$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YD_r4k-8Gbx7_bUJZ0zY2ax8q4c.roa File: YD_r4k-8Gbx7_bUJZ0zY2ax8q4c.roa (raw, json) Hash identifier: g9nS0uFJ52KLOFWt8J9NFvWYSwcsfUtfYc5VL+CsoLE= Subject key identifier: 60:3F:EB:E2:4F:BC:19:BC:7B:FD:B5:09:67:4C:D8:D9:AC:7C:AB:87 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 04B2 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YD_r4k-8Gbx7_bUJZ0zY2ax8q4c.roa Signing time: Tue 31 Mar 2026 08:13:02 +0000 ROA not before: Tue 31 Mar 2026 08:13:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9617 IP address blocks: 122.102.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 12:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:13:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=603FEBE24FBC19BC7BFDB509674CD8D9AC7CAB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:0b:74:71:78:f5:0d:a8:75:24:58:09:1e: f4:be:4b:9f:22:c0:d1:65:3a:26:83:ce:db:cf:bf: 69:15:c7:51:93:34:eb:4a:e7:ec:b4:70:25:9f:9e: 25:19:77:75:26:3f:1e:e7:1e:2b:2a:f6:67:36:a3: 76:3b:11:7d:51:45:44:74:4b:47:36:d8:fb:a8:56: c1:64:f9:fc:78:a3:63:17:32:0a:af:6a:dc:0b:5c: 5c:f4:75:58:70:c5:d7:f4:c1:58:22:89:a8:a0:e1: 26:89:03:6b:0c:83:f3:d8:63:68:85:ea:8f:58:cf: a1:bd:9a:66:b0:ed:4d:5b:b1:3f:c2:cf:27:81:18: 0b:fc:22:b4:20:50:3f:3f:b4:31:6e:02:7c:39:6a: 80:2c:35:d9:c0:c8:b7:5a:33:04:31:9c:c9:e2:70: 8d:0a:2d:b5:8c:2f:b1:e4:ef:ba:4b:0d:7d:cc:9d: 22:a1:07:57:80:70:0f:c9:23:b6:29:d8:bb:85:c0: 83:5d:3d:22:a3:5b:bc:ba:c0:e0:7c:29:64:28:c1: e1:b9:98:f1:85:9c:d2:80:0b:13:e8:28:1c:22:25: d8:65:e0:75:b4:76:e2:04:a0:41:c0:3d:93:dd:29: 84:35:01:93:ad:8f:28:57:9e:e0:24:07:ed:c2:12: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:EB:E2:4F:BC:19:BC:7B:FD:B5:09:67:4C:D8:D9:AC:7C:AB:87 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YD_r4k-8Gbx7_bUJZ0zY2ax8q4c.roa sbgp-ipAddrBlock: critical IPv4: 122.102.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1f:3d:85:05:d7:39:95:f1:4a:b0:52:47:91:c2:44:ff:6e:70: c1:fe:42:3b:19:fd:6a:d7:14:76:f4:ce:7e:23:2c:f1:29:64: 8b:f9:fc:8d:7a:9f:35:fc:a9:49:19:6d:a2:67:14:14:dd:24: c6:71:21:58:32:3d:f8:f1:57:43:f9:9e:86:4c:e4:13:eb:95: 05:1e:b1:c7:a7:59:e8:bb:8f:c6:b1:88:24:ae:ba:0c:f2:d2: 95:69:1f:c5:f9:39:0a:ee:b0:ec:da:3b:e3:c8:f4:70:04:5d: 7d:79:a8:ef:3a:f4:ac:41:a7:04:34:c2:9b:8e:41:39:9b:3c: 30:70:f6:1a:c9:4d:22:b7:cb:a9:41:de:a1:ee:f9:1c:90:26: 14:42:ed:81:01:42:d8:61:a8:b7:f7:30:f3:1d:17:5a:eb:c7: 6b:2a:0a:9c:67:80:e6:70:74:fe:d5:1a:ea:53:a6:1b:0b:6a: 99:cb:f2:28:57:b3:a7:e4:eb:aa:04:28:d3:37:b3:16:20:b6: 0a:8e:92:56:f8:f2:9d:33:6c:53:a8:ba:d9:37:25:35:f0:7c: 70:7d:18:57:02:a9:09:4f:68:c4:07:41:6b:43:9b:1d:78:c6: c7:50:24:90:42:c7:f8:c2:29:4d:f7:3d:26:c7:d3:bf:59:87: 78:a7:da:e6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEzMDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwM0ZFQkUyNEZCQzE5 QkM3QkZEQjUwOTY3NENEOEQ5QUM3Q0FCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrdAt0cXj1Dah1JFgJHvS+S58iwNFlOiaDztvPv2kVx1GTNOtK 5+y0cCWfniUZd3UmPx7nHisq9mc2o3Y7EX1RRUR0S0c22PuoVsFk+fx4o2MXMgqv atwLXFz0dVhwxdf0wVgiiaig4SaJA2sMg/PYY2iF6o9Yz6G9mmaw7U1bsT/CzyeB GAv8IrQgUD8/tDFuAnw5aoAsNdnAyLdaMwQxnMnicI0KLbWML7Hk77pLDX3MnSKh B1eAcA/JI7Yp2LuFwINdPSKjW7y6wOB8KWQoweG5mPGFnNKACxPoKBwiJdhl4HW0 duIEoEHAPZPdKYQ1AZOtjyhXnuAkB+3CEr9vAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUYD/r4k+8Gbx7/bUJZ0zY2ax8q4cwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxL1lEX3I0ay04R2J4N19iVUpaMHpZMmF4OHE0Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd6ZoAwDQYJKoZIhvcNAQELBQADggEB AB89hQXXOZXxSrBSR5HCRP9ucMH+QjsZ/WrXFHb0zn4jLPEpZIv5/I16nzX8qUkZ baJnFBTdJMZxIVgyPfjxV0P5noZM5BPrlQUescenWei7j8axiCSuugzy0pVpH8X5 OQrusOzaO+PI9HAEXX15qO869KxBpwQ0wpuOQTmbPDBw9hrJTSK3y6lB3qHu+RyQ JhRC7YEBQthhqLf3MPMdF1rrx2sqCpxngOZwdP7VGupTphsLapnL8ihXs6fk66oE KNM3sxYgtgqOklb48p0zbFOoutk3JTXwfHB9GFcCqQlPaMQHQWtDmx14xsdQJJBC x/jCKU33PSbH079Zh3in2uY= -----END CERTIFICATE-----Generated at Mon Apr 6 15:43:52 2026 by rpki-client