$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/utQYBi0jdVTF0vEYnLmG91M5hkE.roa File: utQYBi0jdVTF0vEYnLmG91M5hkE.roa (raw, json) Hash identifier: QMnAbaE+uln5MMmT9YmyddtPs8rVqrdGX4QuBj360DY= Subject key identifier: BA:D4:18:06:2D:23:75:54:C5:D2:F1:18:9C:B9:86:F7:53:39:86:41 Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Certificate serial: 7B Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/utQYBi0jdVTF0vEYnLmG91M5hkE.roa Signing time: Tue 31 Mar 2026 07:51:37 +0000 ROA not before: Tue 31 Mar 2026 07:51:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23778 IP address blocks: 202.95.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B Validity Not Before: Mar 31 07:51:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BAD418062D237554C5D2F1189CB986F753398641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:2e:19:08:61:1d:a6:45:1b:28:e1:a6:a4: 5a:9f:82:d6:a5:d4:e1:4c:93:87:7c:ff:9a:e6:f5: 69:9d:d7:aa:60:ee:03:11:3c:b5:bb:54:3a:86:85: f6:7b:1b:f5:46:60:cd:90:5e:8c:d7:8a:9f:35:2c: dd:81:d2:f0:d8:ae:09:44:4e:7e:e3:4d:09:67:6c: 0a:e5:2a:bd:a8:5d:82:df:68:23:6a:a9:a7:6d:16: 1e:cf:60:c9:d6:e3:29:21:14:49:98:0b:a0:3a:a7: 88:f1:b4:00:25:4a:3b:45:35:ef:7c:0e:f9:39:9b: 66:dc:2f:5d:14:5c:00:61:94:53:0a:eb:0b:58:dc: cd:0e:08:e8:f4:79:3a:78:ec:96:e3:08:05:8a:b9: 6c:06:ef:7f:e1:c6:97:3e:73:14:43:5f:eb:3f:91: 21:79:71:cf:01:ed:a4:2d:93:bc:d3:5d:26:8b:99: 3d:86:15:00:fd:f7:60:7d:2c:f2:a7:eb:39:3a:c7: d0:2a:00:34:f5:dd:b2:03:a5:db:a3:76:1c:a6:2e: a1:89:b3:28:ca:46:33:6f:e6:4c:af:55:ec:f4:e4: f2:ce:24:01:6d:46:00:9e:d8:d7:f3:76:2b:be:1c: 75:bd:4b:b4:40:ad:f2:48:a5:92:71:02:fb:e3:19: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D4:18:06:2D:23:75:54:C5:D2:F1:18:9C:B9:86:F7:53:39:86:41 X509v3 Authority Key Identifier: keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/utQYBi0jdVTF0vEYnLmG91M5hkE.roa sbgp-ipAddrBlock: critical IPv4: 202.95.176.0/20 Signature Algorithm: sha256WithRSAEncryption ab:ed:67:a2:40:c9:1c:ee:e3:f8:c6:d7:f0:44:26:a2:d3:0b: 47:65:b8:39:bd:ef:b9:57:2a:24:37:b0:84:92:e5:aa:b5:8e: 37:14:09:2a:90:2c:97:b4:f6:cc:9b:6a:77:15:41:e7:d0:19: 71:bc:a7:f4:c9:f0:6b:18:8f:c4:0f:e4:6a:d7:35:ec:ec:c7: c2:79:fc:7f:40:88:e9:b7:24:e6:fd:bd:7e:30:7b:53:60:91: 50:b3:7d:61:df:d9:08:0e:52:33:07:a5:10:69:dc:cb:6b:43: 46:82:ec:96:cc:9c:f3:fc:1f:35:84:a5:fb:9a:bb:63:2f:58: 61:6d:31:0c:c1:7a:7a:e1:f0:31:4d:ad:90:9a:d1:3e:18:96: d0:ef:02:6d:58:ac:a1:03:16:11:62:6a:20:92:be:6d:f9:6d: 22:8a:3a:6c:c8:02:fa:f3:be:a1:03:94:43:cb:35:c2:fd:6a: 10:56:b7:d3:ea:67:ed:60:41:1b:9d:5b:b1:65:fc:07:fa:14: 1a:a7:05:05:8f:7c:4f:45:61:c4:b4:4c:41:5e:7f:c3:17:14: 0f:2b:bb:93:06:4c:a5:9b:a0:27:51:a3:d3:a8:e8:18:9c:3a: dc:71:f5:13:b8:c7:f7:78:fe:f6:05:f8:85:6b:1a:2d:df:cb: a4:c1:f2:b0 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTI2MDMzMTA3 NTEzN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQkFENDE4MDYyRDIzNzU1 NEM1RDJGMTE4OUNCOTg2Rjc1MzM5ODY0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMY4LhkIYR2mRRso4aakWp+C1qXU4UyTh3z/mub1aZ3XqmDuAxE8 tbtUOoaF9nsb9UZgzZBejNeKnzUs3YHS8NiuCUROfuNNCWdsCuUqvahdgt9oI2qp p20WHs9gydbjKSEUSZgLoDqniPG0ACVKO0U173wO+TmbZtwvXRRcAGGUUwrrC1jc zQ4I6PR5OnjsluMIBYq5bAbvf+HGlz5zFENf6z+RIXlxzwHtpC2TvNNdJouZPYYV AP33YH0s8qfrOTrH0CoANPXdsgOl26N2HKYuoYmzKMpGM2/mTK9V7PTk8s4kAW1G AJ7Y1/N2K74cdb1LtECt8kilknEC++MZdVMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBS61BgGLSN1VMXS8RicuYb3UzmGQTAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NTkvdXRRWUJpMGpkVlRGMHZFWW5MbUc5MU01aGtFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMpfsDANBgkqhkiG9w0BAQsFAAOCAQEA q+1nokDJHO7j+MbX8EQmotMLR2W4Ob3vuVcqJDewhJLlqrWONxQJKpAsl7T2zJtq dxVB59AZcbyn9MnwaxiPxA/katc17OzHwnn8f0CI6bck5v29fjB7U2CRULN9Yd/Z CA5SMwelEGncy2tDRoLslsyc8/wfNYSl+5q7Yy9YYW0xDMF6euHwMU2tkJrRPhiW 0O8CbVisoQMWEWJqIJK+bfltIoo6bMgC+vO+oQOUQ8s1wv1qEFa30+pn7WBBG51b sWX8B/oUGqcFBY98T0VhxLRMQV5/wxcUDyu7kwZMpZugJ1Gj06joGJw63HH1E7jH 93j+9gX4hWsaLd/LpMHysA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:34:00 2026 by rpki-client