$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/FKenv4QXCJ4U0PSdg7qfMx00h9U.roa File: FKenv4QXCJ4U0PSdg7qfMx00h9U.roa (raw, json) Hash identifier: +2aGW9eUtdcIs4JDNMxuc49v+d2VoDX/sDykYHH6Wa0= Subject key identifier: 14:A7:A7:BF:84:17:08:9E:14:D0:F4:9D:83:BA:9F:33:1D:34:87:D5 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: C4 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FKenv4QXCJ4U0PSdg7qfMx00h9U.roa Signing time: Tue 31 Mar 2026 07:39:40 +0000 ROA not before: Tue 31 Mar 2026 07:39:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 131.213.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Mar 31 07:39:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=14A7A7BF8417089E14D0F49D83BA9F331D3487D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:68:c6:0f:c0:9c:4a:de:25:75:cd:4c:bc:fd: 7d:51:d6:22:aa:8c:f4:23:6a:9c:b6:c4:bd:3b:39: de:71:fc:02:ca:c8:2a:98:59:5d:9c:d5:c7:3e:ed: fb:5b:cb:1d:bb:b9:28:bf:0e:29:45:51:e9:20:43: 15:21:83:84:d0:c4:46:4e:8c:67:83:08:e3:47:13: 6a:f6:83:c5:cb:ed:3a:08:d9:db:89:e5:50:65:05: 67:09:66:9e:d4:1f:85:eb:93:2d:48:49:17:bf:07: e9:0d:b4:49:72:73:87:79:7b:b7:48:bc:8c:9a:fd: fc:b5:cc:e5:6c:25:3f:be:75:45:40:22:74:ed:17: 51:85:5c:98:33:73:2a:03:4d:94:82:0c:d7:c8:2b: 5d:c3:90:f4:bd:6f:24:33:b9:7f:93:9e:5b:14:2a: 25:9b:8a:4e:e4:4b:0e:ec:a4:b2:b9:93:e8:8b:ea: 4d:d5:b1:a1:3b:09:01:c6:82:a6:97:ae:a9:1a:9d: cc:ea:da:9f:36:b9:b9:68:9f:49:ca:07:48:2d:be: 41:c3:9e:96:d4:c0:12:df:e2:6c:b9:17:cd:a3:59: 94:15:36:ff:44:69:e3:3b:cd:f9:cf:bf:25:d2:ba: ec:1c:99:d3:c0:42:ec:26:a9:79:b7:aa:78:c0:8e: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A7:A7:BF:84:17:08:9E:14:D0:F4:9D:83:BA:9F:33:1D:34:87:D5 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FKenv4QXCJ4U0PSdg7qfMx00h9U.roa sbgp-ipAddrBlock: critical IPv4: 131.213.0.0/16 Signature Algorithm: sha256WithRSAEncryption b7:81:d6:70:72:e8:58:8b:f3:df:7f:4f:5e:40:c7:68:51:e6: d1:a8:70:ec:09:8f:00:37:3b:be:3c:c2:72:88:2d:e4:d8:41: fb:15:2f:e3:80:63:ec:50:55:6c:7b:e8:10:63:94:5e:0b:95: 46:a2:ea:6f:b3:6b:70:35:6c:e2:04:45:fb:de:29:6d:f2:68: b0:84:97:68:46:c0:62:40:6e:6e:55:5c:e6:19:0a:ae:00:90: 5f:0c:05:e3:f9:21:a2:85:15:28:9d:d1:f6:4c:38:67:83:bc: 0d:c3:51:f2:d5:00:40:a7:af:8f:33:94:76:63:3a:4b:c5:0a: ed:28:5a:a5:c8:8f:80:19:da:e7:7c:d5:48:30:fe:6f:77:51: 81:4a:4b:a2:a8:20:22:8f:7d:1a:18:b3:66:28:4c:1c:d8:0b: e6:a6:37:10:ae:8a:f4:8f:7b:7f:cb:59:33:99:d1:46:a5:d8: 8d:72:cf:23:1f:f0:6a:66:4b:61:4b:9f:0d:0a:07:7e:82:2a: b0:33:d4:ba:9d:1b:c7:55:9b:53:be:95:31:5c:77:18:5f:6c: 85:b8:e3:04:fc:b3:86:54:aa:43:dc:f9:ec:97:07:b1:e1:ef: f6:36:90:82:dd:50:53:3f:5f:4c:fb:d2:39:d8:12:60:ed:6c: 20:e5:eb:23 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNjAzMzEw NzM5NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0QTdBN0JGODQxNzA4 OUUxNEQwRjQ5RDgzQkE5RjMzMUQzNDg3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkaMYPwJxK3iV1zUy8/X1R1iKqjPQjapy2xL07Od5x/ALKyCqY WV2c1cc+7ftbyx27uSi/DilFUekgQxUhg4TQxEZOjGeDCONHE2r2g8XL7ToI2duJ 5VBlBWcJZp7UH4Xrky1ISRe/B+kNtElyc4d5e7dIvIya/fy1zOVsJT++dUVAInTt F1GFXJgzcyoDTZSCDNfIK13DkPS9byQzuX+TnlsUKiWbik7kSw7spLK5k+iL6k3V saE7CQHGgqaXrqkanczq2p82ublon0nKB0gtvkHDnpbUwBLf4my5F82jWZQVNv9E aeM7zfnPvyXSuuwcmdPAQuwmqXm3qnjAjpKPAgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUFKenv4QXCJ4U0PSdg7qfMx00h9UwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9GS2VudjRRWENKNFUwUFNkZzdxZk14MDBoOVUucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg9UwDQYJKoZIhvcNAQELBQADggEBALeB 1nBy6FiL899/T15Ax2hR5tGocOwJjwA3O748wnKILeTYQfsVL+OAY+xQVWx76BBj lF4LlUai6m+za3A1bOIERfveKW3yaLCEl2hGwGJAbm5VXOYZCq4AkF8MBeP5IaKF FSid0fZMOGeDvA3DUfLVAECnr48zlHZjOkvFCu0oWqXIj4AZ2ud81Ugw/m93UYFK S6KoICKPfRoYs2YoTBzYC+amNxCuivSPe3/LWTOZ0Ual2I1yzyMf8GpmS2FLnw0K B36CKrAz1LqdG8dVm1O+lTFcdxhfbIW44wT8s4ZUqkPc+eyXB7Hh7/Y2kILdUFM/ X0z70jnYEmDtbCDl6yM= -----END CERTIFICATE-----Generated at Sun Apr 19 11:02:49 2026 by rpki-client