$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/SE2Fg70seyixS200xS2vfo0o6hQ.roa File: SE2Fg70seyixS200xS2vfo0o6hQ.roa (raw, json) Hash identifier: S/K6EHTZYew4YikuaO6WVeIqFJZznfQWkM7l+YJ4MQY= Subject key identifier: 48:4D:85:83:BD:2C:7B:28:B1:4B:6D:34:C5:2D:AF:7E:8D:28:EA:14 Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Certificate serial: 10 Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/SE2Fg70seyixS200xS2vfo0o6hQ.roa Signing time: Tue 31 Mar 2026 08:49:06 +0000 ROA not before: Tue 31 Mar 2026 08:49:06 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10001 IP address blocks: 202.238.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8 Validity Not Before: Mar 31 08:49:06 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=484D8583BD2C7B28B14B6D34C52DAF7E8D28EA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:5d:8a:ca:b1:04:d1:3d:02:a2:ca:86:ec: d2:f5:eb:79:d7:b5:48:9c:77:1e:03:3d:c3:fb:1e: 70:da:57:d8:37:23:69:ee:60:51:f1:31:c3:dc:03: b9:7f:53:58:79:1a:3f:95:b5:7a:e0:fb:b9:fa:ac: 64:5c:52:10:d2:77:d7:1f:21:86:77:5a:ba:f9:8f: 0d:27:61:9e:76:60:8b:a7:a1:26:39:5b:e8:05:da: f6:44:38:d6:62:47:29:3b:01:6c:17:dd:86:e3:af: a4:e5:2b:64:82:d1:a9:fe:48:30:95:9e:d0:4f:5c: e5:89:60:3c:30:df:94:2d:b0:d2:e7:b1:a9:98:8c: 66:f1:62:99:05:8a:a4:3f:3f:10:97:c7:83:5a:72: 27:04:7c:87:33:a8:b2:a3:f2:1d:e4:4b:99:5c:38: a6:1f:61:2f:0f:51:bb:38:8a:27:f0:6b:36:81:43: b1:f5:bd:0b:19:e5:e3:2d:9d:a5:24:a8:89:ee:36: a1:aa:a5:d0:c2:11:cc:14:01:bf:48:a0:b1:f0:a3: 1b:5c:c0:8b:74:5e:85:6c:81:b7:bc:f6:e2:01:5b: 93:c0:03:f9:65:4c:b9:f7:41:fb:f6:27:20:de:f1: 2b:83:4c:dd:3f:9b:26:85:c9:6b:4a:3a:9b:1b:f1: 83:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4D:85:83:BD:2C:7B:28:B1:4B:6D:34:C5:2D:AF:7E:8D:28:EA:14 X509v3 Authority Key Identifier: keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/SE2Fg70seyixS200xS2vfo0o6hQ.roa sbgp-ipAddrBlock: critical IPv4: 202.238.32.0/20 Signature Algorithm: sha256WithRSAEncryption 00:6d:47:8e:c1:e6:bb:9a:dc:6b:26:3f:da:43:38:8d:fd:7d: db:01:83:93:1b:2b:ff:d6:60:fd:a4:01:c0:f6:10:23:bf:b2: 95:f4:49:e4:0a:9c:c1:27:36:4c:b7:44:5c:bf:d8:9b:c3:8b: 33:c1:ad:35:eb:20:bb:90:79:45:ac:10:45:5d:28:c8:eb:17: c3:21:b7:df:99:d7:63:f7:b2:cc:42:01:47:fb:72:62:75:9f: ec:76:f3:b5:1f:4c:97:2e:01:04:37:e8:66:a9:8d:9c:f9:1d: cb:a7:d0:59:93:78:69:37:a3:86:dc:1a:9e:f8:2e:b4:28:bf: f2:3b:03:88:fb:d2:71:f2:c2:70:e3:30:e1:e3:fa:db:ff:5a: d9:63:c2:a0:1c:0f:df:1f:22:c4:ca:82:7a:97:87:a0:d7:e7: e0:41:82:8b:c5:90:99:7f:73:8f:f3:23:45:5e:cc:86:a4:54: db:c3:d7:2c:75:4e:d2:35:ac:49:9e:73:0b:06:28:f3:de:70: 38:00:93:2f:28:ba:8d:35:ee:14:17:8d:fa:63:55:60:ea:00: 57:56:16:b3:f7:b9:46:4c:80:97:28:55:32:c1:9d:fa:f8:b4: 6b:ed:85:41:d4:b0:95:ba:eb:fa:82:79:3b:70:97:fc:6d:42: 5f:72:bf:20 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTkw QkZENjNGODY3NUI3QjQ0NTYzNjIzRTQyRjcyOTI1NkNBMUU4MB4XDTI2MDMzMTA4 NDkwNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDg0RDg1ODNCRDJDN0Iy OEIxNEI2RDM0QzUyREFGN0U4RDI4RUExNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUkXYrKsQTRPQKiyobs0vXrede1SJx3HgM9w/secNpX2Dcjae5g UfExw9wDuX9TWHkaP5W1euD7ufqsZFxSENJ31x8hhndauvmPDSdhnnZgi6ehJjlb 6AXa9kQ41mJHKTsBbBfdhuOvpOUrZILRqf5IMJWe0E9c5YlgPDDflC2w0uexqZiM ZvFimQWKpD8/EJfHg1pyJwR8hzOosqPyHeRLmVw4ph9hLw9RuziKJ/BrNoFDsfW9 Cxnl4y2dpSSoie42oaql0MIRzBQBv0igsfCjG1zAi3RehWyBt7z24gFbk8AD+WVM ufdB+/YnIN7xK4NM3T+bJoXJa0o6mxvxg8UCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRITYWDvSx7KLFLbTTFLa9+jSjqFDAfBgNVHSMEGDAWgBS5kL/WP4Z1t7RFY2I+ QvcpJWyh6DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDI1L3VaQ18xai1HZGJlMFJXTmlQa0wzS1NWc29lZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VaQ18xai1HZGJlMFJXTmlQa0wzS1NW c29lZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80MjUvU0UyRmc3MHNleWl4UzIwMHhTMnZmbzBvNmhRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMruIDANBgkqhkiG9w0BAQsFAAOCAQEA AG1HjsHmu5rcayY/2kM4jf192wGDkxsr/9Zg/aQBwPYQI7+ylfRJ5AqcwSc2TLdE XL/Ym8OLM8GtNesgu5B5RawQRV0oyOsXwyG335nXY/eyzEIBR/tyYnWf7HbztR9M ly4BBDfoZqmNnPkdy6fQWZN4aTejhtwanvgutCi/8jsDiPvScfLCcOMw4eP62/9a 2WPCoBwP3x8ixMqCepeHoNfn4EGCi8WQmX9zj/MjRV7MhqRU28PXLHVO0jWsSZ5z CwYo895wOACTLyi6jTXuFBeN+mNVYOoAV1YWs/e5RkyAlyhVMsGd+vi0a+2FQdSw lbrr+oJ5O3CX/G1CX3K/IA== -----END CERTIFICATE-----Generated at Tue Apr 7 20:49:44 2026 by rpki-client