$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/xlbfrjb3CyjOriExuu5IAUN418E.roa File: xlbfrjb3CyjOriExuu5IAUN418E.roa (raw, json) Hash identifier: eqbr6H2mROCu5de7Q/AV0+SXFW9KXQVbonUOnusVLoE= Subject key identifier: C6:56:DF:AE:36:F7:0B:28:CE:AE:21:31:BA:EE:48:01:43:78:D7:C1 Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 02 Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/xlbfrjb3CyjOriExuu5IAUN418E.roa Signing time: Tue 24 Mar 2026 09:38:46 +0000 ROA not before: Tue 24 Mar 2026 09:38:46 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 203.178.6.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 24 09:38:46 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=C656DFAE36F70B28CEAE2131BAEE48014378D7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:b0:93:0d:11:e7:f6:f3:6f:eb:9e:09:17: f1:24:32:94:a5:97:88:41:db:d4:03:b2:2e:06:86: 2c:22:e7:91:bc:20:6c:9e:94:27:05:fa:04:c9:21: cd:05:db:6f:c9:b2:9b:1a:15:29:f2:dc:e4:dd:92: 0c:36:d4:5c:2d:d7:05:9d:10:1f:a9:aa:0b:71:74: bf:06:f7:2c:5d:62:5c:76:0a:fd:53:c9:60:4f:c6: a9:b6:0f:f7:36:aa:c9:69:a0:43:68:9d:a1:4b:1b: 12:48:75:d7:0b:c3:0b:74:f3:35:ee:59:ba:ee:06: a8:9e:20:cf:47:50:7f:d5:9d:57:7a:d1:1b:61:c9: 75:2f:fb:91:5e:ae:45:2c:f7:35:47:a7:e1:c2:90: 1f:cc:04:a7:56:86:9f:52:7c:e4:89:fd:cd:19:be: 34:b4:79:f0:a3:25:32:b4:70:3c:9d:23:cf:1f:3f: ae:22:e0:e1:c9:67:2b:6a:20:bb:01:3a:bf:1a:6d: b3:4e:b1:cd:d7:92:36:17:86:b7:d6:93:59:93:d5: df:0c:40:93:87:06:b0:c7:bb:85:ab:ac:37:f1:8e: 95:a5:67:3b:a4:c4:ee:5c:72:8f:42:f4:de:17:94: ea:8e:18:a2:16:23:d0:d5:3f:b0:87:90:44:4f:d0: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:DF:AE:36:F7:0B:28:CE:AE:21:31:BA:EE:48:01:43:78:D7:C1 X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/xlbfrjb3CyjOriExuu5IAUN418E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.178.6.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c1:4d:9a:37:15:f5:34:19:d8:af:d9:aa:4a:01:e3:d6:0b: fe:2d:72:f6:c8:16:7a:3d:0a:fc:90:9c:ac:01:4e:8b:4d:8c: f4:6b:d9:27:fb:81:c3:94:1c:db:f5:a8:ac:e2:8a:44:1f:98: 90:ad:ec:ca:21:b7:cf:42:51:03:e9:f9:1f:5b:04:43:26:ac: f8:53:da:b7:6e:ec:09:a1:b6:41:32:0f:b8:d0:45:8f:75:97: a4:c2:b3:d7:3e:0d:7c:0c:a9:d1:f6:60:5a:76:79:a2:b7:c4: d3:7b:47:b5:2e:bc:79:94:11:b3:64:aa:4d:7d:7d:1a:ce:7a: 11:30:cf:12:98:e8:20:da:26:3c:58:a9:e3:58:3c:ad:07:73: f4:44:a0:ef:58:25:b5:0d:5f:49:ee:92:7d:8d:e4:23:54:25: a2:47:b5:4a:1d:b1:31:cc:ef:d2:22:29:67:70:77:54:55:0f: ae:57:f1:6d:59:66:14:59:91:49:75:fb:30:d3:76:4a:bc:9d: 4c:59:21:8a:ac:8c:80:61:36:8b:17:e3:5b:51:87:5f:a2:4d: 01:c4:e3:31:7a:0c:b9:43:7d:b0:6c:36:25:42:df:73:eb:90: 35:91:2b:d0:24:f8:2f:9f:a8:2b:48:01:d3:b1:59:9d:49:3c: 45:3f:4a:58 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNDA5 Mzg0NloXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQzY1NkRGQUUzNkY3MEIy OENFQUUyMTMxQkFFRTQ4MDE0Mzc4RDdDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALdrsJMNEef282/rngkX8SQylKWXiEHb1AOyLgaGLCLnkbwgbJ6U JwX6BMkhzQXbb8mymxoVKfLc5N2SDDbUXC3XBZ0QH6mqC3F0vwb3LF1iXHYK/VPJ YE/GqbYP9zaqyWmgQ2idoUsbEkh11wvDC3TzNe5Zuu4GqJ4gz0dQf9WdV3rRG2HJ dS/7kV6uRSz3NUen4cKQH8wEp1aGn1J85In9zRm+NLR58KMlMrRwPJ0jzx8/riLg 4clnK2oguwE6vxpts06xzdeSNheGt9aTWZPV3wxAk4cGsMe7hausN/GOlaVnO6TE 7lxyj0L03heU6o4YohYj0NU/sIeQRE/QhLMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTGVt+uNvcLKM6uITG67kgBQ3jXwTAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80OTMveGxiZnJqYjNDeWpPcmlFeHV1NUlBVU40MThFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMuyBjANBgkqhkiG9w0BAQsFAAOCAQEAWMFNmjcV9TQZ2K/ZqkoB49YL/i1y 9sgWej0K/JCcrAFOi02M9GvZJ/uBw5Qc2/WorOKKRB+YkK3syiG3z0JRA+n5H1sE Qyas+FPat27sCaG2QTIPuNBFj3WXpMKz1z4NfAyp0fZgWnZ5orfE03tHtS68eZQR s2SqTX19Gs56ETDPEpjoINomPFip41g8rQdz9ESg71gltQ1fSe6SfY3kI1Qloke1 Sh2xMczv0iIpZ3B3VFUPrlfxbVlmFFmRSXX7MNN2SrydTFkhiqyMgGE2ixfjW1GH X6JNAcTjMXoMuUN9sGw2JULfc+uQNZEr0CT4L5+oK0gB07FZnUk8RT9KWA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:30:21 2026 by rpki-client