$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3XnHXStGyRdc2CwqbJSZBgLsAWg.roa File: 3XnHXStGyRdc2CwqbJSZBgLsAWg.roa (raw, json) Hash identifier: r8ibZdq0zpz+WUOJRjUUoFdlYa4NrB0AUMVtpbHtFBE= Subject key identifier: DD:79:C7:5D:2B:46:C9:17:5C:D8:2C:2A:6C:94:99:06:02:EC:01:68 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01A2 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3XnHXStGyRdc2CwqbJSZBgLsAWg.roa Signing time: Tue 31 Mar 2026 07:53:48 +0000 ROA not before: Tue 31 Mar 2026 07:53:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.236.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DD79C75D2B46C9175CD82C2A6C94990602EC0168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:eb:07:ec:b4:e9:ce:cc:59:1c:6c:4d:3d: d2:c7:c3:18:b2:88:25:20:6b:bb:e6:bf:c8:80:f2: 50:d9:13:24:10:d1:a0:4c:25:9c:5b:a3:80:4d:0f: 4a:f9:ab:f8:8a:0d:87:ea:70:4d:8b:30:bd:8e:a8: 53:ad:7e:5f:09:7e:68:56:c4:68:a1:5a:13:ef:3c: 9b:a5:1a:8a:a3:84:d0:30:ce:37:3b:e9:3b:54:f8: b1:55:84:f0:3d:b8:07:b2:86:43:ee:44:35:17:fc: 2a:c8:05:85:77:f9:b0:0a:57:26:92:80:e6:75:ea: 44:79:56:80:09:3f:85:d0:82:2f:1b:59:06:9e:95: 74:fe:ed:de:98:90:29:21:d4:2d:e4:c5:54:92:f9: 03:ce:04:f5:8e:b0:72:2a:94:4b:48:0e:2a:7c:dd: 06:e1:ce:15:90:5e:0f:d7:c9:56:75:bc:58:25:4d: c9:c5:25:c9:7d:23:00:22:2b:a0:eb:37:17:2a:ac: d3:d9:46:f2:74:b7:55:8d:9e:28:39:b2:2c:ed:f1: 82:dc:fb:eb:2b:76:cc:d7:fe:44:34:5a:a4:bb:a9: bc:38:79:7e:9b:03:ea:06:48:ed:5f:3c:52:95:07: 5a:c3:c1:b6:2e:10:b9:93:db:c3:00:6f:26:f2:58: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:79:C7:5D:2B:46:C9:17:5C:D8:2C:2A:6C:94:99:06:02:EC:01:68 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3XnHXStGyRdc2CwqbJSZBgLsAWg.roa sbgp-ipAddrBlock: critical IPv4: 210.236.224.0/21 Signature Algorithm: sha256WithRSAEncryption cc:83:4e:a8:f9:c2:6b:cb:eb:42:d7:e1:77:b5:1e:49:df:92: 76:14:54:9a:35:c9:fd:84:bf:4b:3b:03:ca:c7:91:ae:f8:55: 8e:04:6f:0f:69:ed:d5:12:9d:58:ca:f6:51:22:b9:62:5d:f9: 71:69:03:e4:85:79:30:1d:1e:80:fa:4d:a7:c4:96:c9:30:8a: ba:0c:86:9d:0b:7d:b6:77:df:e9:18:b5:64:53:1b:94:a1:ea: 98:c2:4f:61:d5:0a:f9:e8:6a:4f:42:82:fd:a0:7b:c4:f7:54: 01:7a:78:53:51:fb:80:86:22:2c:9f:2a:0d:eb:2c:67:c1:31: 35:d5:6d:c7:28:e2:94:ac:f5:7a:fe:1c:92:4d:16:a5:47:43: 2d:3b:55:98:e8:35:fd:c7:31:b9:75:7a:28:0a:38:90:d6:29: 1c:8f:66:0e:53:85:22:82:71:1a:ee:3a:54:e9:f3:3a:a2:29: 32:bb:7e:17:93:c7:9a:5c:1e:41:c4:94:4e:dd:10:c8:c9:eb: e9:18:ed:1d:12:94:f5:21:01:86:5e:a3:36:c2:43:2f:7b:0e: c6:ca:e2:5d:82:e1:61:aa:df:5e:73:18:c5:86:4b:48:d7:1c: 05:e9:8e:c7:75:a9:38:d1:a1:11:89:44:da:80:c6:bc:7c:51: 7f:eb:fc:75 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERENzlDNzVEMkI0NkM5 MTc1Q0Q4MkMyQTZDOTQ5OTA2MDJFQzAxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAD+sH7LTpzsxZHGxNPdLHwxiyiCUga7vmv8iA8lDZEyQQ0aBM JZxbo4BND0r5q/iKDYfqcE2LML2OqFOtfl8JfmhWxGihWhPvPJulGoqjhNAwzjc7 6TtU+LFVhPA9uAeyhkPuRDUX/CrIBYV3+bAKVyaSgOZ16kR5VoAJP4XQgi8bWQae lXT+7d6YkCkh1C3kxVSS+QPOBPWOsHIqlEtIDip83QbhzhWQXg/XyVZ1vFglTcnF Jcl9IwAiK6DrNxcqrNPZRvJ0t1WNnig5sizt8YLc++srdszX/kQ0WqS7qbw4eX6b A+oGSO1fPFKVB1rDwbYuELmT28MAbybyWPUBAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU3XnHXStGyRdc2CwqbJSZBgLsAWgwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My8zWG5IWFN0R3lSZGMyQ3dxYkpTWkJnTHNBV2cucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0uzgMA0GCSqGSIb3DQEBCwUA A4IBAQDMg06o+cJry+tC1+F3tR5J35J2FFSaNcn9hL9LOwPKx5Gu+FWOBG8Pae3V Ep1YyvZRIrliXflxaQPkhXkwHR6A+k2nxJbJMIq6DIadC322d9/pGLVkUxuUoeqY wk9h1Qr56GpPQoL9oHvE91QBenhTUfuAhiIsnyoN6yxnwTE11W3HKOKUrPV6/hyS TRalR0MtO1WY6DX9xzG5dXooCjiQ1ikcj2YOU4UignEa7jpU6fM6oikyu34Xk8ea XB5BxJRO3RDIyevpGO0dEpT1IQGGXqM2wkMvew7GyuJdguFhqt9ecxjFhktI1xwF 6Y7Hdak40aERiUTagMa8fFF/6/x1 -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:24 2026 by rpki-client