$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/hUkpMIso3ih0AuCdl7vojOs74u8.roa File: hUkpMIso3ih0AuCdl7vojOs74u8.roa (raw, json) Hash identifier: GkpADg5pGG0IQYLshC2BDG9bnnnCkG+4lVIu+9Ec2bI= Subject key identifier: 85:49:29:30:8B:28:DE:28:74:02:E0:9D:97:BB:E8:8C:EB:3B:E2:EF Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Certificate serial: 7E Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/hUkpMIso3ih0AuCdl7vojOs74u8.roa Signing time: Tue 31 Mar 2026 07:51:38 +0000 ROA not before: Tue 31 Mar 2026 07:51:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23778 IP address blocks: 211.19.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Validity Not Before: Mar 31 07:51:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=854929308B28DE287402E09D97BBE88CEB3BE2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:cb:6e:b8:a2:d7:f3:0b:92:01:2a:45:10: 97:e1:6f:36:9c:ea:62:a7:01:de:50:8e:eb:34:82: 34:23:9b:e9:c1:18:98:2d:44:29:a4:b5:8d:1b:42: 74:d0:42:9e:c4:12:93:8e:1e:3e:cd:2f:22:d3:8d: ae:95:62:bb:17:67:b7:16:08:8f:0a:11:1e:00:b4: aa:18:a4:47:54:4c:c8:20:97:26:f7:26:6f:98:f2: 30:7d:3c:8f:e1:8b:f8:41:ca:17:c9:07:85:e7:fc: 60:7b:08:ef:00:95:4a:94:52:1f:3f:d0:94:52:cf: 79:38:b1:9c:bb:a3:e8:a4:3d:9d:af:c9:8a:87:ee: 3c:39:1d:81:a3:c0:78:0a:cd:ba:fe:a8:8e:b3:d0: 72:ef:0d:5d:70:17:d2:27:b6:fa:5e:fa:3d:c2:cc: 86:d0:e2:51:77:28:25:0d:53:bf:c8:2d:86:59:7b: 06:3e:51:e9:bd:4c:38:75:08:b7:2e:a3:f3:1d:46: 96:7b:ad:e4:40:6d:fe:1a:87:7e:4c:53:c9:c3:05: ed:f4:9f:ae:0d:a4:b2:91:06:0a:08:5b:77:3d:4f: c0:f2:36:8c:b2:9b:06:e0:f7:6b:12:76:aa:90:bf: d1:f0:99:56:f7:e6:5f:89:39:d4:15:8b:d3:8f:8a: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:49:29:30:8B:28:DE:28:74:02:E0:9D:97:BB:E8:8C:EB:3B:E2:EF X509v3 Authority Key Identifier: keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/hUkpMIso3ih0AuCdl7vojOs74u8.roa sbgp-ipAddrBlock: critical IPv4: 211.19.196.0/22 Signature Algorithm: sha256WithRSAEncryption b5:07:82:80:1d:fa:57:dc:fc:4c:81:a4:61:97:0e:17:05:b4: d9:06:3a:00:16:38:68:0c:9f:6a:9e:80:84:9d:ea:fc:e0:72: 71:fb:9d:c3:f4:b4:f9:a7:d3:76:4b:65:b4:43:f2:c3:cf:05: 70:dc:b0:9a:4a:b9:00:67:91:5a:3f:38:1f:e4:cb:77:44:89: 03:3a:5e:95:b3:61:67:58:df:34:26:df:5b:f5:e5:19:2a:ee: 88:46:f6:45:8c:61:af:2b:de:30:be:9a:d7:b7:ab:5d:a7:34: 59:1f:ad:d9:27:05:0e:c7:b4:96:6c:91:7a:5d:47:72:74:82: 01:e8:4b:3a:fd:eb:00:1d:9a:f4:48:e9:62:e8:24:25:2d:d2: 07:7c:02:c0:40:3d:22:c1:a0:22:97:38:04:67:c8:47:3a:06: f4:6e:6f:e0:a3:b8:e1:1d:1b:c5:49:73:03:e5:b8:2d:5d:6d: 23:83:d8:ca:15:b0:6b:74:c6:23:75:07:f2:a1:20:37:61:af: fc:98:a1:7a:f7:a4:49:f2:af:f7:df:22:2d:77:d5:0e:c4:5c: e7:12:3c:b0:8e:de:2d:8d:65:99:99:0f:f5:fb:ce:14:0b:4d: 8b:42:c8:7d:11:8b:1b:b3:f6:4c:e4:ae:af:a4:e7:81:ea:c7: fe:1a:d3:06 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTI2MDMzMTA3 NTEzOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODU0OTI5MzA4QjI4REUy ODc0MDJFMDlEOTdCQkU4OENFQjNCRTJFRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALZzy264otfzC5IBKkUQl+FvNpzqYqcB3lCO6zSCNCOb6cEYmC1E KaS1jRtCdNBCnsQSk44ePs0vItONrpViuxdntxYIjwoRHgC0qhikR1RMyCCXJvcm b5jyMH08j+GL+EHKF8kHhef8YHsI7wCVSpRSHz/QlFLPeTixnLuj6KQ9na/Jiofu PDkdgaPAeArNuv6ojrPQcu8NXXAX0ie2+l76PcLMhtDiUXcoJQ1Tv8gthll7Bj5R 6b1MOHUIty6j8x1Glnut5EBt/hqHfkxTycMF7fSfrg2kspEGCghbdz1PwPI2jLKb BuD3axJ2qpC/0fCZVvfmX4k51BWL04+KJr8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSFSSkwiyjeKHQC4J2Xu+iM6zvi7zAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NTkvaFVrcE1Jc28zaWgwQXVDZGw3dm9qT3M3NHU4LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtMTxDANBgkqhkiG9w0BAQsFAAOCAQEA tQeCgB36V9z8TIGkYZcOFwW02QY6ABY4aAyfap6AhJ3q/OBycfudw/S0+afTdktl tEPyw88FcNywmkq5AGeRWj84H+TLd0SJAzpelbNhZ1jfNCbfW/XlGSruiEb2RYxh ryveML6a17erXac0WR+t2ScFDse0lmyRel1HcnSCAehLOv3rAB2a9EjpYugkJS3S B3wCwEA9IsGgIpc4BGfIRzoG9G5v4KO44R0bxUlzA+W4LV1tI4PYyhWwa3TGI3UH 8qEgN2Gv/JihevekSfKv998iLXfVDsRc5xI8sI7eLY1lmZkP9fvOFAtNi0LIfRGL G7P2TOSur6TngerH/hrTBg== -----END CERTIFICATE-----Generated at Tue Apr 7 19:35:32 2026 by rpki-client