$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/2Nl--sFTUew5gdslHb50wskB_4o.roa File: 2Nl--sFTUew5gdslHb50wskB_4o.roa (raw, json) Hash identifier: xPTBSyuOZ2SNTc9d/Io4k4suX0piPAPvpUPDF8q+uXY= Subject key identifier: D8:D9:7E:FA:C1:53:51:EC:39:81:DB:25:1D:BE:74:C2:C9:01:FF:8A Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: C9 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2Nl--sFTUew5gdslHb50wskB_4o.roa Signing time: Tue 31 Mar 2026 07:39:43 +0000 ROA not before: Tue 31 Mar 2026 07:39:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 209.17.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Mar 31 07:39:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D8D97EFAC15351EC3981DB251DBE74C2C901FF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0e:ad:90:b9:4d:07:c5:18:39:b5:91:3e:94: d2:3c:11:e5:17:be:38:f5:34:97:2a:de:a2:b1:47: 7e:ed:70:ca:7d:00:68:66:1e:ff:a0:79:51:c1:88: c1:e1:16:35:e1:6e:f5:e8:93:6e:da:cc:b9:32:71: 81:4c:46:6f:77:6a:f7:1e:3a:32:4b:0e:71:96:e7: b3:64:b5:ae:61:d0:61:23:d7:8b:51:46:c7:f2:52: da:50:f1:96:3a:0e:0b:5f:2b:9c:03:f8:ea:41:6f: f3:29:0e:c7:64:f1:c3:14:49:ca:32:81:14:21:7c: dd:1f:c6:9a:02:b5:a7:46:3c:5a:fb:50:89:37:d7: 81:d7:f1:d2:3d:c0:4f:77:d6:22:bb:d3:77:50:9d: 8b:47:53:bf:8c:f7:24:97:5d:7e:c2:52:6e:b0:4b: 01:d5:85:d5:fa:b6:b6:33:37:dd:e7:f8:eb:72:3d: 12:ee:c5:d1:08:c8:71:af:d7:d4:6c:07:3a:68:86: e5:30:ae:29:34:0c:22:59:9e:b0:6c:3c:49:4b:6f: 25:a6:d9:98:f7:d7:a2:4d:7b:17:5e:9e:6f:3a:30: bc:68:58:7f:0c:3e:5f:7b:6f:19:0b:3b:17:75:44: f2:99:13:6c:26:13:0a:48:2b:53:0f:9b:0b:0f:3f: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D9:7E:FA:C1:53:51:EC:39:81:DB:25:1D:BE:74:C2:C9:01:FF:8A X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2Nl--sFTUew5gdslHb50wskB_4o.roa sbgp-ipAddrBlock: critical IPv4: 209.17.64.0/19 Signature Algorithm: sha256WithRSAEncryption 87:b4:e0:b2:f8:21:68:07:fc:3c:00:49:34:39:a0:d2:18:6d: f6:c1:b1:40:c0:66:9f:e4:bc:96:69:14:df:c5:a4:32:39:84: 75:f9:33:6c:97:47:a8:57:2e:5f:a0:e8:2d:66:40:6e:c1:1a: c2:e4:fe:68:8e:0f:e6:b8:ac:56:83:f6:57:41:7e:82:24:5c: c7:27:d3:18:3a:6a:67:ba:5a:23:bb:81:99:66:9a:db:17:42: e4:74:34:ac:f5:3f:99:59:25:db:db:21:3c:a1:40:16:ca:39: b5:58:22:67:8d:cd:18:ea:96:72:be:7f:40:bd:8c:2b:42:84: 36:c0:6f:a8:91:c1:b5:f6:7d:fa:aa:32:e3:80:be:7d:ed:c7: cb:2b:92:c7:bb:e3:9b:c3:73:bb:96:fb:5a:13:f5:0b:c4:44: 8a:6c:f5:94:33:45:99:e6:5e:91:9c:81:21:c8:6b:88:eb:fe: 78:86:70:84:c6:37:4f:aa:53:91:84:7c:79:cc:bd:6f:1d:70: 3e:bd:96:c9:f7:16:81:4f:c0:6d:f8:fc:ce:6e:4b:44:19:a7: 0c:97:78:4c:d4:73:fb:8b:c8:c7:09:6d:af:5e:94:ea:37:51: 74:7b:c1:61:a2:5b:d1:7a:dd:e7:ec:72:3a:c9:0b:c2:c8:28: f6:9f:75:d1 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw NzM5NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4RDk3RUZBQzE1MzUx RUMzOTgxREIyNTFEQkU3NEMyQzkwMUZGOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsDq2QuU0HxRg5tZE+lNI8EeUXvjj1NJcq3qKxR37tcMp9AGhm Hv+geVHBiMHhFjXhbvXok27azLkycYFMRm93avceOjJLDnGW57Nkta5h0GEj14tR RsfyUtpQ8ZY6DgtfK5wD+OpBb/MpDsdk8cMUScoygRQhfN0fxpoCtadGPFr7UIk3 14HX8dI9wE931iK703dQnYtHU7+M9ySXXX7CUm6wSwHVhdX6trYzN93n+OtyPRLu xdEIyHGv19RsBzpohuUwrik0DCJZnrBsPElLbyWm2Zj316JNexdenm86MLxoWH8M Pl97bxkLOxd1RPKZE2wmEwpIK1MPmwsPP9ufAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQU2Nl++sFTUew5gdslHb50wskB/4owHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My8yTmwtLXNGVFVldzVnZHNsSGI1MHdza0JfNG8ucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0RFAMA0GCSqGSIb3DQEBCwUAA4IBAQCH tOCy+CFoB/w8AEk0OaDSGG32wbFAwGaf5LyWaRTfxaQyOYR1+TNsl0eoVy5foOgt ZkBuwRrC5P5ojg/muKxWg/ZXQX6CJFzHJ9MYOmpnuloju4GZZprbF0LkdDSs9T+Z WSXb2yE8oUAWyjm1WCJnjc0Y6pZyvn9AvYwrQoQ2wG+okcG19n36qjLjgL597cfL K5LHu+Obw3O7lvtaE/ULxESKbPWUM0WZ5l6RnIEhyGuI6/54hnCExjdPqlORhHx5 zL1vHXA+vZbJ9xaBT8Bt+PzObktEGacMl3hM1HP7i8jHCW2vXpTqN1F0e8FholvR et3n7HI6yQvCyCj2n3XR -----END CERTIFICATE-----Generated at Sun Apr 19 08:29:43 2026 by rpki-client