$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/y_OfQN7z4FqSyLFG01Ypkpdo-xc.roa File: y_OfQN7z4FqSyLFG01Ypkpdo-xc.roa (raw, json) Hash identifier: DeQsxZix+dBR/m7pqLXraneTN7vc0w231RdhNi/TyFE= Subject key identifier: CB:F3:9F:40:DE:F3:E0:5A:92:C8:B1:46:D3:56:29:92:97:68:FB:17 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 8A Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/y_OfQN7z4FqSyLFG01Ypkpdo-xc.roa Signing time: Sun 01 Mar 2026 01:28:18 +0000 ROA not before: Sun 01 Mar 2026 01:28:18 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 55391 IP address blocks: 217.178.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: Mar 1 01:28:18 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CBF39F40DEF3E05A92C8B146D35629929768FB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:d8:24:e6:76:93:58:bf:2b:85:30:ad:58: fe:11:28:6f:cf:c7:7f:66:2b:eb:3b:68:29:6b:56: fd:17:2b:4e:5f:fb:0f:db:c9:e7:f8:f5:99:d3:12: a8:0b:3b:19:02:46:ea:29:e9:cc:7e:04:ab:31:23: 25:2d:d9:ae:e5:50:92:ee:f8:85:f4:25:aa:8c:fc: 0f:e4:87:2d:a1:4e:d3:a2:58:6e:01:c5:a1:76:22: ba:dc:3c:23:6e:ed:86:a5:87:08:86:f3:52:82:f8: 5b:75:ac:7b:48:a0:ab:f9:73:b5:d9:c7:62:7a:d5: 02:71:2b:ca:2a:84:61:8c:da:53:93:6f:e4:78:6b: 96:ee:27:23:c1:2f:e9:63:ac:7d:a1:12:33:b0:3f: 1e:c9:c3:05:a1:b0:a5:a4:8e:7d:24:7f:d2:03:f2: d9:25:7b:89:7a:9e:1b:90:e3:3c:e8:43:2c:06:11: 8e:4b:65:ec:61:61:f8:8c:68:51:17:dd:2f:6d:82: 88:46:9d:48:5c:48:69:f1:15:90:43:6b:ee:88:de: 39:ba:2b:9e:10:2b:fe:d0:fb:e1:d3:9a:6e:c1:c0: 04:a9:31:5c:b8:75:2f:ef:25:59:5a:41:ea:a0:69: c1:47:9a:1f:9c:04:21:83:c8:68:f6:67:d5:cc:06: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:9F:40:DE:F3:E0:5A:92:C8:B1:46:D3:56:29:92:97:68:FB:17 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/y_OfQN7z4FqSyLFG01Ypkpdo-xc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 217.178.128.0/18 Signature Algorithm: sha256WithRSAEncryption 14:e0:ba:4e:63:74:f6:b1:41:4a:47:a5:7f:44:39:45:26:47: f7:dd:37:a4:b7:a7:6d:f7:56:40:51:80:51:a5:41:eb:32:8f: d5:5b:de:05:e4:fd:d8:da:63:22:14:29:d4:bf:7d:1f:54:e6: 92:19:c4:c8:08:9d:89:c2:3d:36:dd:a5:10:f1:4f:4b:d7:96: dc:fa:d8:a5:aa:11:4a:5b:7c:cc:c4:2f:9c:d6:6e:2d:21:bd: 70:a5:30:4a:99:ee:fb:b3:f6:35:31:c8:8d:ac:7f:d9:a6:8a: 8b:28:b9:c2:0a:c8:e8:f8:e4:75:57:be:c0:a5:7a:90:0c:7f: e1:6e:86:87:52:c8:33:78:7b:0c:ea:5d:c2:86:85:3b:32:52: 95:31:15:0f:65:03:39:14:1a:78:54:06:08:5c:21:dd:df:c5: b7:11:05:25:af:38:e2:4b:5c:b4:8f:7e:dc:eb:45:c2:d3:5e: 74:23:1a:56:81:b7:89:97:5e:67:35:23:66:9d:9d:e5:f2:bb: e8:5c:db:16:20:ee:a3:81:1d:ae:5a:e9:05:e3:a8:90:77:ae: f4:a2:60:b6:70:a7:ea:37:4b:b1:33:12:dd:97:8f:09:13:15: 8d:e5:00:e2:31:af:1f:e5:3d:82:6b:72:c0:ed:dc:52:c9:63: fa:e3:ed:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA1 NkQwNTAxRDQzMENFMEZDRjBEQjA2NzVCQUZDOTBCMDVEOUJGNTAeFw0yNjAzMDEw MTI4MThaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCRjM5RjQwREVGM0Uw NUE5MkM4QjE0NkQzNTYyOTkyOTc2OEZCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXbtgk5naTWL8rhTCtWP4RKG/Px39mK+s7aClrVv0XK05f+w/b yef49ZnTEqgLOxkCRuop6cx+BKsxIyUt2a7lUJLu+IX0JaqM/A/khy2hTtOiWG4B xaF2IrrcPCNu7YalhwiG81KC+Ft1rHtIoKv5c7XZx2J61QJxK8oqhGGM2lOTb+R4 a5buJyPBL+ljrH2hEjOwPx7JwwWhsKWkjn0kf9ID8tkle4l6nhuQ4zzoQywGEY5L ZexhYfiMaFEX3S9tgohGnUhcSGnxFZBDa+6I3jm6K54QK/7Q++HTmm7BwASpMVy4 dS/vJVlaQeqgacFHmh+cBCGDyGj2Z9XMBtX9AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUy/OfQN7z4FqSyLFG01Ypkpdo+xcwHwYDVR0jBBgwFoAU4FbQUB1DDOD88NsG dbr8kLBdm/UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzRGYlFVQjFERE9EODhOc0dkYnI4 a0xCZG1fVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMTIwNy95X09mUU43ejRGcVN5TEZHMDFZcGtwZG8teGMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQG2bKAMA0GCSqGSIb3DQEBCwUAA4IBAQAU4LpOY3T2sUFKR6V/RDlF Jkf33Tekt6dt91ZAUYBRpUHrMo/VW94F5P3Y2mMiFCnUv30fVOaSGcTICJ2Jwj02 3aUQ8U9L15bc+tilqhFKW3zMxC+c1m4tIb1wpTBKme77s/Y1MciNrH/ZpoqLKLnC Csjo+OR1V77ApXqQDH/hboaHUsgzeHsM6l3ChoU7MlKVMRUPZQM5FBp4VAYIXCHd 38W3EQUlrzjiS1y0j37c60XC0150IxpWgbeJl15nNSNmnZ3l8rvoXNsWIO6jgR2u WukF46iQd670omC2cKfqN0uxMxLdl48JExWN5QDiMa8f5T2Ca3LA7dxSyWP64+2B -----END CERTIFICATE-----Generated at Mon Mar 2 11:26:21 2026 by rpki-client