$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/X3jN-IHamKnAb66H-WC3fcBZTJ0.roa File: X3jN-IHamKnAb66H-WC3fcBZTJ0.roa (raw, json) Hash identifier: ZpyIdSPqkxEXIdfintUBlnQjYXhjtzm47w5A/f7qZoM= Subject key identifier: 5F:78:CD:F8:81:DA:98:A9:C0:6F:AE:87:F9:60:B7:7D:C0:59:4C:9D Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0167 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/X3jN-IHamKnAb66H-WC3fcBZTJ0.roa Signing time: Tue 31 Mar 2026 07:53:21 +0000 ROA not before: Tue 31 Mar 2026 07:53:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 203.183.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5F78CDF881DA98A9C06FAE87F960B77DC0594C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:1d:ad:e8:bb:f1:43:8c:be:df:d1:a2:e6: fe:6c:e0:17:35:9f:ce:31:02:38:ec:2e:1e:db:95: b2:40:56:a7:27:fb:bf:6d:79:fb:a7:b1:d1:ec:ee: 42:d9:2e:7d:f2:d3:57:05:75:4a:1d:93:f3:32:e3: 08:8d:d5:eb:6a:bb:43:1b:d1:48:50:bc:c3:c2:1c: c7:62:a9:f5:7c:39:6a:4d:ce:65:36:45:52:ee:31: c7:c4:f8:a0:f9:bc:01:d7:c9:6f:5c:1c:2a:15:ad: 2a:29:c5:91:80:e2:4f:47:f0:9f:c3:f4:26:54:1b: c1:91:46:7a:9e:78:ef:e3:c5:09:e2:80:7a:77:f8: 90:50:8f:ba:bb:e2:fb:8d:d9:b4:cb:a1:a4:98:96: c5:eb:35:05:a4:66:01:93:f8:08:b1:59:e4:93:f1: 30:51:a5:4a:c2:c0:03:7e:5a:0d:ad:95:e9:73:1d: 97:85:b4:c8:a3:60:d2:7d:39:ad:3c:56:97:65:ce: dd:0e:6e:17:6f:50:35:03:1d:0e:c1:ef:ed:9a:34: d9:1d:c5:47:71:00:e6:e0:0b:82:29:69:bf:35:c8: 99:21:14:5d:48:4b:3d:1e:98:6b:a7:38:1d:59:25: 7e:ad:d3:8d:37:ab:a0:f5:9c:06:4f:a8:5f:9d:71: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:78:CD:F8:81:DA:98:A9:C0:6F:AE:87:F9:60:B7:7D:C0:59:4C:9D X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/X3jN-IHamKnAb66H-WC3fcBZTJ0.roa sbgp-ipAddrBlock: critical IPv4: 203.183.128.0/20 Signature Algorithm: sha256WithRSAEncryption 26:6e:aa:73:71:28:4c:b8:bd:d9:32:09:08:8d:b1:a9:d1:6f: 44:26:23:7a:9b:14:eb:e3:c8:af:94:d0:55:2f:79:b6:1b:a4: 64:8c:eb:5c:ff:f3:22:ec:17:9f:c0:50:b3:6a:01:72:fe:2c: 4f:40:e9:47:ef:9c:eb:e0:7c:48:e1:96:70:a4:92:7c:5d:73: f8:8f:26:a8:93:78:f4:58:4c:2e:8b:77:d8:00:28:cd:47:db: d8:7d:a7:40:fb:4a:c2:3c:64:7e:8a:68:75:c2:8b:fa:bb:82: 4d:ae:95:3e:de:f9:a0:40:6b:77:ce:2a:67:25:e2:4d:a8:25: 39:a0:51:d0:80:0b:b4:aa:8e:2d:77:e1:fb:9a:2d:8d:75:80: 52:36:de:8c:f9:41:3c:75:83:5d:09:0c:96:b2:10:14:5b:ac: 30:c5:b5:9c:65:f4:3f:03:ee:0b:32:b7:16:d6:4b:ad:05:1e: 75:d5:d0:9f:b4:fc:bc:1f:64:9c:aa:e0:05:03:84:b1:e7:7f: 5d:63:ea:9a:7b:92:b1:38:67:ba:f6:fd:84:e2:4e:18:5a:8f: ac:e0:53:4f:47:5d:d7:d6:c2:18:1b:2e:2c:55:f5:c6:6e:73: e9:55:41:3f:ff:6b:f2:cd:d9:d6:01:3c:47:81:cc:b0:8a:21: ad:f4:6f:d6 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVGNzhDREY4ODFEQTk4 QTlDMDZGQUU4N0Y5NjBCNzdEQzA1OTRDOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2tR2t6LvxQ4y+39Gi5v5s4Bc1n84xAjjsLh7blbJAVqcn+79t efunsdHs7kLZLn3y01cFdUodk/My4wiN1etqu0Mb0UhQvMPCHMdiqfV8OWpNzmU2 RVLuMcfE+KD5vAHXyW9cHCoVrSopxZGA4k9H8J/D9CZUG8GRRnqeeO/jxQnigHp3 +JBQj7q74vuN2bTLoaSYlsXrNQWkZgGT+AixWeST8TBRpUrCwAN+Wg2tlelzHZeF tMijYNJ9Oa08Vpdlzt0ObhdvUDUDHQ7B7+2aNNkdxUdxAObgC4Ipab81yJkhFF1I Sz0emGunOB1ZJX6t0403q6D1nAZPqF+dcfERAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUX3jN+IHamKnAb66H+WC3fcBZTJ0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9YM2pOLUlIYW1LbkFiNjZILVdDM2ZjQlpUSjAucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy7eAMA0GCSqGSIb3DQEBCwUA A4IBAQAmbqpzcShMuL3ZMgkIjbGp0W9EJiN6mxTr48ivlNBVL3m2G6RkjOtc//Mi 7BefwFCzagFy/ixPQOlH75zr4HxI4ZZwpJJ8XXP4jyaok3j0WEwui3fYACjNR9vY fadA+0rCPGR+imh1wov6u4JNrpU+3vmgQGt3zipnJeJNqCU5oFHQgAu0qo4td+H7 mi2NdYBSNt6M+UE8dYNdCQyWshAUW6wwxbWcZfQ/A+4LMrcW1kutBR511dCftPy8 H2ScquAFA4Sx539dY+qae5KxOGe69v2E4k4YWo+s4FNPR13X1sIYGy4sVfXGbnPp VUE//2vyzdnWATxHgcywiiGt9G/W -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:39 2026 by rpki-client