$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/fNrJj-eMUKxnEZJBSylzWSEEE9E.roa File: fNrJj-eMUKxnEZJBSylzWSEEE9E.roa (raw, json) Hash identifier: lW97ZFhPqBcBXgFvISkmywnwnoGmVdY+W+06S9IM7R0= Subject key identifier: 7C:DA:C9:8F:E7:8C:50:AC:67:11:92:41:4B:29:73:59:21:04:13:D1 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: ED Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/fNrJj-eMUKxnEZJBSylzWSEEE9E.roa Signing time: Tue 31 Mar 2026 08:16:57 +0000 ROA not before: Tue 31 Mar 2026 08:16:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 128.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:16:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7CDAC98FE78C50AC671192414B297359210413D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:f0:24:f8:a0:a1:e7:4f:14:8a:ba:50:f7: bf:c9:ba:2c:cf:e5:18:94:cf:cb:be:41:dc:fe:9a: 41:97:67:57:93:31:5e:13:75:be:80:32:35:6e:d3: 50:a2:16:22:68:f5:22:ad:79:dc:3a:25:1a:7e:fd: c4:c8:54:5a:a1:ab:b5:53:d3:2c:ad:5e:9f:7c:e3: 9d:a9:25:50:a0:7f:8e:2b:98:53:28:81:fa:d4:e3: 81:31:1b:44:2a:98:1e:56:1e:7e:eb:c1:ff:1c:cc: f7:6e:16:7c:fd:8b:84:cc:a2:26:e7:2f:43:7b:22: 30:12:aa:6d:81:f7:c1:6f:6f:92:14:9f:39:00:be: fc:17:e8:87:21:38:61:f7:74:a2:e2:94:43:44:7c: de:4f:8d:1d:eb:12:97:6b:75:10:bc:fb:f2:97:e5: 26:de:df:c2:c7:71:7b:9d:b2:98:94:36:a0:55:31: cb:77:d4:31:84:f9:e7:4a:1f:61:87:97:26:e3:1a: 1f:68:7f:8c:4a:32:6a:b1:87:95:84:40:6c:5d:c7: fa:9f:9a:1c:ca:54:6d:13:97:74:de:2a:28:37:da: a1:ff:91:40:6a:c1:eb:33:8b:45:75:35:0e:60:37: 78:ee:46:de:cf:26:2d:67:7f:a6:37:47:2a:12:b2: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DA:C9:8F:E7:8C:50:AC:67:11:92:41:4B:29:73:59:21:04:13:D1 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/fNrJj-eMUKxnEZJBSylzWSEEE9E.roa sbgp-ipAddrBlock: critical IPv4: 128.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption b4:07:33:fe:e5:c7:1d:76:66:1d:d8:a2:f1:57:81:e6:dd:de: b0:d1:fb:a5:35:74:e3:47:0c:f4:f2:6c:30:fd:8c:ab:07:1d: 7d:a6:0c:96:eb:2a:ef:25:87:b6:2c:52:f7:2a:50:69:c5:f3: 94:44:0d:c8:1d:be:c0:bf:22:05:c6:4e:67:92:5a:4d:03:6d: 6c:6c:cd:84:a8:33:cc:b9:10:e3:41:c6:df:19:14:50:9f:84: ec:56:a7:0b:84:7f:e9:24:60:94:ac:7c:5d:3c:ab:d6:3d:4b: 5b:ce:0c:56:ca:2c:37:ce:8e:d2:4c:3d:0b:56:ff:3a:8b:96: 9f:26:91:30:e6:ea:8a:21:2e:09:04:f9:24:64:96:55:f4:e8: 3b:da:1d:18:24:b6:7b:be:bb:95:c0:d0:c3:82:52:f3:29:17: 12:36:76:18:51:53:cf:e5:c2:cd:b7:d9:ea:5c:fe:0d:31:a5: 21:92:f9:d9:67:68:b6:ae:2b:26:e1:34:6c:23:eb:37:ef:89: f9:05:6e:04:63:7e:6f:96:5f:a0:81:95:96:24:bd:13:df:8e: c5:28:6b:68:21:eb:ce:e8:0c:8d:59:24:ad:15:1a:66:30:39: 1f:0d:21:35:9a:4a:12:50:e4:3d:eb:35:e2:13:b5:c1:28:43: 28:07:44:8f -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE2NTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdDREFDOThGRTc4QzUw QUM2NzExOTI0MTRCMjk3MzU5MjEwNDEzRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyLPAk+KCh508UirpQ97/JuizP5RiUz8u+Qdz+mkGXZ1eTMV4T db6AMjVu01CiFiJo9SKtedw6JRp+/cTIVFqhq7VT0yytXp98452pJVCgf44rmFMo gfrU44ExG0QqmB5WHn7rwf8czPduFnz9i4TMoibnL0N7IjASqm2B98Fvb5IUnzkA vvwX6IchOGH3dKLilENEfN5PjR3rEpdrdRC8+/KX5Sbe38LHcXudspiUNqBVMct3 1DGE+edKH2GHlybjGh9of4xKMmqxh5WEQGxdx/qfmhzKVG0Tl3TeKig32qH/kUBq weszi0V1NQ5gN3juRt7PJi1nf6Y3RyoSstP1AgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUfNrJj+eMUKxnEZJBSylzWSEEE9EwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9mTnJKai1lTVVLeG5FWkpCU3lseldTRUVFOUUucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBwwDQYJKoZIhvcNAQELBQADggEBALQH M/7lxx12Zh3YovFXgebd3rDR+6U1dONHDPTybDD9jKsHHX2mDJbrKu8lh7YsUvcq UGnF85REDcgdvsC/IgXGTmeSWk0DbWxszYSoM8y5EONBxt8ZFFCfhOxWpwuEf+kk YJSsfF08q9Y9S1vODFbKLDfOjtJMPQtW/zqLlp8mkTDm6oohLgkE+SRkllX06Dva HRgktnu+u5XA0MOCUvMpFxI2dhhRU8/lws232epc/g0xpSGS+dlnaLauKybhNGwj 6zfvifkFbgRjfm+WX6CBlZYkvRPfjsUoa2gh687oDI1ZJK0VGmYwOR8NITWaShJQ 5D3rNeITtcEoQygHRI8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:22 2026 by rpki-client