$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/NmbYsga5DMh2L8q78Mg1-MeSKgo.roa File: NmbYsga5DMh2L8q78Mg1-MeSKgo.roa (raw, json) Hash identifier: 4kGSB0yRY4vhZEOWb0T+ZaIz4rk4HHaFGyjWlzyUJII= Subject key identifier: 36:66:D8:B2:06:B9:0C:C8:76:2F:CA:BB:F0:C8:35:F8:C7:92:2A:0A Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 014C Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/NmbYsga5DMh2L8q78Mg1-MeSKgo.roa Signing time: Tue 31 Mar 2026 07:53:07 +0000 ROA not before: Tue 31 Mar 2026 07:53:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.218.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3666D8B206B90CC8762FCABBF0C835F8C7922A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:5f:a0:b1:52:96:59:6f:68:22:0b:54:95: a8:4b:7a:c4:27:2b:ba:19:34:09:8d:ca:65:42:7b: 9d:fe:90:c0:13:9c:0e:af:c3:ec:27:e5:6f:56:8c: 9b:db:7f:3d:80:05:82:54:e9:02:5c:84:51:d0:dc: c2:31:f3:3d:86:73:27:9e:c1:19:77:d7:29:91:9c: b6:77:f6:57:3d:f5:c6:c1:b3:b5:5c:42:0e:0d:a8: e6:7c:cf:3f:d3:3c:54:93:ba:3d:77:90:a2:5b:64: cc:c0:01:bb:8f:0c:16:82:e4:79:74:ad:47:f9:5b: 4e:65:56:1b:ba:3b:01:4c:a7:cc:d2:60:8c:3f:62: 96:50:47:05:d5:c9:a8:e2:b8:80:de:c8:aa:c4:3b: cc:77:dd:59:0c:ab:a5:ee:70:9e:14:4d:c0:7a:3c: 46:22:ae:64:d6:02:eb:8e:45:4a:13:61:3d:7c:57: 24:27:6f:36:5f:4a:28:3f:cc:02:9c:f7:06:7d:8c: ad:58:41:ea:88:f7:04:30:e9:4c:a9:5c:4d:cd:29: ed:29:b7:89:e2:16:ad:4a:22:1b:34:cb:02:a6:15: 49:69:9c:a5:cb:14:dc:aa:78:b4:b0:b4:a2:4a:ae: ce:c2:ac:8a:64:08:ba:f6:3a:25:13:d4:c4:60:af: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:66:D8:B2:06:B9:0C:C8:76:2F:CA:BB:F0:C8:35:F8:C7:92:2A:0A X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/NmbYsga5DMh2L8q78Mg1-MeSKgo.roa sbgp-ipAddrBlock: critical IPv4: 202.218.8.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:dc:b3:00:5c:4d:15:e1:5b:36:f9:2b:33:2d:d6:47:37:6e: 07:a1:23:db:a1:f7:26:45:67:1e:22:4d:10:da:ca:c2:60:fd: 94:1d:3e:6c:6d:8e:62:04:9b:79:cb:f7:02:77:fd:b0:6b:16: 0a:57:78:69:ef:6a:90:8c:aa:29:ac:b6:0a:84:ca:ce:d4:df: d6:22:29:7c:df:24:4b:b0:ae:e6:9c:b8:f4:e9:7d:6a:d1:02: 58:1c:cf:d0:3b:a3:c0:28:d1:be:44:7d:9b:9c:05:83:89:ff: 05:0c:87:46:95:23:01:6f:3c:aa:0d:fd:45:37:b3:d7:6a:e3: 17:ae:9b:94:cd:24:e6:46:70:e7:34:ff:a4:92:b7:54:f7:20: f7:48:97:88:b7:aa:a0:05:0c:75:7e:2a:bf:15:ca:66:de:8b: d1:a4:46:b9:ba:37:30:3a:db:43:91:35:a3:de:00:61:30:c5: b1:60:e6:26:71:45:3e:6c:75:52:87:8d:7a:94:be:b5:2b:bf: 60:39:15:a0:69:57:bc:d1:35:38:ae:70:e3:03:1c:b4:4c:b1: 7f:f9:17:cd:e8:5e:b4:67:dd:3b:91:b8:38:a0:26:b2:ef:a4: 28:26:59:1a:cc:c3:ff:a2:48:f3:2d:7c:2c:08:d6:43:32:64: a5:3a:37:5e -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2NjZEOEIyMDZCOTBD Qzg3NjJGQ0FCQkYwQzgzNUY4Qzc5MjJBMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiKF+gsVKWWW9oIgtUlahLesQnK7oZNAmNymVCe53+kMATnA6v w+wn5W9WjJvbfz2ABYJU6QJchFHQ3MIx8z2GcyeewRl31ymRnLZ39lc99cbBs7Vc Qg4NqOZ8zz/TPFSTuj13kKJbZMzAAbuPDBaC5Hl0rUf5W05lVhu6OwFMp8zSYIw/ YpZQRwXVyajiuIDeyKrEO8x33VkMq6XucJ4UTcB6PEYirmTWAuuORUoTYT18VyQn bzZfSig/zAKc9wZ9jK1YQeqI9wQw6UypXE3NKe0pt4niFq1KIhs0ywKmFUlpnKXL FNyqeLSwtKJKrs7CrIpkCLr2OiUT1MRgr0BzAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUNmbYsga5DMh2L8q78Mg1+MeSKgowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9ObWJZc2dhNURNaDJMOHE3OE1nMS1NZVNLZ28ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCytoIMA0GCSqGSIb3DQEBCwUA A4IBAQCe3LMAXE0V4Vs2+SszLdZHN24HoSPbofcmRWceIk0Q2srCYP2UHT5sbY5i BJt5y/cCd/2waxYKV3hp72qQjKoprLYKhMrO1N/WIil83yRLsK7mnLj06X1q0QJY HM/QO6PAKNG+RH2bnAWDif8FDIdGlSMBbzyqDf1FN7PXauMXrpuUzSTmRnDnNP+k krdU9yD3SJeIt6qgBQx1fiq/Fcpm3ovRpEa5ujcwOttDkTWj3gBhMMWxYOYmcUU+ bHVSh416lL61K79gORWgaVe80TU4rnDjAxy0TLF/+RfN6F60Z907kbg4oCay76Qo JlkazMP/okjzLXwsCNZDMmSlOjde -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:40 2026 by rpki-client