$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2Ud2WPqR85tQ2jyGtIl1rwNiJzE.roa File: 2Ud2WPqR85tQ2jyGtIl1rwNiJzE.roa (raw, json) Hash identifier: JClqYayQM3IT76Y/LYNKRtJWC0fisA2LXykYKkN0rYc= Subject key identifier: D9:47:76:58:FA:91:F3:9B:50:DA:3C:86:B4:89:75:AF:03:62:27:31 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 049A Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2Ud2WPqR85tQ2jyGtIl1rwNiJzE.roa Signing time: Tue 31 Mar 2026 08:12:51 +0000 ROA not before: Tue 31 Mar 2026 08:12:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4721 IP address blocks: 219.117.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 12:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:12:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D9477658FA91F39B50DA3C86B48975AF03622731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:e5:c0:de:83:4c:47:6b:73:6a:56:f3:b5: 7f:15:cf:72:87:2d:34:f2:a8:0e:b0:e9:f6:bd:a0: 43:75:a9:88:61:4b:ae:2a:96:1f:ff:aa:70:bf:60: b5:15:16:2e:dd:d3:6c:5e:21:59:08:1d:fd:5e:6c: f1:d7:c3:25:61:dc:26:1d:1b:b2:3c:a2:37:18:9b: c8:26:17:43:64:ad:e3:c2:00:9d:e7:6e:38:a8:86: 93:3b:12:aa:3e:2a:79:bf:3d:36:97:ad:f7:91:e1: e8:06:cb:46:c2:07:3c:09:13:5e:9c:98:51:4c:82: 85:b8:2b:4a:da:f7:81:b9:da:4f:22:af:1e:ad:8d: 31:3e:70:ff:ec:fe:74:6b:8a:2a:10:1c:e3:8f:e6: 84:9d:f0:9a:6d:8a:61:1b:3b:56:fb:61:ae:a7:a1: 5c:70:5c:f7:e4:23:3f:44:2a:ff:5e:66:1b:6b:5e: 51:29:a7:a0:cc:dd:4d:99:fb:9f:21:ae:29:8f:7c: b7:f5:80:42:e9:ac:bc:8a:e4:24:3b:16:30:a3:44: eb:12:cc:85:8f:93:96:32:58:94:86:02:75:cf:df: a0:3e:28:b0:6e:7d:eb:49:47:f3:41:4b:fb:ec:d2: 53:d4:55:f9:25:4b:c6:b5:3e:33:37:8c:df:fb:96: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:47:76:58:FA:91:F3:9B:50:DA:3C:86:B4:89:75:AF:03:62:27:31 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2Ud2WPqR85tQ2jyGtIl1rwNiJzE.roa sbgp-ipAddrBlock: critical IPv4: 219.117.160.0/19 Signature Algorithm: sha256WithRSAEncryption 42:89:e1:6d:69:4b:83:af:1a:16:4b:ff:3c:3d:10:74:17:39: e2:21:8a:13:a0:70:0e:02:ef:2e:b7:e1:ba:49:55:1d:d0:ae: 01:d0:0c:c5:97:7f:54:cd:0a:7c:05:83:44:cf:42:71:1b:69: bc:34:21:fb:54:c8:2b:a0:0c:a6:aa:d1:9e:d6:11:50:bd:ec: 4f:a6:e0:21:3e:e4:88:b1:01:30:ff:ba:7a:2d:43:9c:40:a7: 59:07:3e:0a:e1:8a:88:f3:81:16:e3:8c:10:cb:7f:68:71:68: b0:69:c4:fd:f6:2c:43:45:22:b3:91:93:05:96:da:dc:2a:f3: ff:4c:00:e8:d8:4f:a0:ee:7a:c1:40:45:af:75:02:64:83:63: 87:0e:81:9f:1c:01:bd:1a:5a:9e:91:c5:db:aa:86:64:bc:0e: da:be:73:17:c1:b1:1b:2d:0a:3c:b6:a0:a2:75:6c:d2:40:14: e7:c1:29:12:f3:12:5b:64:3b:b7:30:39:9b:39:27:05:4a:90: b4:ed:d5:bd:97:7e:38:52:66:35:75:81:b8:ef:cc:fe:21:4f: ad:f6:97:e3:89:74:eb:9e:c1:fe:7e:66:8f:f8:f3:74:14:2c: c9:b6:94:47:fe:14:5d:85:57:ab:73:25:80:61:d7:be:ea:5a: d9:92:6c:3d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEyNTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5NDc3NjU4RkE5MUYz OUI1MERBM0M4NkI0ODk3NUFGMDM2MjI3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqAOXA3oNMR2tzalbztX8Vz3KHLTTyqA6w6fa9oEN1qYhhS64q lh//qnC/YLUVFi7d02xeIVkIHf1ebPHXwyVh3CYdG7I8ojcYm8gmF0NkrePCAJ3n bjiohpM7Eqo+Knm/PTaXrfeR4egGy0bCBzwJE16cmFFMgoW4K0ra94G52k8irx6t jTE+cP/s/nRriioQHOOP5oSd8JptimEbO1b7Ya6noVxwXPfkIz9EKv9eZhtrXlEp p6DM3U2Z+58hrimPfLf1gELprLyK5CQ7FjCjROsSzIWPk5YyWJSGAnXP36A+KLBu fetJR/NBS/vs0lPUVfklS8a1PjM3jN/7ll1XAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2Ud2WPqR85tQ2jyGtIl1rwNiJzEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxLzJVZDJXUHFSODV0UTJqeUd0SWwxcndOaUp6RS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXbdaAwDQYJKoZIhvcNAQELBQADggEB AEKJ4W1pS4OvGhZL/zw9EHQXOeIhihOgcA4C7y634bpJVR3QrgHQDMWXf1TNCnwF g0TPQnEbabw0IftUyCugDKaq0Z7WEVC97E+m4CE+5IixATD/unotQ5xAp1kHPgrh iojzgRbjjBDLf2hxaLBpxP32LENFIrORkwWW2twq8/9MAOjYT6DuesFARa91AmSD Y4cOgZ8cAb0aWp6RxduqhmS8Dtq+cxfBsRstCjy2oKJ1bNJAFOfBKRLzEltkO7cw OZs5JwVKkLTt1b2XfjhSZjV1gbjvzP4hT632l+OJdOuewf5+Zo/483QULMm2lEf+ FF2FV6tzJYBh177qWtmSbD0= -----END CERTIFICATE-----Generated at Mon Apr 6 15:44:12 2026 by rpki-client