$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4uUB8ZMXnnxyHTt-BSf6vfYmL6E.roa File: 4uUB8ZMXnnxyHTt-BSf6vfYmL6E.roa (raw, json) Hash identifier: NNNi3iYdMj+dyLji5luLlARxKAwkcWHDDSvRBMar6hE= Subject key identifier: E2:E5:01:F1:93:17:9E:7C:72:1D:3B:7E:05:27:FA:BD:F6:26:2F:A1 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0143 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4uUB8ZMXnnxyHTt-BSf6vfYmL6E.roa Signing time: Tue 31 Mar 2026 07:53:01 +0000 ROA not before: Tue 31 Mar 2026 07:53:01 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.206.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:01 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E2E501F193179E7C721D3B7E0527FABDF6262FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:35:7e:ca:b7:02:96:46:09:0b:c7:da:0d: 20:9d:23:f8:45:fd:30:d8:54:84:f7:18:b7:d3:01: 61:72:99:55:dc:bf:c2:b7:9e:93:33:04:a2:f6:3f: 64:f7:97:08:12:aa:c0:07:7d:b1:ce:be:3c:a5:37: 05:23:cf:58:f4:a8:b5:5a:a0:b3:78:d7:67:2e:af: d5:a8:9a:70:7e:81:71:ae:f1:89:c1:0c:28:b0:9f: 66:e4:4a:6a:2b:35:d8:60:55:63:7e:bb:0c:42:c5: c3:a4:5d:f1:79:3d:1e:11:0b:b9:3b:5e:e2:d1:13: 56:05:4d:0b:7b:b2:17:00:cf:d8:25:bc:51:c3:48: a6:01:8c:a3:76:13:41:ba:43:74:20:60:4f:b5:72: ab:f1:db:9c:60:d3:43:a7:e7:4b:64:8f:fa:6d:7a: 72:11:8d:9e:bc:fd:6b:92:5b:cc:2a:ea:29:f3:76: 38:cd:67:58:98:12:aa:bc:49:02:f9:7e:d5:ac:91: 42:b1:2d:d5:2f:6e:ed:bc:9a:8c:06:b3:33:70:21: 76:18:65:3d:1d:e6:9b:c0:38:00:f2:56:1d:54:6c: 3d:14:b8:e7:de:5b:51:ff:f9:ec:ed:85:1d:b4:4f: dd:c8:aa:4a:f2:c3:78:77:e7:07:41:bc:93:94:38: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E5:01:F1:93:17:9E:7C:72:1D:3B:7E:05:27:FA:BD:F6:26:2F:A1 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4uUB8ZMXnnxyHTt-BSf6vfYmL6E.roa sbgp-ipAddrBlock: critical IPv4: 210.152.206.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:87:ee:a5:31:ce:28:fa:e7:10:38:66:4c:ba:06:40:63:cf: a4:e0:34:c8:86:8d:55:33:2a:9f:f1:8d:e5:f4:e4:59:0b:ad: 4e:0f:86:04:be:b8:7b:f1:50:dd:b0:7f:63:1c:75:dd:ee:c9: 64:15:43:b0:ce:08:85:31:f3:1e:91:86:ea:5b:b3:2e:d6:d0: c9:95:ec:06:7d:99:5a:b8:52:11:ca:ed:03:4a:f8:fa:76:4b: 3a:d9:6f:94:86:70:03:9a:43:16:5b:2d:b2:af:48:44:10:6a: 39:33:e7:f6:48:48:c0:cd:ea:b0:34:51:55:1a:35:2c:a2:83: 58:75:13:61:23:2b:96:9c:f1:9b:23:c1:30:43:83:44:30:92: e7:07:d5:f7:a0:64:1b:30:df:f7:fc:f2:5e:d1:ae:31:ff:25: c4:bd:4c:d2:00:89:76:00:ea:9f:82:06:09:0c:95:85:6b:08: f2:f3:a5:61:47:2a:31:af:80:a8:10:db:1e:23:ca:60:22:84: 72:9e:3a:eb:ff:75:a0:84:9a:53:a9:cf:5f:8f:5c:28:4d:6e: b8:64:a2:3d:cc:83:2d:b6:5f:bb:a6:ae:6a:c7:ca:f4:34:56: d1:1f:5e:55:30:00:73:9a:fd:0c:8c:b1:87:20:7b:7c:c8:1c: 7a:65:d1:0c -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyRTUwMUYxOTMxNzlF N0M3MjFEM0I3RTA1MjdGQUJERjYyNjJGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGbTV+yrcClkYJC8faDSCdI/hF/TDYVIT3GLfTAWFymVXcv8K3 npMzBKL2P2T3lwgSqsAHfbHOvjylNwUjz1j0qLVaoLN412cur9WomnB+gXGu8YnB DCiwn2bkSmorNdhgVWN+uwxCxcOkXfF5PR4RC7k7XuLRE1YFTQt7shcAz9glvFHD SKYBjKN2E0G6Q3QgYE+1cqvx25xg00On50tkj/ptenIRjZ68/WuSW8wq6inzdjjN Z1iYEqq8SQL5ftWskUKxLdUvbu28mowGszNwIXYYZT0d5pvAOADyVh1UbD0UuOfe W1H/+ezthR20T93Iqkryw3h35wdBvJOUOBsdAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU4uUB8ZMXnnxyHTt+BSf6vfYmL6EwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My80dVVCOFpNWG5ueHlIVHQtQlNmNnZmWW1MNkUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0pjOMA0GCSqGSIb3DQEBCwUA A4IBAQCah+6lMc4o+ucQOGZMugZAY8+k4DTIho1VMyqf8Y3l9ORZC61OD4YEvrh7 8VDdsH9jHHXd7slkFUOwzgiFMfMekYbqW7Mu1tDJlewGfZlauFIRyu0DSvj6dks6 2W+UhnADmkMWWy2yr0hEEGo5M+f2SEjAzeqwNFFVGjUsooNYdRNhIyuWnPGbI8Ew Q4NEMJLnB9X3oGQbMN/3/PJe0a4x/yXEvUzSAIl2AOqfggYJDJWFawjy86VhRyox r4CoENseI8pgIoRynjrr/3WghJpTqc9fj1woTW64ZKI9zIMttl+7pq5qx8r0NFbR H15VMABzmv0MjLGHIHt8yBx6ZdEM -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:37 2026 by rpki-client