$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/PC7-bFnc5P4Ezk3RVt2sz2BczPg.roa File: PC7-bFnc5P4Ezk3RVt2sz2BczPg.roa (raw, json) Hash identifier: 3Zk3LO616357mduMZuPBjJH/qvxZ7Yp8VS7oGChF3xk= Subject key identifier: 3C:2E:FE:6C:59:DC:E4:FE:04:CE:4D:D1:56:DD:AC:CF:60:5C:CC:F8 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01BE Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/PC7-bFnc5P4Ezk3RVt2sz2BczPg.roa Signing time: Tue 31 Mar 2026 07:54:01 +0000 ROA not before: Tue 31 Mar 2026 07:54:01 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.120.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:01 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3C2EFE6C59DCE4FE04CE4DD156DDACCF605CCCF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:01:10:f8:f1:67:31:d0:b9:31:8a:de:df: e4:a4:18:9a:cd:dc:96:87:58:ea:76:05:ed:3d:79: 8d:69:f7:39:cd:3d:89:19:1e:71:e4:96:4a:51:7d: 6d:6d:89:08:98:83:f2:96:8d:ae:90:19:92:37:3c: af:be:11:85:87:b0:db:71:87:38:76:db:19:69:2a: 37:15:ad:9b:09:9d:8f:c2:0e:03:7f:d7:62:6d:6d: 21:b9:2e:5b:6b:2b:a2:21:ad:74:11:bf:81:9b:ba: 9b:9c:48:af:0a:e1:af:19:56:0a:84:5f:89:5a:28: 44:ef:5f:39:15:2f:ae:6c:83:10:e2:71:60:55:75: 77:3b:b5:35:05:53:08:64:99:bd:e5:a0:6f:d0:30: bf:ad:3f:9f:3a:4d:07:b0:d3:08:ff:18:95:2e:a0: cf:ef:d7:60:25:c2:17:a9:91:96:a2:fc:bf:39:29: 7c:74:cb:5c:8a:c9:e4:f3:f8:30:9b:94:d2:3d:97: 59:d5:4f:37:86:f1:54:7a:b0:d0:09:8a:94:40:e7: d5:3a:0d:08:f4:5f:73:96:38:c3:0b:42:73:76:1e: 97:a4:11:b3:c8:96:d6:3d:af:45:d0:69:8e:06:17: ab:9b:ff:9b:a4:65:b4:d2:d5:40:c8:5b:df:3e:6b: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:FE:6C:59:DC:E4:FE:04:CE:4D:D1:56:DD:AC:CF:60:5C:CC:F8 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/PC7-bFnc5P4Ezk3RVt2sz2BczPg.roa sbgp-ipAddrBlock: critical IPv4: 211.120.0.0/19 Signature Algorithm: sha256WithRSAEncryption 51:b8:89:df:57:56:45:87:cb:6c:ee:36:6e:fb:fe:30:20:91: 30:ae:6b:79:8a:27:4c:7d:8b:7f:ac:b9:41:81:13:fa:a2:7a: 45:9d:98:41:59:32:89:07:1a:07:95:da:28:e2:22:9f:2b:be: 7f:dd:d5:93:b5:1b:d0:2a:82:af:c0:15:cb:50:3b:e4:1b:b0: 15:50:a3:7b:75:ea:8b:49:48:c5:14:24:df:1f:a8:54:79:6f: 3c:19:95:1e:5c:b7:d4:84:ad:db:47:ee:94:0e:db:0c:6a:68: 79:94:ee:46:8e:ec:8e:9c:ec:9e:86:a3:b3:03:cb:98:df:eb: 07:a4:db:37:92:58:3d:2a:f5:c6:4e:cf:1d:16:ed:00:69:b7: 1c:24:77:6d:67:c3:e7:e9:77:a2:12:2d:02:86:b4:f6:20:1c: fb:c3:95:48:de:73:5d:a1:41:ab:e5:39:2d:d6:ab:f2:a4:95: d5:17:30:c4:bc:bb:c6:e4:74:8b:f6:02:f7:e1:c3:fa:10:0d: ee:4d:d7:61:e0:62:87:38:9c:ef:62:22:b3:6c:5b:20:ab:99: c2:4f:c0:6f:f7:4b:6c:54:94:01:11:36:c2:86:a7:ab:0c:07: 51:31:f5:5b:29:d8:c8:ec:38:ce:11:db:05:8f:5b:16:a0:03: 2b:2c:6c:99 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDMkVGRTZDNTlEQ0U0 RkUwNENFNEREMTU2RERBQ0NGNjA1Q0NDRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5rQEQ+PFnMdC5MYre3+SkGJrN3JaHWOp2Be09eY1p9znNPYkZ HnHklkpRfW1tiQiYg/KWja6QGZI3PK++EYWHsNtxhzh22xlpKjcVrZsJnY/CDgN/ 12JtbSG5LltrK6IhrXQRv4GbupucSK8K4a8ZVgqEX4laKETvXzkVL65sgxDicWBV dXc7tTUFUwhkmb3loG/QML+tP586TQew0wj/GJUuoM/v12AlwhepkZai/L85KXx0 y1yKyeTz+DCblNI9l1nVTzeG8VR6sNAJipRA59U6DQj0X3OWOMMLQnN2HpekEbPI ltY9r0XQaY4GF6ub/5ukZbTS1UDIW98+a953AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUPC7+bFnc5P4Ezk3RVt2sz2BczPgwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9QQzctYkZuYzVQNEV6azNSVnQyc3oyQmN6UGcucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF03gAMA0GCSqGSIb3DQEBCwUA A4IBAQBRuInfV1ZFh8ts7jZu+/4wIJEwrmt5iidMfYt/rLlBgRP6onpFnZhBWTKJ BxoHldoo4iKfK75/3dWTtRvQKoKvwBXLUDvkG7AVUKN7deqLSUjFFCTfH6hUeW88 GZUeXLfUhK3bR+6UDtsMamh5lO5GjuyOnOyehqOzA8uY3+sHpNs3klg9KvXGTs8d Fu0AabccJHdtZ8Pn6XeiEi0ChrT2IBz7w5VI3nNdoUGr5Tkt1qvypJXVFzDEvLvG 5HSL9gL34cP6EA3uTddh4GKHOJzvYiKzbFsgq5nCT8Bv90tsVJQBETbChqerDAdR MfVbKdjI7DjOEdsFj1sWoAMrLGyZ -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:20 2026 by rpki-client