$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/NLFuKMfSzh7vt-tytPYHyz3y6nU.roa File: NLFuKMfSzh7vt-tytPYHyz3y6nU.roa (raw, json) Hash identifier: YnC+O+2mekiQeOBbK+7uY6t2fBCzNvKmGFuKgjF7yps= Subject key identifier: 34:B1:6E:28:C7:D2:CE:1E:EF:B7:EB:72:B4:F6:07:CB:3D:F2:EA:75 Certificate issuer: /CN=EC6C37ABD6B13BABFCB70FE2B57C598C16D4A07F Certificate serial: 39 Authority key identifier: EC:6C:37:AB:D6:B1:3B:AB:FC:B7:0F:E2:B5:7C:59:8C:16:D4:A0:7F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/NLFuKMfSzh7vt-tytPYHyz3y6nU.roa Signing time: Thu 20 Aug 2026 10:35:16 +0000 ROA not before: Thu 20 Aug 2026 10:35:16 +0000 ROA not after: Sun 15 Aug 2027 01:30:02 +0000 asID: 0 IP address blocks: 133.128.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC6C37ABD6B13BABFCB70FE2B57C598C16D4A07F Validity Not Before: Aug 20 10:35:16 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=34B16E28C7D2CE1EEFB7EB72B4F607CB3DF2EA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:e4:52:34:e3:6f:08:0c:54:1a:2d:5c:7a: 84:c0:f8:c8:58:31:d1:ba:98:b5:e3:22:ae:46:52: 17:be:33:ef:29:d1:28:c8:48:21:ca:7b:c0:d9:43: 6a:b9:1e:f5:2a:4d:8c:e3:cc:f6:6c:f0:02:3c:2a: 9e:19:7b:d7:bc:a7:11:b0:8c:a4:c6:16:56:00:e3: 92:65:0f:e0:cf:f7:48:1e:06:84:c4:cc:e4:3f:59: 39:9f:ee:38:bc:e0:9c:23:f7:5d:3c:45:f0:57:71: 51:c4:01:2b:67:55:ce:3a:ea:60:33:d3:14:c8:f4: 83:af:73:25:88:d3:c3:95:8b:3d:20:f5:37:1e:62: f2:f1:44:e5:58:1a:e7:36:89:75:cf:eb:d9:0d:36: dc:f7:75:16:a3:1c:06:be:ba:ee:00:0c:e6:98:5e: b8:97:0c:a2:af:d9:a2:78:01:3c:39:2d:aa:26:cb: 12:a3:68:3b:10:df:2d:a3:c3:77:93:e0:f9:1c:3a: d4:2a:62:11:95:29:4e:b8:a9:9e:17:fd:23:cb:8e: 67:27:65:48:5e:ef:ab:b8:47:3d:d3:08:7d:3d:b6: e8:f8:2e:f6:fc:b5:e3:ea:19:4f:a1:56:0f:c9:16: 46:63:fb:3d:d9:33:c5:17:2d:43:04:21:2d:0c:f4: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B1:6E:28:C7:D2:CE:1E:EF:B7:EB:72:B4:F6:07:CB:3D:F2:EA:75 X509v3 Authority Key Identifier: keyid:EC:6C:37:AB:D6:B1:3B:AB:FC:B7:0F:E2:B5:7C:59:8C:16:D4:A0:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/7Gw3q9axO6v8tw_itXxZjBbUoH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7Gw3q9axO6v8tw_itXxZjBbUoH8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/NLFuKMfSzh7vt-tytPYHyz3y6nU.roa sbgp-ipAddrBlock: critical IPv4: 133.