$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/35cDQrnpDEn_-J5C0fDtLgLqRtw.roa File: 35cDQrnpDEn_-J5C0fDtLgLqRtw.roa (raw, json) Hash identifier: ymQU9B4vU5MiinmMz1TtFH3rXaFkBhABqF3KMX4aGx8= Subject key identifier: DF:97:03:42:B9:E9:0C:49:FF:F8:9E:42:D1:F0:ED:2E:02:EA:46:DC Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0179 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/35cDQrnpDEn_-J5C0fDtLgLqRtw.roa Signing time: Tue 31 Mar 2026 07:53:31 +0000 ROA not before: Tue 31 Mar 2026 07:53:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.140.192.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DF970342B9E90C49FFF89E42D1F0ED2E02EA46DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:d5:cd:24:f2:49:91:93:97:5a:5e:d2:cf: df:47:d1:1d:6d:e2:cf:41:36:ec:64:98:20:0f:39: 46:f3:d7:de:35:a5:b4:11:5c:87:6a:4d:90:fd:41: 40:66:eb:5d:91:77:d6:91:b2:a7:b9:c3:1b:77:48: 85:ad:05:c7:88:aa:09:3a:4b:43:7c:d2:00:82:79: 5c:74:ee:f9:f4:bf:4a:48:a7:85:f1:b3:1d:2d:0f: 0f:61:90:14:8e:e4:49:b5:db:64:01:32:95:ed:ce: 0f:c9:e8:8a:09:b5:7a:b8:ad:f2:54:05:1d:7e:51: af:b7:70:5a:92:91:c2:d3:c6:5e:31:29:6a:cb:21: 53:4e:f8:12:9e:03:1e:80:98:74:78:1c:2d:8e:f0: 9a:63:08:50:bc:fa:ec:d1:a6:74:74:f7:29:ff:26: b8:ea:58:c1:2f:86:40:10:c7:5c:cb:47:0a:fc:22: 47:1d:a1:14:3e:d0:11:ac:51:9c:50:c1:46:15:38: c9:3c:d4:b3:0a:64:a7:b2:ee:d6:19:d5:e5:bc:4e: e9:71:a0:06:6e:1f:b1:f5:50:f1:89:fe:33:62:12: 56:fe:de:96:cc:98:8c:2c:e5:70:0a:ec:10:c8:00: 3a:3f:c7:f8:f2:47:bb:08:85:53:84:33:d7:0d:b1: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:97:03:42:B9:E9:0C:49:FF:F8:9E:42:D1:F0:ED:2E:02:EA:46:DC X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/35cDQrnpDEn_-J5C0fDtLgLqRtw.roa sbgp-ipAddrBlock: critical IPv4: 210.140.192.0/19 Signature Algorithm: sha256WithRSAEncryption b8:f4:d2:47:d9:68:fa:2e:4c:eb:54:b3:b5:32:4a:4a:5e:04: 4e:17:7c:aa:bd:2e:08:49:56:40:d3:72:47:84:ed:2d:cc:b2: b6:2b:f3:8a:fb:ae:5e:99:f9:53:07:71:0e:7d:d4:84:4b:72: 09:b7:2b:f8:c5:58:b1:ad:69:bd:38:ff:98:ff:ba:d2:fc:89: 8f:28:e5:a4:e7:a4:17:38:45:a6:ff:12:c3:c7:3c:1e:69:7b: 4c:3b:1c:60:d6:0e:4b:32:13:ee:83:c7:66:12:99:e0:d9:e3: 03:50:0a:ce:49:a1:05:db:95:db:a1:61:17:8e:80:73:ec:c9: 0b:48:81:90:33:f2:21:f3:27:6c:55:1a:4b:3d:1a:40:63:85: fb:c1:78:ec:65:de:ea:06:9f:55:aa:ab:a0:e3:8e:37:34:bc: 53:b1:fa:bb:fe:b6:6d:b0:19:f9:f6:4a:4e:be:b1:94:85:c6: be:70:94:d8:52:ce:4b:28:34:09:38:56:fc:c1:08:ac:e2:bd: ec:a4:80:79:ae:cf:1e:bb:5a:da:4e:38:07:d9:c1:6b:da:40: 54:16:36:4f:bd:30:1c:f9:a3:42:66:ff:d4:4f:7a:8b:d6:16: 6c:d4:87:79:c2:7e:c9:b4:47:0c:f5:31:39:44:b3:84:3c:79: a9:31:23:73 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGOTcwMzQyQjlFOTBD NDlGRkY4OUU0MkQxRjBFRDJFMDJFQTQ2REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYWdXNJPJJkZOXWl7Sz99H0R1t4s9BNuxkmCAPOUbz1941pbQR XIdqTZD9QUBm612Rd9aRsqe5wxt3SIWtBceIqgk6S0N80gCCeVx07vn0v0pIp4Xx sx0tDw9hkBSO5Em122QBMpXtzg/J6IoJtXq4rfJUBR1+Ua+3cFqSkcLTxl4xKWrL IVNO+BKeAx6AmHR4HC2O8JpjCFC8+uzRpnR09yn/JrjqWMEvhkAQx1zLRwr8Ikcd oRQ+0BGsUZxQwUYVOMk81LMKZKey7tYZ1eW8TulxoAZuH7H1UPGJ/jNiElb+3pbM mIws5XAK7BDIADo/x/jyR7sIhVOEM9cNsQNnAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU35cDQrnpDEn/+J5C0fDtLgLqRtwwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8zNWNEUXJucERFbl8tSjVDMGZEdExnTHFSdHcucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0ozAMA0GCSqGSIb3DQEBCwUA A4IBAQC49NJH2Wj6LkzrVLO1MkpKXgROF3yqvS4ISVZA03JHhO0tzLK2K/OK+65e mflTB3EOfdSES3IJtyv4xVixrWm9OP+Y/7rS/ImPKOWk56QXOEWm/xLDxzweaXtM Oxxg1g5LMhPug8dmEpng2eMDUArOSaEF25XboWEXjoBz7MkLSIGQM/Ih8ydsVRpL PRpAY4X7wXjsZd7qBp9Vqqug4443NLxTsfq7/rZtsBn59kpOvrGUhca+cJTYUs5L KDQJOFb8wQis4r3spIB5rs8eu1raTjgH2cFr2kBUFjZPvTAc+aNCZv/UT3qL1hZs 1Id5wn7JtEcM9TE5RLOEPHmpMSNz -----END CERTIFICATE-----Generated at Wed Apr 1 15:58:22 2026 by rpki-client