$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/IQroE8aEIQMXu3ufos0xagIVWCY.roa File: IQroE8aEIQMXu3ufos0xagIVWCY.roa (raw, json) Hash identifier: 9phUKqP2qOX26FMmpFbAgQ8gPWtbw9lqAGA/FAp8QxE= Subject key identifier: 21:0A:E8:13:C6:84:21:03:17:BB:7B:9F:A2:CD:31:6A:02:15:58:26 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01DE Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/IQroE8aEIQMXu3ufos0xagIVWCY.roa Signing time: Tue 31 Mar 2026 07:54:17 +0000 ROA not before: Tue 31 Mar 2026 07:54:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.33.64.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=210AE813C684210317BB7B9FA2CD316A02155826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:5a:78:10:eb:27:49:a8:c2:1b:0d:3d:40: 1e:5a:de:ae:63:63:d4:77:1d:b9:39:62:61:7b:16: 48:37:69:5a:1e:2e:8a:fd:4a:59:68:90:47:bd:a1: b2:ac:ca:8f:cf:61:ef:de:05:9e:07:cd:9a:5d:ef: 84:a7:4e:ef:9a:7c:3e:13:e2:43:5a:8c:d1:50:a5: eb:5e:d4:e9:60:5a:81:d6:39:a8:4e:48:59:58:c1: 0e:1b:61:2d:11:4a:7f:ba:a7:54:97:e8:35:8a:e1: 0d:a4:58:71:36:de:da:33:81:6c:e9:a5:b5:67:6d: 75:5a:53:19:e1:df:b8:c6:84:31:71:5b:a6:2e:0a: 6f:63:ea:59:11:5e:11:12:d1:90:02:83:44:4a:de: 56:de:1d:6d:2e:a8:c9:c7:08:9d:b9:12:81:75:64: a0:12:3a:d6:61:d2:48:52:e3:b0:02:1d:fe:f9:3b: 0f:d6:18:b7:51:a7:04:a2:eb:fa:f1:d4:f2:74:a4: 83:e6:93:80:fe:ba:2b:52:8f:6e:2d:02:1f:0f:59: a7:a9:0a:51:8d:bd:07:6a:b0:7e:88:39:39:96:88: b0:1b:e0:62:27:1a:0e:17:91:f8:b9:fc:34:17:60: 78:8f:f9:a6:e4:d6:73:0d:72:12:9d:fd:b9:ee:1f: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:E8:13:C6:84:21:03:17:BB:7B:9F:A2:CD:31:6A:02:15:58:26 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/IQroE8aEIQMXu3ufos0xagIVWCY.roa sbgp-ipAddrBlock: critical IPv4: 202.33.64.0/22 Signature Algorithm: sha256WithRSAEncryption 73:04:e9:39:86:63:0a:db:1a:77:55:4b:ca:1d:11:99:a7:b8: 61:e3:24:fd:99:84:4b:2e:72:1d:c8:4a:d4:5e:99:59:fd:e5: d9:39:43:16:0f:23:38:67:c4:0b:e6:e9:27:3d:9a:78:de:77: d1:9f:99:fc:ce:27:9e:05:0a:c9:a5:57:4e:eb:3e:eb:74:24: 0b:bb:90:e1:d8:f2:3f:3c:4a:30:f2:ee:b7:61:60:53:5b:5d: ca:40:ec:f7:99:0f:d0:7c:6c:fd:13:34:fa:83:e1:66:42:a1: 98:27:21:d0:42:ea:e0:dd:15:fc:3b:0f:76:09:fd:09:d6:df: d1:93:e1:60:a4:06:c7:34:96:e3:39:f2:2d:19:8f:d1:83:32: c6:3b:e7:21:f9:79:3a:7d:97:b6:a9:df:c0:1c:80:01:9d:38: ef:75:3f:cf:1f:50:b6:d2:e5:4f:54:69:0d:ca:e9:84:f3:94: 6d:2b:6b:83:03:a7:90:0d:e8:62:8e:7c:b2:74:aa:f3:7f:7e: dc:b6:c3:59:48:02:77:25:b2:19:0d:16:a0:b9:7d:37:e2:c7: 05:45:89:a0:66:69:ba:ab:09:7f:07:d9:53:40:61:86:10:13: 9a:9c:3a:20:6e:3f:0c:77:7a:6d:be:b0:6f:36:eb:ec:90:0a: 76:26:e4:63 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxMEFFODEzQzY4NDIx MDMxN0JCN0I5RkEyQ0QzMTZBMDIxNTU4MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCob1p4EOsnSajCGw09QB5a3q5jY9R3Hbk5YmF7Fkg3aVoeLor9 SllokEe9obKsyo/PYe/eBZ4HzZpd74SnTu+afD4T4kNajNFQpete1OlgWoHWOahO SFlYwQ4bYS0RSn+6p1SX6DWK4Q2kWHE23tozgWzppbVnbXVaUxnh37jGhDFxW6Yu Cm9j6lkRXhES0ZACg0RK3lbeHW0uqMnHCJ25EoF1ZKASOtZh0khS47ACHf75Ow/W GLdRpwSi6/rx1PJ0pIPmk4D+uitSj24tAh8PWaepClGNvQdqsH6IOTmWiLAb4GIn Gg4Xkfi5/DQXYHiP+abk1nMNchKd/bnuHz3zAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUIQroE8aEIQMXu3ufos0xagIVWCYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9JUXJvRThhRUlRTVh1M3Vmb3MweGFnSVZXQ1kucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyiFAMA0GCSqGSIb3DQEBCwUA A4IBAQBzBOk5hmMK2xp3VUvKHRGZp7hh4yT9mYRLLnIdyErUXplZ/eXZOUMWDyM4 Z8QL5uknPZp43nfRn5n8zieeBQrJpVdO6z7rdCQLu5Dh2PI/PEow8u63YWBTW13K QOz3mQ/QfGz9EzT6g+FmQqGYJyHQQurg3RX8Ow92Cf0J1t/Rk+FgpAbHNJbjOfIt GY/RgzLGO+ch+Xk6fZe2qd/AHIABnTjvdT/PH1C20uVPVGkNyumE85RtK2uDA6eQ DehijnyydKrzf37ctsNZSAJ3JbIZDRaguX034scFRYmgZmm6qwl/B9lTQGGGEBOa nDogbj8Md3ptvrBvNuvskAp2JuRj -----END CERTIFICATE-----Generated at Wed Apr 1 16:01:48 2026 by rpki-client