$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/zu6zYGjIBE7X3EPR9uTAyW0hasc.roa File: zu6zYGjIBE7X3EPR9uTAyW0hasc.roa (raw, json) Hash identifier: 2Jr8eDmltHFkyHDIdpKW9klDdXXaAavH1ZGy43W9330= Subject key identifier: CE:EE:B3:60:68:C8:04:4E:D7:DC:43:D1:F6:E4:C0:C9:6D:21:6A:C7 Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 8E Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/zu6zYGjIBE7X3EPR9uTAyW0hasc.roa Signing time: Tue 31 Mar 2026 07:35:16 +0000 ROA not before: Tue 31 Mar 2026 07:35:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7684 IP address blocks: 157.17.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Mar 31 07:35:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CEEEB36068C8044ED7DC43D1F6E4C0C96D216AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:6e:cf:04:53:6f:39:de:cb:2c:c5:b3:2c: 45:03:13:90:42:0a:10:84:1f:7c:46:ff:63:e8:10: cc:44:e1:95:83:f0:2f:79:bd:aa:1a:bc:5c:d8:aa: 57:a5:d2:48:de:2b:60:92:92:63:d3:72:5c:8d:5e: f5:d2:ca:cf:3a:bb:11:07:cc:07:81:eb:79:b9:9d: 75:92:31:af:7f:4f:3b:b8:89:6a:10:a2:b6:d1:dd: 89:30:fa:ef:d3:d3:6c:c7:af:db:90:3f:88:b9:c2: 9f:ee:fa:2c:e8:38:ad:55:81:90:1e:8f:4d:07:82: cf:2a:90:1b:76:94:85:79:bd:ee:31:29:32:c3:6f: c6:b2:f8:b5:31:80:fe:3b:44:c3:af:a4:18:71:2b: 53:42:b0:2d:fc:01:29:f9:fe:2e:e1:f2:eb:f6:11: ff:43:bc:06:dc:e9:7c:db:0e:b5:40:0d:ce:c6:70: 39:bf:21:88:a8:99:c3:ad:c1:57:df:35:79:82:e4: 23:5e:16:84:1a:43:0a:ac:25:5e:76:d8:a4:c8:a5: d7:05:4b:28:2e:9a:f7:57:cf:c8:e3:89:05:65:c4: 8d:6f:86:8b:58:6b:ab:e3:88:33:98:89:23:6a:b9: d6:47:02:f6:67:ad:2c:4a:48:60:01:dc:57:93:02: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:B3:60:68:C8:04:4E:D7:DC:43:D1:F6:E4:C0:C9:6D:21:6A:C7 X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/zu6zYGjIBE7X3EPR9uTAyW0hasc.roa sbgp-ipAddrBlock: critical IPv4: 157.17.96.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:f5:7a:cc:21:ea:9b:bc:e3:e7:4b:54:8a:31:6f:8a:26:73: bf:46:ff:5c:50:c9:fd:d4:1b:95:5d:db:70:b0:ab:03:c5:8b: 80:df:f0:60:f2:b9:5b:20:ad:73:ed:ce:e9:60:f7:ba:11:23: 77:be:9c:2d:d0:b9:17:81:0b:c8:02:71:f2:35:14:17:93:0d: 01:21:30:9f:85:bc:b0:c1:ce:ad:6c:6b:56:fe:f3:ea:67:ca: ec:9e:7a:65:6f:6a:c0:cc:9a:76:95:06:aa:c0:23:f1:f3:5d: 5f:65:33:04:ca:9c:f2:a2:c2:e7:33:57:39:42:28:92:01:9b: 2c:d5:fe:3d:7a:4f:21:6f:92:d0:fe:d2:bb:a9:7d:cb:96:55: eb:14:02:b1:57:1c:34:b0:f4:7f:3f:10:e3:f4:4b:fc:e0:a6: 5b:5b:87:9b:78:a1:f4:8c:6a:7d:96:4f:78:74:0d:f4:e1:e7: 7a:95:9d:ea:af:f8:6b:b2:6a:e1:31:60:4d:31:3a:bb:41:bc: 1e:cb:28:20:cc:69:dc:69:25:39:68:87:dd:b7:13:2d:5b:05: 62:27:20:3a:38:a9:7b:ca:73:aa:18:56:97:4d:85:3b:af:3b: 0d:27:a2:cd:18:dc:bc:92:a6:28:73:13:49:ce:24:b3:90:d0: 3f:de:00:36 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD NDYyOTRBNUQ1NjQzN0UxOUExMUFFRjlGQjlCODc3NjkwMTQzRTAeFw0yNjAzMzEw NzM1MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENFRUVCMzYwNjhDODA0 NEVEN0RDNDNEMUY2RTRDMEM5NkQyMTZBQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCU527PBFNvOd7LLMWzLEUDE5BCChCEH3xG/2PoEMxE4ZWD8C95 vaoavFzYqlel0kjeK2CSkmPTclyNXvXSys86uxEHzAeB63m5nXWSMa9/Tzu4iWoQ orbR3Ykw+u/T02zHr9uQP4i5wp/u+izoOK1VgZAej00Hgs8qkBt2lIV5ve4xKTLD b8ay+LUxgP47RMOvpBhxK1NCsC38ASn5/i7h8uv2Ef9DvAbc6XzbDrVADc7GcDm/ IYiomcOtwVffNXmC5CNeFoQaQwqsJV522KTIpdcFSygumvdXz8jjiQVlxI1vhotY a6vjiDOYiSNqudZHAvZnrSxKSGAB3FeTAkWzAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUzu6zYGjIBE7X3EPR9uTAyW0hascwHwYDVR0jBBgwFoAU+8RilKXVZDfhmhGu +fubh3aQFD4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzExMjQ3Ly04UmlsS1hWWkRmaG1oR3UtZnViaDNhUUZENC5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy04UmlsS1hWWkRmaG1oR3UtZnVi aDNhUUZENC5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMTI0Ny96dTZ6WUdqSUJFN1gzRVBSOXVUQXlXMGhhc2Mucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnRFgMA0GCSqGSIb3DQEBCwUA A4IBAQCL9XrMIeqbvOPnS1SKMW+KJnO/Rv9cUMn91BuVXdtwsKsDxYuA3/Bg8rlb IK1z7c7pYPe6ESN3vpwt0LkXgQvIAnHyNRQXkw0BITCfhbywwc6tbGtW/vPqZ8rs nnplb2rAzJp2lQaqwCPx811fZTMEypzyosLnM1c5QiiSAZss1f49ek8hb5LQ/tK7 qX3LllXrFAKxVxw0sPR/PxDj9Ev84KZbW4ebeKH0jGp9lk94dA304ed6lZ3qr/hr smrhMWBNMTq7QbweyyggzGncaSU5aIfdtxMtWwViJyA6OKl7ynOqGFaXTYU7rzsN J6LNGNy8kqYocxNJziSzkNA/3gA2 -----END CERTIFICATE-----Generated at Fri Apr 17 02:33:36 2026 by rpki-client