$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/34V_P-jEM3WO9L7US2ewFxq5vGA.roa File: 34V_P-jEM3WO9L7US2ewFxq5vGA.roa (raw, json) Hash identifier: 0aYC/knaSfEFGgD1qizYftLmFKmHs4fU/jgPvmMZvpA= Subject key identifier: DF:85:7F:3F:E8:C4:33:75:8E:F4:BE:D4:4B:67:B0:17:1A:B9:BC:60 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01B0 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/34V_P-jEM3WO9L7US2ewFxq5vGA.roa Signing time: Tue 31 Mar 2026 07:53:54 +0000 ROA not before: Tue 31 Mar 2026 07:53:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.252.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DF857F3FE8C433758EF4BED44B67B0171AB9BC60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:60:e2:a4:e8:b1:f0:89:7e:08:36:b6:ed: eb:61:99:ad:e4:31:35:54:eb:e9:03:78:c2:e9:f5: fc:aa:22:b2:92:e9:b9:f7:16:c3:b6:78:7e:2d:84: 84:a3:b5:9c:58:4c:65:db:53:b2:44:85:59:5d:7c: b4:38:34:11:46:65:56:3b:b1:7b:0f:42:ae:51:91: 39:54:7e:cb:58:ef:a2:3f:ab:29:d3:1b:d1:59:d5: 9c:ce:de:e7:42:85:b9:51:ba:25:70:a1:61:77:08: 70:8c:2e:38:21:8b:27:4e:f3:6d:1c:c0:39:6c:a4: 9c:7c:15:01:8a:07:52:2e:34:24:43:c8:12:61:61: 24:4e:be:0f:52:f9:2f:56:2f:21:22:69:bf:33:34: 38:eb:bb:95:6a:d8:d4:7a:49:d5:11:30:1a:4e:fa: c6:c8:c9:e2:05:b5:85:f7:d7:7b:2f:55:fd:82:79: 42:c2:d5:72:34:af:30:1c:be:10:d9:b3:c4:2e:ec: 98:01:bf:1b:a2:17:aa:c2:2c:e6:ad:94:b1:a6:d5: 8a:0d:57:19:70:ce:db:ce:a0:59:25:7e:62:9d:21: 06:19:50:e1:b2:84:bb:e5:a0:26:3f:db:15:3f:fc: 72:4d:94:c3:fe:99:b9:87:59:71:af:e5:4d:63:9b: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:85:7F:3F:E8:C4:33:75:8E:F4:BE:D4:4B:67:B0:17:1A:B9:BC:60 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/34V_P-jEM3WO9L7US2ewFxq5vGA.roa sbgp-ipAddrBlock: critical IPv4: 210.252.112.0/20 Signature Algorithm: sha256WithRSAEncryption 95:0b:7a:b2:f1:fd:06:68:d4:aa:bc:da:80:87:87:c8:b8:05: c1:10:e7:a3:52:76:e3:f8:60:04:67:c3:08:2f:9b:d2:26:ae: be:07:21:41:98:b5:b5:45:e8:ee:13:df:b0:a0:0a:60:e4:aa: a1:7d:cc:5e:f2:0e:36:59:e3:f6:d0:b8:26:cf:6e:a4:20:b9: c2:5d:d5:05:e4:dd:1c:fe:55:03:18:97:7e:5d:45:7e:44:dc: 71:ee:e8:c2:2c:e5:a1:75:49:75:5e:19:b1:ed:f1:94:5c:41: f5:ad:ca:1e:58:f6:e8:5e:15:d2:67:60:13:3d:4c:83:fe:6a: 04:15:8b:b2:3d:6d:57:25:73:01:2c:25:d0:46:eb:1f:99:e3: 4e:c1:67:59:4f:f5:3a:dd:52:d4:82:9f:2d:2c:c3:71:71:cd: 6a:02:3d:26:c1:76:b7:87:6f:5a:83:77:16:8e:60:8c:74:be: 39:17:2c:ea:ac:60:e9:35:32:25:a8:30:92:9b:df:62:81:67: 32:ef:70:c5:4e:0f:e2:df:78:46:29:ee:d0:a3:c5:7a:03:a3: c0:cc:6a:d3:71:42:de:e2:71:ee:d1:0e:d9:1a:70:bc:10:16: 55:15:5c:81:f7:6d:78:e0:90:78:39:93:9b:66:46:e1:43:89: d7:a2:04:0c -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGODU3RjNGRThDNDMz NzU4RUY0QkVENDRCNjdCMDE3MUFCOUJDNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUemDipOix8Il+CDa27ethma3kMTVU6+kDeMLp9fyqIrKS6bn3 FsO2eH4thISjtZxYTGXbU7JEhVldfLQ4NBFGZVY7sXsPQq5RkTlUfstY76I/qynT G9FZ1ZzO3udChblRuiVwoWF3CHCMLjghiydO820cwDlspJx8FQGKB1IuNCRDyBJh YSROvg9S+S9WLyEiab8zNDjru5Vq2NR6SdURMBpO+sbIyeIFtYX313svVf2CeULC 1XI0rzAcvhDZs8Qu7JgBvxuiF6rCLOatlLGm1YoNVxlwztvOoFklfmKdIQYZUOGy hLvloCY/2xU//HJNlMP+mbmHWXGv5U1jmwLZAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU34V/P+jEM3WO9L7US2ewFxq5vGAwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8zNFZfUC1qRU0zV085TDdVUzJld0Z4cTV2R0Eucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0vxwMA0GCSqGSIb3DQEBCwUA A4IBAQCVC3qy8f0GaNSqvNqAh4fIuAXBEOejUnbj+GAEZ8MIL5vSJq6+ByFBmLW1 RejuE9+woApg5Kqhfcxe8g42WeP20Lgmz26kILnCXdUF5N0c/lUDGJd+XUV+RNxx 7ujCLOWhdUl1Xhmx7fGUXEH1rcoeWPboXhXSZ2ATPUyD/moEFYuyPW1XJXMBLCXQ RusfmeNOwWdZT/U63VLUgp8tLMNxcc1qAj0mwXa3h29ag3cWjmCMdL45FyzqrGDp NTIlqDCSm99igWcy73DFTg/i33hGKe7Qo8V6A6PAzGrTcULe4nHu0Q7ZGnC8EBZV FVyB92144JB4OZObZkbhQ4nXogQM -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:27 2026 by rpki-client