$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/-LmR3dI9z8Sf-4GHJf4yBq-mmU4.roa File: -LmR3dI9z8Sf-4GHJf4yBq-mmU4.roa (raw, json) Hash identifier: SDkEzmj4Hm/CkaXMGbLT6mbcF+fLxDgTCPkbQwrW+FY= Subject key identifier: F8:B9:91:DD:D2:3D:CF:C4:9F:FB:81:87:25:FE:32:06:AF:A6:99:4E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 04D6 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-LmR3dI9z8Sf-4GHJf4yBq-mmU4.roa Signing time: Tue 31 Mar 2026 08:13:20 +0000 ROA not before: Tue 31 Mar 2026 08:13:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 0 IP address blocks: 202.138.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 13:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:13:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F8B991DDD23DCFC49FFB818725FE3206AFA6994E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:64:0d:e2:62:11:28:16:87:6a:c7:ca:0f: e1:44:1b:6a:b9:69:b0:29:e1:d0:71:22:08:8e:7a: 54:47:a7:e5:c3:c6:e0:c4:02:33:82:f2:cf:90:55: 63:65:dc:2b:af:71:cf:88:13:75:51:af:29:43:51: d4:4a:f1:ea:95:88:f0:f9:87:ff:0a:f3:cc:d1:7d: d0:ef:ce:75:7a:2e:08:a4:25:30:9b:3e:a8:e6:f6: 3b:90:56:07:1f:66:4c:00:1f:74:43:d5:8e:ce:a3: 04:b7:66:73:8d:10:1f:84:ea:64:fe:1a:c9:60:ab: 29:c6:fc:0c:95:74:8c:70:08:b5:06:cf:01:98:79: 76:26:74:11:bd:27:6a:3e:a4:cb:76:73:22:29:d3: c5:cf:e8:76:a9:fc:25:09:0b:13:2f:6c:d1:06:94: 1a:94:33:2f:ad:cb:c4:f3:82:f5:ea:9a:65:e6:39: 55:4f:91:97:b5:54:62:b9:6f:88:1c:e8:e5:d1:3f: 2f:e8:ed:bd:37:dd:b3:f8:05:5c:52:74:ed:f9:3c: fa:c1:56:18:60:be:60:2e:57:e8:e3:87:e9:42:f4: 10:13:5a:84:de:a1:88:7e:ae:a8:fd:5b:18:ee:72: 9e:cb:f8:ad:00:e7:01:f2:8d:fb:75:a9:3d:a7:12: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B9:91:DD:D2:3D:CF:C4:9F:FB:81:87:25:FE:32:06:AF:A6:99:4E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-LmR3dI9z8Sf-4GHJf4yBq-mmU4.roa sbgp-ipAddrBlock: critical IPv4: 202.138.80.0/20 Signature Algorithm: sha256WithRSAEncryption b4:5d:6a:13:5b:25:a1:97:5e:59:12:da:e0:6c:73:75:a3:e2: 20:6b:21:61:28:f4:b6:da:2a:c8:b8:68:73:7b:68:db:71:e5: 2b:02:22:24:1d:0b:c2:af:43:4b:d4:7f:92:11:83:51:93:13: 53:ef:0a:a3:f2:15:20:ce:d2:9b:04:0f:b4:86:2f:68:8c:83: 3b:99:5d:b9:c3:2b:3b:0b:90:93:32:29:6d:61:53:51:30:1b: 51:4d:9f:6f:bd:57:35:83:9e:38:d1:49:07:f5:ca:d4:81:68: 13:a9:12:17:98:26:6e:06:02:19:83:8b:1c:e4:1b:bf:73:28: 17:00:c6:fe:43:c6:a5:31:65:47:d2:90:48:c3:8f:14:ac:9b: d5:e8:f3:77:a3:f7:b3:eb:73:c2:a6:52:b9:fd:68:b1:6b:9e: d1:f8:43:f9:b5:b3:fd:9f:e3:b8:12:18:6e:85:6d:14:87:31: 8d:41:91:01:c8:16:f0:71:d4:fa:12:04:c6:a6:39:33:2b:9e: 7c:5a:12:ad:28:39:78:2e:32:fa:0c:74:5e:40:c0:5e:49:d3: b1:cf:c0:e3:11:b1:da:28:f2:cb:5a:32:32:f0:d1:63:1e:6a: 6d:05:96:db:c1:b1:5f:a6:3a:f9:cd:70:98:10:fc:4f:f6:2c: 55:40:e1:92 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEzMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY4Qjk5MURERDIzRENG QzQ5RkZCODE4NzI1RkUzMjA2QUZBNjk5NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYrWQN4mIRKBaHasfKD+FEG2q5abAp4dBxIgiOelRHp+XDxuDE AjOC8s+QVWNl3Cuvcc+IE3VRrylDUdRK8eqViPD5h/8K88zRfdDvznV6LgikJTCb Pqjm9juQVgcfZkwAH3RD1Y7OowS3ZnONEB+E6mT+GslgqynG/AyVdIxwCLUGzwGY eXYmdBG9J2o+pMt2cyIp08XP6Hap/CUJCxMvbNEGlBqUMy+ty8TzgvXqmmXmOVVP kZe1VGK5b4gc6OXRPy/o7b033bP4BVxSdO35PPrBVhhgvmAuV+jjh+lC9BATWoTe oYh+rqj9Wxjucp7L+K0A5wHyjft1qT2nEs+pAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU+LmR3dI9z8Sf+4GHJf4yBq+mmU4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxLy1MbVIzZEk5ejhTZi00R0hKZjR5QnEtbW1VNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKilAwDQYJKoZIhvcNAQELBQADggEB ALRdahNbJaGXXlkS2uBsc3Wj4iBrIWEo9LbaKsi4aHN7aNtx5SsCIiQdC8KvQ0vU f5IRg1GTE1PvCqPyFSDO0psED7SGL2iMgzuZXbnDKzsLkJMyKW1hU1EwG1FNn2+9 VzWDnjjRSQf1ytSBaBOpEheYJm4GAhmDixzkG79zKBcAxv5DxqUxZUfSkEjDjxSs m9Xo83ej97Prc8KmUrn9aLFrntH4Q/m1s/2f47gSGG6FbRSHMY1BkQHIFvBx1PoS BMamOTMrnnxaEq0oOXguMvoMdF5AwF5J07HPwOMRsdoo8staMjLw0WMeam0FltvB sV+mOvnNcJgQ/E/2LFVA4ZI= -----END CERTIFICATE-----Generated at Mon Apr 6 15:41:40 2026 by rpki-client