$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/-unMWyMCO1mmUNPu8BINmP6nUZQ.roa File: -unMWyMCO1mmUNPu8BINmP6nUZQ.roa (raw, json) Hash identifier: 5Agn8Jk3trQAqUzkK3OKT3fLg1eu7OKQzVtEWaVIsxk= Subject key identifier: FA:E9:CC:5B:23:02:3B:59:A6:50:D3:EE:F0:12:0D:98:FE:A7:51:94 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0184 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/-unMWyMCO1mmUNPu8BINmP6nUZQ.roa Signing time: Tue 31 Mar 2026 07:53:36 +0000 ROA not before: Tue 31 Mar 2026 07:53:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.176.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FAE9CC5B23023B59A650D3EEF0120D98FEA75194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:ed:b2:8c:24:58:1e:4c:de:29:a9:4e:c0: 59:0d:7a:d6:78:b6:6d:8a:db:b4:75:c8:76:d0:d8: 33:a8:2c:20:dd:85:67:de:e2:d6:a1:a1:e4:b5:64: b8:d1:dd:8c:7c:f9:cb:98:f2:58:0e:8e:bd:61:5d: 13:46:c8:65:c2:5f:cb:f2:1c:dc:95:83:14:9f:eb: 9f:9a:87:a9:7d:78:e0:d1:61:0b:73:d7:eb:3f:be: 21:fd:55:ef:3f:6c:05:af:66:52:1c:39:aa:d0:7d: 5e:96:5d:9e:bf:87:a8:e9:aa:3b:bc:a0:13:23:33: 3a:85:31:4a:d5:91:27:9a:fc:07:f5:24:ea:21:3c: 67:c0:e3:4d:bd:e9:12:4b:16:91:d5:3c:48:91:9b: 87:55:f8:27:a1:15:7e:7d:d6:de:bf:a7:b8:f1:31: 45:99:b7:e1:77:3b:a8:0a:45:bc:b3:16:35:6b:91: aa:aa:9d:23:8e:2f:bd:99:05:ba:76:08:c6:db:41: ab:36:e9:ee:56:17:9d:d4:5e:89:98:1b:dd:27:75: f4:6c:01:ac:70:66:0d:4d:ac:59:04:2a:7f:e5:9a: aa:f7:2b:c6:87:2d:99:a8:9f:5b:19:4c:49:fb:14: 9f:71:d2:00:16:18:1a:d7:66:02:df:e0:62:b9:03: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:CC:5B:23:02:3B:59:A6:50:D3:EE:F0:12:0D:98:FE:A7:51:94 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/-unMWyMCO1mmUNPu8BINmP6nUZQ.roa sbgp-ipAddrBlock: critical IPv4: 210.152.176.0/21 Signature Algorithm: sha256WithRSAEncryption b2:d3:89:18:3e:64:c5:16:d7:40:6b:85:55:2f:03:5c:36:96: 5e:d5:ca:50:2b:65:a6:88:91:ee:13:e4:f1:e0:c0:fd:58:48: 68:e4:13:5d:39:e3:5f:12:3b:5f:04:44:9b:12:fe:3f:a4:3c: f6:72:ce:74:dc:c2:de:c2:ae:e0:b8:ff:15:05:d9:87:b7:80: 8a:d9:c0:ef:d7:50:c6:be:a4:f8:e9:cc:9a:2b:66:65:22:1e: 1d:64:6f:b1:3c:ab:30:80:0c:6e:bc:25:35:43:37:26:5e:da: 45:98:c9:b1:36:c7:43:32:ba:cd:6d:01:04:1e:b3:aa:2e:f9: 82:88:ba:e1:07:58:8d:8a:6c:3a:82:f1:06:be:03:97:19:2b: de:eb:3e:49:2d:bb:96:39:fd:3f:93:62:b7:6d:23:02:f8:60: c4:ae:cd:3f:49:5b:11:e1:44:e8:62:35:96:85:7f:dc:b4:29: 4e:d5:70:84:a7:7d:30:c1:3a:e1:c8:93:b5:e7:78:3c:48:37: 73:32:77:26:14:e5:3d:cf:91:e5:b1:bc:06:4a:eb:90:8e:55: 3a:97:a9:4a:52:7e:74:0a:9b:16:7a:1f:bd:9e:80:cb:a8:05: 05:14:3e:81:f4:c0:f4:f5:4b:b0:c8:c3:06:e9:b6:33:0b:cb: c2:67:9b:2b -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBRTlDQzVCMjMwMjNC NTlBNjUwRDNFRUYwMTIwRDk4RkVBNzUxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc6u2yjCRYHkzeKalOwFkNetZ4tm2K27R1yHbQ2DOoLCDdhWfe 4tahoeS1ZLjR3Yx8+cuY8lgOjr1hXRNGyGXCX8vyHNyVgxSf65+ah6l9eODRYQtz 1+s/viH9Ve8/bAWvZlIcOarQfV6WXZ6/h6jpqju8oBMjMzqFMUrVkSea/Af1JOoh PGfA40296RJLFpHVPEiRm4dV+CehFX591t6/p7jxMUWZt+F3O6gKRbyzFjVrkaqq nSOOL72ZBbp2CMbbQas26e5WF53UXomYG90ndfRsAaxwZg1NrFkEKn/lmqr3K8aH LZmon1sZTEn7FJ9x0gAWGBrXZgLf4GK5A5x5AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU+unMWyMCO1mmUNPu8BINmP6nUZQwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8tdW5NV3lNQ08xbW1VTlB1OEJJTm1QNm5VWlEucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0piwMA0GCSqGSIb3DQEBCwUA A4IBAQCy04kYPmTFFtdAa4VVLwNcNpZe1cpQK2WmiJHuE+Tx4MD9WEho5BNdOeNf EjtfBESbEv4/pDz2cs503MLewq7guP8VBdmHt4CK2cDv11DGvqT46cyaK2ZlIh4d ZG+xPKswgAxuvCU1QzcmXtpFmMmxNsdDMrrNbQEEHrOqLvmCiLrhB1iNimw6gvEG vgOXGSve6z5JLbuWOf0/k2K3bSMC+GDErs0/SVsR4UToYjWWhX/ctClO1XCEp30w wTrhyJO153g8SDdzMncmFOU9z5HlsbwGSuuQjlU6l6lKUn50CpsWeh+9noDLqAUF FD6B9MD09UuwyMMG6bYzC8vCZ5sr -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:50 2026 by rpki-client