$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/I5HKGe-aCqijzplPBuLzITLdsMk.roa File: I5HKGe-aCqijzplPBuLzITLdsMk.roa (raw, json) Hash identifier: 5gnRCJsRZ4pg83Qz3vx7+ujonhxyRcHwmlP/Uj+jo5A= Subject key identifier: 23:91:CA:19:EF:9A:0A:A8:A3:CE:99:4F:06:E2:F3:21:32:DD:B0:C9 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0180 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/I5HKGe-aCqijzplPBuLzITLdsMk.roa Signing time: Tue 31 Mar 2026 07:53:35 +0000 ROA not before: Tue 31 Mar 2026 07:53:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.24.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2391CA19EF9A0AA8A3CE994F06E2F32132DDB0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:11:d3:d2:31:fa:4c:85:94:a7:f9:94:fd: d5:01:ad:21:41:79:91:c7:2a:a2:70:ec:84:21:bf: f3:85:cb:86:1a:f0:12:4e:b3:9f:26:9f:11:2b:e4: 03:85:5e:fe:8c:51:f0:17:38:3f:09:e2:53:94:50: a5:73:5a:eb:62:98:7f:f3:fc:b8:47:9e:6a:21:a7: 7e:af:90:62:65:98:16:ca:2d:e0:46:0c:47:93:4e: 4f:91:75:7f:50:a9:32:5f:88:04:54:6d:2c:52:a3: c6:2e:ba:12:76:e8:53:0e:7a:bf:33:28:89:31:1b: 2a:79:7a:7c:c1:0a:2f:9e:2f:00:e9:a2:2f:9b:36: 94:b4:99:cc:a6:b7:94:24:74:ba:b2:65:05:46:a9: 06:6e:20:07:b9:dd:e4:36:e4:a9:90:e3:29:6a:ad: 08:f5:db:c4:2d:4c:0f:55:ad:65:c2:79:dd:3e:69: 2f:00:45:16:84:b9:81:1b:3a:e1:4c:9e:91:ea:1e: ef:13:a7:a9:1e:be:c5:ba:47:a5:47:c0:0b:da:c1: 7f:02:13:bf:ce:03:09:23:3d:e6:4a:88:90:88:e2: 27:3e:cc:f7:c7:85:2c:18:7a:9b:ae:50:62:4c:85: 73:1d:1a:8a:19:53:79:f3:8b:68:04:20:cc:6b:39: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:91:CA:19:EF:9A:0A:A8:A3:CE:99:4F:06:E2:F3:21:32:DD:B0:C9 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/I5HKGe-aCqijzplPBuLzITLdsMk.roa sbgp-ipAddrBlock: critical IPv4: 210.152.24.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:28:7b:40:2b:e4:da:ec:70:e8:5f:a6:15:67:67:5f:3f:6d: 38:9a:54:ce:c5:c8:03:a0:fa:d1:7e:c0:9e:90:93:e0:b0:e8: 93:7f:77:6d:81:e6:e2:53:c1:24:3e:47:c7:b8:9a:3f:ee:8c: ff:49:dd:5d:4c:b0:13:76:29:d5:72:0c:41:d8:1a:b0:65:bb: 81:2f:fb:e1:4d:8a:bc:1b:9d:9d:25:9a:30:66:a5:20:21:14: ff:ea:6a:e8:20:ac:4e:1b:9e:15:e1:4c:cc:3f:12:9d:6a:89: 5c:7c:e8:b6:db:93:5b:6e:fa:07:1f:f3:ab:f9:4f:b5:81:73: 3d:20:94:02:4a:9f:da:80:65:ca:cf:87:6d:31:67:c7:85:00: 29:31:57:76:57:8f:75:5a:1a:b3:d1:d3:15:80:8c:9a:e4:fc: 6c:84:42:52:7e:9d:46:77:fb:1d:79:8d:5a:4e:ba:bd:08:3f: c7:19:ff:40:95:bc:83:ef:8d:a7:00:ff:3f:15:bb:c5:4f:de: d7:4e:05:f0:5a:f4:b7:2d:2d:e3:29:9e:6c:67:58:fc:10:84: 26:f6:6d:c4:99:4e:3c:ed:7a:f4:05:e6:93:f9:96:41:fb:61: 87:97:60:4c:63:d0:82:13:93:ea:c6:a0:fb:56:d9:17:2c:7e: 5a:ca:cf:3d -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzOTFDQTE5RUY5QTBB QThBM0NFOTk0RjA2RTJGMzIxMzJEREIwQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmExHT0jH6TIWUp/mU/dUBrSFBeZHHKqJw7IQhv/OFy4Ya8BJO s58mnxEr5AOFXv6MUfAXOD8J4lOUUKVzWutimH/z/LhHnmohp36vkGJlmBbKLeBG DEeTTk+RdX9QqTJfiARUbSxSo8YuuhJ26FMOer8zKIkxGyp5enzBCi+eLwDpoi+b NpS0mcymt5QkdLqyZQVGqQZuIAe53eQ25KmQ4ylqrQj128QtTA9VrWXCed0+aS8A RRaEuYEbOuFMnpHqHu8Tp6kevsW6R6VHwAvawX8CE7/OAwkjPeZKiJCI4ic+zPfH hSwYepuuUGJMhXMdGooZU3nzi2gEIMxrOa5nAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUI5HKGe+aCqijzplPBuLzITLdsMkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9JNUhLR2UtYUNxaWp6cGxQQnVMeklUTGRzTWsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0pgYMA0GCSqGSIb3DQEBCwUA A4IBAQAsKHtAK+Ta7HDoX6YVZ2dfP204mlTOxcgDoPrRfsCekJPgsOiTf3dtgebi U8EkPkfHuJo/7oz/Sd1dTLATdinVcgxB2BqwZbuBL/vhTYq8G52dJZowZqUgIRT/ 6mroIKxOG54V4UzMPxKdaolcfOi225NbbvoHH/Or+U+1gXM9IJQCSp/agGXKz4dt MWfHhQApMVd2V491Whqz0dMVgIya5PxshEJSfp1Gd/sdeY1aTrq9CD/HGf9AlbyD 742nAP8/FbvFT97XTgXwWvS3LS3jKZ5sZ1j8EIQm9m3EmU487Xr0BeaT+ZZB+2GH l2BMY9CCE5PqxqD7VtkXLH5ays89 -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:45 2026 by rpki-client