$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/K65Smml8uZYuodPk_cytweWMrY0.roa File: K65Smml8uZYuodPk_cytweWMrY0.roa (raw, json) Hash identifier: fjnL2mE3eK3FAx/ozKxSO03k0ShkxEqEIEoq6EUs9EI= Subject key identifier: 2B:AE:52:9A:69:7C:B9:96:2E:A1:D3:E4:FD:CC:AD:C1:E5:8C:AD:8D Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18 Certificate serial: B0 Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/K65Smml8uZYuodPk_cytweWMrY0.roa Signing time: Tue 31 Mar 2026 08:17:38 +0000 ROA not before: Tue 31 Mar 2026 08:17:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 133.232.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18 Validity Not Before: Mar 31 08:17:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2BAE529A697CB9962EA1D3E4FDCCADC1E58CAD8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fe:11:d3:b7:f8:79:3a:46:f4:9a:f8:cf:c3: 32:2c:12:9f:d6:7d:a5:a7:be:c2:8a:8f:29:11:a5: 61:6c:a1:29:b2:8f:20:2c:e8:1d:ef:0a:b0:f0:d9: 01:a6:77:02:cd:d0:a0:34:80:93:9c:0a:72:c4:ba: 63:47:c8:dd:40:1b:d9:4a:a0:78:bf:f9:bd:40:24: ba:0e:e5:b4:c9:1f:a5:37:e4:61:7a:49:45:27:70: 1a:1c:10:96:3e:77:ac:9b:8c:69:06:45:e4:36:6a: 04:da:44:70:e1:53:d7:a4:7d:9a:9b:46:eb:c1:6f: 43:85:48:20:cf:90:43:2b:00:bc:bb:ee:44:a2:72: c7:08:df:aa:12:6b:38:a1:bc:39:ac:22:6a:7d:10: 11:66:ab:0a:32:1c:30:00:96:a5:10:04:04:6b:96: 1c:3d:77:a6:85:ca:5f:81:32:0a:40:c2:ac:e4:4b: 93:a9:63:0b:b9:d5:05:19:95:97:18:08:9a:b3:2f: ea:3c:9e:7a:cf:63:87:d9:24:14:a2:0d:61:ec:b7: 62:e1:16:6a:c0:b6:96:f2:e1:c9:ab:dd:77:aa:e1: e7:03:56:31:9f:f8:87:ce:6d:6d:ed:64:7e:ec:33: ba:61:b9:78:21:6b:ad:7b:1e:61:7f:dc:7e:fd:b8: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:52:9A:69:7C:B9:96:2E:A1:D3:E4:FD:CC:AD:C1:E5:8C:AD:8D X509v3 Authority Key Identifier: keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/K65Smml8uZYuodPk_cytweWMrY0.roa sbgp-ipAddrBlock: critical IPv4: 133.232.128.0/17 Signature Algorithm: sha256WithRSAEncryption 38:cd:ae:45:fb:7d:a3:26:7c:d7:10:fc:f0:64:07:2d:e9:5b: cc:e4:c4:1e:9e:df:91:bb:7a:65:d9:cf:20:34:e6:62:19:18: 8b:d2:1b:54:14:64:64:1c:61:3e:9b:e2:93:1d:e7:e2:0c:f9: 7f:a7:69:0e:ea:f0:59:de:2f:8b:e7:4d:04:a1:ac:7f:31:27: b9:43:71:71:65:8f:dd:ea:4c:95:4f:85:b6:90:9c:5b:a0:dd: 3d:8a:1d:ce:80:3b:f8:d4:01:f4:c5:ce:44:a7:76:a1:ea:a2: aa:a7:64:68:ae:b7:69:d5:af:e7:65:9a:f3:44:0a:92:21:f8: 16:4d:e2:d1:a5:70:f4:59:55:7a:44:4a:af:26:67:28:ec:d6: 6c:d1:20:c2:bc:f4:b3:46:5f:f3:d2:23:12:31:70:cf:a6:bc: ae:5e:60:98:9b:bd:03:f8:99:b5:9c:23:2c:f6:c3:49:53:8e: 8e:e6:26:aa:c6:30:2f:96:55:0b:2e:ca:b1:32:36:4f:40:e3: ed:a3:a5:25:71:97:1e:90:3a:c1:e6:6a:b2:4b:21:4c:54:dd: 7f:08:c3:66:39:5c:8c:92:13:a2:20:8f:22:7c:7e:24:84:0d: cc:c7:b6:8e:0a:92:af:14:56:52:f1:cb:62:43:20:60:77:4f: 06:37:76:00 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw ODE3MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCQUU1MjlBNjk3Q0I5 OTYyRUExRDNFNEZEQ0NBREMxRTU4Q0FEOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL/hHTt/h5Okb0mvjPwzIsEp/WfaWnvsKKjykRpWFsoSmyjyAs 6B3vCrDw2QGmdwLN0KA0gJOcCnLEumNHyN1AG9lKoHi/+b1AJLoO5bTJH6U35GF6 SUUncBocEJY+d6ybjGkGReQ2agTaRHDhU9ekfZqbRuvBb0OFSCDPkEMrALy77kSi cscI36oSazihvDmsImp9EBFmqwoyHDAAlqUQBARrlhw9d6aFyl+BMgpAwqzkS5Op Ywu51QUZlZcYCJqzL+o8nnrPY4fZJBSiDWHst2LhFmrAtpby4cmr3Xeq4ecDVjGf +IfObW3tZH7sM7phuXgha617HmF/3H79uALNAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUK65Smml8uZYuodPk/cytweWMrY0wHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9LNjVTbW1sOHVaWXVvZFBrX2N5dHdlV01yWTAucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHheiAMA0GCSqGSIb3DQEBCwUAA4IBAQA4 za5F+32jJnzXEPzwZAct6VvM5MQent+Ru3pl2c8gNOZiGRiL0htUFGRkHGE+m+KT HefiDPl/p2kO6vBZ3i+L500Eoax/MSe5Q3FxZY/d6kyVT4W2kJxboN09ih3OgDv4 1AH0xc5Ep3ah6qKqp2Rorrdp1a/nZZrzRAqSIfgWTeLRpXD0WVV6REqvJmco7NZs 0SDCvPSzRl/z0iMSMXDPpryuXmCYm70D+Jm1nCMs9sNJU46O5iaqxjAvllULLsqx MjZPQOPto6UlcZcekDrB5mqySyFMVN1/CMNmOVyMkhOiII8ifH4khA3Mx7aOCpKv FFZS8ctiQyBgd08GN3YA -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:58 2026 by rpki-client