$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6d5bGr5rQ8hY-eJVaSH6ioPa5RI.roa File: 6d5bGr5rQ8hY-eJVaSH6ioPa5RI.roa (raw, json) Hash identifier: o0p4MpKYs6i7kdEo7kN0kC6FT14z5wOb1g9mqKvJiwA= Subject key identifier: E9:DE:5B:1A:BE:6B:43:C8:58:F9:E2:55:69:21:FA:8A:83:DA:E5:12 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0157 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6d5bGr5rQ8hY-eJVaSH6ioPa5RI.roa Signing time: Tue 31 Mar 2026 07:53:13 +0000 ROA not before: Tue 31 Mar 2026 07:53:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.230.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E9DE5B1ABE6B43C858F9E2556921FA8A83DAE512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:c8:80:55:b2:20:9a:0e:43:cb:e8:28:05: 5f:df:72:8b:2d:4e:d5:8d:f0:3e:11:9a:c0:73:b4: 1d:a4:57:09:60:c1:93:3f:91:c2:97:6f:eb:1d:9f: 26:c3:56:ed:88:65:65:5b:a0:8e:45:a0:70:81:93: 2c:64:9c:a4:ed:7c:b7:9f:13:e4:56:12:34:05:69: 18:d3:22:a0:36:59:f7:d4:49:cb:7a:2a:b3:53:6e: 88:5b:6e:42:71:4b:e5:cf:17:e4:1d:a7:72:ac:7d: 95:0a:43:56:05:50:41:01:19:e0:68:90:d4:10:6f: 32:4b:bd:31:d5:49:35:a1:ba:31:2e:79:4b:e5:8a: f4:3a:64:43:6c:6e:7f:a8:5e:de:c3:71:40:f0:de: e1:31:92:66:43:13:98:2c:43:67:2c:54:0d:2c:bf: a5:4a:15:3d:8c:af:7a:00:7d:53:b3:d3:63:16:35: 2f:e9:42:56:08:7b:f1:64:40:08:f2:31:5f:fb:a3: a4:91:0a:71:0e:0d:78:df:5a:48:3c:d9:b9:6c:a1: df:ad:aa:65:9f:f5:8d:34:ca:b8:94:7c:3b:f6:40: 49:2f:99:da:75:5f:5e:b4:9a:00:2c:02:46:a7:93: 95:c3:ca:c5:84:9c:77:b8:17:52:fe:b3:5f:e4:ea: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DE:5B:1A:BE:6B:43:C8:58:F9:E2:55:69:21:FA:8A:83:DA:E5:12 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6d5bGr5rQ8hY-eJVaSH6ioPa5RI.roa sbgp-ipAddrBlock: critical IPv4: 202.230.20.0/22 Signature Algorithm: sha256WithRSAEncryption 70:4f:e6:36:ef:99:dd:0c:a3:d9:0d:60:97:d1:e8:3a:94:d5: 34:c5:87:29:ae:f0:1c:01:09:0f:aa:cf:af:06:de:cb:a8:06: ae:b5:7a:b5:f2:7e:e5:61:23:54:cd:8a:14:2b:04:ed:c1:88: ec:6b:08:25:a0:e4:e9:32:16:55:4f:ec:71:9b:38:db:f5:6d: 00:23:35:e4:87:fb:75:e5:a2:fd:d8:2a:16:e8:5c:bc:53:d0: 08:80:7e:0c:63:f9:d0:e6:46:e1:c3:3a:8e:d6:15:f7:9d:5a: 7b:f4:89:73:b8:72:f5:80:1a:a3:52:15:81:bf:76:f3:e4:87: 56:e7:72:9f:87:79:0b:0e:80:c3:01:f4:9a:f2:36:d8:10:79: db:8d:fd:2f:34:2c:ad:10:ed:0f:75:30:17:ff:0d:49:1d:5f: 58:b4:98:38:37:f7:28:57:4f:6f:49:76:25:0a:b6:87:ff:70: 50:1a:9e:d0:75:6d:0e:e2:26:8c:cf:c4:9c:ed:19:90:3c:a3: 6f:fd:fa:d6:7b:c1:89:2d:29:09:8a:95:83:36:7d:21:a7:0d: ec:f8:69:5f:a7:dc:7a:d0:0d:28:ab:1a:24:09:55:03:0b:cd: 5f:e5:25:0b:39:27:d1:bd:f5:fb:84:7f:3b:7a:db:d4:78:f1: 7d:de:d6:22 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU5REU1QjFBQkU2QjQz Qzg1OEY5RTI1NTY5MjFGQThBODNEQUU1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTP8iAVbIgmg5Dy+goBV/fcostTtWN8D4RmsBztB2kVwlgwZM/ kcKXb+sdnybDVu2IZWVboI5FoHCBkyxknKTtfLefE+RWEjQFaRjTIqA2WffUSct6 KrNTbohbbkJxS+XPF+Qdp3KsfZUKQ1YFUEEBGeBokNQQbzJLvTHVSTWhujEueUvl ivQ6ZENsbn+oXt7DcUDw3uExkmZDE5gsQ2csVA0sv6VKFT2Mr3oAfVOz02MWNS/p QlYIe/FkQAjyMV/7o6SRCnEODXjfWkg82blsod+tqmWf9Y00yriUfDv2QEkvmdp1 X160mgAsAkank5XDysWEnHe4F1L+s1/k6pslAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU6d5bGr5rQ8hY+eJVaSH6ioPa5RIwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My82ZDViR3I1clE4aFktZUpWYVNINmlvUGE1Ukkucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyuYUMA0GCSqGSIb3DQEBCwUA A4IBAQBwT+Y275ndDKPZDWCX0eg6lNU0xYcprvAcAQkPqs+vBt7LqAautXq18n7l YSNUzYoUKwTtwYjsawgloOTpMhZVT+xxmzjb9W0AIzXkh/t15aL92CoW6Fy8U9AI gH4MY/nQ5kbhwzqO1hX3nVp79IlzuHL1gBqjUhWBv3bz5IdW53Kfh3kLDoDDAfSa 8jbYEHnbjf0vNCytEO0PdTAX/w1JHV9YtJg4N/coV09vSXYlCraH/3BQGp7QdW0O 4iaMz8Sc7RmQPKNv/frWe8GJLSkJipWDNn0hpw3s+Glfp9x60A0oqxokCVUDC81f 5SULOSfRvfX7hH87etvUePF93tYi -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:18 2026 by rpki-client