$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BZ6cig-DeaAd_9i7eJNUCrlJivo.roa File: BZ6cig-DeaAd_9i7eJNUCrlJivo.roa (raw, json) Hash identifier: /KLANhyfGWF9vDT0aSKGIMCFYURCnPiSyzMnUtaP8Ek= Subject key identifier: 05:9E:9C:8A:0F:83:79:A0:1D:FF:D8:BB:78:93:54:0A:B9:49:8A:FA Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 014A Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BZ6cig-DeaAd_9i7eJNUCrlJivo.roa Signing time: Tue 31 Mar 2026 07:53:05 +0000 ROA not before: Tue 31 Mar 2026 07:53:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.128.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=059E9C8A0F8379A01DFFD8BB7893540AB9498AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:53:9f:08:8a:be:8e:d2:21:82:0d:b4:96: f6:92:d1:8b:bb:2b:85:35:d6:d7:b7:5c:ca:d6:ab: 4b:b6:d8:7e:d5:2c:ec:42:23:cf:b2:7f:ae:7c:f1: 53:3f:1b:e6:60:8d:25:b4:46:cc:b7:65:7e:41:67: c9:ce:5a:02:55:83:a0:91:cb:c8:1a:33:c7:f1:dd: 76:b3:f1:b6:2e:61:39:02:4b:0f:fe:6b:a2:a2:ed: db:6e:04:f6:5b:53:9a:b2:ed:5c:bd:a6:9a:12:3b: c2:38:56:a3:1f:3c:a5:af:44:c6:bd:3b:51:61:af: 53:9f:0d:8d:89:05:67:7f:87:d9:4b:be:39:07:a6: 8e:bc:d6:ed:b7:bb:6d:db:4c:8f:cc:a4:5a:67:fa: 9f:b8:b6:57:46:30:41:51:a0:ef:15:3a:12:f2:66: 5d:41:17:7b:5a:f7:11:59:1c:59:cf:40:70:ec:35: 09:60:05:63:71:f4:1e:52:88:3f:c0:ff:f0:73:00: 5c:7f:56:57:3b:f2:56:59:bb:5f:43:2e:d9:28:ea: 35:47:97:9f:48:48:25:93:76:d8:03:43:a4:62:ff: 1a:f8:9e:c8:7c:01:d6:ab:72:12:9e:f9:66:fc:a9: 37:ef:34:27:67:55:2c:85:1b:9f:4d:2a:8a:82:4f: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:9C:8A:0F:83:79:A0:1D:FF:D8:BB:78:93:54:0A:B9:49:8A:FA X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BZ6cig-DeaAd_9i7eJNUCrlJivo.roa sbgp-ipAddrBlock: critical IPv4: 210.152.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:b9:4f:75:6d:f2:11:7a:2d:93:df:6f:3f:b6:08:7e:0e:df: a9:6d:cf:30:4a:5c:97:57:79:00:b2:45:3a:37:75:bb:8e:c4: 2a:46:61:9f:d1:22:14:c2:71:83:1b:b2:5b:28:4f:9a:5e:fb: fe:78:96:b4:37:8e:50:db:31:58:50:fd:ec:65:82:e6:58:1c: dd:84:1b:20:a5:34:a3:91:f8:05:13:22:07:8b:64:3e:a1:4c: 41:1d:f9:3c:e5:04:45:a5:56:66:90:33:aa:09:18:20:17:f5: 91:cb:a9:cb:89:3e:19:fd:dc:15:42:59:d5:6f:fd:e6:85:ed: c3:3f:9b:e9:99:ea:ae:ae:de:9f:c9:2d:02:bd:a3:82:35:3b: 68:35:10:7e:32:46:4a:70:7c:a4:a0:1a:bd:18:f5:73:20:da: 5a:b7:55:40:9b:81:a4:eb:ca:6b:94:a5:4f:87:ac:95:a4:e5: 9f:9c:80:83:81:df:a9:fb:d9:b2:f2:e2:54:24:c2:59:e2:f6: 2e:e9:87:64:54:57:10:fc:e4:1b:71:23:a9:8e:45:72:7b:28: 07:48:86:b8:5c:56:50:81:f6:9d:ee:9a:44:b9:e0:af:4a:0f: 17:61:ba:7e:1f:0e:4d:d4:62:fa:26:72:de:33:d4:4a:f8:ba: c8:b0:dc:7f -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1OUU5QzhBMEY4Mzc5 QTAxREZGRDhCQjc4OTM1NDBBQjk0OThBRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ8VOfCIq+jtIhgg20lvaS0Yu7K4U11te3XMrWq0u22H7VLOxC I8+yf6588VM/G+ZgjSW0Rsy3ZX5BZ8nOWgJVg6CRy8gaM8fx3Xaz8bYuYTkCSw/+ a6Ki7dtuBPZbU5qy7Vy9ppoSO8I4VqMfPKWvRMa9O1Fhr1OfDY2JBWd/h9lLvjkH po681u23u23bTI/MpFpn+p+4tldGMEFRoO8VOhLyZl1BF3ta9xFZHFnPQHDsNQlg BWNx9B5SiD/A//BzAFx/Vlc78lZZu19DLtko6jVHl59ISCWTdtgDQ6Ri/xr4nsh8 AdarchKe+Wb8qTfvNCdnVSyFG59NKoqCT5eDAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUBZ6cig+DeaAd/9i7eJNUCrlJivowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9CWjZjaWctRGVhQWRfOWk3ZUpOVUNybEppdm8ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0piAMA0GCSqGSIb3DQEBCwUA A4IBAQBKuU91bfIRei2T328/tgh+Dt+pbc8wSlyXV3kAskU6N3W7jsQqRmGf0SIU wnGDG7JbKE+aXvv+eJa0N45Q2zFYUP3sZYLmWBzdhBsgpTSjkfgFEyIHi2Q+oUxB Hfk85QRFpVZmkDOqCRggF/WRy6nLiT4Z/dwVQlnVb/3mhe3DP5vpmequrt6fyS0C vaOCNTtoNRB+MkZKcHykoBq9GPVzINpat1VAm4Gk68prlKVPh6yVpOWfnICDgd+p +9my8uJUJMJZ4vYu6YdkVFcQ/OQbcSOpjkVyeygHSIa4XFZQgfad7ppEueCvSg8X Ybp+Hw5N1GL6JnLeM9RK+LrIsNx/ -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:13 2026 by rpki-client