$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4oLXmraNKaOlrJIji_yjw5oEZLE.roa File: 4oLXmraNKaOlrJIji_yjw5oEZLE.roa (raw, json) Hash identifier: YSb3H/tnSEMpTipnO9RFf1afoxqhxbkQVs4Dth5J6aI= Subject key identifier: E2:82:D7:9A:B6:8D:29:A3:A5:AC:92:23:8B:FC:A3:C3:9A:04:64:B1 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 019B Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4oLXmraNKaOlrJIji_yjw5oEZLE.roa Signing time: Tue 31 Mar 2026 07:53:45 +0000 ROA not before: Tue 31 Mar 2026 07:53:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.189.252.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E282D79AB68D29A3A5AC92238BFCA3C39A0464B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:48:58:56:44:8f:e2:17:ed:8a:6f:df:35: 8a:c9:14:c3:d0:78:f7:71:58:00:b7:82:bc:db:8d: 1f:25:53:c8:20:b0:e8:a3:b3:8c:71:2f:de:d7:ab: 45:50:6c:c9:1f:66:59:c6:cd:01:ab:36:fe:85:d9: e9:ce:b3:dc:4f:36:c3:4d:09:6b:d6:47:c8:db:35: 8f:ec:4e:ab:ec:32:14:8f:f2:a9:bf:b5:0f:cf:5f: 38:e0:11:dc:e2:25:f9:87:4f:b3:19:ef:6b:f9:64: 00:48:a4:3f:91:04:c8:06:46:85:39:81:f8:86:e9: ee:e8:93:20:b0:76:0d:22:91:02:0f:35:8e:f3:12: dc:1c:e3:1f:0f:60:78:af:1a:7f:12:98:77:15:b2: b8:3f:1d:fe:78:64:31:a7:e3:90:2f:c5:5e:45:87: 3c:0d:41:e4:9f:24:8b:10:6a:68:d1:d0:87:03:ca: eb:89:cb:81:8a:34:d5:44:00:96:61:df:ec:5e:5d: 0d:63:de:fe:47:4d:fc:4a:fb:01:42:9e:2d:a1:8a: 0f:77:62:04:5d:eb:59:56:83:c1:09:12:6a:39:ff: 59:f0:5b:e4:21:f8:be:7f:8c:26:a6:14:55:f7:7c: 02:a2:4c:e9:c5:17:26:1a:7a:73:4e:17:6c:65:6c: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:D7:9A:B6:8D:29:A3:A5:AC:92:23:8B:FC:A3:C3:9A:04:64:B1 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4oLXmraNKaOlrJIji_yjw5oEZLE.roa sbgp-ipAddrBlock: critical IPv4: 210.189.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:fa:26:b7:97:4a:f0:ee:56:88:ea:2c:67:98:17:9e:06:06: b3:a7:5e:3b:88:c3:a6:fc:eb:dd:41:9d:71:af:27:fb:da:ff: 7a:20:71:49:4b:92:d5:cc:f4:d6:26:4b:4c:78:75:f0:a0:52: d4:f3:63:f4:89:8d:58:a2:ec:f9:27:fb:6e:e3:86:25:72:27: 55:57:9d:bf:d7:20:b3:84:d9:8a:a2:b6:59:9a:e2:22:4a:b1: 64:3a:17:02:2e:47:2e:e6:10:1d:c7:28:29:22:87:b1:db:25: 4a:b1:98:02:5f:35:df:ff:14:6d:78:4f:80:60:56:df:be:4e: 69:ac:1c:9b:8a:9a:d0:2f:ae:af:cd:1f:f7:d5:cb:8d:1b:1a: ba:9d:05:d5:41:85:ab:b7:8a:aa:8c:63:e2:82:d2:d1:c9:29: 93:77:24:fa:60:a9:82:26:01:d4:ed:cd:57:80:9c:63:4a:4f: 19:9a:6b:e1:68:5b:99:d2:f9:6c:28:d4:99:cf:b6:6d:73:7c: 50:49:2e:51:be:93:6b:25:b0:3d:5b:9f:bf:6c:e7:44:09:19: c8:33:d1:74:1b:9c:db:0a:50:c9:d6:3c:ee:15:c7:9c:ed:6c: 1d:b9:e7:d1:db:dc:97:7a:bb:cd:6e:c8:07:8c:b6:1a:5e:4e: 60:ee:9e:b0 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyODJENzlBQjY4RDI5 QTNBNUFDOTIyMzhCRkNBM0MzOUEwNDY0QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDLEhYVkSP4hftim/fNYrJFMPQePdxWAC3grzbjR8lU8ggsOij s4xxL97Xq0VQbMkfZlnGzQGrNv6F2enOs9xPNsNNCWvWR8jbNY/sTqvsMhSP8qm/ tQ/PXzjgEdziJfmHT7MZ72v5ZABIpD+RBMgGRoU5gfiG6e7okyCwdg0ikQIPNY7z Etwc4x8PYHivGn8SmHcVsrg/Hf54ZDGn45AvxV5FhzwNQeSfJIsQamjR0IcDyuuJ y4GKNNVEAJZh3+xeXQ1j3v5HTfxK+wFCni2hig93YgRd61lWg8EJEmo5/1nwW+Qh +L5/jCamFFX3fAKiTOnFFyYaenNOF2xlbBpRAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU4oLXmraNKaOlrJIji/yjw5oEZLEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My80b0xYbXJhTkthT2xySklqaV95anc1b0VaTEUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0r38MA0GCSqGSIb3DQEBCwUA A4IBAQBq+ia3l0rw7laI6ixnmBeeBgazp147iMOm/OvdQZ1xryf72v96IHFJS5LV zPTWJktMeHXwoFLU82P0iY1Youz5J/tu44YlcidVV52/1yCzhNmKorZZmuIiSrFk OhcCLkcu5hAdxygpIoex2yVKsZgCXzXf/xRteE+AYFbfvk5prBybiprQL66vzR/3 1cuNGxq6nQXVQYWrt4qqjGPigtLRySmTdyT6YKmCJgHU7c1XgJxjSk8ZmmvhaFuZ 0vlsKNSZz7Ztc3xQSS5RvpNrJbA9W5+/bOdECRnIM9F0G5zbClDJ1jzuFcec7Wwd uefR29yXervNbsgHjLYaXk5g7p6w -----END CERTIFICATE-----Generated at Wed Apr 1 16:03:37 2026 by rpki-client