$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/y5pOhv9wmqhxnQkfvXUpVRviaXY.roa File: y5pOhv9wmqhxnQkfvXUpVRviaXY.roa (raw, json) Hash identifier: v/m6jjBCWEnJdYWqaP/qjYEu6M2Gg+NMH9cxCEwEmZA= Subject key identifier: CB:9A:4E:86:FF:70:9A:A8:71:9D:09:1F:BD:75:29:55:1B:E2:69:76 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0412 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/y5pOhv9wmqhxnQkfvXUpVRviaXY.roa Signing time: Tue 31 Mar 2026 08:11:44 +0000 ROA not before: Tue 31 Mar 2026 08:11:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 45675 IP address blocks: 219.111.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 13:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:11:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CB9A4E86FF709AA8719D091FBD7529551BE26976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:d5:8b:d6:17:91:a9:f7:53:13:74:ba:14: dd:e3:a9:da:90:cc:6b:a8:d9:02:c3:23:a2:5d:da: a3:94:93:27:ce:bb:38:25:89:bd:32:3f:c3:2b:96: 92:a0:3b:50:c5:ce:a6:c4:09:b6:1c:cc:4d:39:10: 4c:7c:f4:f9:22:09:0c:fa:02:88:19:68:93:42:71: 1a:c9:8b:e2:eb:d3:13:bf:03:6b:a3:b8:0f:f1:b6: 6a:9f:2a:a5:59:36:b1:1f:04:37:5b:4a:77:46:3a: 5b:71:af:14:fa:d7:d4:56:b8:84:0e:a8:80:5e:03: 56:2e:08:d2:a6:42:ad:97:62:8c:ae:6a:17:a9:bd: c8:f6:0f:f4:f1:5a:87:33:7e:22:b5:88:fa:33:0e: 1b:cc:43:84:fe:ae:08:e0:2e:3a:4d:3d:67:05:a3: b2:20:93:c4:34:21:71:16:6b:cd:2c:c0:24:82:b5: d3:1a:62:c0:1e:cc:17:41:91:e6:3b:3d:67:fa:04: cc:4a:6c:d8:fd:f7:a4:cf:c8:f1:39:f1:09:2d:cd: 9e:9a:cd:4e:da:31:5e:02:2b:0f:f1:e7:57:69:2f: 4b:04:a5:a9:67:0c:ae:51:91:14:17:3a:eb:db:97: b3:22:00:39:05:dd:c6:93:ef:20:98:67:1c:11:95: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9A:4E:86:FF:70:9A:A8:71:9D:09:1F:BD:75:29:55:1B:E2:69:76 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/y5pOhv9wmqhxnQkfvXUpVRviaXY.roa sbgp-ipAddrBlock: critical IPv4: 219.111.192.0/20 Signature Algorithm: sha256WithRSAEncryption 10:35:a5:cc:ca:05:ac:30:a7:e7:c7:43:f6:f2:84:7e:92:78: e5:a4:85:b8:d0:ea:dc:70:fe:92:e1:5f:a0:35:4b:ef:d3:70: 5b:58:88:b1:00:61:10:9f:20:7d:b5:fc:eb:5c:39:65:39:95: 89:0d:a7:5d:7c:e2:d9:4e:46:8a:e6:c2:be:af:8d:b0:dc:fe: c3:2e:28:df:7b:1a:5a:45:59:d8:03:12:51:de:89:f6:9e:1a: b9:3e:12:ba:c3:33:aa:c5:20:4a:97:8d:25:59:d2:86:c1:ad: 71:7b:29:fe:eb:52:35:fa:5b:ea:6f:5f:cb:dd:09:23:27:01: 46:c3:55:9a:d0:72:52:fe:db:28:4c:fc:40:53:87:96:d2:ef: 6a:95:fd:b7:cb:10:64:6c:17:15:12:79:36:17:75:3e:4a:6a: d2:87:db:58:16:71:e5:83:b8:49:7c:eb:68:6f:2f:65:36:c3: 6d:55:4a:85:2d:ba:ae:78:6c:37:8b:be:cd:0e:84:7a:b9:fc: b3:ac:cc:f7:9e:56:6f:7e:42:a7:3f:cd:4e:27:f7:f9:98:1c: 32:42:cc:ff:ad:7e:0d:26:d2:8b:e4:bb:5c:77:d9:14:3e:d8: f5:46:fb:bc:f3:62:e7:25:b4:53:ae:a9:46:3b:33:27:55:56: 20:52:64:5a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODExNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCOUE0RTg2RkY3MDlB QTg3MTlEMDkxRkJENzUyOTU1MUJFMjY5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO9tWL1heRqfdTE3S6FN3jqdqQzGuo2QLDI6Jd2qOUkyfOuzgl ib0yP8MrlpKgO1DFzqbECbYczE05EEx89PkiCQz6AogZaJNCcRrJi+Lr0xO/A2uj uA/xtmqfKqVZNrEfBDdbSndGOltxrxT619RWuIQOqIBeA1YuCNKmQq2XYoyuahep vcj2D/TxWoczfiK1iPozDhvMQ4T+rgjgLjpNPWcFo7Igk8Q0IXEWa80swCSCtdMa YsAezBdBkeY7PWf6BMxKbNj996TPyPE58QktzZ6azU7aMV4CKw/x51dpL0sEpaln DK5RkRQXOuvbl7MiADkF3caT7yCYZxwRlRybAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUy5pOhv9wmqhxnQkfvXUpVRviaXYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxL3k1cE9odjl3bXFoeG5Ra2Z2WFVwVlJ2aWFYWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATbb8AwDQYJKoZIhvcNAQELBQADggEB ABA1pczKBawwp+fHQ/byhH6SeOWkhbjQ6txw/pLhX6A1S+/TcFtYiLEAYRCfIH21 /OtcOWU5lYkNp1184tlORormwr6vjbDc/sMuKN97GlpFWdgDElHeifaeGrk+ErrD M6rFIEqXjSVZ0obBrXF7Kf7rUjX6W+pvX8vdCSMnAUbDVZrQclL+2yhM/EBTh5bS 72qV/bfLEGRsFxUSeTYXdT5KatKH21gWceWDuEl862hvL2U2w21VSoUtuq54bDeL vs0OhHq5/LOszPeeVm9+Qqc/zU4n9/mYHDJCzP+tfg0m0ovku1x32RQ+2PVG+7zz YucltFOuqUY7MydVViBSZFo= -----END CERTIFICATE-----Generated at Mon Apr 6 15:44:12 2026 by rpki-client