdtqoT1/GPIuTdZWRgXhNWSXb3A7K/YsSfz4Zu ibxLpkzKIkvM/IW5S46fKqsH9/ZsFTCGpGXfAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUKf5BFX6CMzWJL22FiMiz8yVEGYkwHwYDVR0jBBgwFoAUZd5S5kvkPjKKpp86 stNH+IM+xjcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY4L1pkNVM1a3ZrUGpLS3BwODZzdE5ILUlNLXhqYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1pkNVM1a3ZrUGpLS3BwODZzdE5ILUlN LXhqYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82OC9LZjVCRlg2Q016V0pMMjJGaU1pejh5VkVHWWsucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEdFnAMA0GCSqGSIb3DQEBCwUAA4IBAQBS hcLIGwcRPRo6tQD15ZdxUCc71JvIfYXKzj3TqKojfji4IqB+zRSemryGnW0hTy72 1Lj3fb2GSqPXXwarUq7Pk3YGl1QUj1+6oVSYwkl/4XWmpaAJx4lRudUrUUkOWFR8 rWwuZCRWEFt5mDCY4LbXbkR6dgNMBRv6CDlpkIJyz+Oxe1Dg+QX4zPzRcrFhbD8w QuyY/Wh6IvlcYey3rA1f5kbGCmEowc1fiqcF0sOCDz+rsR9wfsV1ETcUhpwtuT0n 8PbrQUGfMdBb6r+5120IYMuuEBIoFkIlzrLXDE2HHrywj9o5c3sEcShCiPLqoP8Z 8adkHqqzcKSHM0tEKhJ6 -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:55 2026 by rpki-client