$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/q9yPwvfcaZcGG2dp5-PrKg4X8Vw.roa File: q9yPwvfcaZcGG2dp5-PrKg4X8Vw.roa (raw, json) Hash identifier: ZMd0/yWH8tfzMW5YeMfaavY5fKF4JXeAJg45/8bGgvU= Subject key identifier: AB:DC:8F:C2:F7:DC:69:97:06:1B:67:69:E7:E3:EB:2A:0E:17:F1:5C Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18 Certificate serial: AF Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/q9yPwvfcaZcGG2dp5-PrKg4X8Vw.roa Signing time: Tue 31 Mar 2026 08:17:37 +0000 ROA not before: Tue 31 Mar 2026 08:17:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 133.130.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18 Validity Not Before: Mar 31 08:17:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=ABDC8FC2F7DC6997061B6769E7E3EB2A0E17F15C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:6f:af:d2:be:df:25:0f:e3:56:91:96:9e: 11:8b:f4:c1:f4:ea:75:79:48:66:bb:dd:da:51:a9: 17:5c:05:1a:ee:29:75:c0:e5:6a:2a:3f:73:24:6b: 67:d0:f6:dd:de:54:8d:b8:8c:fc:31:d6:2d:e9:d5: 3d:aa:17:30:58:b7:e9:b3:a1:3c:e8:11:1a:84:95: 57:60:9b:27:81:90:6d:1a:2c:f0:4d:95:bc:02:4a: 51:17:68:17:79:9a:b0:64:77:53:8f:98:b5:d1:bb: e2:90:1f:8c:9e:9f:97:49:5a:df:9b:84:61:bd:9b: cc:21:38:93:b6:1e:1a:a6:c2:e7:20:17:e2:cd:3d: c5:8f:b1:54:69:49:e4:25:16:cc:72:c0:59:83:3a: 3e:57:3c:46:8b:c0:c5:14:89:b8:8c:8e:3b:70:bd: c0:bf:dc:0a:46:a2:1c:a1:24:65:11:f1:c8:f6:91: 92:05:db:9d:3e:3e:18:2f:18:ad:12:40:9a:e2:88: ce:e7:66:11:11:95:6b:f3:84:79:28:bb:68:6f:51: e1:f6:e1:4d:dd:14:0f:b2:f9:9f:da:38:52:1a:e7: 85:c7:c4:ef:1b:44:89:4e:d3:db:3b:75:9f:41:d2: 77:c8:d4:a2:31:f8:df:84:18:77:19:7b:45:35:ea: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DC:8F:C2:F7:DC:69:97:06:1B:67:69:E7:E3:EB:2A:0E:17:F1:5C X509v3 Authority Key Identifier: keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/q9yPwvfcaZcGG2dp5-PrKg4X8Vw.roa sbgp-ipAddrBlock: critical IPv4: 133.130.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7a:b9:f2:49:69:fc:c3:28:ab:a4:82:0c:12:0e:5e:6c:0f:5d: d6:99:f9:29:78:d9:09:d7:c8:a4:af:c0:57:7f:4b:2f:e0:3b: 64:0d:c5:39:b7:44:75:3b:de:8f:15:71:68:0e:cb:9f:7d:2a: 98:08:73:aa:0f:56:e7:1e:17:6c:79:fc:42:c0:62:fb:6a:89: 73:32:25:cc:a2:bb:32:ac:7e:5e:9d:11:58:94:96:7d:25:8f: b3:a3:6c:d0:31:43:b8:4c:ec:39:ff:ea:84:bc:91:4b:c1:4c: 14:d9:fa:26:88:ad:cf:16:b2:33:2a:72:f5:9e:a9:48:28:de: 36:9a:3a:04:72:93:f7:4f:e3:0b:79:fd:74:61:d8:05:6c:cc: 80:ac:e9:eb:85:8f:55:94:e1:c9:9d:c5:33:a6:6b:be:47:d8: 86:b6:32:81:dc:2b:fc:6a:a6:79:78:2b:34:08:ec:c1:39:36: 1f:f0:da:53:cb:99:5b:51:e5:68:b8:02:e1:c3:85:73:61:55: 04:53:79:05:e5:f8:af:48:fd:0f:71:0f:5f:11:1e:9b:4b:41: b1:18:23:2c:cc:ae:c2:49:06:95:df:9d:d1:d5:68:62:8b:1e: 5f:04:c4:27:a3:fa:1a:1e:e0:74:b4:32:42:35:3d:59:86:6f: 68:a3:53:8b -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw ODE3MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCREM4RkMyRjdEQzY5 OTcwNjFCNjc2OUU3RTNFQjJBMEUxN0YxNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXtW+v0r7fJQ/jVpGWnhGL9MH06nV5SGa73dpRqRdcBRruKXXA 5WoqP3Mka2fQ9t3eVI24jPwx1i3p1T2qFzBYt+mzoTzoERqElVdgmyeBkG0aLPBN lbwCSlEXaBd5mrBkd1OPmLXRu+KQH4yen5dJWt+bhGG9m8whOJO2HhqmwucgF+LN PcWPsVRpSeQlFsxywFmDOj5XPEaLwMUUibiMjjtwvcC/3ApGohyhJGUR8cj2kZIF 250+PhgvGK0SQJriiM7nZhERlWvzhHkou2hvUeH24U3dFA+y+Z/aOFIa54XHxO8b RIlO09s7dZ9B0nfI1KIx+N+EGHcZe0U16lGzAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUq9yPwvfcaZcGG2dp5+PrKg4X8VwwHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9xOXlQd3ZmY2FaY0dHMmRwNS1QcktnNFg4Vncucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhYKAMA0GCSqGSIb3DQEBCwUAA4IBAQB6 ufJJafzDKKukggwSDl5sD13WmfkpeNkJ18ikr8BXf0sv4DtkDcU5t0R1O96PFXFo DsuffSqYCHOqD1bnHhdsefxCwGL7aolzMiXMorsyrH5enRFYlJZ9JY+zo2zQMUO4 TOw5/+qEvJFLwUwU2fomiK3PFrIzKnL1nqlIKN42mjoEcpP3T+MLef10YdgFbMyA rOnrhY9VlOHJncUzpmu+R9iGtjKB3Cv8aqZ5eCs0COzBOTYf8NpTy5lbUeVouALh w4VzYVUEU3kF5fivSP0PcQ9fER6bS0GxGCMszK7CSQaV353R1Whiix5fBMQno/oa HuB0tDJCNT1Zhm9oo1OL -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:27 2026 by rpki-client