$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/XzfvTU1LM6jZqVWtXJZgOGbcUq4.roa File: XzfvTU1LM6jZqVWtXJZgOGbcUq4.roa (raw, json) Hash identifier: aIecgOzjI2hOTZr3J59URRHXcIA67ZwW/fPki04j2XA= Subject key identifier: 5F:37:EF:4D:4D:4B:33:A8:D9:A9:55:AD:5C:96:60:38:66:DC:52:AE Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0142 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/XzfvTU1LM6jZqVWtXJZgOGbcUq4.roa Signing time: Tue 31 Mar 2026 07:53:00 +0000 ROA not before: Tue 31 Mar 2026 07:53:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.204.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5F37EF4D4D4B33A8D9A955AD5C96603866DC52AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:90:27:0c:f9:dc:db:94:52:ff:6e:23:05: bf:d3:ee:66:46:28:a6:e4:3f:35:b3:5d:9f:30:a6: 08:6f:92:61:26:16:85:2c:5f:5b:47:7f:07:da:9e: 0f:42:20:dc:e1:b5:c6:51:59:ad:28:cb:b9:0d:1d: ed:36:18:18:0b:b3:5b:44:ea:bc:a5:76:2c:41:b4: 66:fb:da:6a:ba:9c:4c:13:40:fc:72:af:ee:2c:32: 0d:f2:23:fe:42:e4:c9:59:75:15:65:79:a8:4c:18: fd:5c:76:f3:4a:de:18:89:ad:17:32:f7:94:09:cf: 54:ba:3d:6a:8d:32:bd:b1:1c:83:f6:3c:b2:ad:a6: ae:b0:62:d4:a2:a3:3e:f8:f8:85:43:09:48:ae:94: 71:da:2b:08:71:7d:cf:64:f1:87:b2:bf:89:fe:52: 8f:4f:0c:44:fc:09:c4:78:12:61:25:3a:0e:d5:6f: 17:8f:bd:a5:87:f5:56:98:7a:71:82:6b:cc:c1:c6: c5:23:8f:3c:9d:e1:6f:58:e5:2d:f2:a4:6a:b8:de: ad:c1:82:ec:fc:d5:de:9b:a0:25:3f:b7:05:3d:51: 99:09:b7:bd:de:2f:72:d7:86:eb:8a:5f:a7:fe:dc: 6f:64:85:0d:83:5f:00:37:d6:54:83:82:69:bb:10: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:37:EF:4D:4D:4B:33:A8:D9:A9:55:AD:5C:96:60:38:66:DC:52:AE X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/XzfvTU1LM6jZqVWtXJZgOGbcUq4.roa sbgp-ipAddrBlock: critical IPv4: 210.152.204.0/24 Signature Algorithm: sha256WithRSAEncryption 83:a8:75:c7:a2:a0:22:89:62:35:b9:61:51:31:d4:1f:5d:db: a4:e1:03:19:92:0f:b4:40:cd:22:1e:35:81:f2:d8:3b:98:f2: 66:5c:51:16:1e:83:d9:a1:d1:ed:d9:2f:ce:71:cf:95:2e:f5: 1e:e3:d8:f6:a5:04:e8:a2:12:84:a8:ef:c1:8c:d5:c8:e9:99: 5c:b5:05:2d:54:97:77:11:e4:4f:8f:c6:d0:de:63:92:ff:ef: 11:47:88:93:c6:a2:40:31:74:9c:44:c8:cf:14:e2:61:d4:27: bb:04:f3:e4:da:28:b8:12:32:bf:fa:2f:e5:22:ea:b1:41:36: ca:0b:89:35:69:cd:06:0b:12:ce:69:1d:14:f3:29:d9:4d:0f: ab:5f:89:7d:1f:ae:52:e9:2d:c1:dc:7f:cb:81:56:e8:0d:9e: 87:48:35:ba:4b:ff:91:b8:e0:11:a5:7c:5c:4c:21:2a:c7:ad: 45:0c:dd:4f:5d:2c:29:96:7d:74:93:65:2f:70:8c:a6:a8:81: a4:3f:48:40:36:8d:a6:ee:29:6b:6d:3a:67:69:5f:2c:f9:d3: de:84:c6:e5:50:c7:7d:7b:26:fe:7e:e6:93:0f:1b:44:57:06: c1:87:6c:ba:68:ad:f7:7b:cc:32:68:1e:7d:3b:8d:51:eb:5d: 70:47:15:8f -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVGMzdFRjRENEQ0QjMz QThEOUE5NTVBRDVDOTY2MDM4NjZEQzUyQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAW5AnDPnc25RS/24jBb/T7mZGKKbkPzWzXZ8wpghvkmEmFoUs X1tHfwfang9CINzhtcZRWa0oy7kNHe02GBgLs1tE6ryldixBtGb72mq6nEwTQPxy r+4sMg3yI/5C5MlZdRVleahMGP1cdvNK3hiJrRcy95QJz1S6PWqNMr2xHIP2PLKt pq6wYtSioz74+IVDCUiulHHaKwhxfc9k8Yeyv4n+Uo9PDET8CcR4EmElOg7VbxeP vaWH9VaYenGCa8zBxsUjjzyd4W9Y5S3ypGq43q3Bguz81d6boCU/twU9UZkJt73e L3LXhuuKX6f+3G9khQ2DXwA31lSDgmm7EAAtAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUXzfvTU1LM6jZqVWtXJZgOGbcUq4wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9YemZ2VFUxTE02alpxVld0WEpaZ09HYmNVcTQucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0pjMMA0GCSqGSIb3DQEBCwUA A4IBAQCDqHXHoqAiiWI1uWFRMdQfXduk4QMZkg+0QM0iHjWB8tg7mPJmXFEWHoPZ odHt2S/Occ+VLvUe49j2pQToohKEqO/BjNXI6ZlctQUtVJd3EeRPj8bQ3mOS/+8R R4iTxqJAMXScRMjPFOJh1Ce7BPPk2ii4EjK/+i/lIuqxQTbKC4k1ac0GCxLOaR0U 8ynZTQ+rX4l9H65S6S3B3H/LgVboDZ6HSDW6S/+RuOARpXxcTCEqx61FDN1PXSwp ln10k2UvcIymqIGkP0hANo2m7ilrbTpnaV8s+dPehMblUMd9eyb+fuaTDxtEVwbB h2y6aK33e8wyaB59O41R611wRxWP -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:13 2026 by rpki-client