$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BR6yV3RSNM-HqBxBNWKTVbmhfzA.roa File: BR6yV3RSNM-HqBxBNWKTVbmhfzA.roa (raw, json) Hash identifier: kCRwWyl6vowetlUmrxgErWH7A/Gy7vrE//9FI4CBHcs= Subject key identifier: 05:1E:B2:57:74:52:34:CF:87:A8:1C:41:35:62:93:55:B9:A1:7F:30 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01B4 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BR6yV3RSNM-HqBxBNWKTVbmhfzA.roa Signing time: Tue 31 Mar 2026 07:53:56 +0000 ROA not before: Tue 31 Mar 2026 07:53:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.2.206.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=051EB257745234CF87A81C4135629355B9A17F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:66:61:3f:fe:d3:0f:cc:d9:ac:fa:6f:14: 7d:33:37:52:85:0d:80:2a:b9:2a:ad:ba:8b:79:c3: c6:bc:d7:ee:bd:ab:f1:07:a1:4c:98:d6:7e:b7:f6: e1:9d:84:85:c4:0e:73:c7:12:9f:ab:46:86:53:a9: 6c:ee:08:2f:85:aa:3e:70:84:cb:0a:c5:fc:b5:2d: db:14:85:35:d2:f0:2f:d8:1f:e7:81:96:40:d3:1b: be:76:13:74:a0:7a:13:22:6f:4c:fd:ea:cb:d4:81: 71:e6:c8:b1:4c:02:4a:56:17:9f:f2:7e:81:bb:3c: d9:87:61:5b:62:f2:da:b4:79:07:e4:da:36:cb:a0: 12:e2:d6:22:c2:36:a7:4e:7c:e2:4e:a9:4c:7e:8f: 18:0f:2b:4c:d8:b1:d4:32:de:a9:49:1e:49:7e:b1: ce:2b:66:1b:d4:20:f3:34:1a:d5:c2:f5:cf:f9:ef: cb:e6:05:4e:ab:55:54:c9:5a:c2:29:08:2c:b7:a1: 3a:91:bd:d0:71:ce:b2:dc:ba:14:3a:86:53:08:44: 77:7d:7b:f0:ae:ff:ca:28:58:e7:c5:ab:9d:28:88: 8d:e9:e7:1d:f1:c9:6e:5e:6e:df:ed:3d:30:45:bc: ca:3a:4c:af:cb:c3:5b:ce:d6:ff:2f:ed:1a:c2:d1: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:B2:57:74:52:34:CF:87:A8:1C:41:35:62:93:55:B9:A1:7F:30 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BR6yV3RSNM-HqBxBNWKTVbmhfzA.roa sbgp-ipAddrBlock: critical IPv4: 211.2.206.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f7:72:b1:63:3b:3d:92:40:af:06:2c:1f:77:e1:90:8f:a0: 86:40:14:42:47:7e:44:6a:8c:4f:10:06:bf:be:e9:a7:2b:68: ea:16:33:29:23:a7:f6:27:1b:f0:2f:b8:9b:0f:22:39:49:8c: 97:6b:f9:ec:47:a9:38:9c:64:20:29:d7:59:09:a5:4e:b6:72: b4:6c:2e:9e:a1:ea:c4:6c:41:1f:14:b5:38:19:fb:75:78:0f: 72:b4:ca:87:c4:74:08:8d:d8:40:02:39:bc:41:40:e5:aa:70: 74:77:58:29:7b:fc:67:64:cb:b5:d1:03:62:ad:bf:c6:b3:bf: ed:88:6a:32:9b:fe:36:15:08:85:36:41:61:a9:a3:07:c7:bc: ad:a2:3e:13:8c:1b:79:cd:89:a7:57:72:db:24:7a:08:3f:23: 98:ae:17:1d:82:08:11:9f:af:ca:7f:40:0b:f5:89:eb:f3:22: 36:ba:11:c8:eb:2b:fa:2f:e3:ed:ef:93:36:b8:aa:66:c0:e4: ca:12:6d:fd:5a:25:5f:a1:46:6c:27:42:d5:d4:9a:8c:c4:29: 78:c3:b1:9e:da:da:d5:8b:29:3e:1b:e0:ba:76:2d:ef:4b:ec: 36:9e:8c:12:9d:f2:5b:73:c1:26:93:04:b8:1d:9d:5c:59:7d: 7e:a1:66:12 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1MUVCMjU3NzQ1MjM0 Q0Y4N0E4MUM0MTM1NjI5MzU1QjlBMTdGMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM52ZhP/7TD8zZrPpvFH0zN1KFDYAquSqtuot5w8a81+69q/EH oUyY1n639uGdhIXEDnPHEp+rRoZTqWzuCC+Fqj5whMsKxfy1LdsUhTXS8C/YH+eB lkDTG752E3SgehMib0z96svUgXHmyLFMAkpWF5/yfoG7PNmHYVti8tq0eQfk2jbL oBLi1iLCNqdOfOJOqUx+jxgPK0zYsdQy3qlJHkl+sc4rZhvUIPM0GtXC9c/578vm BU6rVVTJWsIpCCy3oTqRvdBxzrLcuhQ6hlMIRHd9e/Cu/8ooWOfFq50oiI3p5x3x yW5ebt/tPTBFvMo6TK/Lw1vO1v8v7RrC0f/RAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUBR6yV3RSNM+HqBxBNWKTVbmhfzAwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9CUjZ5VjNSU05NLUhxQnhCTldLVFZibWhmekEucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0wLOMA0GCSqGSIb3DQEBCwUA A4IBAQCR93KxYzs9kkCvBiwfd+GQj6CGQBRCR35EaoxPEAa/vumnK2jqFjMpI6f2 JxvwL7ibDyI5SYyXa/nsR6k4nGQgKddZCaVOtnK0bC6eoerEbEEfFLU4Gft1eA9y tMqHxHQIjdhAAjm8QUDlqnB0d1gpe/xnZMu10QNirb/Gs7/tiGoym/42FQiFNkFh qaMHx7ytoj4TjBt5zYmnV3LbJHoIPyOYrhcdgggRn6/Kf0AL9Ynr8yI2uhHI6yv6 L+Pt75M2uKpmwOTKEm39WiVfoUZsJ0LV1JqMxCl4w7Ge2trViyk+G+C6di3vS+w2 nowSnfJbc8EmkwS4HZ1cWX1+oWYS -----END CERTIFICATE-----Generated at Wed Apr 1 16:03:36 2026 by rpki-client