$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HIVUIEY8Y8EJQCecLprgInm6Ud8.roa File: HIVUIEY8Y8EJQCecLprgInm6Ud8.roa (raw, json) Hash identifier: 1N6p0mZrfSp87uND/naxRrjf748isO0tQPEqZkw1va8= Subject key identifier: 1C:85:54:20:46:3C:63:C1:09:40:27:9C:2E:9A:E0:22:79:BA:51:DF Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01B6 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HIVUIEY8Y8EJQCecLprgInm6Ud8.roa Signing time: Tue 31 Mar 2026 07:53:57 +0000 ROA not before: Tue 31 Mar 2026 07:53:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.2.224.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1C855420463C63C10940279C2E9AE02279BA51DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:4c:c9:35:ed:02:09:3f:c3:c5:dc:0c:92: a4:fa:04:80:fb:62:58:33:c0:9e:3a:d1:af:7c:4f: e6:7b:70:6e:5c:9b:4b:78:44:a2:25:d1:87:cc:90: b4:77:be:51:d1:f0:31:1d:13:b8:34:26:90:9a:f0: 45:91:24:e5:d7:28:67:1e:2d:71:2a:87:01:17:8f: 3c:7a:9f:e2:d6:36:b2:5d:eb:af:e9:0c:2b:a8:4b: 4a:b2:04:58:7a:7d:c4:51:5a:1b:91:ce:83:24:83: 0d:26:79:58:45:a2:5e:e5:59:5f:99:9b:9d:07:f9: 88:f6:d2:bb:c6:69:e1:1b:3f:ba:75:20:df:cf:0f: 5e:a7:fc:b7:37:b5:d4:ae:28:0e:ff:2b:d5:6a:2a: 2e:d6:c0:4c:40:08:4d:e2:d4:b9:c2:28:d3:92:5b: 2c:af:bd:16:11:fd:36:4b:31:59:b5:39:ab:92:37: fb:cc:ae:2a:d9:4f:e9:5d:df:01:02:ad:c5:22:4b: c2:65:be:89:8a:68:ce:75:34:76:65:8b:71:35:40: 1f:16:b3:c7:7c:73:71:15:7c:0c:f3:7d:c7:18:1c: 67:2a:ac:ee:e0:70:cd:2f:9b:2c:46:1a:e5:da:28: f0:cb:6d:c7:c3:04:ac:0c:7a:f8:12:42:14:ab:2e: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:54:20:46:3C:63:C1:09:40:27:9C:2E:9A:E0:22:79:BA:51:DF X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HIVUIEY8Y8EJQCecLprgInm6Ud8.roa sbgp-ipAddrBlock: critical IPv4: 211.2.224.0/19 Signature Algorithm: sha256WithRSAEncryption 45:96:38:df:f7:a0:96:5e:9d:8b:8f:92:e2:62:a0:cc:45:5c: 70:d1:92:04:d3:10:41:09:9c:5e:1a:85:e6:0f:48:9a:19:27: a3:ea:51:ee:99:bf:62:7e:ac:66:2b:bd:64:38:9d:b7:6d:be: b7:95:68:cb:fa:54:d0:26:47:38:c0:f5:17:cf:b2:27:2f:3f: cd:d6:c5:80:b6:4d:5a:e2:a8:9e:a9:8d:16:fb:52:f1:31:27: 62:d2:5d:be:a8:dd:b8:8a:44:5d:f3:3f:1e:7e:a9:ed:5c:02: 1b:0a:56:8c:06:25:06:44:63:0f:5f:6b:88:9a:43:c3:26:bd: c8:24:90:82:2b:ff:a1:4f:cd:d4:2d:83:de:42:11:22:d6:f4: 63:5f:c4:65:6b:e7:0b:22:b4:71:de:22:f9:a0:cb:b1:63:f8: 1c:81:4d:82:9f:ec:e2:e8:5b:83:bd:ef:70:0d:b9:3c:f7:4d: c7:39:05:1c:d0:0e:74:ab:34:bc:1a:71:6a:15:be:16:45:e7: d5:41:8f:61:84:af:ed:e7:6b:3e:e0:de:65:14:8c:7c:ae:96: 2e:0b:dd:3b:df:19:f7:2a:bb:d1:cb:dc:55:33:cf:23:ff:5d: 59:0d:3d:1b:4d:b6:19:8d:57:19:95:12:d0:13:43:45:6a:96: b6:cb:28:f3 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDODU1NDIwNDYzQzYz QzEwOTQwMjc5QzJFOUFFMDIyNzlCQTUxREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8VEzJNe0CCT/DxdwMkqT6BID7YlgzwJ460a98T+Z7cG5cm0t4 RKIl0YfMkLR3vlHR8DEdE7g0JpCa8EWRJOXXKGceLXEqhwEXjzx6n+LWNrJd66/p DCuoS0qyBFh6fcRRWhuRzoMkgw0meVhFol7lWV+Zm50H+Yj20rvGaeEbP7p1IN/P D16n/Lc3tdSuKA7/K9VqKi7WwExACE3i1LnCKNOSWyyvvRYR/TZLMVm1OauSN/vM rirZT+ld3wECrcUiS8JlvomKaM51NHZli3E1QB8Ws8d8c3EVfAzzfccYHGcqrO7g cM0vmyxGGuXaKPDLbcfDBKwMevgSQhSrLjeXAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUHIVUIEY8Y8EJQCecLprgInm6Ud8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9ISVZVSUVZOFk4RUpRQ2VjTHByZ0lubTZVZDgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0wLgMA0GCSqGSIb3DQEBCwUA A4IBAQBFljjf96CWXp2Lj5LiYqDMRVxw0ZIE0xBBCZxeGoXmD0iaGSej6lHumb9i fqxmK71kOJ23bb63lWjL+lTQJkc4wPUXz7InLz/N1sWAtk1a4qieqY0W+1LxMSdi 0l2+qN24ikRd8z8efqntXAIbClaMBiUGRGMPX2uImkPDJr3IJJCCK/+hT83ULYPe QhEi1vRjX8Rla+cLIrRx3iL5oMuxY/gcgU2Cn+zi6FuDve9wDbk8903HOQUc0A50 qzS8GnFqFb4WRefVQY9hhK/t52s+4N5lFIx8rpYuC9073xn3KrvRy9xVM88j/11Z DT0bTbYZjVcZlRLQE0NFapa2yyjz -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:28 2026 by rpki-client