$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/yafCUSdtDzuEwGQoxPok2RY3fi0.roa File: yafCUSdtDzuEwGQoxPok2RY3fi0.roa (raw, json) Hash identifier: f/cWMYNPyizEJHm0Phm4US+jr70pd8H4aIGlpye7jB4= Subject key identifier: C9:A7:C2:51:27:6D:0F:3B:84:C0:64:28:C4:FA:24:D9:16:37:7E:2D Certificate issuer: /CN=32DB70FFB8A72289F56450768644658C54AA64E9 Certificate serial: 57 Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/yafCUSdtDzuEwGQoxPok2RY3fi0.roa Signing time: Tue 31 Mar 2026 07:51:10 +0000 ROA not before: Tue 31 Mar 2026 07:51:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18135 IP address blocks: 219.100.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9 Validity Not Before: Mar 31 07:51:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C9A7C251276D0F3B84C06428C4FA24D916377E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:78:aa:d4:a9:ec:28:53:1b:3b:bf:e4:26: db:46:fb:e1:54:64:83:68:c2:7e:d8:c0:04:74:6d: 8e:dd:7f:a0:a5:f3:4b:89:71:ab:0e:f8:e5:c3:c5: cf:1d:c1:3d:21:2f:d6:8b:6f:19:43:74:94:5f:0c: c0:b9:60:83:ef:59:3b:1d:df:89:85:f0:d9:dd:e2: 73:ca:d4:f5:e3:fb:c8:b8:ff:ab:c3:da:4b:32:a9: 46:ec:e6:48:ec:54:79:6a:51:96:8c:9b:0c:36:da: ee:bf:51:28:98:f9:ba:4d:36:12:52:b5:bc:f6:6d: 9e:aa:00:1a:a0:22:be:d7:84:6a:67:3a:ba:00:79: 8e:ed:e7:59:4a:8f:24:53:96:ef:fe:a0:6e:af:96: 41:3a:cf:42:a3:d7:18:1e:0f:ee:ca:29:19:f5:f7: d4:61:86:d1:f3:05:c2:37:d7:5a:ab:a0:9f:00:ca: c8:42:0a:9e:51:89:e6:03:43:c5:80:a9:51:37:2d: 9b:48:20:d1:04:74:4b:9b:27:5b:7d:3f:24:2e:26: a4:98:c4:f2:9d:55:18:22:62:27:57:86:97:c3:41: 78:76:7e:aa:d0:c4:4c:32:f8:98:c4:38:d9:50:d9: f8:4b:57:e0:af:99:9d:67:e6:7a:9a:41:ad:2b:58: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:C2:51:27:6D:0F:3B:84:C0:64:28:C4:FA:24:D9:16:37:7E:2D X509v3 Authority Key Identifier: keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/yafCUSdtDzuEwGQoxPok2RY3fi0.roa sbgp-ipAddrBlock: critical IPv4: 219.100.88.0/22 Signature Algorithm: sha256WithRSAEncryption 25:1f:70:9b:10:75:11:a4:a3:42:d5:a0:ad:8f:7a:93:1e:53: 03:c0:2a:fe:11:67:cc:5b:d9:8e:c4:a9:13:5c:14:d8:28:e2: 8a:74:6b:82:61:0d:e0:2e:e4:27:c0:89:fa:d5:b8:23:fc:84: 13:c5:7b:22:76:32:19:ca:59:6e:9e:a7:55:85:25:ca:e0:e7: c3:08:6b:c2:bc:aa:91:d0:ba:34:57:d0:88:e3:51:a4:dd:f7: 5e:f4:03:86:fe:d7:56:2c:0e:fc:75:63:6f:59:71:9d:8a:c3: b3:55:ce:0d:a3:60:1e:c9:38:df:66:a5:3d:f5:99:b6:21:e0: b6:02:5d:87:60:32:36:48:f3:36:0d:3c:17:5d:5a:8e:27:d2: 22:2b:83:b0:4c:d2:ad:a3:4b:3a:9b:e3:bb:23:1e:d4:f3:91: 45:d4:45:70:d9:40:a2:6a:86:bc:29:c6:a7:fb:75:b3:f0:7d: 73:b6:8c:bf:4f:3f:9f:df:91:02:2f:77:7c:de:b9:88:1f:c1: d9:51:02:c0:d7:b9:dd:62:c4:b5:4f:fc:72:60:23:31:2e:a7: 55:03:1b:8d:96:37:f1:7b:7d:3d:9c:c1:ac:0f:27:ed:e1:52: dc:cc:8f:88:a4:31:e7:b7:4c:ef:32:b1:df:1f:ec:9b:ed:fd: cf:9c:f8:9c -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMkRC NzBGRkI4QTcyMjg5RjU2NDUwNzY4NjQ0NjU4QzU0QUE2NEU5MB4XDTI2MDMzMTA3 NTExMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQzlBN0MyNTEyNzZEMEYz Qjg0QzA2NDI4QzRGQTI0RDkxNjM3N0UyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMq5eKrUqewoUxs7v+Qm20b74VRkg2jCftjABHRtjt1/oKXzS4lx qw745cPFzx3BPSEv1otvGUN0lF8MwLlgg+9ZOx3fiYXw2d3ic8rU9eP7yLj/q8Pa SzKpRuzmSOxUeWpRloybDDba7r9RKJj5uk02ElK1vPZtnqoAGqAivteEamc6ugB5 ju3nWUqPJFOW7/6gbq+WQTrPQqPXGB4P7sopGfX31GGG0fMFwjfXWqugnwDKyEIK nlGJ5gNDxYCpUTctm0gg0QR0S5snW30/JC4mpJjE8p1VGCJiJ1eGl8NBeHZ+qtDE TDL4mMQ42VDZ+EtX4K+ZnWfmeppBrStYO30CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTJp8JRJ20PO4TAZCjE+iTZFjd+LTAfBgNVHSMEGDAWgBQy23D/uKciifVkUHaG RGWMVKpk6TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjk2L010dHdfN2luSW9uMVpGQjJoa1JsakZTcVpPay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL010dHdfN2luSW9uMVpGQjJoa1JsakZT cVpPay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82OTYveWFmQ1VTZHREenVFd0dRb3hQb2syUlkzZmkwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAttkWDANBgkqhkiG9w0BAQsFAAOCAQEA JR9wmxB1EaSjQtWgrY96kx5TA8Aq/hFnzFvZjsSpE1wU2CjiinRrgmEN4C7kJ8CJ +tW4I/yEE8V7InYyGcpZbp6nVYUlyuDnwwhrwryqkdC6NFfQiONRpN33XvQDhv7X ViwO/HVjb1lxnYrDs1XODaNgHsk432alPfWZtiHgtgJdh2AyNkjzNg08F11ajifS IiuDsEzSraNLOpvjuyMe1PORRdRFcNlAomqGvCnGp/t1s/B9c7aMv08/n9+RAi93 fN65iB/B2VECwNe53WLEtU/8cmAjMS6nVQMbjZY38Xt9PZzBrA8n7eFS3MyPiKQx 57dM7zKx3x/sm+39z5z4nA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:08 2026 by rpki-client