$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/S3f8Xce6JfCiLkqT7VCp0Z578vA.roa File: S3f8Xce6JfCiLkqT7VCp0Z578vA.roa (raw, json) Hash identifier: 1yTFYUTWrpyO9/XpzLC6Jq1Iixo4cmNE3NKrr9f163s= Subject key identifier: 4B:77:FC:5D:C7:BA:25:F0:A2:2E:4A:93:ED:50:A9:D1:9E:7B:F2:F0 Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC Certificate serial: A8 Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/S3f8Xce6JfCiLkqT7VCp0Z578vA.roa Signing time: Tue 31 Mar 2026 08:30:50 +0000 ROA not before: Tue 31 Mar 2026 08:30:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2915 IP address blocks: 126.209.193.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 13:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC Validity Not Before: Mar 31 08:30:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4B77FC5DC7BA25F0A22E4A93ED50A9D19E7BF2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:9c:f8:4b:4e:01:c4:42:de:f7:b2:11:d2: 33:25:7c:5d:a7:51:f7:95:78:1c:2e:48:bc:46:e3: ae:03:d9:af:28:37:67:8d:33:35:42:f2:3e:41:3c: 53:77:aa:ed:93:c7:ae:c2:05:f6:3a:f5:3a:97:d2: cb:91:75:7d:03:b9:a2:46:ae:c9:cf:5e:85:64:33: 5f:b5:57:52:9f:81:b8:c0:9f:e7:08:6e:ea:a5:9d: dc:6f:f8:b6:e0:43:0b:2a:e7:1d:71:a2:68:68:ae: 7b:d4:ca:28:36:a4:d9:83:d3:e6:04:10:21:03:e5: e2:02:4d:02:2f:59:63:f5:cf:fc:de:59:fc:5b:d2: f9:66:1e:28:28:a9:81:21:bd:ee:c2:cf:a3:ca:fb: 35:84:44:3b:c5:20:31:46:9c:95:ac:78:0b:56:c3: 80:93:3d:7e:fc:ef:dc:f2:59:3f:2b:07:63:f1:8a: 85:55:5a:16:02:2f:60:ef:7f:25:02:ac:37:79:a4: ed:73:8f:0c:22:7b:e1:65:05:09:43:f7:75:8d:a7: fc:05:41:25:ca:fe:e1:7f:7b:1c:f5:ac:62:32:27: d4:73:2c:15:24:5c:cc:05:58:f8:21:06:dd:39:e9: 22:cb:1e:4a:fd:f5:9a:36:4a:ea:4d:ff:54:d6:bf: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:FC:5D:C7:BA:25:F0:A2:2E:4A:93:ED:50:A9:D1:9E:7B:F2:F0 X509v3 Authority Key Identifier: keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/S3f8Xce6JfCiLkqT7VCp0Z578vA.roa sbgp-ipAddrBlock: critical IPv4: 126.209.193.0/24 Signature Algorithm: sha256WithRSAEncryption ab:22:86:dd:02:ce:66:09:d6:31:a2:7e:a1:8d:52:e4:f2:e3: 11:70:c8:f5:16:f6:5a:ba:36:2b:67:7c:18:66:7b:dc:a9:dd: f3:ed:df:62:08:e9:f9:b2:ff:8d:0d:66:fc:b9:f3:7d:37:92: bc:5b:f1:57:74:e8:f8:c3:1d:43:ef:9d:c2:68:26:f4:20:b0: c1:92:c3:fa:6d:1c:97:04:87:4a:c4:4e:d9:2a:5e:c5:1f:83: e8:33:c4:32:39:d7:dd:05:52:9e:a3:48:da:64:5b:e2:b7:bc: 95:4b:b1:57:51:c2:b8:81:c2:3e:2f:ea:ff:e0:27:b5:ec:e5: f9:e7:4f:78:5b:57:da:6f:01:d2:67:91:15:2b:09:9f:04:c7: cc:90:7b:ac:11:88:8f:d7:a9:0e:46:af:cf:7a:05:e4:22:08: 4a:fd:70:69:1a:32:98:a7:ec:f6:d8:f4:eb:9c:a6:21:6a:8e: 8c:cb:59:31:fc:bd:5c:a4:46:44:47:46:d1:db:4d:22:11:ca: 0c:85:42:ae:88:8b:83:18:78:95:ae:2a:68:b0:67:3a:7a:b6: 68:c0:33:a6:e2:25:4a:d0:e4:8c:7e:65:cf:ae:d2:46:dd:32: dc:99:63:31:29:7a:c3:f1:fa:8f:87:2c:f0:97:d7:04:37:a8: e6:31:c6:3a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFG NzZGQTA3NzM1RjY4NTk5MUZDODgyQzg4NUUyMUVGQkIxNjFCQzAeFw0yNjAzMzEw ODMwNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCNzdGQzVEQzdCQTI1 RjBBMjJFNEE5M0VENTBBOUQxOUU3QkYyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5hpz4S04BxELe97IR0jMlfF2nUfeVeBwuSLxG464D2a8oN2eN MzVC8j5BPFN3qu2Tx67CBfY69TqX0suRdX0DuaJGrsnPXoVkM1+1V1KfgbjAn+cI buqlndxv+LbgQwsq5x1xomhornvUyig2pNmD0+YEECED5eICTQIvWWP1z/zeWfxb 0vlmHigoqYEhve7Cz6PK+zWERDvFIDFGnJWseAtWw4CTPX7879zyWT8rB2PxioVV WhYCL2DvfyUCrDd5pO1zjwwie+FlBQlD93WNp/wFQSXK/uF/exz1rGIyJ9RzLBUk XMwFWPghBt056SLLHkr99Zo2SupN/1TWv6v9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUS3f8Xce6JfCiLkqT7VCp0Z578vAwHwYDVR0jBBgwFoAUcfdvoHc19oWZH8iC yIXiHvuxYbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU5Ny9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2dXhZYncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2 dXhZYncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTk3L1MzZjhYY2U2SmZDaUxrcVQ3VkNwMFo1Nzh2QS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB+0cEwDQYJKoZIhvcNAQELBQADggEB AKsiht0CzmYJ1jGifqGNUuTy4xFwyPUW9lq6NitnfBhme9yp3fPt32II6fmy/40N Zvy58303krxb8Vd06PjDHUPvncJoJvQgsMGSw/ptHJcEh0rETtkqXsUfg+gzxDI5 190FUp6jSNpkW+K3vJVLsVdRwriBwj4v6v/gJ7Xs5fnnT3hbV9pvAdJnkRUrCZ8E x8yQe6wRiI/XqQ5Gr896BeQiCEr9cGkaMpin7PbY9OucpiFqjozLWTH8vVykRkRH RtHbTSIRygyFQq6Ii4MYeJWuKmiwZzp6tmjAM6biJUrQ5Ix+Zc+u0kbdMtyZYzEp esPx+o+HLPCX1wQ3qOYxxjo= -----END CERTIFICATE-----Generated at Mon Apr 6 16:31:16 2026 by rpki-client