$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/kOZ6NK3tETvtZGZS75Bp9L-aSTM.roa File: kOZ6NK3tETvtZGZS75Bp9L-aSTM.roa (raw, json) Hash identifier: vsRTYkcq3ebXky1uYGTfKhLNzvE7jK0LBeSRCogaYfs= Subject key identifier: 90:E6:7A:34:AD:ED:11:3B:ED:64:66:52:EF:90:69:F4:BF:9A:49:33 Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 2B Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/kOZ6NK3tETvtZGZS75Bp9L-aSTM.roa Signing time: Tue 31 Mar 2026 08:49:16 +0000 ROA not before: Tue 31 Mar 2026 08:49:16 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 59.190.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 31 08:49:16 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=90E67A34ADED113BED646652EF9069F4BF9A4933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:93:84:42:ca:6b:d7:c1:63:35:e2:49:27: 97:00:4a:2f:eb:1b:ae:c9:2e:76:a7:e8:de:de:f4: c8:e2:64:6c:a2:aa:dd:99:20:94:61:46:ec:5e:79: 88:c0:b8:66:e1:7f:56:75:7b:0c:83:74:d1:09:d2: a6:58:ee:4f:e0:4d:ba:02:e3:33:48:fb:f7:38:a6: 8b:41:5e:64:03:3b:70:61:89:ff:6e:e2:bc:ed:fe: d1:ec:1a:3e:80:ca:83:35:9f:60:58:92:7d:a4:34: ce:fd:f0:9a:2c:30:f6:ab:9e:5b:83:6c:49:c6:a0: 4f:84:64:56:d2:56:64:7c:9c:b1:70:c1:3a:99:a0: 5c:ce:44:4b:cb:f8:02:44:3f:0f:33:84:71:fc:30: 4c:64:40:00:6f:cb:76:d3:41:3c:46:1b:cc:3f:59: 75:2f:26:0e:aa:e1:f7:6f:46:ca:55:61:f0:60:2d: 43:27:ff:bb:b2:b9:bd:22:05:4d:97:16:c7:29:fe: 48:e4:87:00:2f:34:fd:e9:28:03:0b:b5:8b:6b:d2: f2:3d:4e:f0:ca:47:0f:34:64:ed:a5:48:f3:cd:41: f3:68:57:f5:66:5e:a1:9d:54:b8:cd:be:92:f2:06: e8:74:86:61:da:59:16:e1:df:a2:76:ef:c4:e1:6e: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E6:7A:34:AD:ED:11:3B:ED:64:66:52:EF:90:69:F4:BF:9A:49:33 X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/kOZ6NK3tETvtZGZS75Bp9L-aSTM.roa sbgp-ipAddrBlock: critical IPv4: 59.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 24:49:66:98:3a:1e:11:3f:a6:1f:5d:d6:e4:4c:19:b2:40:af: 69:26:7d:e9:a8:43:72:5e:ed:89:18:5e:39:b7:29:d9:99:45: 92:d1:3d:8b:c7:2c:42:a3:5b:51:e4:ca:7e:b6:a2:c2:8c:54: 85:7d:59:2f:19:e1:40:57:56:19:97:ee:43:7c:7c:66:4a:13: 4c:97:8f:23:23:e8:fb:b3:35:ba:c6:2d:01:29:ff:c3:8d:01: 29:f6:39:0d:05:de:2e:3d:7c:d4:1a:a1:31:4e:3f:67:7f:0b: 05:ec:d8:9b:d3:59:e5:cf:d6:75:83:2e:2c:ac:c0:5c:8f:7c: e0:fc:32:f3:4d:da:73:ec:ad:e3:aa:4b:38:22:93:a2:97:73: 56:cc:b0:c1:7d:b1:87:72:3f:8e:e0:04:ae:e2:8a:d1:f0:f8: 41:11:32:b5:7e:33:68:7c:e8:11:27:f6:c7:58:bb:81:2f:3b: b6:29:a4:d0:cd:d6:1d:c7:eb:c6:a9:96:90:99:d6:01:26:87: 59:2a:57:50:fa:a6:e5:4f:11:ba:a0:fe:da:cd:09:3d:33:b4: 1b:73:8b:ad:5e:57:66:ea:d2:6c:14:5e:e4:0a:4b:8f:b8:27: 3d:ca:7d:e1:6f:29:c6:db:23:52:88:5d:b2:68:f0:e9:5a:8b: 08:e1:2d:5e -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4 NDkxNloXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoOTBFNjdBMzRBREVEMTEz QkVENjQ2NjUyRUY5MDY5RjRCRjlBNDkzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMGAk4RCymvXwWM14kknlwBKL+sbrskudqfo3t70yOJkbKKq3Zkg lGFG7F55iMC4ZuF/VnV7DIN00QnSpljuT+BNugLjM0j79zimi0FeZAM7cGGJ/27i vO3+0ewaPoDKgzWfYFiSfaQ0zv3wmiww9queW4NsScagT4RkVtJWZHycsXDBOpmg XM5ES8v4AkQ/DzOEcfwwTGRAAG/LdtNBPEYbzD9ZdS8mDqrh929GylVh8GAtQyf/ u7K5vSIFTZcWxyn+SOSHAC80/ekoAwu1i2vS8j1O8MpHDzRk7aVI881B82hX9WZe oZ1UuM2+kvIG6HSGYdpZFuHfonbvxOFuBxUCAwEAAaOCAdgwggHUMB0GA1UdDgQW BBSQ5no0re0RO+1kZlLvkGn0v5pJMzAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80OTMva09aNk5LM3RFVHZ0WkdaUzc1QnA5TC1hU1RNLnJvYTAeBggr BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADu+MA0GCSqGSIb3DQEBCwUAA4IBAQAk SWaYOh4RP6YfXdbkTBmyQK9pJn3pqENyXu2JGF45tynZmUWS0T2LxyxCo1tR5Mp+ tqLCjFSFfVkvGeFAV1YZl+5DfHxmShNMl48jI+j7szW6xi0BKf/DjQEp9jkNBd4u PXzUGqExTj9nfwsF7Nib01nlz9Z1gy4srMBcj3zg/DLzTdpz7K3jqks4IpOil3NW zLDBfbGHcj+O4ASu4orR8PhBETK1fjNofOgRJ/bHWLuBLzu2KaTQzdYdx+vGqZaQ mdYBJodZKldQ+qblTxG6oP7azQk9M7Qbc4utXldm6tJsFF7kCkuPuCc9yn3hbynG 2yNSiF2yaPDpWosI4S1e -----END CERTIFICATE-----Generated at Tue Apr 7 19:33:55 2026 by rpki-client