$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CejXkFxux-H3ia-EHzml7g_lPAk.roa File: CejXkFxux-H3ia-EHzml7g_lPAk.roa (raw, json) Hash identifier: CXDeAlrC2yEc28u7MVfbatI5fJbzwFQoE/f0kYGXX0M= Subject key identifier: 09:E8:D7:90:5C:6E:C7:E1:F7:89:AF:84:1F:39:A5:EE:0F:E5:3C:09 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0147 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CejXkFxux-H3ia-EHzml7g_lPAk.roa Signing time: Tue 31 Mar 2026 07:53:03 +0000 ROA not before: Tue 31 Mar 2026 07:53:03 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.224.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=09E8D7905C6EC7E1F789AF841F39A5EE0FE53C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:a0:b3:3d:b9:d9:12:35:95:3e:91:da:d5: 69:de:e1:f8:17:78:0b:a0:c4:8a:9b:6a:99:b5:59: 7b:fa:43:f5:8e:9b:fa:41:f6:54:15:b0:f1:92:3f: 34:99:8d:0d:16:66:fb:c9:23:f7:78:45:a5:31:b8: b8:22:fd:47:bf:e5:b7:6e:70:98:c4:f7:1b:a4:cb: 3c:5f:93:30:ae:4b:a9:5b:2e:c5:ae:88:4d:43:82: c2:9f:3e:36:d2:66:82:7e:78:b2:05:d0:08:94:8c: 86:6c:ae:33:4b:0f:05:18:4a:8c:44:2c:1b:f0:22: b0:9f:bd:52:66:a4:5b:99:19:cc:85:16:d9:a4:12: 12:86:88:ca:f9:2e:c5:4d:cf:b1:46:11:e5:da:c7: 46:fc:07:ad:00:ca:a9:5b:fb:90:b6:82:6d:de:d2: be:5f:ab:cd:17:c3:5f:31:44:64:2b:3e:75:ee:69: 42:a5:18:53:66:38:a4:ed:a1:b9:fd:07:f9:8d:1c: dc:98:d7:1f:4b:53:2d:40:de:0e:f3:46:92:c8:7c: 5a:43:fd:28:ba:0f:90:48:10:ec:5b:fb:23:87:ea: a0:fb:ce:be:7c:db:49:b2:4f:80:ff:3a:f9:b5:74: 87:77:d6:89:73:e3:1d:ee:cb:37:ce:27:44:4e:4b: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:D7:90:5C:6E:C7:E1:F7:89:AF:84:1F:39:A5:EE:0F:E5:3C:09 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CejXkFxux-H3ia-EHzml7g_lPAk.roa sbgp-ipAddrBlock: critical IPv4: 210.152.224.0/19 Signature Algorithm: sha256WithRSAEncryption 85:3d:ea:1b:7a:09:e1:53:9d:32:8a:53:de:b7:58:c1:00:27: 63:06:97:7f:0f:ef:be:18:af:f0:01:c1:e2:21:f9:5e:5d:5a: d4:a8:d9:9c:c3:8c:e5:16:6c:64:29:8c:07:6b:f4:44:60:a1: a3:40:a7:26:14:3e:a7:90:cf:08:38:5b:05:c1:1d:c4:a6:9c: 6b:15:6a:37:e6:b1:10:69:59:12:3b:2f:51:20:d8:c6:ef:a1: 8f:fe:4f:5b:3c:7f:88:d1:66:0e:d1:5a:fe:29:23:a1:6b:de: 1e:02:31:65:ad:a0:4c:7d:2f:c8:d7:7f:b2:3e:9d:c8:a0:65: 53:3c:03:cb:ed:e3:f6:70:e9:ee:4b:91:43:2e:ea:dc:2a:7e: 4a:b8:78:4d:59:db:c5:5d:2b:3b:db:c2:f9:09:24:c0:69:71: 16:46:10:68:85:1b:b2:bb:50:db:5b:24:09:d9:32:c8:32:08: dc:ac:13:ed:b5:c6:cc:b9:4a:f7:93:04:e0:5f:6c:97:5f:fb: 59:23:a2:9a:81:c5:a2:c9:f2:0f:ca:f7:c9:1e:5a:66:60:eb: 26:9c:61:d7:1c:e2:9d:a2:75:24:fc:6d:80:a5:73:c8:8e:fa: 37:ea:d1:c8:da:13:df:39:f2:a6:4f:ee:c8:2c:7c:fb:a7:25: 45:cb:f5:91 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5RThENzkwNUM2RUM3 RTFGNzg5QUY4NDFGMzlBNUVFMEZFNTNDMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwJKCzPbnZEjWVPpHa1Wne4fgXeAugxIqbapm1WXv6Q/WOm/pB 9lQVsPGSPzSZjQ0WZvvJI/d4RaUxuLgi/Ue/5bducJjE9xukyzxfkzCuS6lbLsWu iE1DgsKfPjbSZoJ+eLIF0AiUjIZsrjNLDwUYSoxELBvwIrCfvVJmpFuZGcyFFtmk EhKGiMr5LsVNz7FGEeXax0b8B60Ayqlb+5C2gm3e0r5fq80Xw18xRGQrPnXuaUKl GFNmOKTtobn9B/mNHNyY1x9LUy1A3g7zRpLIfFpD/Si6D5BIEOxb+yOH6qD7zr58 20myT4D/Ovm1dId31olz4x3uyzfOJ0ROS30lAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUCejXkFxux+H3ia+EHzml7g/lPAkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9DZWpYa0Z4dXgtSDNpYS1FSHptbDdnX2xQQWsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0pjgMA0GCSqGSIb3DQEBCwUA A4IBAQCFPeobegnhU50yilPet1jBACdjBpd/D+++GK/wAcHiIfleXVrUqNmcw4zl FmxkKYwHa/REYKGjQKcmFD6nkM8IOFsFwR3EppxrFWo35rEQaVkSOy9RINjG76GP /k9bPH+I0WYO0Vr+KSOha94eAjFlraBMfS/I13+yPp3IoGVTPAPL7eP2cOnuS5FD LurcKn5KuHhNWdvFXSs728L5CSTAaXEWRhBohRuyu1DbWyQJ2TLIMgjcrBPttcbM uUr3kwTgX2yXX/tZI6KagcWiyfIPyvfJHlpmYOsmnGHXHOKdonUk/G2ApXPIjvo3 6tHI2hPfOfKmT+7ILHz7pyVFy/WR -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:13 2026 by rpki-client