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:4e:e5:4d:08:be:50:3e:c9:a7:73:85:12:85:e0:86:51:38: 15:d3:1c:2e:ec:d3:dc:82:6a:29:d4:64:7e:9f:a4:e0:2a:74: 9d:99:69:23:04:19:26:08:25:f0:c4:ee:d2:70:1c:e7:6f:ee: 40:7b:6c:5f:26:6c:67:1d:9e:96:9d:47:1b:a6:b1:3c:80:01: 61:65:d8:bb:c6:7b:30:15:7c:12:b4:24:81:2e:a0:2c:c0:84: 38:0d:42:81:8e:c2:f6:44:74:5e:b0:f2:7d:51:77:b7:18:bb: 47:9d:63:76:e5:60:06:3b:4f:ec:4f:25:03:cc:c0:7d:fa:a1: 84:20:8b:c0:fe:1a:75:c0:aa:42:c7:bc:3e:61:75:6b:3a:6d: 7e:bf:5c:a8:9f:e9:25:82:ed:29:6f:1d:fd:e4:f6:77:43:9e: 10:37:78:fc:d0:6f:11:3d:9b:f2:6e:1c:85:7a:13:c8:92:2d: 92:da:72:9b:67:25:cf:19:3b:0a:82:d6:d1:3a:47:45:2d:92: cc:e9:b5:1e:01:68:54:21:45:cd:7a:df:a1:1f:70:85:50:ca: 11:35:bf:c6:0b:c1:11:4e:9a:68:3a:3a:80:31:68:71:f4:16: b7:63:94:c5:59:64:41:21:d2:28:57:7d:ef:4a:76:65:04:a5: fa:3e:96:c1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzZD MzdBQkQ2QjEzQkFCRkNCNzBGRTJCNTdDNTk4QzE2RDRBMDdGMB4XDTI2MDgyMDEw MzUxNloXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRCMTZFMjhDN0QyQ0Ux RUVGQjdFQjcyQjRGNjA3Q0IzREYyRUE3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANXC5FI0428IDFQaLVx6hMD4yFgx0bqYteMirkZSF74z7ynRKMhI Icp7wNlDarke9SpNjOPM9mzwAjwqnhl717ynEbCMpMYWVgDjkmUP4M/3SB4GhMTM 5D9ZOZ/uOLzgnCP3XTxF8FdxUcQBK2dVzjrqYDPTFMj0g69zJYjTw5WLPSD1Nx5i 8vFE5Vga5zaJdc/r2Q023Pd1FqMcBr667gAM5pheuJcMoq/ZongBPDktqibLEqNo OxDfLaPDd5Pg+Rw61CpiEZUpTripnhf9I8uOZydlSF7vq7hHPdMIfT226Pgu9vy1 4+oZT6FWD8kWRmP7PdkzxRctQwQhLQz0yEsCAwEAAaOCAdowggHWMB0GA1UdDgQW BBQ0sW4ox9LOHu+363K09gfLPfLqdTAfBgNVHSMEGDAWgBTsbDer1rE7q/y3D+K1 fFmMFtSgfzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNS83R3czcTlheE82djh0d19pdFh4WmpCYlVvSDguY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC83R3czcTlheE82djh0d19pdFh4WmpC YlVvSDguY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjAwNS9OTEZ1S01mU3poN3Z0LXR5dFBZSHl6M3k2blUucm9hMB4G CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhYAwDQYJKoZIhvcNAQELBQADggEB AA9O5U0IvlA+yadzhRKF4IZROBXTHC7s09yCainUZH6fpOAqdJ2ZaSMEGSYIJfDE 7tJwHOdv7kB7bF8mbGcdnpadRxumsTyAAWFl2LvGezAVfBK0JIEuoCzAhDgNQoGO wvZEdF6w8n1Rd7cYu0edY3blYAY7T+xPJQPMwH36oYQgi8D+GnXAqkLHvD5hdWs6 bX6/XKif6SWC7SlvHf3k9ndDnhA3ePzQbxE9m/JuHIV6E8iSLZLacptnJc8ZOwqC 1tE6R0UtkszptR4BaFQhRc1636EfcIVQyhE1v8YLwRFOmmg6OoAxaHH0FrdjlMVZ ZEEh0ihXfe9KdmUEpfo+lsE= -----END CERTIFICATE-----Generated at Fri Aug 21 22:24:49 2026 by rpki-client