$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3EDNO2BRttof8ncf3euBDA5tgzA.roa File: 3EDNO2BRttof8ncf3euBDA5tgzA.roa (raw, json) Hash identifier: eGG8ePi4lFA8HUEEH3wBYjFJ50anus6jZO6jMpQOvlk= Subject key identifier: DC:40:CD:3B:60:51:B6:DA:1F:F2:77:1F:DD:EB:81:0C:0E:6D:83:30 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 013D Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3EDNO2BRttof8ncf3euBDA5tgzA.roa Signing time: Tue 31 Mar 2026 07:52:57 +0000 ROA not before: Tue 31 Mar 2026 07:52:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.234.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:52:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DC40CD3B6051B6DA1FF2771FDDEB810C0E6D8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:98:c2:61:fb:74:6e:14:ba:2f:59:09:ff: f7:ce:cf:82:95:c9:cf:d7:64:d4:18:cc:1c:1b:ac: 3a:ff:6e:9f:8c:c9:25:e0:d1:af:dc:78:11:33:08: 2e:00:e3:bc:1c:86:b3:ed:fa:c0:3e:4d:b2:b7:5b: f8:bd:89:fe:cb:76:03:46:c1:d2:46:28:77:3d:b5: c8:e5:fd:d0:39:3b:cf:1c:64:d8:60:25:3e:52:4b: 3c:6b:39:46:b1:a7:e5:b9:34:2c:53:7c:02:f9:12: c9:a4:2c:4d:06:af:31:68:52:8d:24:dd:af:58:f0: 9e:7a:01:a1:0e:bf:f5:17:42:bb:73:bc:86:8e:6f: fe:d9:68:56:8d:dd:d0:e7:55:99:ea:88:da:f1:7e: 18:26:b5:68:33:09:74:75:fc:17:59:e4:df:01:44: 9b:b7:e2:a9:d8:e6:68:12:f8:8b:b3:41:1b:4c:1c: cd:8f:32:8c:38:05:9a:f9:72:5a:b3:9e:c2:1b:0b: dd:c7:dc:36:ec:33:91:e8:31:36:a0:66:5d:e7:47: 5d:54:af:7d:31:9d:96:dd:eb:2a:9e:91:54:99:d8: cb:76:72:3d:bd:1f:9c:20:d2:90:64:39:b1:ab:d8: df:db:56:fd:d9:76:1a:b0:0c:f3:33:47:5a:e3:aa: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:CD:3B:60:51:B6:DA:1F:F2:77:1F:DD:EB:81:0C:0E:6D:83:30 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3EDNO2BRttof8ncf3euBDA5tgzA.roa sbgp-ipAddrBlock: critical IPv4: 202.234.153.0/24 Signature Algorithm: sha256WithRSAEncryption 00:0d:e1:01:af:83:f6:e1:02:99:9b:c3:0f:94:c5:43:e0:4b: 72:64:fd:de:1e:74:3e:d1:1c:d5:db:8b:ae:c7:75:de:75:8e: c6:e6:3d:c9:7a:35:4f:96:c6:dc:73:29:f6:4b:93:ab:49:1f: 33:ab:a9:21:29:fa:7a:3b:37:9d:83:98:4b:77:bc:8e:36:ed: a0:f8:e0:c0:bf:ee:e9:65:a5:f8:e0:ca:34:a6:ce:82:35:d9: d6:ad:23:21:59:7e:16:c3:12:66:92:07:0e:91:64:cd:d5:db: 12:55:c8:73:be:4b:c0:aa:e9:5f:89:a2:0b:89:a6:3d:11:1a: e1:da:0e:2f:8a:00:ab:19:4e:e2:7f:b5:00:b5:97:2b:82:2c: 06:f2:17:61:12:e7:6a:d2:aa:39:25:3d:89:6b:06:f5:84:4c: 04:ae:b9:78:01:80:fc:fd:7c:f9:4e:51:82:c6:0d:c0:9a:69: 46:90:02:62:19:22:c4:04:ec:ed:ba:53:dd:15:61:7d:e0:78: 37:13:a6:e2:98:45:44:1e:b8:eb:59:76:3c:95:0d:eb:fd:35: b7:b5:5c:21:1d:90:e8:fe:29:71:b6:3e:dd:3e:ac:83:3a:e4: ac:64:fc:3f:f8:84:1a:0e:f1:87:ab:79:e4:7e:e9:aa:c6:0a: 25:f4:cb:86 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUyNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDNDBDRDNCNjA1MUI2 REExRkYyNzcxRkRERUI4MTBDMEU2RDgzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvyZjCYft0bhS6L1kJ//fOz4KVyc/XZNQYzBwbrDr/bp+MySXg 0a/ceBEzCC4A47wchrPt+sA+TbK3W/i9if7LdgNGwdJGKHc9tcjl/dA5O88cZNhg JT5SSzxrOUaxp+W5NCxTfAL5EsmkLE0GrzFoUo0k3a9Y8J56AaEOv/UXQrtzvIaO b/7ZaFaN3dDnVZnqiNrxfhgmtWgzCXR1/BdZ5N8BRJu34qnY5mgS+IuzQRtMHM2P Mow4BZr5clqznsIbC93H3DbsM5HoMTagZl3nR11Ur30xnZbd6yqekVSZ2Mt2cj29 H5wg0pBkObGr2N/bVv3ZdhqwDPMzR1rjqtDzAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU3EDNO2BRttof8ncf3euBDA5tgzAwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8zRUROTzJCUnR0b2Y4bmNmM2V1QkRBNXRnekEucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyuqZMA0GCSqGSIb3DQEBCwUA A4IBAQAADeEBr4P24QKZm8MPlMVD4EtyZP3eHnQ+0RzV24uux3XedY7G5j3JejVP lsbccyn2S5OrSR8zq6khKfp6Ozedg5hLd7yONu2g+ODAv+7pZaX44Mo0ps6CNdnW rSMhWX4WwxJmkgcOkWTN1dsSVchzvkvAqulfiaILiaY9ERrh2g4vigCrGU7if7UA tZcrgiwG8hdhEudq0qo5JT2Jawb1hEwErrl4AYD8/Xz5TlGCxg3AmmlGkAJiGSLE BOztulPdFWF94Hg3E6bimEVEHrjrWXY8lQ3r/TW3tVwhHZDo/ilxtj7dPqyDOuSs ZPw/+IQaDvGHq3nkfumqxgol9MuG -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:19 2026 by rpki-client