$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/KgYr5xU6k6Yh2Q5B9az_2iklXkY.roa File: KgYr5xU6k6Yh2Q5B9az_2iklXkY.roa (raw, json) Hash identifier: v12QU16+u0gmCW89A4sztsfNH0Sp3Z5FYxqsDDr90Iw= Subject key identifier: 2A:06:2B:E7:15:3A:93:A6:21:D9:0E:41:F5:AC:FF:DA:29:25:5E:46 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0443 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KgYr5xU6k6Yh2Q5B9az_2iklXkY.roa Signing time: Tue 31 Mar 2026 08:12:10 +0000 ROA not before: Tue 31 Mar 2026 08:12:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9824 IP address blocks: 110.172.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 08:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:12:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2A062BE7153A93A621D90E41F5ACFFDA29255E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:12:76:66:f1:1f:a0:91:cd:11:01:b2:bf: 3f:bd:ba:87:e1:2e:b1:89:e2:7b:a0:4c:1e:bf:6b: 17:27:ef:a4:ca:6e:1f:85:64:c2:13:84:af:9b:6d: 38:2e:cb:02:4b:21:3d:1c:6a:b4:55:1f:06:2d:35: 6e:ce:02:a2:c0:85:f4:ae:e6:6d:ec:5d:cf:3f:23: 34:b7:4b:9b:ac:47:c3:20:01:82:e8:20:da:d6:ee: d7:84:2d:f0:e5:03:81:c8:0f:ef:f7:18:c2:2d:0d: 0c:34:5e:38:54:f7:f2:57:e5:b4:54:34:8e:d0:5b: db:db:f3:fd:65:fa:7d:16:e4:93:10:08:30:96:57: da:6b:72:f8:5d:fe:da:1f:96:b0:d0:c2:88:db:12: 9b:73:08:32:30:d9:62:b4:c4:b9:8d:39:e4:ca:1f: 49:9d:7b:f7:bf:4a:cd:43:dc:20:57:1c:74:ab:d4: 87:1a:b7:d1:1e:4e:05:ac:cb:74:bc:0a:b5:22:19: 79:45:22:f4:aa:e4:b9:77:6c:4c:97:3e:de:da:78: 0f:e3:40:fb:36:f2:67:ec:94:bc:ad:82:47:29:8a: c5:6b:21:78:3f:93:19:69:72:d3:13:82:c4:df:d0: 50:14:ee:b1:6a:df:9e:a2:1b:40:37:df:d3:96:44: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:2B:E7:15:3A:93:A6:21:D9:0E:41:F5:AC:FF:DA:29:25:5E:46 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KgYr5xU6k6Yh2Q5B9az_2iklXkY.roa sbgp-ipAddrBlock: critical IPv4: 110.172.0.0/20 Signature Algorithm: sha256WithRSAEncryption 46:eb:fa:f0:c2:22:c2:c3:db:38:02:1f:48:af:2e:97:cb:4b: 63:35:62:15:84:0b:bd:ba:d9:c5:d4:1f:be:3d:56:37:3e:3b: 8f:84:7a:45:9a:97:ef:e3:48:2a:ed:37:ac:90:db:a7:c4:97: d0:64:9a:cc:26:e2:a9:66:b2:0c:89:b4:38:0d:f6:b7:2b:40: 3b:73:5f:2a:b9:53:e5:17:67:81:7d:0d:22:40:89:7b:61:58: f2:86:64:2b:fd:3d:d5:f3:13:8a:57:0d:fb:a7:9d:a2:47:33: 0a:15:5e:ee:e5:88:31:1b:08:e1:2a:38:47:5b:41:7a:21:c4: 60:cf:0c:59:c5:ca:e1:ea:e5:54:f4:10:08:4e:29:cb:e3:e7: 55:d7:28:16:e8:7d:c4:a4:01:9c:aa:65:74:86:10:76:c7:d0: 5e:fe:b3:30:8e:f3:8e:b8:d4:8b:83:51:11:02:9a:19:95:ed: 50:21:fa:8a:4c:8d:46:ff:1e:1a:b7:75:d1:b8:1a:43:6d:03: 45:04:44:64:b7:8e:aa:8b:d2:d9:c6:5c:6c:4d:9f:ea:d8:4c: 27:18:cc:5c:40:16:19:7b:82:ae:ee:a8:e6:be:6a:74:1b:f2: c3:bc:93:90:a3:a1:54:3d:b8:36:ee:f1:18:eb:00:89:f4:5d: 2a:0b:0e:d2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEyMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBMDYyQkU3MTUzQTkz QTYyMUQ5MEU0MUY1QUNGRkRBMjkyNTVFNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZXBJ2ZvEfoJHNEQGyvz+9uofhLrGJ4nugTB6/axcn76TKbh+F ZMIThK+bbTguywJLIT0carRVHwYtNW7OAqLAhfSu5m3sXc8/IzS3S5usR8MgAYLo INrW7teELfDlA4HID+/3GMItDQw0XjhU9/JX5bRUNI7QW9vb8/1l+n0W5JMQCDCW V9prcvhd/toflrDQwojbEptzCDIw2WK0xLmNOeTKH0mde/e/Ss1D3CBXHHSr1Ica t9EeTgWsy3S8CrUiGXlFIvSq5Ll3bEyXPt7aeA/jQPs28mfslLytgkcpisVrIXg/ kxlpctMTgsTf0FAU7rFq356iG0A339OWRKqbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUKgYr5xU6k6Yh2Q5B9az/2iklXkYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxL0tnWXI1eFU2azZZaDJRNUI5YXpfMmlrbFhrWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARurAAwDQYJKoZIhvcNAQELBQADggEB AEbr+vDCIsLD2zgCH0ivLpfLS2M1YhWEC7262cXUH749Vjc+O4+EekWal+/jSCrt N6yQ26fEl9Bkmswm4qlmsgyJtDgN9rcrQDtzXyq5U+UXZ4F9DSJAiXthWPKGZCv9 PdXzE4pXDfunnaJHMwoVXu7liDEbCOEqOEdbQXohxGDPDFnFyuHq5VT0EAhOKcvj 51XXKBbofcSkAZyqZXSGEHbH0F7+szCO84641IuDURECmhmV7VAh+opMjUb/Hhq3 ddG4GkNtA0UERGS3jqqL0tnGXGxNn+rYTCcYzFxAFhl7gq7uqOa+anQb8sO8k5Cj oVQ9uDbu8RjrAIn0XSoLDtI= -----END CERTIFICATE-----Generated at Mon Apr 6 12:57:27 2026 by rpki-client