$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/NyGO-DNpogoE2FOVnN19fqLysrY.roa File: NyGO-DNpogoE2FOVnN19fqLysrY.roa (raw, json) Hash identifier: +gbWcMc+schNvOO4heYiO+VYEpSI+86RFz+Ltlsq5Ww= Subject key identifier: 37:21:8E:F8:33:69:A2:0A:04:D8:53:95:9C:DD:7D:7E:A2:F2:B2:B6 Certificate issuer: /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0 Certificate serial: 34 Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/NyGO-DNpogoE2FOVnN19fqLysrY.roa Signing time: Tue 31 Mar 2026 08:40:40 +0000 ROA not before: Tue 31 Mar 2026 08:40:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24279 IP address blocks: 133.226.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0 Validity Not Before: Mar 31 08:40:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=37218EF83369A20A04D853959CDD7D7EA2F2B2B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:49:31:bf:e7:e2:a3:c0:0a:d4:ae:08:c1: 8a:4a:e5:3e:a9:24:f1:5f:b7:af:c5:cc:dc:a2:dc: 00:73:cf:b5:b9:52:c2:d3:ce:ec:07:00:f2:23:8b: 7a:dc:59:da:9e:e7:29:69:29:ea:bb:f6:1e:e9:a8: 92:5a:97:36:a9:09:2b:7e:4c:64:aa:cb:21:40:61: 3b:bf:3f:7e:56:e4:db:e0:83:7e:4f:a8:46:d2:9b: 51:0f:4b:d6:c2:32:bd:3d:d0:05:5d:4f:69:2c:1a: fb:74:26:d7:86:ea:e0:1f:19:05:60:2d:16:49:b1: 06:b6:d1:1f:5b:68:9f:8b:52:14:4f:28:f3:e6:9f: b9:1a:d2:33:28:03:7b:b5:0c:f0:30:3c:08:53:b4: 94:61:46:3d:f1:d9:f6:28:43:5d:c6:3a:63:81:26: 25:39:a3:d4:9a:5e:5d:9f:23:6e:6d:b7:69:32:a9: 2b:03:01:a9:ef:bb:73:31:32:30:af:57:20:43:0e: 2a:e8:3e:04:2a:d5:38:d0:3c:ef:7a:9a:ec:29:49: cc:3b:96:2a:e8:4b:ec:2d:cf:b8:cf:c0:1c:fe:3d: 6c:5b:0c:0d:47:46:ba:d3:90:65:ca:af:18:cf:53: e7:77:99:7b:95:4d:ab:52:30:5f:f1:be:9f:b2:6a: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:8E:F8:33:69:A2:0A:04:D8:53:95:9C:DD:7D:7E:A2:F2:B2:B6 X509v3 Authority Key Identifier: keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/NyGO-DNpogoE2FOVnN19fqLysrY.roa sbgp-ipAddrBlock: critical IPv4: 133.226.140.0/22 Signature Algorithm: sha256WithRSAEncryption 20:b1:ac:01:ed:5f:48:cf:fb:00:43:de:a6:d1:7e:36:5d:95: 82:56:96:15:d6:2f:32:7d:1c:fe:96:1a:b3:3c:ef:23:f5:00: d0:60:4a:08:c2:68:cd:eb:cc:04:e4:ab:ba:91:86:bb:2b:28: f0:8a:4d:3e:c4:9b:cd:be:32:9e:9c:d4:04:b6:39:23:70:2b: cd:5b:22:51:00:55:69:3e:a2:d0:8f:9c:dd:f6:91:10:a2:1d: 0e:d9:c5:6e:aa:62:58:31:44:f1:64:a7:12:69:4d:fc:8d:dd: 0e:5f:1d:17:c8:08:ae:20:86:75:b0:12:1f:d2:c0:bf:c5:15: 06:2a:fe:b8:54:97:46:3c:b3:4f:b8:ea:43:c6:92:7c:0c:23: 66:46:8b:0c:35:5d:59:75:b0:23:60:0e:c8:76:b6:ce:31:12: 53:59:9d:34:5d:5a:7a:36:0d:5d:66:a8:75:4e:74:fd:e0:e1: 04:0b:f4:a7:b0:39:37:f5:01:4b:00:b0:77:cc:a1:c4:61:f5: 68:3e:66:d7:5f:08:53:d4:7b:95:fb:30:c9:70:51:5c:e1:fc: ae:7e:11:df:d6:6a:fb:81:02:75:d7:92:0f:71:aa:db:da:6d: 64:e4:9d:7e:e0:1c:9d:59:9d:40:74:a9:85:7f:45:a8:2e:62: 65:b3:ce:33 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODkz MDE1NTUwMEI1OEZGNzNBOEEwODgyMTg1QzY2QUM2QTBEM0EwMB4XDTI2MDMzMTA4 NDA0MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzcyMThFRjgzMzY5QTIw QTA0RDg1Mzk1OUNERDdEN0VBMkYyQjJCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL8RSTG/5+KjwArUrgjBikrlPqkk8V+3r8XM3KLcAHPPtblSwtPO 7AcA8iOLetxZ2p7nKWkp6rv2HumoklqXNqkJK35MZKrLIUBhO78/flbk2+CDfk+o RtKbUQ9L1sIyvT3QBV1PaSwa+3Qm14bq4B8ZBWAtFkmxBrbRH1ton4tSFE8o8+af uRrSMygDe7UM8DA8CFO0lGFGPfHZ9ihDXcY6Y4EmJTmj1JpeXZ8jbm23aTKpKwMB qe+7czEyMK9XIEMOKug+BCrVONA873qa7ClJzDuWKuhL7C3PuM/AHP49bFsMDUdG utOQZcqvGM9T53eZe5VNq1IwX/G+n7JqMQ0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQ3IY74M2miCgTYU5Wc3X1+ovKytjAfBgNVHSMEGDAWgBTIkwFVUAtY/3OooIgh hcZqxqDToDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTIwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNhZzA2QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNh ZzA2QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MjAvTnlHTy1ETnBvZ29FMkZPVm5OMTlmcUx5c3JZLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoXijDANBgkqhkiG9w0BAQsFAAOCAQEA ILGsAe1fSM/7AEPeptF+Nl2VglaWFdYvMn0c/pYaszzvI/UA0GBKCMJozevMBOSr upGGuyso8IpNPsSbzb4ynpzUBLY5I3ArzVsiUQBVaT6i0I+c3faREKIdDtnFbqpi WDFE8WSnEmlN/I3dDl8dF8gIriCGdbASH9LAv8UVBir+uFSXRjyzT7jqQ8aSfAwj ZkaLDDVdWXWwI2AOyHa2zjESU1mdNF1aejYNXWaodU50/eDhBAv0p7A5N/UBSwCw d8yhxGH1aD5m118IU9R7lfswyXBRXOH8rn4R39Zq+4ECddeSD3Gq29ptZOSdfuAc nVmdQHSphX9FqC5iZbPOMw== -----END CERTIFICATE-----Generated at Sat Apr 18 06:24:16 2026 by rpki-client