$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/FKXB68nT-gyPnO5eUdTy-T5dwaU.roa File: FKXB68nT-gyPnO5eUdTy-T5dwaU.roa (raw, json) Hash identifier: eDl9SzE1bJPpBH2STiCrZoJuvS+TCxATS4Qzi3C7a6I= Subject key identifier: 14:A5:C1:EB:C9:D3:FA:0C:8F:9C:EE:5E:51:D4:F2:F9:3E:5D:C1:A5 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 5B Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/FKXB68nT-gyPnO5eUdTy-T5dwaU.roa Signing time: Tue 31 Mar 2026 08:33:50 +0000 ROA not before: Tue 31 Mar 2026 08:33:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24259 IP address blocks: 203.188.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Mar 31 08:33:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=14A5C1EBC9D3FA0C8F9CEE5E51D4F2F93E5DC1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:b8:38:82:7a:1f:6d:1e:61:7d:8f:df:81: c7:f0:72:be:d2:64:02:05:bd:ac:a8:b5:7b:50:f9: 62:04:f4:c1:d7:08:d6:e6:f8:67:55:98:8f:15:39: ef:2e:d3:52:26:d8:01:e4:c9:08:42:01:3d:78:d0: f1:0a:dd:d2:c0:da:b2:2b:24:7b:36:aa:45:a0:ed: 60:6e:a8:07:6c:f2:c1:64:47:89:dc:73:91:ca:ba: 05:f2:cd:a3:0b:d4:69:64:94:f7:98:44:5f:87:90: ec:33:fd:66:26:a8:c9:91:6d:69:56:60:ba:cf:23: 0b:20:1d:c5:5c:c6:c9:8b:28:4a:17:db:c3:f3:b8: 47:07:0f:79:b5:f1:29:55:06:f9:35:c4:ef:47:35: 34:2b:73:3b:ad:46:ae:2a:bd:8d:6f:58:6e:aa:6f: 6d:3a:ef:cb:3d:a4:5a:29:6d:1b:c1:b3:41:f2:44: a2:de:5b:cc:c4:1a:88:bc:02:90:86:19:43:2d:63: cc:d2:b4:ba:a7:37:7a:e2:fd:76:c2:56:d9:af:ac: 74:03:af:6c:f2:a2:92:22:e0:3f:b7:de:6f:d3:fa: 84:4f:59:13:5a:59:01:a1:e8:15:df:54:12:50:52: 89:f6:8d:e7:82:78:7c:1e:f5:c1:ad:1f:1b:42:fb: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A5:C1:EB:C9:D3:FA:0C:8F:9C:EE:5E:51:D4:F2:F9:3E:5D:C1:A5 X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/FKXB68nT-gyPnO5eUdTy-T5dwaU.roa sbgp-ipAddrBlock: critical IPv4: 203.188.208.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:b5:59:29:12:ba:c3:a2:17:d4:a6:87:a6:52:41:54:63:3b: 7f:24:d0:a2:94:35:52:c9:64:5f:c1:a4:d0:30:59:0f:7b:ae: 1a:35:d2:cc:e0:84:c5:01:37:28:ff:b8:a2:e1:34:2e:9e:2c: ad:5c:56:26:4b:6b:b0:56:d7:1c:75:b5:75:61:7e:c4:bc:e0: 6a:50:76:0e:b4:f3:7b:d1:16:39:25:84:5e:c9:dc:d2:9e:fc: b4:07:fc:3f:b6:52:4f:b3:64:3e:05:07:c3:0b:c0:47:80:9e: 32:ae:00:b6:76:ac:f3:27:94:8c:c9:b4:c6:e7:0f:3a:b8:f4: 9e:6d:ab:aa:36:ca:9f:52:a8:b2:c1:0b:23:85:83:88:b8:3b: 6c:ef:91:b8:58:c0:74:4b:0b:61:23:8a:08:da:d6:43:10:9c: c4:fd:50:bc:20:6d:07:e8:58:ed:8f:54:4b:51:ac:a2:55:3a: a8:98:b1:35:81:59:02:9d:8f:cb:4f:f3:b0:61:b5:9e:1b:25: c1:3d:aa:86:29:ff:2b:83:8a:2a:f4:23:ff:1c:0d:32:31:b9: c8:0b:72:3c:c5:7a:38:80:ed:2e:d7:d8:4a:f6:f4:0a:ff:96: 19:6c:c7:f7:c2:69:d4:d1:96:d6:d3:bf:59:fe:f7:54:17:8d: 86:91:68:ed -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI2MDMzMTA4 MzM1MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTRBNUMxRUJDOUQzRkEw QzhGOUNFRTVFNTFENEYyRjkzRTVEQzFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMxJuDiCeh9tHmF9j9+Bx/ByvtJkAgW9rKi1e1D5YgT0wdcI1ub4 Z1WYjxU57y7TUibYAeTJCEIBPXjQ8Qrd0sDasiskezaqRaDtYG6oB2zywWRHidxz kcq6BfLNowvUaWSU95hEX4eQ7DP9ZiaoyZFtaVZgus8jCyAdxVzGyYsoShfbw/O4 RwcPebXxKVUG+TXE70c1NCtzO61Griq9jW9YbqpvbTrvyz2kWiltG8GzQfJEot5b zMQaiLwCkIYZQy1jzNK0uqc3euL9dsJW2a+sdAOvbPKikiLgP7feb9P6hE9ZE1pZ AaHoFd9UElBSifaN54J4fB71wa0fG0L7xIMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQUpcHrydP6DI+c7l5R1PL5Pl3BpTAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MDYvRktYQjY4blQtZ3lQbk81ZVVkVHktVDVkd2FVLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8u80DANBgkqhkiG9w0BAQsFAAOCAQEA TrVZKRK6w6IX1KaHplJBVGM7fyTQopQ1UslkX8Gk0DBZD3uuGjXSzOCExQE3KP+4 ouE0Lp4srVxWJktrsFbXHHW1dWF+xLzgalB2DrTze9EWOSWEXsnc0p78tAf8P7ZS T7NkPgUHwwvAR4CeMq4Atnas8yeUjMm0xucPOrj0nm2rqjbKn1KossELI4WDiLg7 bO+RuFjAdEsLYSOKCNrWQxCcxP1QvCBtB+hY7Y9US1GsolU6qJixNYFZAp2Py0/z sGG1nhslwT2qhin/K4OKKvQj/xwNMjG5yAtyPMV6OIDtLtfYSvb0Cv+WGWzH98Jp 1NGW1tO/Wf73VBeNhpFo7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:07:00 2026 by rpki-client