$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8onxmNqGS3de2OCBItkIqk3fQc8.roa File: 8onxmNqGS3de2OCBItkIqk3fQc8.roa (raw, json) Hash identifier: q/22lF6gkroOtB1ANHXYSSAkeYTSrCl9XsAxHxwUjZA= Subject key identifier: F2:89:F1:98:DA:86:4B:77:5E:D8:E0:81:22:D9:08:AA:4D:DF:41:CF Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0193 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8onxmNqGS3de2OCBItkIqk3fQc8.roa Signing time: Tue 31 Mar 2026 07:53:42 +0000 ROA not before: Tue 31 Mar 2026 07:53:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.171.112.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F289F198DA864B775ED8E08122D908AA4DDF41CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:04:39:c1:58:cb:35:04:3c:91:f7:dd:82: 11:65:db:be:e9:60:d9:da:05:36:ab:fe:2f:e1:6c: 0f:fd:fc:53:05:42:63:ab:7d:a6:2d:10:35:a0:c0: 66:7b:e7:4a:07:30:58:2c:9c:df:cd:66:94:af:d9: 7a:42:f1:59:df:47:8b:2a:01:a9:af:a5:d3:50:51: d9:12:7a:ae:d2:aa:d6:35:af:cd:01:68:b6:a4:96: 5c:16:64:df:fc:25:9a:5e:60:9f:e5:35:cb:07:b2: bf:70:a9:9b:1b:40:8f:be:e8:ff:a8:f7:53:6a:b2: 9b:1a:f5:3d:eb:c3:86:84:c7:9d:95:c0:f0:ad:4b: 64:8c:3f:08:5d:e5:14:bc:d6:e6:4f:5d:1d:21:a8: 29:34:c2:9d:4a:40:c4:27:82:40:3e:4d:f5:b9:d7: 55:ed:91:7a:a8:91:e0:a2:cc:2a:a1:a9:b5:4b:d7: 1a:fa:eb:d5:43:54:64:2f:2f:d6:57:6e:51:db:71: 4c:5c:0f:c1:bf:e0:a5:da:5b:27:61:c1:43:79:b8: 19:90:b0:65:e9:da:2b:8d:72:3f:8e:8d:c6:c9:d8: fc:67:95:8a:ba:82:75:44:c1:a3:56:15:76:46:19: 6f:23:8d:ad:4a:39:b6:0c:65:1d:ba:fa:50:bd:04: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:89:F1:98:DA:86:4B:77:5E:D8:E0:81:22:D9:08:AA:4D:DF:41:CF X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8onxmNqGS3de2OCBItkIqk3fQc8.roa sbgp-ipAddrBlock: critical IPv4: 210.171.112.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:e1:b4:04:f7:5f:c2:28:57:12:ac:2e:c4:16:5a:e1:9c:b5: fb:01:e0:cc:e0:7c:9c:0d:cd:5b:d6:76:81:8a:db:5d:99:d4: e0:2b:b9:0a:fc:41:3e:9c:dd:dc:b4:52:ec:fb:5d:44:93:55: 5a:b9:f3:2f:71:42:e5:53:ed:28:e5:2c:82:70:60:c0:76:e7: 8c:78:23:3f:6f:e8:03:2e:a9:7f:20:4c:35:c2:74:f1:f4:f7: c1:18:27:3b:b2:4d:bb:55:ef:ee:fc:31:53:5f:32:69:4a:23: 29:31:69:52:e9:45:dd:b5:b6:4c:d4:82:45:cb:a9:1a:85:54: 8c:9d:09:45:d4:02:5e:ab:e5:cc:d4:4c:07:f2:62:1a:cf:fd: 65:a5:ea:00:59:85:ca:82:6a:9f:38:c3:b2:4f:78:63:56:84: 78:f3:1f:35:09:1f:c5:b8:9f:f9:80:c7:3b:3d:13:23:e8:53: 1a:10:c8:8b:5a:14:23:24:5b:d3:52:c5:24:7a:91:e3:42:d8: 8c:c3:af:8a:d5:1e:16:bf:c9:ae:51:dd:49:59:94:1b:ca:a3: 0f:ce:2a:37:14:90:e6:95:98:41:1f:82:1c:5a:a7:93:aa:2c: 42:b9:b1:98:f5:07:a0:dc:95:83:af:da:ab:57:e0:dd:c6:f6: a2:b6:75:48 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyODlGMTk4REE4NjRC Nzc1RUQ4RTA4MTIyRDkwOEFBNERERjQxQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMHgQ5wVjLNQQ8kffdghFl277pYNnaBTar/i/hbA/9/FMFQmOr faYtEDWgwGZ750oHMFgsnN/NZpSv2XpC8VnfR4sqAamvpdNQUdkSeq7SqtY1r80B aLakllwWZN/8JZpeYJ/lNcsHsr9wqZsbQI++6P+o91Nqspsa9T3rw4aEx52VwPCt S2SMPwhd5RS81uZPXR0hqCk0wp1KQMQngkA+TfW511XtkXqokeCizCqhqbVL1xr6 69VDVGQvL9ZXblHbcUxcD8G/4KXaWydhwUN5uBmQsGXp2iuNcj+OjcbJ2PxnlYq6 gnVEwaNWFXZGGW8jja1KObYMZR26+lC9BOf5AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQU8onxmNqGS3de2OCBItkIqk3fQc8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My84b254bU5xR1MzZGUyT0NCSXRrSXFrM2ZRYzgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0qtwMA0GCSqGSIb3DQEBCwUA A4IBAQCM4bQE91/CKFcSrC7EFlrhnLX7AeDM4HycDc1b1naBittdmdTgK7kK/EE+ nN3ctFLs+11Ek1VaufMvcULlU+0o5SyCcGDAdueMeCM/b+gDLql/IEw1wnTx9PfB GCc7sk27Ve/u/DFTXzJpSiMpMWlS6UXdtbZM1IJFy6kahVSMnQlF1AJeq+XM1EwH 8mIaz/1lpeoAWYXKgmqfOMOyT3hjVoR48x81CR/FuJ/5gMc7PRMj6FMaEMiLWhQj JFvTUsUkepHjQtiMw6+K1R4Wv8muUd1JWZQbyqMPzio3FJDmlZhBH4IcWqeTqixC ubGY9Qeg3JWDr9qrV+DdxvaitnVI -----END CERTIFICATE-----Generated at Wed Apr 1 15:55:47 2026 by rpki-client