$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QPyaI80hknxqjyXSiL7M9ylPPA4.roa File: QPyaI80hknxqjyXSiL7M9ylPPA4.roa (raw, json) Hash identifier: 8yLIY2jqGlxVGrdTWFg8X2pZTmI7xf9eFIKgfkBArJg= Subject key identifier: 40:FC:9A:23:CD:21:92:7C:6A:8F:25:D2:88:BE:CC:F7:29:4F:3C:0E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0498 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QPyaI80hknxqjyXSiL7M9ylPPA4.roa Signing time: Tue 31 Mar 2026 08:12:50 +0000 ROA not before: Tue 31 Mar 2026 08:12:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4721 IP address blocks: 219.117.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 13:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:12:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=40FC9A23CD21927C6A8F25D288BECCF7294F3C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:19:f0:3d:bb:38:40:2e:75:79:14:b8:b1: f4:10:75:bc:86:9c:bf:11:21:bd:b1:11:2e:1e:78: d8:f2:82:e1:cb:f3:3c:8e:5a:3f:4d:df:f1:c2:01: 01:01:70:57:20:5b:42:5a:f6:b0:db:36:9c:d4:99: 1f:ea:37:f1:0b:71:2f:4d:dd:cd:a1:3a:36:a7:ae: c9:24:07:7c:89:86:e3:e5:27:59:48:79:d5:8b:31: c0:96:f1:c4:b2:c1:05:4c:56:91:e5:4a:c7:14:31: 29:7e:99:43:61:a6:52:26:1e:cd:86:0c:d7:4b:bd: bc:11:12:1f:26:a2:ec:3c:0e:13:c3:bb:4b:6d:1d: 18:8c:0a:6a:95:a3:08:77:6f:9c:56:3a:8a:36:de: 9f:d2:58:c3:a8:76:5a:dc:e9:f5:f4:8c:5c:ea:9a: d1:74:b4:47:e0:2b:44:04:51:46:4a:29:05:2c:1f: 2b:19:27:95:fa:31:85:70:05:8a:dd:ac:eb:5f:dd: 58:78:dd:cb:fd:11:5b:c7:42:86:05:c3:5b:6f:8b: 75:af:79:b9:62:45:55:ae:3f:9d:7f:3b:25:68:f9: a9:9f:90:64:68:24:2f:ca:ca:3d:7d:7b:b7:8a:b9: a7:fd:3b:9d:7f:c8:72:46:42:a3:b2:9e:d1:3b:ae: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FC:9A:23:CD:21:92:7C:6A:8F:25:D2:88:BE:CC:F7:29:4F:3C:0E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QPyaI80hknxqjyXSiL7M9ylPPA4.roa sbgp-ipAddrBlock: critical IPv4: 219.117.0.0/20 Signature Algorithm: sha256WithRSAEncryption c1:18:36:aa:16:56:cd:db:0a:17:e8:32:f6:88:98:c8:c2:cd: a1:3b:ee:36:e5:1e:a1:3a:10:dc:89:bb:ed:37:df:86:0a:10: 9c:a8:a4:64:e6:4e:bf:58:e0:21:a7:ec:85:d7:31:d2:bc:02: f3:d7:12:46:ae:cc:55:b3:68:d0:46:15:50:c0:b0:db:db:b7: 42:4c:7a:3b:4f:dc:10:f8:eb:0d:8c:e4:11:ca:92:88:4d:3a: 7c:8f:36:e6:a4:d5:46:06:c6:15:c3:6c:a0:d2:df:58:85:be: fc:e0:c0:0e:65:43:a3:e9:74:c3:1c:21:26:87:68:83:5c:8b: aa:8d:6e:ee:af:c8:29:80:2a:77:f1:3c:32:04:9f:18:6e:a0: 26:84:b1:0e:16:bc:45:12:2e:b7:19:40:26:f7:81:f0:5f:79: af:ef:b7:bb:2c:dc:99:6a:48:40:8b:38:ba:f1:a8:a9:c4:28: 24:44:93:13:0c:27:c3:bc:78:6e:03:79:b7:cb:a3:75:d1:e1: ce:4e:59:6f:1c:dd:1c:85:65:62:52:87:8a:7d:ab:13:f2:e6: 52:55:c8:82:e1:75:85:91:04:80:24:5f:f8:1a:b7:ba:aa:60: 94:f2:c8:a1:1f:d7:c4:4d:3e:1a:23:7f:d0:ec:5d:e7:66:01: d2:f5:5d:44 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEyNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwRkM5QTIzQ0QyMTky N0M2QThGMjVEMjg4QkVDQ0Y3Mjk0RjNDMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKeRnwPbs4QC51eRS4sfQQdbyGnL8RIb2xES4eeNjyguHL8zyO Wj9N3/HCAQEBcFcgW0Ja9rDbNpzUmR/qN/ELcS9N3c2hOjanrskkB3yJhuPlJ1lI edWLMcCW8cSywQVMVpHlSscUMSl+mUNhplImHs2GDNdLvbwREh8mouw8DhPDu0tt HRiMCmqVowh3b5xWOoo23p/SWMOodlrc6fX0jFzqmtF0tEfgK0QEUUZKKQUsHysZ J5X6MYVwBYrdrOtf3Vh43cv9EVvHQoYFw1tvi3WvebliRVWuP51/OyVo+amfkGRo JC/Kyj19e7eKuaf9O51/yHJGQqOyntE7rjo1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQPyaI80hknxqjyXSiL7M9ylPPA4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxL1FQeWFJODBoa254cWp5WFNpTDdNOXlsUFBBNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbdQAwDQYJKoZIhvcNAQELBQADggEB AMEYNqoWVs3bChfoMvaImMjCzaE77jblHqE6ENyJu+0334YKEJyopGTmTr9Y4CGn 7IXXMdK8AvPXEkauzFWzaNBGFVDAsNvbt0JMejtP3BD46w2M5BHKkohNOnyPNuak 1UYGxhXDbKDS31iFvvzgwA5lQ6PpdMMcISaHaINci6qNbu6vyCmAKnfxPDIEnxhu oCaEsQ4WvEUSLrcZQCb3gfBfea/vt7ss3JlqSECLOLrxqKnEKCREkxMMJ8O8eG4D ebfLo3XR4c5OWW8c3RyFZWJSh4p9qxPy5lJVyILhdYWRBIAkX/gat7qqYJTyyKEf 18RNPhojf9DsXedmAdL1XUQ= -----END CERTIFICATE-----Generated at Mon Apr 6 15:44:15 2026 by rpki-client