$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/1U-7UNPlnFIYCz_hjA6ht-H889Q.roa File: 1U-7UNPlnFIYCz_hjA6ht-H889Q.roa (raw, json) Hash identifier: SJaMvXzWuErK1QvIK1qm36dsH0FEf9UhXlNBgOc4Dmw= Subject key identifier: D5:4F:BB:50:D3:E5:9C:52:18:0B:3F:E1:8C:0E:A1:B7:E1:FC:F3:D4 Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Certificate serial: 7F Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/1U-7UNPlnFIYCz_hjA6ht-H889Q.roa Signing time: Tue 31 Mar 2026 07:51:39 +0000 ROA not before: Tue 31 Mar 2026 07:51:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23778 IP address blocks: 219.100.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Validity Not Before: Mar 31 07:51:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D54FBB50D3E59C52180B3FE18C0EA1B7E1FCF3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:eb:35:da:b8:16:32:0a:77:25:7d:fe:ce: ce:c5:56:70:a2:23:ef:05:f2:0f:d1:81:86:4c:ce: ae:17:a0:c4:71:8e:3a:91:70:6d:43:b3:ba:16:2e: 7a:9a:6f:ec:ff:dd:9e:1c:2e:8c:90:12:a4:70:fa: ec:4d:ab:8d:15:24:c9:80:cc:38:b4:d3:24:99:7e: 0a:f3:c4:2c:c9:99:ad:a9:2f:cd:83:a7:7c:b1:e6: 9c:4a:6f:6f:52:59:c3:94:31:d0:a3:dd:61:61:73: d4:af:16:2d:fb:e3:c1:1a:53:9b:62:af:30:c2:6c: b9:62:52:08:12:14:11:99:31:42:db:c9:58:00:7e: 60:c4:7c:94:a4:ee:50:22:43:a3:7c:1d:2a:67:24: 26:6c:12:7b:40:d1:4c:26:4c:cc:9f:64:a4:9f:54: aa:c1:89:19:c9:f7:1d:74:d1:11:ef:26:d6:69:3c: 53:5c:f3:81:f8:8a:f4:cf:80:e2:61:54:66:f3:e9: ea:73:eb:9f:89:17:3e:52:d9:76:1a:0b:34:1f:a5: 73:92:57:5d:63:2c:cb:4f:a2:9b:af:00:07:66:8a: 71:a8:58:ad:28:79:f5:e0:bb:bf:62:36:8e:92:a4: 1d:8c:00:c4:2c:c0:58:54:37:07:af:f8:30:47:5b: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4F:BB:50:D3:E5:9C:52:18:0B:3F:E1:8C:0E:A1:B7:E1:FC:F3:D4 X509v3 Authority Key Identifier: keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/1U-7UNPlnFIYCz_hjA6ht-H889Q.roa sbgp-ipAddrBlock: critical IPv4: 219.100.96.0/22 Signature Algorithm: sha256WithRSAEncryption b8:39:b0:85:08:cb:3c:b9:de:53:41:5b:da:1a:c2:47:d4:65: c8:b3:9c:3c:e6:41:1e:1c:e5:33:cd:29:ec:d2:22:32:ce:45: 57:92:c0:55:1d:dc:d3:f8:d9:a0:a4:41:25:dd:ec:6a:a5:db: ea:66:09:cc:96:f6:d7:bb:ee:7f:42:26:ca:e8:4f:77:35:f5: 35:5c:ad:67:26:03:70:c9:31:67:7a:6b:09:6a:26:5e:df:90: 8f:6d:54:c4:5d:d5:33:92:80:ba:1c:6c:46:02:1a:32:90:aa: f6:e2:c4:2b:ec:15:3f:52:4c:a6:f8:01:da:60:66:ea:af:de: 06:f1:37:cd:85:f1:a9:ca:60:c5:a6:88:e5:8f:73:3b:c8:d8: 92:ae:90:e9:f7:14:b2:29:bf:6a:1a:58:d8:e0:d9:13:17:58: 30:3c:6a:64:21:fa:a9:fc:74:89:07:de:67:99:d6:a3:10:4a: 18:35:63:b7:59:38:a4:6b:63:c7:7b:90:b3:ee:ba:c8:28:f7: b7:f3:8e:1b:93:3d:5d:a3:03:9e:56:03:1b:19:2b:eb:0c:81: 61:ba:fc:31:3b:b2:ad:40:46:f1:34:a4:ef:ac:44:b6:98:32: 11:78:e9:de:d8:06:1f:72:d9:99:8a:08:9e:3b:b3:6f:d4:f9: 28:ed:5a:f2 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTI2MDMzMTA3 NTEzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDU0RkJCNTBEM0U1OUM1 MjE4MEIzRkUxOEMwRUExQjdFMUZDRjNENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANpe6zXauBYyCnclff7OzsVWcKIj7wXyD9GBhkzOrhegxHGOOpFw bUOzuhYueppv7P/dnhwujJASpHD67E2rjRUkyYDMOLTTJJl+CvPELMmZrakvzYOn fLHmnEpvb1JZw5Qx0KPdYWFz1K8WLfvjwRpTm2KvMMJsuWJSCBIUEZkxQtvJWAB+ YMR8lKTuUCJDo3wdKmckJmwSe0DRTCZMzJ9kpJ9UqsGJGcn3HXTREe8m1mk8U1zz gfiK9M+A4mFUZvPp6nPrn4kXPlLZdhoLNB+lc5JXXWMsy0+im68AB2aKcahYrSh5 9eC7v2I2jpKkHYwAxCzAWFQ3B6/4MEdb6scCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTVT7tQ0+WcUhgLP+GMDqG34fzz1DAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NTkvMVUtN1VOUGxuRklZQ3pfaGpBNmh0LUg4ODlRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAttkYDANBgkqhkiG9w0BAQsFAAOCAQEA uDmwhQjLPLneU0Fb2hrCR9RlyLOcPOZBHhzlM80p7NIiMs5FV5LAVR3c0/jZoKRB Jd3saqXb6mYJzJb217vuf0ImyuhPdzX1NVytZyYDcMkxZ3prCWomXt+Qj21UxF3V M5KAuhxsRgIaMpCq9uLEK+wVP1JMpvgB2mBm6q/eBvE3zYXxqcpgxaaI5Y9zO8jY kq6Q6fcUsim/ahpY2ODZExdYMDxqZCH6qfx0iQfeZ5nWoxBKGDVjt1k4pGtjx3uQ s+66yCj3t/OOG5M9XaMDnlYDGxkr6wyBYbr8MTuyrUBG8TSk76xEtpgyEXjp3tgG H3LZmYoInjuzb9T5KO1a8g== -----END CERTIFICATE-----Generated at Tue Apr 7 19:35:15 2026 by rpki-client