$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/BkbBvw2Ha5I16q7D6ta5GZcFBU0.roa File: BkbBvw2Ha5I16q7D6ta5GZcFBU0.roa (raw, json) Hash identifier: jLqSSzy0LJ+AcdF8wd8M1suRAjts2pxvwK4f093s9q8= Subject key identifier: 06:46:C1:BF:0D:87:6B:92:35:EA:AE:C3:EA:D6:B9:19:97:05:05:4D Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 08 Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/BkbBvw2Ha5I16q7D6ta5GZcFBU0.roa Signing time: Wed 25 Mar 2026 05:41:33 +0000 ROA not before: Wed 25 Mar 2026 05:41:33 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 60.57.128.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 25 05:41:33 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=0646C1BF0D876B9235EAAEC3EAD6B9199705054D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:7e:05:3e:91:c8:e5:9c:c3:d3:bd:59:cc: 4e:79:bf:d4:69:6e:ac:4e:c8:10:4d:d8:ec:05:16: d1:23:52:6e:23:4c:38:33:ef:09:90:9f:d7:f4:ec: 9e:88:7c:b4:47:14:1b:43:95:5a:28:75:6f:06:b3: 15:98:36:3f:65:28:59:a2:8d:3e:56:37:ca:02:20: 52:fe:b2:53:6c:11:16:4c:4d:dd:b1:5a:b1:34:fc: 44:6e:b5:ba:50:a3:00:6b:5a:aa:99:6c:43:22:bf: ac:1f:de:a1:62:1d:71:26:73:c5:cb:ab:d4:9b:d5: b1:a0:73:91:b6:be:ac:b9:42:6b:7d:71:0e:d3:4c: 26:2a:d6:2d:7a:62:ae:16:f9:40:3f:29:8e:bb:65: 63:64:38:fd:e4:46:10:44:d2:ee:c9:45:68:2f:7b: 2a:53:ff:c9:d4:a0:0b:ea:3c:18:ce:cb:cb:36:7f: 2f:35:64:86:f2:0f:d3:89:6d:85:95:86:fa:6c:28: 64:bc:cb:92:f1:89:ea:2d:ea:b1:24:25:82:fe:00: bb:38:8b:eb:d9:cc:08:71:4d:6d:af:1d:33:99:b7: e4:a9:d1:c1:bc:20:cd:73:b5:21:92:dd:bd:c5:b5: e9:5b:88:2e:19:5d:06:5e:44:5c:c5:38:20:55:65: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:46:C1:BF:0D:87:6B:92:35:EA:AE:C3:EA:D6:B9:19:97:05:05:4D X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/BkbBvw2Ha5I16q7D6ta5GZcFBU0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 60.57.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6b:cf:db:21:19:9c:c4:bd:ed:d8:ca:7c:13:ae:a9:03:52:81: ee:3b:83:25:6f:59:8b:cc:af:15:e1:29:c2:16:cf:7f:59:f4: 5c:aa:31:f5:eb:92:1b:47:3c:56:c3:77:40:8e:4e:8d:c7:65: 96:46:58:b1:68:a8:03:27:6c:9e:b7:03:c1:6d:0f:17:e6:a4: 27:6f:e5:da:f2:c6:7c:1d:69:a2:60:66:54:96:b6:74:d5:b1: 85:ab:ca:ee:72:d3:6e:dc:a8:bf:a8:bf:11:a2:f8:e6:44:a5: 59:b4:1a:70:08:89:ab:99:82:03:b3:10:ed:41:41:ad:7d:57: 92:d0:7e:80:7c:a5:ce:18:ac:1a:89:bf:1c:09:1f:40:72:37: 52:db:8b:96:ea:ed:2c:90:06:a2:a4:22:db:ae:05:e0:ae:a2: 63:0a:7a:b5:9a:8a:2a:22:6d:cc:43:29:78:e0:41:be:90:ce: 32:e9:de:a6:50:ab:71:ba:48:98:a3:3c:65:e1:12:2d:2d:42: ac:41:47:d3:83:f4:4f:ea:06:91:ee:55:33:71:97:47:e1:c6: fb:1f:c5:0b:c4:48:60:ae:9e:47:63:72:83:6b:1a:46:53:db: 32:e4:2c:e3:14:69:c7:28:1b:08:ba:f7:b3:cf:40:90:51:0b: 74:ed:55:0b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1 NDEzM1oXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoMDY0NkMxQkYwRDg3NkI5 MjM1RUFBRUMzRUFENkI5MTk5NzA1MDU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK+WfgU+kcjlnMPTvVnMTnm/1GlurE7IEE3Y7AUW0SNSbiNMODPv CZCf1/Tsnoh8tEcUG0OVWih1bwazFZg2P2UoWaKNPlY3ygIgUv6yU2wRFkxN3bFa sTT8RG61ulCjAGtaqplsQyK/rB/eoWIdcSZzxcur1JvVsaBzkba+rLlCa31xDtNM JirWLXpirhb5QD8pjrtlY2Q4/eRGEETS7slFaC97KlP/ydSgC+o8GM7LyzZ/LzVk hvIP04lthZWG+mwoZLzLkvGJ6i3qsSQlgv4AuziL69nMCHFNba8dM5m35KnRwbwg zXO1IZLdvcW16VuILhldBl5EXMU4IFVlD3cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQGRsG/DYdrkjXqrsPq1rkZlwUFTTAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80OTMvQmtiQnZ3MkhhNUkxNnE3RDZ0YTVHWmNGQlUwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBzw5gDANBgkqhkiG9w0BAQsFAAOCAQEAa8/bIRmcxL3t2Mp8E66pA1KB7juD JW9Zi8yvFeEpwhbPf1n0XKox9euSG0c8VsN3QI5OjcdllkZYsWioAydsnrcDwW0P F+akJ2/l2vLGfB1pomBmVJa2dNWxhavK7nLTbtyov6i/EaL45kSlWbQacAiJq5mC A7MQ7UFBrX1XktB+gHylzhisGom/HAkfQHI3UtuLlurtLJAGoqQi264F4K6iYwp6 tZqKKiJtzEMpeOBBvpDOMuneplCrcbpImKM8ZeESLS1CrEFH04P0T+oGke5VM3GX R+HG+x/FC8RIYK6eR2Nyg2saRlPbMuQs4xRpxygbCLr3s89AkFELdO1VCw== -----END CERTIFICATE-----Generated at Fri Mar 27 00:06:54 2026 by rpki-client