$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fa_1fnqSTBJuMA98VdEd36J-FUI.roa File: Fa_1fnqSTBJuMA98VdEd36J-FUI.roa (raw, json) Hash identifier: P6ps21n+5uIo9Q+DZlw5ri1yvovbTn8jZSi19fUhZIU= Subject key identifier: 15:AF:F5:7E:7A:92:4C:12:6E:30:0F:7C:55:D1:1D:DF:A2:7E:15:42 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01CB Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fa_1fnqSTBJuMA98VdEd36J-FUI.roa Signing time: Tue 31 Mar 2026 07:54:08 +0000 ROA not before: Tue 31 Mar 2026 07:54:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.189.208.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=15AFF57E7A924C126E300F7C55D11DDFA27E1542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:6b:01:8e:1e:1e:7a:7d:fe:1e:8d:3f:e4: e4:4f:e4:62:93:e6:e4:5d:bb:67:f7:1e:cb:c7:3e: 20:18:92:ff:73:92:ea:7d:cf:79:9f:dd:41:6c:1d: e8:91:52:3b:77:67:96:90:67:20:29:22:b4:83:ab: c8:98:6b:92:2c:a4:49:82:d5:c1:28:68:90:d6:52: 7b:3d:54:67:be:ec:59:fb:b3:33:45:1e:6a:26:b7: a3:05:19:6d:d9:f4:cb:62:f0:5b:18:37:fc:19:d1: c0:b5:00:a5:55:30:7d:9c:53:e6:88:f5:fd:87:f8: 6d:0f:9a:46:5a:32:4e:9e:22:22:d8:6d:f9:5b:4b: 0e:08:a7:1f:f4:08:63:b6:1e:b2:b7:ce:69:06:f7: f2:60:8a:ce:17:b9:d4:78:96:7d:4f:ed:42:13:b9: 7e:9a:c4:64:c8:4f:32:66:31:3c:15:06:fb:b3:af: bd:84:4d:c3:35:f2:2d:21:b3:84:40:90:75:8d:b0: f7:64:29:92:0f:c2:cd:d6:a5:8f:f1:24:44:6d:8a: 9c:ae:09:d5:c5:a0:3a:67:d5:18:d7:45:32:a9:b7: 26:cc:e4:9a:79:75:99:02:74:59:65:f2:55:99:7a: 92:94:8f:14:cc:85:3e:03:e3:65:9f:ad:09:06:6b: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AF:F5:7E:7A:92:4C:12:6E:30:0F:7C:55:D1:1D:DF:A2:7E:15:42 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fa_1fnqSTBJuMA98VdEd36J-FUI.roa sbgp-ipAddrBlock: critical IPv4: 210.189.208.0/20 Signature Algorithm: sha256WithRSAEncryption 08:bf:0e:d8:60:b8:cc:59:aa:05:6d:00:10:38:10:7c:b7:72: 3f:1f:97:ab:1e:9f:f5:3d:fa:ae:2c:2b:92:f8:6f:2c:b4:85: 93:8d:49:7c:97:b3:8b:c1:36:48:95:eb:ae:ab:4b:1a:d8:5f: e9:cc:70:c1:79:2f:10:eb:54:bf:f2:92:69:fc:e8:59:98:1e: 84:6f:a8:25:c5:d2:3d:c3:19:29:1d:d2:33:4c:a5:7a:3a:69: 27:5b:e8:b1:53:58:8d:85:d6:fa:77:5a:70:e1:ec:0a:15:f4: fb:ac:c1:44:70:9e:7b:3f:70:e6:ce:66:1d:b9:5f:46:d2:c9: ae:9c:70:8f:52:7a:95:ef:78:bd:d8:75:57:0a:f2:f4:d9:1e: ce:42:c5:eb:42:aa:08:73:5e:04:e1:51:45:d9:76:41:8d:22: 7b:ef:5e:be:aa:eb:4a:a6:69:44:e9:a8:2a:92:56:fc:c1:9a: 11:c3:8b:bb:b9:9e:cb:fd:24:2e:88:79:d3:5c:22:72:c8:be: 80:3e:63:3e:25:ec:6f:6a:f5:5c:66:58:5d:2a:36:11:01:6c: e0:36:0a:32:06:85:60:12:73:bb:e6:01:cb:86:cc:40:d3:fc: c4:6b:6a:f9:14:45:c1:de:82:8d:b3:f5:8e:e4:b1:b3:9b:e2: 85:c1:53:5c -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1QUZGNTdFN0E5MjRD MTI2RTMwMEY3QzU1RDExRERGQTI3RTE1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqzmsBjh4een3+Ho0/5ORP5GKT5uRdu2f3HsvHPiAYkv9zkup9 z3mf3UFsHeiRUjt3Z5aQZyApIrSDq8iYa5IspEmC1cEoaJDWUns9VGe+7Fn7szNF Hmomt6MFGW3Z9Mti8FsYN/wZ0cC1AKVVMH2cU+aI9f2H+G0PmkZaMk6eIiLYbflb Sw4Ipx/0CGO2HrK3zmkG9/Jgis4XudR4ln1P7UITuX6axGTITzJmMTwVBvuzr72E TcM18i0hs4RAkHWNsPdkKZIPws3WpY/xJERtipyuCdXFoDpn1RjXRTKptybM5Jp5 dZkCdFll8lWZepKUjxTMhT4D42WfrQkGazIvAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUFa/1fnqSTBJuMA98VdEd36J+FUIwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9GYV8xZm5xU1RCSnVNQTk4VmRFZDM2Si1GVUkucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0r3QMA0GCSqGSIb3DQEBCwUA A4IBAQAIvw7YYLjMWaoFbQAQOBB8t3I/H5erHp/1PfquLCuS+G8stIWTjUl8l7OL wTZIleuuq0sa2F/pzHDBeS8Q61S/8pJp/OhZmB6Eb6glxdI9wxkpHdIzTKV6Omkn W+ixU1iNhdb6d1pw4ewKFfT7rMFEcJ57P3DmzmYduV9G0smunHCPUnqV73i92HVX CvL02R7OQsXrQqoIc14E4VFF2XZBjSJ7716+qutKpmlE6agqklb8wZoRw4u7uZ7L /SQuiHnTXCJyyL6APmM+JexvavVcZlhdKjYRAWzgNgoyBoVgEnO75gHLhsxA0/zE a2r5FEXB3oKNs/WO5LGzm+KFwVNc -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:24 2026 by rpki-client