$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0nHDMcNASZgY8_SE7z0lV44KrX0.roa File: 0nHDMcNASZgY8_SE7z0lV44KrX0.roa (raw, json) Hash identifier: /z6hWWG2QfzsuEBuUBmsUQRVfQC7Ms6YAkOI/YR9MTg= Subject key identifier: D2:71:C3:31:C3:40:49:98:18:F3:F4:84:EF:3D:25:57:8E:0A:AD:7D Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0151 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0nHDMcNASZgY8_SE7z0lV44KrX0.roa Signing time: Tue 31 Mar 2026 07:53:10 +0000 ROA not before: Tue 31 Mar 2026 07:53:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.218.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D271C331C340499818F3F484EF3D25578E0AAD7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:8b:d9:c0:4a:16:5a:da:01:97:3b:58:97: ae:97:9c:bb:52:bb:30:c0:b1:c5:30:64:47:45:5c: 64:20:ab:7b:92:01:32:88:15:94:1f:08:38:07:9e: be:d7:84:e8:33:a4:87:79:4c:04:5e:d8:8d:f2:aa: 82:bf:70:31:74:77:ca:77:fd:53:6c:92:77:70:1c: d6:bd:e1:96:62:cd:37:f0:f1:bf:e8:68:92:34:10: e3:7c:d6:3d:c8:45:c8:f6:68:1d:3b:83:09:9c:1d: 93:89:50:ac:3c:d4:78:8d:4c:3c:31:d8:10:07:74: 09:1e:a3:15:3f:eb:92:4b:49:dd:23:67:38:4a:54: 40:15:f3:06:2a:3c:5b:e2:4a:7e:6c:7a:95:90:02: f0:3f:09:86:e3:df:d3:3c:11:19:46:ea:a0:ed:45: 57:f3:21:9b:ff:97:55:e0:cb:76:19:e7:76:2a:e7: 92:82:82:79:bd:a5:0f:b0:f8:05:81:5a:c7:81:96: 36:28:c8:a9:42:bc:ec:3b:c1:27:65:13:87:ee:4a: 58:1c:23:54:ef:44:6a:ad:a9:8b:4d:fe:44:a8:8e: e1:7e:ad:4b:07:44:5b:b3:e9:17:52:3b:b5:2e:0c: 10:03:40:a6:3a:57:a6:9c:25:af:7f:6f:51:79:de: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:71:C3:31:C3:40:49:98:18:F3:F4:84:EF:3D:25:57:8E:0A:AD:7D X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0nHDMcNASZgY8_SE7z0lV44KrX0.roa sbgp-ipAddrBlock: critical IPv4: 202.218.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2b:b8:a4:ec:33:51:d1:b0:65:6c:67:2e:f1:a0:1c:63:ce:76: e4:38:e8:d1:9f:1e:e3:0e:6f:c7:9d:d6:6e:59:2f:d3:04:b1: c3:4d:cd:e8:3e:99:ca:0e:44:4c:57:11:4c:18:be:f1:a1:ff: 48:21:c3:9f:e0:5d:d8:dc:54:6a:c5:f6:0d:49:cb:85:16:ba: ee:30:30:c6:8a:63:32:64:31:8b:ea:53:92:27:51:6d:f1:f9: a5:bb:32:72:7b:16:36:c9:8b:bf:c8:ae:ba:17:67:a5:df:8e: d2:bb:72:e9:f2:cb:bf:34:b6:a8:64:70:8e:a6:21:47:67:ca: b9:4b:38:f2:0f:47:81:cc:4b:e9:07:05:d7:40:9e:76:85:b9: f9:ac:b8:8e:2a:03:e1:d9:72:95:6c:22:74:46:3c:76:10:e6: 2f:d8:86:fa:90:c9:a9:31:c9:6a:07:5a:1b:c7:8f:1e:3f:d3: 8b:ad:21:bb:92:e5:b3:fd:1a:14:4d:fb:2d:6e:7b:7c:0f:98: 8b:c6:6a:bf:52:e8:d7:f7:3e:93:3e:ca:06:e0:b9:b2:e7:5e: 8f:0d:89:cf:77:38:1f:9d:28:4c:bf:47:56:fc:dd:fc:8d:06: f5:56:e5:c0:87:1b:f7:c2:10:d2:4a:01:c7:f1:1c:b4:ae:45: cf:9c:41:80 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyNzFDMzMxQzM0MDQ5 OTgxOEYzRjQ4NEVGM0QyNTU3OEUwQUFEN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXN4vZwEoWWtoBlztYl66XnLtSuzDAscUwZEdFXGQgq3uSATKI FZQfCDgHnr7XhOgzpId5TARe2I3yqoK/cDF0d8p3/VNskndwHNa94ZZizTfw8b/o aJI0EON81j3IRcj2aB07gwmcHZOJUKw81HiNTDwx2BAHdAkeoxU/65JLSd0jZzhK VEAV8wYqPFviSn5sepWQAvA/CYbj39M8ERlG6qDtRVfzIZv/l1Xgy3YZ53Yq55KC gnm9pQ+w+AWBWseBljYoyKlCvOw7wSdlE4fuSlgcI1TvRGqtqYtN/kSojuF+rUsH RFuz6RdSO7UuDBADQKY6V6acJa9/b1F53iXzAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU0nHDMcNASZgY8/SE7z0lV44KrX0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8wbkhETWNOQVNaZ1k4X1NFN3owbFY0NEtyWDAucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFytogMA0GCSqGSIb3DQEBCwUA A4IBAQAruKTsM1HRsGVsZy7xoBxjznbkOOjRnx7jDm/HndZuWS/TBLHDTc3oPpnK DkRMVxFMGL7xof9IIcOf4F3Y3FRqxfYNScuFFrruMDDGimMyZDGL6lOSJ1Ft8fml uzJyexY2yYu/yK66F2el347Su3Lp8su/NLaoZHCOpiFHZ8q5SzjyD0eBzEvpBwXX QJ52hbn5rLiOKgPh2XKVbCJ0Rjx2EOYv2Ib6kMmpMclqB1obx48eP9OLrSG7kuWz /RoUTfstbnt8D5iLxmq/UujX9z6TPsoG4Lmy516PDYnPdzgfnShMv0dW/N38jQb1 VuXAhxv3whDSSgHH8Ry0rkXPnEGA -----END CERTIFICATE-----Generated at Wed Apr 1 16:03:37 2026 by rpki-client