$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2RWm2Ljp8DjuppKFBa33qdUi4QQ.roa File: 2RWm2Ljp8DjuppKFBa33qdUi4QQ.roa (raw, json) Hash identifier: e4XSCmXgYgGG1uF5nwwVHY4H8USPjMk3jBQwdrwTQcY= Subject key identifier: D9:15:A6:D8:B8:E9:F0:38:EE:A6:92:85:05:AD:F7:A9:D5:22:E1:04 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 049C Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2RWm2Ljp8DjuppKFBa33qdUi4QQ.roa Signing time: Tue 31 Mar 2026 08:12:52 +0000 ROA not before: Tue 31 Mar 2026 08:12:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4721 IP address blocks: 219.124.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 12:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:12:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D915A6D8B8E9F038EEA6928505ADF7A9D522E104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:81:3c:e4:6c:8b:03:15:77:c9:d2:cd:0b: b6:0f:c6:f4:9a:e4:8b:3c:5b:7f:1c:74:4d:de:47: 43:88:e8:63:24:19:04:5c:6d:a7:c8:2f:1d:f2:77: 8a:d5:97:53:c7:c5:bf:1d:3f:17:54:5f:2a:78:90: ab:76:8a:20:8e:14:c0:30:52:a9:5b:dd:65:1f:ac: ef:50:7f:e8:1f:65:77:2d:fb:de:7b:af:8c:ae:a0: 20:f0:ad:24:d3:7b:7b:90:f2:5a:bd:b4:fd:e0:d1: 49:8d:6c:20:ed:d0:2a:05:31:c3:42:ab:05:5d:b4: e3:73:e3:9d:aa:1c:fc:43:23:6a:4e:b8:29:fd:8d: 22:b1:a7:12:b1:97:f0:c4:b1:7e:f0:7e:ab:79:5d: 50:73:0f:72:c0:a9:f8:44:20:25:e1:ab:1b:79:8a: ab:16:c2:1f:dc:96:0a:d8:83:85:aa:87:c1:63:dc: fa:fd:56:ed:5d:71:4c:53:5a:2d:94:ac:61:d3:67: 78:07:4a:64:f6:7d:d2:f9:b3:a4:d3:0c:a4:7b:fe: 65:55:b7:b7:93:1a:44:c2:b0:a9:b3:7a:76:00:f4: aa:f3:f5:27:b8:28:5b:a0:df:04:d2:89:e7:40:a4: cb:1b:7c:d3:14:08:a9:51:91:1b:41:c1:70:1a:05: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:A6:D8:B8:E9:F0:38:EE:A6:92:85:05:AD:F7:A9:D5:22:E1:04 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2RWm2Ljp8DjuppKFBa33qdUi4QQ.roa sbgp-ipAddrBlock: critical IPv4: 219.124.224.0/19 Signature Algorithm: sha256WithRSAEncryption b8:84:46:b9:84:fe:99:8e:70:78:ac:2c:95:ff:31:b3:94:99: 58:83:8c:11:54:38:78:c0:35:7c:7e:f2:ed:f4:17:e4:5a:6a: 04:23:e1:29:54:34:22:d0:60:0e:22:3c:09:19:d7:39:a0:4c: e9:c0:1e:12:f0:f0:74:cb:8c:70:3e:26:71:eb:bf:7d:6d:32: 67:f0:ea:f1:9b:cd:f0:8c:a2:63:4c:24:be:df:a9:5c:f1:f3: c8:a5:54:8d:39:e4:51:df:4a:78:cf:4d:7c:78:bd:3b:e4:c0: 2f:2d:ea:d9:85:85:ba:2a:d5:a6:7b:a8:e3:b4:d9:6f:2a:b5: f3:2c:d7:29:04:15:5c:cc:07:ef:c7:18:06:8d:4b:46:ea:96: 84:7c:98:69:13:8e:f1:cc:a2:7f:de:6d:10:b2:c6:03:6e:ed: 47:a6:9a:ac:0d:f7:a7:25:3d:95:4f:76:d3:e9:83:14:a8:5a: d8:ec:81:9a:aa:af:4d:0e:fb:bb:9a:d1:21:7d:16:8e:21:36: a5:bb:3a:4e:78:11:42:72:e1:f6:22:5b:82:1f:d8:33:23:f0: ed:b3:ae:1a:19:58:ca:ee:ff:71:7c:fa:0e:0f:48:c5:11:11: c7:83:7a:93:fa:c7:3f:ad:43:34:23:db:1c:99:bc:0e:c1:4b: 8b:2e:3a:d1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEyNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5MTVBNkQ4QjhFOUYw MzhFRUE2OTI4NTA1QURGN0E5RDUyMkUxMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqQIE85GyLAxV3ydLNC7YPxvSa5Is8W38cdE3eR0OI6GMkGQRc bafILx3yd4rVl1PHxb8dPxdUXyp4kKt2iiCOFMAwUqlb3WUfrO9Qf+gfZXct+957 r4yuoCDwrSTTe3uQ8lq9tP3g0UmNbCDt0CoFMcNCqwVdtONz452qHPxDI2pOuCn9 jSKxpxKxl/DEsX7wfqt5XVBzD3LAqfhEICXhqxt5iqsWwh/clgrYg4Wqh8Fj3Pr9 Vu1dcUxTWi2UrGHTZ3gHSmT2fdL5s6TTDKR7/mVVt7eTGkTCsKmzenYA9Krz9Se4 KFug3wTSiedApMsbfNMUCKlRkRtBwXAaBeoFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2RWm2Ljp8DjuppKFBa33qdUi4QQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxLzJSV20yTGpwOERqdXBwS0ZCYTMzcWRVaTRRUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXbfOAwDQYJKoZIhvcNAQELBQADggEB ALiERrmE/pmOcHisLJX/MbOUmViDjBFUOHjANXx+8u30F+RaagQj4SlUNCLQYA4i PAkZ1zmgTOnAHhLw8HTLjHA+JnHrv31tMmfw6vGbzfCMomNMJL7fqVzx88ilVI05 5FHfSnjPTXx4vTvkwC8t6tmFhboq1aZ7qOO02W8qtfMs1ykEFVzMB+/HGAaNS0bq loR8mGkTjvHMon/ebRCyxgNu7UemmqwN96clPZVPdtPpgxSoWtjsgZqqr00O+7ua 0SF9Fo4hNqW7Ok54EUJy4fYiW4If2DMj8O2zrhoZWMru/3F8+g4PSMUREceDepP6 xz+tQzQj2xyZvA7BS4suOtE= -----END CERTIFICATE-----Generated at Mon Apr 6 15:40:49 2026 by rpki-client