$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/UnT1ZAdfFsU2SakfvvHjQLuR4uU.roa File: UnT1ZAdfFsU2SakfvvHjQLuR4uU.roa (raw, json) Hash identifier: 9WNdPcWm+7igh2IsecnBAM1Jsnnzi5iEa85YIIvgYJY= Subject key identifier: 52:74:F5:64:07:5F:16:C5:36:49:A9:1F:BE:F1:E3:40:BB:91:E2:E5 Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Certificate serial: 35 Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/UnT1ZAdfFsU2SakfvvHjQLuR4uU.roa Signing time: Tue 31 Mar 2026 08:38:58 +0000 ROA not before: Tue 31 Mar 2026 08:38:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23827 IP address blocks: 211.14.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Validity Not Before: Mar 31 08:38:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5274F564075F16C53649A91FBEF1E340BB91E2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:d3:1a:c9:fd:c5:db:e4:dd:18:28:a2:92: 67:08:8b:1d:f5:99:bd:42:1f:22:2b:b4:af:e1:73: 70:d7:25:a0:d6:26:49:3d:5c:ba:26:21:da:af:6f: 5e:0e:cb:5e:07:7d:90:f0:20:e0:7b:95:ba:20:6f: 65:32:90:45:51:89:8a:34:86:aa:12:1b:bb:41:6c: 46:91:f6:85:5e:f7:e2:a9:12:72:1c:6e:d3:12:97: 05:a4:86:19:e2:07:a2:97:94:be:01:95:36:40:e1: 73:e1:4b:9a:95:89:88:0c:2b:61:eb:ca:1e:b8:25: b4:9a:13:38:5f:ce:ae:63:cd:89:7a:81:f9:57:c3: a3:cc:70:6b:9e:ba:84:0b:cf:63:63:86:65:ec:d9: b0:5c:59:88:5d:06:a8:99:67:2a:f9:c3:75:be:b1: bd:d0:7f:d6:29:c7:b4:11:7e:7b:38:73:23:75:06: 48:88:36:44:5e:ae:ac:90:b9:59:5b:1c:fd:8f:83: 46:88:72:86:a4:6f:56:59:69:1a:e8:64:4c:28:ed: 55:fb:5a:e9:d2:76:5c:f9:a7:b6:7e:41:6b:ed:4d: 76:13:f1:6f:d6:46:a7:ad:fd:ff:9a:9c:31:c1:f6: 31:66:60:be:6b:0f:69:f6:8d:3c:d7:58:6a:9e:3b: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:F5:64:07:5F:16:C5:36:49:A9:1F:BE:F1:E3:40:BB:91:E2:E5 X509v3 Authority Key Identifier: keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/UnT1ZAdfFsU2SakfvvHjQLuR4uU.roa sbgp-ipAddrBlock: critical IPv4: 211.14.200.0/21 Signature Algorithm: sha256WithRSAEncryption 81:6e:f2:e4:e7:93:85:80:60:6d:3c:dd:bb:55:a1:21:91:75: 65:8e:55:a0:c9:7f:f0:c9:3b:eb:e3:70:59:5b:b8:18:a0:f9: 1d:ed:69:2c:13:69:e6:13:e3:c1:66:43:76:a0:67:e8:f2:65: c6:d5:82:31:42:39:5d:95:2e:9b:fd:25:1c:82:7a:9e:02:b6: 6b:f8:c3:3e:62:f2:6c:6e:c0:d5:2a:89:19:74:70:9c:e8:47: be:39:7a:06:28:80:1a:59:db:b3:c4:a9:b5:19:7e:29:ca:fa: 47:47:1d:33:53:0d:51:fd:00:63:5f:1a:af:c7:c9:d8:51:6a: 54:08:b5:12:06:80:4f:05:b6:a2:ac:95:7c:d8:ca:a8:2a:b5: 1f:85:eb:02:f2:bc:70:de:e6:0d:06:73:23:95:a5:ee:6d:3e: dd:12:b9:af:6a:8b:40:fe:65:8a:3f:30:5e:4c:e3:8e:32:22: 98:04:b8:c0:0b:1f:76:36:70:f1:8b:86:6f:c9:fc:90:f3:9c: ef:84:e5:a1:61:9f:e2:a6:e7:35:38:e0:b9:26:79:be:d9:b0: 22:58:86:87:af:15:e7:41:81:b3:1d:1e:a3:47:b2:af:38:bf: 8f:64:88:ff:c4:e4:9e:7e:c1:a1:d8:49:0d:4d:c5:08:a1:9b: ec:77:d8:a9 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERDgy OUQ2NDZENTNFQ0YyOTg5NTBCNjg3NTMyREU5MjZFQzdFQkMwMB4XDTI2MDMzMTA4 Mzg1OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTI3NEY1NjQwNzVGMTZD NTM2NDlBOTFGQkVGMUUzNDBCQjkxRTJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ7V0xrJ/cXb5N0YKKKSZwiLHfWZvUIfIiu0r+FzcNcloNYmST1c uiYh2q9vXg7LXgd9kPAg4HuVuiBvZTKQRVGJijSGqhIbu0FsRpH2hV734qkSchxu 0xKXBaSGGeIHopeUvgGVNkDhc+FLmpWJiAwrYevKHrgltJoTOF/OrmPNiXqB+VfD o8xwa566hAvPY2OGZezZsFxZiF0GqJlnKvnDdb6xvdB/1inHtBF+ezhzI3UGSIg2 RF6urJC5WVsc/Y+DRohyhqRvVllpGuhkTCjtVfta6dJ2XPmntn5Ba+1NdhPxb9ZG p639/5qcMcH2MWZgvmsPafaNPNdYap47KkkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRSdPVkB18WxTZJqR++8eNAu5Hi5TAfBgNVHSMEGDAWgBTdgp1kbVPs8piVC2h1 Mt6SbsfrwDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODkxLzNZS2RaRzFUN1BLWWxRdG9kVExla203SDY4QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzNZS2RaRzFUN1BLWWxRdG9kVExla203 SDY4QS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84OTEvVW5UMVpBZGZGc1UyU2FrZnZ2SGpRTHVSNHVVLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9MOyDANBgkqhkiG9w0BAQsFAAOCAQEA gW7y5OeThYBgbTzdu1WhIZF1ZY5VoMl/8Mk76+NwWVu4GKD5He1pLBNp5hPjwWZD dqBn6PJlxtWCMUI5XZUum/0lHIJ6ngK2a/jDPmLybG7A1SqJGXRwnOhHvjl6BiiA Glnbs8SptRl+Kcr6R0cdM1MNUf0AY18ar8fJ2FFqVAi1EgaATwW2oqyVfNjKqCq1 H4XrAvK8cN7mDQZzI5Wl7m0+3RK5r2qLQP5lij8wXkzjjjIimAS4wAsfdjZw8YuG b8n8kPOc74TloWGf4qbnNTjguSZ5vtmwIliGh68V50GBsx0eo0eyrzi/j2SI/8Tk nn7BodhJDU3FCKGb7HfYqQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:04 2026 by rpki-client