$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YVNxZg4o5B-JH-ISZFyTQ626YOY.roa File: YVNxZg4o5B-JH-ISZFyTQ626YOY.roa (raw, json) Hash identifier: 5Ba1IAAP5CG/L/hdFnR9Lt5jn5Dp6cQAo55kHlm5SZE= Subject key identifier: 61:53:71:66:0E:28:E4:1F:89:1F:E2:12:64:5C:93:43:AD:BA:60:E6 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01C3 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YVNxZg4o5B-JH-ISZFyTQ626YOY.roa Signing time: Tue 31 Mar 2026 07:54:04 +0000 ROA not before: Tue 31 Mar 2026 07:54:04 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.120.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:04 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=615371660E28E41F891FE212645C9343ADBA60E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:5b:b0:23:05:29:ba:69:1c:7f:b7:68:5e: a3:5b:ce:c7:b3:d1:6c:a6:7e:66:a2:97:89:5f:fd: c8:c3:5e:30:e7:ec:1e:65:ab:67:dc:0a:69:91:09: 3e:19:13:85:35:0c:04:3d:93:c7:b1:71:47:f0:6d: 4b:74:85:0e:28:ad:03:fa:11:b1:18:cb:af:3e:4f: eb:69:9d:1c:4d:76:35:b1:89:a8:a2:f1:39:00:37: 25:ef:e3:8e:a6:f7:4c:2c:fb:b2:06:be:2a:ba:51: c9:6f:0b:4c:c0:62:91:43:db:de:34:8e:a4:01:1e: 82:c9:72:5a:13:f2:c0:09:b7:3a:4f:f3:3d:63:f5: ac:01:96:46:22:cd:5d:bf:cf:52:b0:1c:76:da:a2: 3e:8a:1a:25:d2:5f:ca:76:28:d0:1b:2c:31:79:ed: 32:7f:86:dc:30:71:90:d7:94:0a:8a:60:08:b3:0d: 96:d2:2a:fc:7c:74:1e:e8:0c:21:f3:17:fa:f0:67: 9d:5e:11:ef:6b:7b:e8:2d:de:a5:3d:e8:80:48:44: 7a:ac:f5:a9:14:6a:2f:78:2c:3e:55:5c:9b:61:31: 7f:26:2c:7b:1e:fa:4d:c2:ea:7e:d6:2e:18:4d:f9: 75:7a:9b:b1:88:24:cc:5c:0f:de:f5:4c:4a:e4:6a: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:53:71:66:0E:28:E4:1F:89:1F:E2:12:64:5C:93:43:AD:BA:60:E6 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YVNxZg4o5B-JH-ISZFyTQ626YOY.roa sbgp-ipAddrBlock: critical IPv4: 211.120.48.0/20 Signature Algorithm: sha256WithRSAEncryption 14:3f:2d:60:7e:d5:49:05:c5:3a:05:0a:4b:92:37:b3:d5:c5: 4c:91:ad:12:06:fb:36:e8:da:64:04:d9:36:76:04:0e:e8:27: 00:07:dd:25:61:03:7a:17:98:c3:ba:f6:17:5a:a3:2d:f7:8c: 3e:8e:06:be:c1:53:b6:6a:74:58:66:12:7d:2b:e1:d6:e5:66: c1:d2:fa:9a:bd:db:cd:02:31:12:53:a6:fc:c1:48:b6:aa:58: 95:d7:66:45:2e:7e:50:d2:cb:98:e8:e9:14:7b:19:ef:9e:0f: fb:27:79:5a:e0:d9:e1:3a:59:b7:ee:64:ec:37:bf:ff:2b:85: 95:5e:22:a7:df:67:6a:62:38:85:d4:39:d1:62:72:4c:be:c9: 43:91:f9:a4:cb:88:2e:8c:c8:50:e3:ea:cc:64:e6:96:53:e8: dd:d4:75:f6:4d:8e:72:8e:6a:19:4d:3e:cb:16:0f:1b:03:c6: 7f:cd:23:b5:44:7e:a1:a7:a0:0c:1f:9d:bc:e3:1c:a4:4c:df: 09:a5:8f:7f:64:de:e1:46:8f:8e:cb:08:d0:bd:34:30:bc:00: d3:d2:6e:f6:9b:cd:cf:53:20:09:14:ef:06:8c:05:bf:28:30: 97:40:05:4b:b8:82:d8:47:07:2e:68:54:eb:30:e8:be:0c:8e: 06:af:f7:2b -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxNTM3MTY2MEUyOEU0 MUY4OTFGRTIxMjY0NUM5MzQzQURCQTYwRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpb1uwIwUpumkcf7doXqNbzsez0Wymfmail4lf/cjDXjDn7B5l q2fcCmmRCT4ZE4U1DAQ9k8excUfwbUt0hQ4orQP6EbEYy68+T+tpnRxNdjWxiaii 8TkANyXv446m90ws+7IGviq6UclvC0zAYpFD2940jqQBHoLJcloT8sAJtzpP8z1j 9awBlkYizV2/z1KwHHbaoj6KGiXSX8p2KNAbLDF57TJ/htwwcZDXlAqKYAizDZbS Kvx8dB7oDCHzF/rwZ51eEe9re+gt3qU96IBIRHqs9akUai94LD5VXJthMX8mLHse +k3C6n7WLhhN+XV6m7GIJMxcD971TErkaoVxAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUYVNxZg4o5B+JH+ISZFyTQ626YOYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9ZVk54Wmc0bzVCLUpILUlTWkZ5VFE2MjZZT1kucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE03gwMA0GCSqGSIb3DQEBCwUA A4IBAQAUPy1gftVJBcU6BQpLkjez1cVMka0SBvs26NpkBNk2dgQO6CcAB90lYQN6 F5jDuvYXWqMt94w+jga+wVO2anRYZhJ9K+HW5WbB0vqavdvNAjESU6b8wUi2qliV 12ZFLn5Q0suY6OkUexnvng/7J3la4NnhOlm37mTsN7//K4WVXiKn32dqYjiF1DnR YnJMvslDkfmky4gujMhQ4+rMZOaWU+jd1HX2TY5yjmoZTT7LFg8bA8Z/zSO1RH6h p6AMH5284xykTN8JpY9/ZN7hRo+OywjQvTQwvADT0m72m83PUyAJFO8GjAW/KDCX QAVLuILYRwcuaFTrMOi+DI4Gr/cr -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:50 2026 by rpki-client