$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GPw4hTzQCw5xa-sXddwKPUKu80w.roa File: GPw4hTzQCw5xa-sXddwKPUKu80w.roa (raw, json) Hash identifier: ampOFrklfhMoceHrCpdBL/Gj2UVePdKY+sE+/US7CIc= Subject key identifier: 18:FC:38:85:3C:D0:0B:0E:71:6B:EB:17:75:DC:0A:3D:42:AE:F3:4C Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01E8 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GPw4hTzQCw5xa-sXddwKPUKu80w.roa Signing time: Tue 31 Mar 2026 07:54:22 +0000 ROA not before: Tue 31 Mar 2026 07:54:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.236.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=18FC38853CD00B0E716BEB1775DC0A3D42AEF34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:56:75:6a:86:63:d7:83:1a:70:12:ed:bc: 00:5d:80:6d:6d:af:44:ad:84:4e:3b:ae:77:6d:ea: f8:f8:4f:65:fe:8d:0d:b8:95:8a:6d:80:e9:b8:4c: 28:13:44:d1:1a:a2:46:f0:55:b6:e5:4d:51:e1:16: b9:c3:f9:e2:ce:26:8f:39:c4:fa:0b:b8:3b:14:3f: 67:d0:6b:b2:af:7c:da:f7:27:9d:72:fa:f6:d5:d1: dc:85:19:35:88:5e:fb:ce:a4:30:05:75:37:e6:69: fd:f0:c4:5f:73:7f:23:e8:07:02:be:d5:54:1a:90: 0d:4d:b7:c1:9c:c1:22:3d:87:38:6e:d4:6b:82:50: 2d:0f:fb:1e:25:76:e8:91:59:a1:a6:75:85:b1:d8: 5d:f8:bd:9f:f5:d9:5d:6e:70:6a:28:98:8d:43:ca: e1:ea:27:bf:8f:fb:97:ef:2b:58:94:12:61:3b:62: d0:1c:d4:3c:c1:e2:66:0f:d6:7d:e2:37:31:ce:0a: aa:a6:4d:f2:0a:3d:ba:2f:b4:6a:ec:b1:cf:15:64: 0a:04:66:c3:a5:e0:0a:bd:b1:f4:c5:df:62:9b:41: 5b:f1:05:3d:c4:27:6f:e1:e8:8a:c9:0b:9f:8e:68: cc:8a:4c:02:8f:f4:6a:73:66:ea:95:f7:88:1e:e5: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FC:38:85:3C:D0:0B:0E:71:6B:EB:17:75:DC:0A:3D:42:AE:F3:4C X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GPw4hTzQCw5xa-sXddwKPUKu80w.roa sbgp-ipAddrBlock: critical IPv4: 210.236.240.0/20 Signature Algorithm: sha256WithRSAEncryption a2:9e:be:a8:3b:9d:d0:c3:b1:a0:74:45:80:35:b0:e0:56:c7: 9c:ea:d9:c4:1c:c5:df:32:b0:06:da:68:00:09:20:1e:08:4d: 67:56:f8:e5:0a:bd:fd:7e:4a:74:5f:6f:55:b3:34:de:13:f3: 3f:b8:b5:64:78:dc:e9:be:6d:14:86:3e:1f:10:9b:96:ca:2c: a6:20:4e:1d:fc:f0:f6:22:fe:2b:7b:78:cb:b2:96:50:46:10: 9b:b6:1b:dd:d0:3b:22:f9:4d:73:07:74:00:cf:51:8a:f1:ec: 99:b1:1c:95:1d:0f:2e:45:26:c2:0e:2e:91:22:13:42:ec:da: cd:15:ad:0e:d1:88:01:9a:59:c8:0b:b7:f0:dc:db:e6:45:ec: c0:5f:39:e3:16:8b:7e:1a:13:14:c7:e0:95:4d:fb:4d:1f:c0: 43:43:f5:ff:5a:34:a4:43:bc:7c:3a:1f:cb:11:0b:15:8d:48: 56:40:82:93:92:29:f3:c3:4a:c9:82:f3:4c:c4:b8:b9:3f:53: a6:4b:0f:ca:16:17:43:c0:9e:a5:7a:91:a2:a7:8c:54:3d:3b: e7:25:9a:50:0e:83:e8:76:df:2b:aa:2c:fb:f3:58:07:4e:52: c3:1c:8f:66:63:ee:40:bc:8d:6a:fe:2d:7e:79:31:cc:ae:28: dc:2d:2f:0f -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4RkMzODg1M0NEMDBC MEU3MTZCRUIxNzc1REMwQTNENDJBRUYzNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8WVZ1aoZj14MacBLtvABdgG1tr0SthE47rndt6vj4T2X+jQ24 lYptgOm4TCgTRNEaokbwVbblTVHhFrnD+eLOJo85xPoLuDsUP2fQa7KvfNr3J51y +vbV0dyFGTWIXvvOpDAFdTfmaf3wxF9zfyPoBwK+1VQakA1Nt8GcwSI9hzhu1GuC UC0P+x4lduiRWaGmdYWx2F34vZ/12V1ucGoomI1DyuHqJ7+P+5fvK1iUEmE7YtAc 1DzB4mYP1n3iNzHOCqqmTfIKPbovtGrssc8VZAoEZsOl4Aq9sfTF32KbQVvxBT3E J2/h6IrJC5+OaMyKTAKP9GpzZuqV94ge5YARAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUGPw4hTzQCw5xa+sXddwKPUKu80wwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9HUHc0aFR6UUN3NXhhLXNYZGR3S1BVS3U4MHcucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0uzwMA0GCSqGSIb3DQEBCwUA A4IBAQCinr6oO53Qw7GgdEWANbDgVsec6tnEHMXfMrAG2mgACSAeCE1nVvjlCr39 fkp0X29VszTeE/M/uLVkeNzpvm0Uhj4fEJuWyiymIE4d/PD2Iv4re3jLspZQRhCb thvd0Dsi+U1zB3QAz1GK8eyZsRyVHQ8uRSbCDi6RIhNC7NrNFa0O0YgBmlnIC7fw 3NvmRezAXznjFot+GhMUx+CVTftNH8BDQ/X/WjSkQ7x8Oh/LEQsVjUhWQIKTkinz w0rJgvNMxLi5P1OmSw/KFhdDwJ6lepGip4xUPTvnJZpQDoPodt8rqiz781gHTlLD HI9mY+5AvI1q/i1+eTHMrijcLS8P -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:50 2026 by rpki-client