$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/SzkmT-Mg2FwSM0x9HX3UvpyGkEE.roa File: SzkmT-Mg2FwSM0x9HX3UvpyGkEE.roa (raw, json) Hash identifier: UGNvuGsc1tPDX1x1HQx8vzexIpsT9scv85AQTlSygtE= Subject key identifier: 4B:39:26:4F:E3:20:D8:5C:12:33:4C:7D:1D:7D:D4:BE:9C:86:90:41 Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Certificate serial: 43 Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/SzkmT-Mg2FwSM0x9HX3UvpyGkEE.roa Signing time: Tue 31 Mar 2026 08:32:39 +0000 ROA not before: Tue 31 Mar 2026 08:32:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18283 IP address blocks: 133.117.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Validity Not Before: Mar 31 08:32:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4B39264FE320D85C12334C7D1D7DD4BE9C869041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:94:84:61:6a:c4:f2:14:d7:4c:8e:cc:38: 43:86:fe:5d:48:5a:63:c4:85:cf:3e:86:b5:34:48: fc:a5:41:fa:a0:9a:12:7d:e3:a1:c4:23:e8:4a:d8: 49:5b:25:4b:61:6c:75:4e:71:39:71:c3:38:c2:84: 33:d7:83:3f:bd:3f:c9:dd:a5:db:81:c5:8e:bf:69: 17:fe:11:46:d6:db:b1:9d:ce:83:98:a4:d1:fe:f8: e4:81:00:71:5d:ac:9b:6b:fa:68:55:c0:bc:3e:1e: af:35:d0:ce:1e:8c:27:58:b7:25:f4:2a:54:ab:47: 2d:dd:67:48:6c:7e:19:71:6d:d6:ca:0e:bd:81:ad: 52:97:24:32:22:a1:f4:56:c5:ec:ec:67:9f:10:67: 62:41:9a:25:1c:27:33:ae:76:0f:36:fb:7f:85:46: f8:fa:a1:ce:67:8d:a2:e7:3b:b7:c7:ca:f8:d4:bf: 33:df:ec:c4:48:94:e8:5d:99:9b:41:5c:3a:c1:53: 72:a3:38:5b:85:87:c0:aa:8c:10:2e:25:e0:80:9d: a4:dc:ec:ea:35:40:27:4f:2b:44:43:5f:ff:bd:8b: 9c:b1:44:e8:a6:53:8b:b8:4d:b0:ab:18:c5:d1:76: 00:2c:9a:97:59:77:fe:6d:10:f5:54:03:ac:f2:df: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:39:26:4F:E3:20:D8:5C:12:33:4C:7D:1D:7D:D4:BE:9C:86:90:41 X509v3 Authority Key Identifier: keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/SzkmT-Mg2FwSM0x9HX3UvpyGkEE.roa sbgp-ipAddrBlock: critical IPv4: 133.117.112.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:b5:56:b1:7e:18:dc:e8:56:34:95:71:9c:79:3d:e0:eb:fd: 73:3b:b0:c3:6f:06:7f:fe:93:75:bd:6e:d7:3e:b3:aa:50:3c: 29:81:3e:f4:62:32:e1:21:37:25:32:f2:9f:6f:a1:68:26:f8: 78:e5:84:63:f9:5c:e1:81:cb:17:f2:54:1c:6f:e0:7a:84:4f: 55:0b:43:69:53:00:b9:12:34:af:7b:6b:13:6d:0a:2e:47:1b: 62:96:b1:e9:a5:c6:52:0d:ab:a2:8a:9e:f2:84:9b:8e:5b:96: 7c:15:8f:51:d4:c8:e9:21:6a:fe:40:4d:7c:9e:25:40:7b:10: e6:70:e6:30:60:cd:86:67:fd:b4:aa:69:5c:b5:9e:b5:94:34: c1:90:c1:84:89:b5:07:28:8a:83:99:ad:a3:e3:d5:45:9d:fa: 4a:a3:dc:5c:ae:db:a1:68:41:d1:2a:c2:a3:ea:db:09:b5:bf: aa:98:2e:a4:fd:50:85:0b:40:a1:56:e2:36:4f:b2:4d:3f:27: ee:cc:56:37:8b:ac:62:ce:00:b9:c4:9c:c4:7a:25:a5:c2:7c: 0b:f9:a2:64:21:2a:b6:4c:61:d1:02:ac:cd:08:25:37:38:fa: ea:03:87:38:e3:33:7e:b5:b4:bd:e7:46:dc:69:c1:77:cb:0f: 57:9a:5a:97 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI2MDMzMTA4 MzIzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNEIzOTI2NEZFMzIwRDg1 QzEyMzM0QzdEMUQ3REQ0QkU5Qzg2OTA0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANNGlIRhasTyFNdMjsw4Q4b+XUhaY8SFzz6GtTRI/KVB+qCaEn3j ocQj6ErYSVslS2FsdU5xOXHDOMKEM9eDP70/yd2l24HFjr9pF/4RRtbbsZ3Og5ik 0f745IEAcV2sm2v6aFXAvD4erzXQzh6MJ1i3JfQqVKtHLd1nSGx+GXFt1soOvYGt UpckMiKh9FbF7OxnnxBnYkGaJRwnM652Dzb7f4VG+PqhzmeNouc7t8fK+NS/M9/s xEiU6F2Zm0FcOsFTcqM4W4WHwKqMEC4l4ICdpNzs6jVAJ08rRENf/72LnLFE6KZT i7hNsKsYxdF2ACyal1l3/m0Q9VQDrPLf6y0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRLOSZP4yDYXBIzTH0dfdS+nIaQQTAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9 n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4 TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDcvU3prbVQtTWcyRndTTTB4OUhYM1V2cHlHa0VFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBIV1cDANBgkqhkiG9w0BAQsFAAOCAQEA K7VWsX4Y3OhWNJVxnHk94Ov9czuww28Gf/6Tdb1u1z6zqlA8KYE+9GIy4SE3JTLy n2+haCb4eOWEY/lc4YHLF/JUHG/geoRPVQtDaVMAuRI0r3trE20KLkcbYpax6aXG Ug2rooqe8oSbjluWfBWPUdTI6SFq/kBNfJ4lQHsQ5nDmMGDNhmf9tKppXLWetZQ0 wZDBhIm1ByiKg5mto+PVRZ36SqPcXK7boWhB0SrCo+rbCbW/qpgupP1QhQtAoVbi Nk+yTT8n7sxWN4usYs4AucScxHolpcJ8C/miZCEqtkxh0QKszQglNzj66gOHOOMz frW0vedG3GnBd8sPV5palw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:54 2026 by rpki-client