$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2G-6q37hYIv4MzPZH5208oZV3Nk.roa File: 2G-6q37hYIv4MzPZH5208oZV3Nk.roa (raw, json) Hash identifier: 2NWWwRHsRGCCaHbC9JcyqWUFx7oePVMBe0h71nAQjUU= Subject key identifier: D8:6F:BA:AB:7E:E1:60:8B:F8:33:33:D9:1F:9D:B4:F2:86:55:DC:D9 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 019E Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2G-6q37hYIv4MzPZH5208oZV3Nk.roa Signing time: Tue 31 Mar 2026 07:53:46 +0000 ROA not before: Tue 31 Mar 2026 07:53:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.235.8.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D86FBAAB7EE1608BF83333D91F9DB4F28655DCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:2e:4c:5a:4c:24:5a:eb:a3:5a:56:44:ac: 7f:2c:46:11:01:e4:e7:cb:66:e8:b5:5a:31:cc:c4: fa:e8:b9:f7:2c:2a:2d:0a:d4:02:16:45:e7:e3:49: 4e:63:82:7e:01:39:1e:6d:f3:de:f5:f8:a1:ad:3f: 81:7d:d3:5d:ad:94:38:e3:0c:c5:3d:2d:55:47:dd: 39:26:bd:f6:1c:48:ed:57:15:39:f7:d2:f3:94:34: 3d:b2:e7:bd:d2:ca:fc:1f:53:38:10:5b:b4:d1:25: bc:f1:64:a7:85:b5:26:e7:05:c9:e0:7e:c2:18:e9: 15:43:bb:7c:01:a5:90:9d:d7:d4:5b:d2:25:96:a6: 64:f0:f4:d8:ce:cb:3c:87:6b:98:6f:48:d8:87:9b: 51:93:28:ef:86:c7:1c:c9:50:c2:b7:49:ba:22:15: 84:1f:90:e2:21:77:3f:5a:06:de:95:e0:01:39:ef: ec:bf:3b:d3:7d:c1:38:83:27:36:f2:9c:21:74:92: 4d:c4:3c:c3:9c:ce:ec:f1:9d:69:8c:49:14:35:07: f4:f8:8d:c3:3c:2d:3b:83:b6:26:4e:ca:59:ff:eb: 64:8b:c6:dd:e7:96:b8:bf:f1:10:df:64:92:5d:28: 7b:0f:69:b0:63:46:5a:4b:24:a5:08:50:9e:1e:d3: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:BA:AB:7E:E1:60:8B:F8:33:33:D9:1F:9D:B4:F2:86:55:DC:D9 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2G-6q37hYIv4MzPZH5208oZV3Nk.roa sbgp-ipAddrBlock: critical IPv4: 210.235.8.0/21 Signature Algorithm: sha256WithRSAEncryption 52:66:9d:e6:b5:94:e9:ef:68:ca:d4:89:fe:34:ef:02:08:2c: 11:d3:b9:cc:9b:5d:e3:18:5d:82:89:00:84:4e:ef:ce:12:e0: 19:da:34:7e:cf:71:5f:1c:86:27:f9:86:17:cf:36:9a:0e:f9: 0f:08:fa:b0:fa:b4:72:83:49:1d:3a:2d:8a:86:3d:b7:20:0c: 35:05:26:7f:50:5a:b2:96:5f:08:ab:01:7b:b0:b9:17:40:40: 14:95:7d:c2:1f:44:95:0b:0d:3f:dc:9b:34:7f:76:eb:bc:90: 21:b8:35:1a:fb:e3:c1:d8:89:57:c3:87:2d:72:84:11:c3:01: cd:f2:19:b8:cc:9e:3f:d3:c1:f6:e1:72:50:d5:09:59:03:10: 70:84:0a:ce:6a:c3:c6:0f:2a:0c:dd:7e:55:b0:d0:17:22:65: 52:ca:f3:d1:a6:7a:b4:2f:8f:0b:a0:b3:fe:91:bd:df:02:4c: 1c:c0:95:b2:4a:84:4c:6c:4f:e9:14:d9:52:5a:33:2d:c1:8c: 94:fb:48:a6:9a:dd:df:3d:7e:46:2e:fe:45:a1:75:08:83:f4: 6b:0f:dc:80:1f:a0:91:22:91:c2:5f:6a:e6:02:4a:01:ff:4b: f5:bd:71:1a:c4:f7:b5:4d:18:98:7a:39:fe:fc:21:d6:d5:80: c0:b5:dd:2e -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4NkZCQUFCN0VFMTYw OEJGODMzMzNEOTFGOURCNEYyODY1NURDRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3LC5MWkwkWuujWlZErH8sRhEB5OfLZui1WjHMxProufcsKi0K 1AIWRefjSU5jgn4BOR5t8971+KGtP4F9012tlDjjDMU9LVVH3TkmvfYcSO1XFTn3 0vOUND2y573SyvwfUzgQW7TRJbzxZKeFtSbnBcngfsIY6RVDu3wBpZCd19Rb0iWW pmTw9NjOyzyHa5hvSNiHm1GTKO+GxxzJUMK3SboiFYQfkOIhdz9aBt6V4AE57+y/ O9N9wTiDJzbynCF0kk3EPMOczuzxnWmMSRQ1B/T4jcM8LTuDtiZOyln/62SLxt3n lri/8RDfZJJdKHsPabBjRlpLJKUIUJ4e07g/AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU2G+6q37hYIv4MzPZH5208oZV3NkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8yRy02cTM3aFlJdjRNelBaSDUyMDhvWlYzTmsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0usIMA0GCSqGSIb3DQEBCwUA A4IBAQBSZp3mtZTp72jK1In+NO8CCCwR07nMm13jGF2CiQCETu/OEuAZ2jR+z3Ff HIYn+YYXzzaaDvkPCPqw+rRyg0kdOi2Khj23IAw1BSZ/UFqyll8IqwF7sLkXQEAU lX3CH0SVCw0/3Js0f3brvJAhuDUa++PB2IlXw4ctcoQRwwHN8hm4zJ4/08H24XJQ 1QlZAxBwhArOasPGDyoM3X5VsNAXImVSyvPRpnq0L48LoLP+kb3fAkwcwJWySoRM bE/pFNlSWjMtwYyU+0immt3fPX5GLv5FoXUIg/RrD9yAH6CRIpHCX2rmAkoB/0v1 vXEaxPe1TRiYejn+/CHW1YDAtd0u -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:49 2026 by rpki-client