$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Jp9rkUqCDhFhiENhALTCAd3ipNA.roa File: Jp9rkUqCDhFhiENhALTCAd3ipNA.roa (raw, json) Hash identifier: COVWEFostnW2Va4fZy1Gvwyx7P1EGIwXKbQh4IPTCas= Subject key identifier: 26:9F:6B:91:4A:82:0E:11:61:88:43:61:00:B4:C2:01:DD:E2:A4:D0 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01D1 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Jp9rkUqCDhFhiENhALTCAd3ipNA.roa Signing time: Tue 31 Mar 2026 07:54:11 +0000 ROA not before: Tue 31 Mar 2026 07:54:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 61.121.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=269F6B914A820E116188436100B4C201DDE2A4D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f6:de:04:7f:1c:69:2d:d3:bf:d6:02:f7:79: 8f:e9:6d:60:7f:82:a7:c6:52:d9:3f:d5:eb:5d:ec: fd:a7:77:9f:36:f0:32:29:ef:24:44:2e:2d:75:08: 0f:1d:3d:fe:ab:00:e2:6e:bc:0f:2a:47:4b:66:e9: df:b9:7d:e6:e0:3a:36:cc:69:ba:5f:0b:85:25:27: fa:80:51:67:eb:6a:2c:3b:d3:93:08:65:7d:7c:57: 91:63:00:89:de:5d:fa:c1:aa:fe:e9:75:87:f4:1a: 95:ee:08:05:e8:16:aa:ef:a9:f0:ec:5f:59:71:5e: 2b:cc:7f:2e:2f:ff:2a:f0:b2:24:10:da:0c:af:2b: 82:a2:44:19:94:82:c5:f9:94:13:34:8b:f9:f8:b8: ce:e3:5c:e5:8d:71:e4:38:fa:ce:02:ee:4c:96:7b: 8c:87:53:5e:03:59:a9:1e:71:e3:bb:58:c3:80:9c: 7c:93:d4:c3:46:d4:62:41:b3:fb:27:9c:6f:21:bb: 9b:14:51:a7:1f:d8:56:91:19:e5:6e:5c:3f:9a:9e: dc:d3:cc:72:34:18:37:7b:2e:8c:a5:9e:af:23:d7: 59:a7:f4:44:93:a0:01:c2:5e:88:ef:c5:95:8b:00: 2f:ce:7a:49:ef:9e:1a:c6:36:34:5b:d1:98:1a:58: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9F:6B:91:4A:82:0E:11:61:88:43:61:00:B4:C2:01:DD:E2:A4:D0 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Jp9rkUqCDhFhiENhALTCAd3ipNA.roa sbgp-ipAddrBlock: critical IPv4: 61.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption 76:18:9a:dc:c7:ff:cb:04:c6:33:a6:51:dc:e5:db:32:40:24: fe:17:25:1f:a9:91:b1:30:a1:83:b9:cd:2d:a9:cc:2c:97:fc: e8:a0:a6:c3:a9:d1:e6:1a:97:13:48:bb:32:49:ed:66:92:bc: 2f:f9:c0:14:31:aa:16:8b:54:6c:09:1e:c6:5a:74:f9:04:e4: a8:6b:b0:cc:4d:67:ff:0d:34:78:65:4a:32:86:aa:e4:36:97: 67:54:64:4d:ce:a9:6a:45:d1:d6:ec:04:cd:72:88:82:15:66: 3e:ce:ef:a0:52:16:23:82:82:65:89:88:7c:84:a8:b1:dc:40: da:1e:52:98:96:c0:f0:eb:45:3e:8f:21:aa:7e:31:d4:8a:44: 8b:1e:d0:2d:ab:11:68:20:59:6d:31:1f:43:39:5f:b4:a9:a5: ed:dc:fc:67:4b:07:66:d9:9d:7e:27:f4:bc:de:e0:2d:f5:24: 54:52:65:3b:8b:80:91:61:86:54:be:c3:4c:10:c4:b2:04:88: 13:99:d7:8a:c4:f0:32:4e:e3:e1:54:75:b7:14:70:5f:d8:23: 3a:ae:38:9b:01:2f:bb:32:bd:3d:02:6a:e9:03:cc:3d:c0:fe: 7b:75:85:a1:a1:5a:20:5f:25:63:0f:08:10:32:9d:a7:f6:63: c7:f1:34:9f -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI2OUY2QjkxNEE4MjBF MTE2MTg4NDM2MTAwQjRDMjAxRERFMkE0RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf9t4EfxxpLdO/1gL3eY/pbWB/gqfGUtk/1etd7P2nd5828DIp 7yRELi11CA8dPf6rAOJuvA8qR0tm6d+5febgOjbMabpfC4UlJ/qAUWfraiw705MI ZX18V5FjAIneXfrBqv7pdYf0GpXuCAXoFqrvqfDsX1lxXivMfy4v/yrwsiQQ2gyv K4KiRBmUgsX5lBM0i/n4uM7jXOWNceQ4+s4C7kyWe4yHU14DWakeceO7WMOAnHyT 1MNG1GJBs/snnG8hu5sUUacf2FaRGeVuXD+antzTzHI0GDd7Loylnq8j11mn9EST oAHCXojvxZWLAC/OeknvnhrGNjRb0ZgaWN7tAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUJp9rkUqCDhFhiENhALTCAd3ipNAwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9KcDlya1VxQ0RoRmhpRU5oQUxUQ0FkM2lwTkEucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPXnwMA0GCSqGSIb3DQEBCwUA A4IBAQB2GJrcx//LBMYzplHc5dsyQCT+FyUfqZGxMKGDuc0tqcwsl/zooKbDqdHm GpcTSLsySe1mkrwv+cAUMaoWi1RsCR7GWnT5BOSoa7DMTWf/DTR4ZUoyhqrkNpdn VGRNzqlqRdHW7ATNcoiCFWY+zu+gUhYjgoJliYh8hKix3EDaHlKYlsDw60U+jyGq fjHUikSLHtAtqxFoIFltMR9DOV+0qaXt3PxnSwdm2Z1+J/S83uAt9SRUUmU7i4CR YYZUvsNMEMSyBIgTmdeKxPAyTuPhVHW3FHBf2CM6rjibAS+7Mr09AmrpA8w9wP57 dYWhoVogXyVjDwgQMp2n9mPH8TSf -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:34 2026 by rpki-client