$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/U9nGdzRegFDsYB542TGj_0A_Bms.roa File: U9nGdzRegFDsYB542TGj_0A_Bms.roa (raw, json) Hash identifier: sqxh3XB9gItqaeBRXYO5RZZrOCk34LkuK4CrReD0htQ= Subject key identifier: 53:D9:C6:77:34:5E:80:50:EC:60:1E:78:D9:31:A3:FF:40:3F:06:6B Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0197 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/U9nGdzRegFDsYB542TGj_0A_Bms.roa Signing time: Tue 31 Mar 2026 07:53:44 +0000 ROA not before: Tue 31 Mar 2026 07:53:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.189.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=53D9C677345E8050EC601E78D931A3FF403F066B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:2f:27:85:dc:44:c1:25:10:7e:e1:35:97: 9c:50:3a:d1:33:af:81:52:ff:6f:04:cb:81:72:9c: 1a:70:45:a2:46:e8:cd:32:83:eb:f8:da:ca:72:e0: 68:74:9d:75:32:3a:8c:84:3b:bc:07:44:11:d1:f3: 7e:93:ef:b8:43:b8:88:36:0a:c5:0c:2a:53:cc:e6: d1:83:0b:45:2c:7c:0c:91:50:cb:b2:bb:62:02:5a: ad:87:6c:c8:d5:2c:3e:97:39:cb:0d:47:83:56:fe: 12:60:2d:49:58:90:32:ca:4f:7c:e9:16:ad:bd:e9: a7:9d:03:fa:b0:89:0f:d2:fc:0e:60:9c:5c:a2:3a: 10:5b:75:57:7a:db:aa:9e:57:69:5c:9b:03:20:53: b0:b7:90:9d:2a:e3:69:b7:3e:01:74:61:84:02:94: 18:e8:a8:df:12:4e:d6:3b:63:65:fc:1c:97:c8:8d: 00:47:b6:29:1c:7f:65:2e:5d:28:c8:06:8b:1a:1f: f3:99:6b:ac:ce:5b:f1:00:6a:93:b1:af:e7:50:b4: 7b:46:bb:08:8c:59:a7:ac:da:1c:59:f0:88:9e:ec: 1e:83:31:d2:eb:97:37:7b:06:3a:a8:f0:5f:95:4b: c3:fe:5b:eb:d9:5a:0c:6e:c0:40:5f:29:c2:01:44: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:C6:77:34:5E:80:50:EC:60:1E:78:D9:31:A3:FF:40:3F:06:6B X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/U9nGdzRegFDsYB542TGj_0A_Bms.roa sbgp-ipAddrBlock: critical IPv4: 210.189.224.0/20 Signature Algorithm: sha256WithRSAEncryption c9:18:d8:e4:ec:2d:6e:93:b6:77:5f:e0:34:8f:1e:bf:12:70: 38:27:b4:07:e9:5c:4c:e8:2b:8e:33:47:f3:95:55:53:24:2e: 37:16:9c:0f:e6:1a:a6:c7:b5:c5:b3:6e:c9:04:21:54:47:69: 7f:15:c7:f8:ce:56:7d:1d:39:81:f9:1b:33:8b:a4:f3:1a:7b: e5:cf:7d:80:6d:5c:e5:05:ae:31:b8:4e:e6:8f:63:6e:61:50: e3:75:5b:15:b3:2e:26:5a:81:f1:b2:8e:2d:43:2d:ba:d7:91: 88:37:4d:89:f4:58:e9:3e:e4:0f:4a:7d:aa:97:37:1f:fe:8a: 68:d6:cd:22:93:6a:d4:2d:a8:e9:4f:ca:34:aa:ef:52:39:1d: 1f:97:ab:0b:8f:fe:ee:ea:41:32:e5:35:33:34:ba:46:26:48: 44:1b:70:5e:0c:13:d6:1e:28:54:fb:e5:35:d2:ea:69:4b:29: b4:40:35:92:58:2c:70:27:dd:01:24:cc:75:e7:8e:0c:5a:26: 66:e3:1a:3b:c9:bb:10:3f:ac:65:a8:a4:72:75:50:dd:c8:5b: 13:fe:33:75:3a:e9:ec:e9:51:ed:8b:df:f9:5d:3f:a7:4b:87: 79:15:e3:f5:4c:29:55:f4:b6:bb:35:87:e5:a7:63:18:d7:a5: 04:86:76:e9 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUzRDlDNjc3MzQ1RTgw NTBFQzYwMUU3OEQ5MzFBM0ZGNDAzRjA2NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDddC8nhdxEwSUQfuE1l5xQOtEzr4FS/28Ey4FynBpwRaJG6M0y g+v42spy4Gh0nXUyOoyEO7wHRBHR836T77hDuIg2CsUMKlPM5tGDC0UsfAyRUMuy u2ICWq2HbMjVLD6XOcsNR4NW/hJgLUlYkDLKT3zpFq296aedA/qwiQ/S/A5gnFyi OhBbdVd626qeV2lcmwMgU7C3kJ0q42m3PgF0YYQClBjoqN8STtY7Y2X8HJfIjQBH tikcf2UuXSjIBosaH/OZa6zOW/EAapOxr+dQtHtGuwiMWaes2hxZ8Iie7B6DMdLr lzd7Bjqo8F+VS8P+W+vZWgxuwEBfKcIBRAZPAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUU9nGdzRegFDsYB542TGj/0A/BmswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9VOW5HZHpSZWdGRHNZQjU0MlRHal8wQV9CbXMucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0r3gMA0GCSqGSIb3DQEBCwUA A4IBAQDJGNjk7C1uk7Z3X+A0jx6/EnA4J7QH6VxM6CuOM0fzlVVTJC43FpwP5hqm x7XFs27JBCFUR2l/Fcf4zlZ9HTmB+Rszi6TzGnvlz32AbVzlBa4xuE7mj2NuYVDj dVsVsy4mWoHxso4tQy2615GIN02J9FjpPuQPSn2qlzcf/opo1s0ik2rULajpT8o0 qu9SOR0fl6sLj/7u6kEy5TUzNLpGJkhEG3BeDBPWHihU++U10uppSym0QDWSWCxw J90BJMx1544MWiZm4xo7ybsQP6xlqKRydVDdyFsT/jN1Ouns6VHti9/5XT+nS4d5 FeP1TClV9La7NYflp2MY16UEhnbp -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:29 2026 by rpki-client