$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/I5qIfx4tuyjq7fJoeUVpJx8jNh8.roa File: I5qIfx4tuyjq7fJoeUVpJx8jNh8.roa (raw, json) Hash identifier: +ESH9Ryd6rUcFovoc8VFeGCbvLpIb6rzZxdz18o2l0s= Subject key identifier: 23:9A:88:7F:1E:2D:BB:28:EA:ED:F2:68:79:45:69:27:1F:23:36:1F Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0141 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/I5qIfx4tuyjq7fJoeUVpJx8jNh8.roa Signing time: Tue 31 Mar 2026 07:53:00 +0000 ROA not before: Tue 31 Mar 2026 07:53:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.200.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=239A887F1E2DBB28EAEDF268794569271F23361F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:e5:6f:b9:bf:d7:a5:d5:28:bb:4f:43:96: 71:e1:b4:34:53:38:e7:1a:8a:ff:a7:88:98:e7:1f: 32:94:2d:3e:f3:f8:29:df:1d:f4:b2:98:6b:76:28: 21:df:4c:bb:ca:f3:4a:6c:b0:6b:62:37:00:45:a0: 4b:37:b9:c3:c0:da:27:55:a4:4d:8c:52:87:62:2c: 8e:f4:f4:f6:54:a2:4a:a2:84:e8:86:3a:3a:4d:d0: 96:70:ad:ec:4b:7b:25:ce:6b:dd:4d:37:d5:c9:eb: c2:90:70:b8:4f:73:da:23:44:a6:d4:23:4a:3a:b1: 76:64:63:91:3e:bc:39:60:28:86:a5:1f:15:27:00: 9f:bd:22:05:f3:69:61:78:56:26:3a:39:f6:fa:1f: f2:62:46:79:1d:04:d8:da:52:8b:07:24:b5:ed:5b: 08:96:48:b9:3f:8e:41:0d:8a:b0:b6:55:ca:80:01: 42:7d:69:d2:e4:a4:c3:3e:50:79:93:c2:3c:a1:03: 88:55:57:42:1a:87:b3:d1:e3:69:5d:6a:98:f6:cb: 0a:4b:35:4f:76:eb:0a:69:3e:a1:a1:87:1d:13:0d: 2a:7c:d0:20:cd:5a:7e:5b:07:99:5e:da:22:94:60: 5d:7f:0c:11:02:24:66:4a:72:01:8b:59:13:f8:0b: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9A:88:7F:1E:2D:BB:28:EA:ED:F2:68:79:45:69:27:1F:23:36:1F X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/I5qIfx4tuyjq7fJoeUVpJx8jNh8.roa sbgp-ipAddrBlock: critical IPv4: 210.152.200.0/22 Signature Algorithm: sha256WithRSAEncryption 21:ce:29:d9:ac:3f:49:fc:e1:4a:74:17:f4:67:86:f3:86:e7: 7b:f7:33:05:b7:2e:14:67:e9:35:18:66:8a:23:8b:5c:da:e4: 6a:64:cf:84:3d:b7:c5:c2:ac:1b:4b:38:ed:51:c1:b0:55:14: 91:15:71:c4:cc:22:20:d2:f6:20:0e:a1:f6:b9:86:67:92:38: 4a:6d:6d:e1:8e:2f:f0:c5:57:cb:fe:cc:8c:bd:0c:2b:b9:96: 71:29:b6:ba:d7:47:4d:2f:5a:20:0d:8d:bd:03:84:db:dd:8f: f1:5d:15:d8:9b:42:51:9b:1f:a8:f6:61:f2:bf:f4:ce:a4:81: 40:8c:2d:18:9a:92:c1:c8:e5:87:a0:f2:04:16:db:60:cc:4c: d4:06:d9:6a:54:de:cb:49:b5:2c:f9:25:ba:d9:c5:53:58:76: b6:85:67:78:c1:05:24:21:ec:e1:80:d4:50:02:52:67:66:3b: dc:87:13:c0:90:1c:96:9d:ae:5c:39:3d:9c:24:f2:da:7d:06: 31:ad:4e:d1:35:9b:8f:22:26:f4:ef:ba:ed:13:f5:25:b9:c9: 16:75:5c:f3:86:9c:3f:c6:a8:de:7b:40:ef:7b:88:0a:bf:de: 06:55:96:5a:3c:c9:85:09:56:41:17:07:2e:f2:8e:ce:fb:60: 28:d6:b7:eb -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzOUE4ODdGMUUyREJC MjhFQUVERjI2ODc5NDU2OTI3MUYyMzM2MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaNOVvub/XpdUou09DlnHhtDRTOOcaiv+niJjnHzKULT7z+Cnf HfSymGt2KCHfTLvK80pssGtiNwBFoEs3ucPA2idVpE2MUodiLI709PZUokqihOiG OjpN0JZwrexLeyXOa91NN9XJ68KQcLhPc9ojRKbUI0o6sXZkY5E+vDlgKIalHxUn AJ+9IgXzaWF4ViY6Ofb6H/JiRnkdBNjaUosHJLXtWwiWSLk/jkENirC2VcqAAUJ9 adLkpMM+UHmTwjyhA4hVV0Iah7PR42ldapj2ywpLNU926wppPqGhhx0TDSp80CDN Wn5bB5le2iKUYF1/DBECJGZKcgGLWRP4C7/NAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUI5qIfx4tuyjq7fJoeUVpJx8jNh8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9JNXFJZng0dHV5anE3ZkpvZVVWcEp4OGpOaDgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0pjIMA0GCSqGSIb3DQEBCwUA A4IBAQAhzinZrD9J/OFKdBf0Z4bzhud79zMFty4UZ+k1GGaKI4tc2uRqZM+EPbfF wqwbSzjtUcGwVRSRFXHEzCIg0vYgDqH2uYZnkjhKbW3hji/wxVfL/syMvQwruZZx Kba610dNL1ogDY29A4Tb3Y/xXRXYm0JRmx+o9mHyv/TOpIFAjC0YmpLByOWHoPIE FttgzEzUBtlqVN7LSbUs+SW62cVTWHa2hWd4wQUkIezhgNRQAlJnZjvchxPAkByW na5cOT2cJPLafQYxrU7RNZuPIib077rtE/UluckWdVzzhpw/xqjee0Dve4gKv94G VZZaPMmFCVZBFwcu8o7O+2Ao1rfr -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:45 2026 by rpki-client