$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kzFITSgNCJZAH8cxV4jnqfbUr4k.roa File: kzFITSgNCJZAH8cxV4jnqfbUr4k.roa (raw, json) Hash identifier: +FyAXSFLYIewA/2eoMbHcpsiGbtvrKrTwKYHaTHqL1U= Subject key identifier: 93:31:48:4D:28:0D:08:96:40:1F:C7:31:57:88:E7:A9:F6:D4:AF:89 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 05D1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kzFITSgNCJZAH8cxV4jnqfbUr4k.roa Signing time: Tue 31 Mar 2026 08:20:52 +0000 ROA not before: Tue 31 Mar 2026 08:20:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 111.235.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:20:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9331484D280D0896401FC7315788E7A9F6D4AF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:e3:12:71:83:ce:6f:5f:2d:30:b4:a7:6b: 40:f8:1e:2d:44:ed:a3:b1:99:4c:44:f2:98:70:7b: 29:ee:50:41:37:cb:8e:f7:9c:9f:ac:82:2c:f2:60: f3:17:11:81:38:40:bb:73:04:eb:72:bc:21:2f:55: 61:f8:cc:82:0e:80:55:89:86:ef:b7:84:3d:40:4d: 50:25:b4:07:24:99:df:29:34:22:df:4b:19:1c:de: 40:93:f2:1a:9a:9e:9a:9f:f1:0e:e3:b1:25:fb:c9: 0c:4e:2f:dd:ab:8f:0b:10:63:08:42:05:21:9a:3c: 3e:ac:37:bb:bb:aa:5a:1c:4d:9c:bf:e5:85:ad:bf: 74:a9:46:0c:9a:f4:dd:20:1b:85:99:32:32:04:d8: a5:e9:d8:dc:46:9e:58:2d:db:3c:dd:71:ec:ca:2c: 36:b6:b6:7a:07:96:14:42:fb:2b:c0:32:4e:4e:4b: 00:13:0c:ec:4e:e7:00:76:65:9f:a8:2e:b6:d9:a1: 63:df:93:e6:a0:35:4a:6c:77:80:e4:68:81:f3:b6: c0:f3:d6:9d:cf:8d:21:b3:25:a4:1f:f7:b4:8d:ec: 40:66:f0:57:dc:14:84:f2:b5:d8:e1:8a:a8:57:7f: 08:05:49:92:b5:26:7c:4f:f8:ff:24:de:99:00:13: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:31:48:4D:28:0D:08:96:40:1F:C7:31:57:88:E7:A9:F6:D4:AF:89 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kzFITSgNCJZAH8cxV4jnqfbUr4k.roa sbgp-ipAddrBlock: critical IPv4: 111.235.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:04:07:c0:f2:30:20:fe:22:29:a3:de:83:58:76:35:5d:c5: 77:07:41:b2:f4:12:d2:b5:97:d2:aa:94:e6:84:28:1b:0e:26: bc:ce:12:28:17:47:11:0c:5d:ca:91:37:33:ee:a3:4f:4d:25: 02:c9:9d:7a:f2:54:e6:fe:8d:4b:c6:94:4e:ed:ac:2e:30:cd: bf:33:90:ad:be:23:66:04:5e:06:ae:fb:a0:6c:87:fe:47:8e: 7d:9b:2f:2b:d0:9e:6e:f5:48:c7:e6:7f:d0:c1:bd:5a:dc:cb: 3f:ab:a9:3a:92:2a:9f:1f:32:5b:fb:9d:38:f8:a6:5a:7a:1c: 34:e6:1e:38:e0:03:55:be:c4:fe:2e:d4:c8:30:fe:c4:43:47: b6:80:bc:89:f1:a1:4e:1d:a9:ec:60:20:78:56:71:46:c3:9a: 44:c0:c2:6f:2d:03:ef:d1:e1:0b:28:5d:fd:b4:7c:17:d5:c0: eb:f2:33:fe:11:86:13:57:fe:6a:8a:f4:77:03:63:15:ca:74: 0d:b9:02:2d:44:c8:41:a1:8d:37:d8:4c:20:ef:f7:89:91:81: 8c:be:75:90:55:51:af:7a:66:56:a5:41:6b:ba:66:bd:47:f7: 07:e0:4c:d8:28:54:e6:f7:bc:36:3c:8e:18:78:58:de:0b:0f: 98:8b:43:29 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODIwNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzMzE0ODREMjgwRDA4 OTY0MDFGQzczMTU3ODhFN0E5RjZENEFGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQwOMScYPOb18tMLSna0D4Hi1E7aOxmUxE8phweynuUEE3y473 nJ+sgizyYPMXEYE4QLtzBOtyvCEvVWH4zIIOgFWJhu+3hD1ATVAltAckmd8pNCLf Sxkc3kCT8hqanpqf8Q7jsSX7yQxOL92rjwsQYwhCBSGaPD6sN7u7qlocTZy/5YWt v3SpRgya9N0gG4WZMjIE2KXp2NxGnlgt2zzdcezKLDa2tnoHlhRC+yvAMk5OSwAT DOxO5wB2ZZ+oLrbZoWPfk+agNUpsd4DkaIHztsDz1p3PjSGzJaQf97SN7EBm8Ffc FITytdjhiqhXfwgFSZK1JnxP+P8k3pkAE40TAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkzFITSgNCJZAH8cxV4jnqfbUr4kwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L2t6RklUU2dOQ0paQUg4Y3hWNGpucWZiVXI0ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABv6yYwDQYJKoZIhvcNAQELBQADggEB ACsEB8DyMCD+Iimj3oNYdjVdxXcHQbL0EtK1l9KqlOaEKBsOJrzOEigXRxEMXcqR NzPuo09NJQLJnXryVOb+jUvGlE7trC4wzb8zkK2+I2YEXgau+6Bsh/5Hjn2bLyvQ nm71SMfmf9DBvVrcyz+rqTqSKp8fMlv7nTj4plp6HDTmHjjgA1W+xP4u1Mgw/sRD R7aAvInxoU4dqexgIHhWcUbDmkTAwm8tA+/R4QsoXf20fBfVwOvyM/4RhhNX/mqK 9HcDYxXKdA25Ai1EyEGhjTfYTCDv94mRgYy+dZBVUa96ZlalQWu6Zr1H9wfgTNgo VOb3vDY8jhh4WN4LD5iLQyk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:00:45 2026 by rpki-client