$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a8yEIMCh8KGtvqa8mLyTaHFfZOs.roa File: a8yEIMCh8KGtvqa8mLyTaHFfZOs.roa (raw, json) Hash identifier: MojbjBNtGugrhjQsjGH/NzdEUan1uRYwg2afUwKgvy8= Subject key identifier: 6B:CC:84:20:C0:A1:F0:A1:AD:BE:A6:BC:98:BC:93:68:71:5F:64:EB Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 016A Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a8yEIMCh8KGtvqa8mLyTaHFfZOs.roa Signing time: Tue 31 Mar 2026 07:53:22 +0000 ROA not before: Tue 31 Mar 2026 07:53:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 203.183.156.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6BCC8420C0A1F0A1ADBEA6BC98BC9368715F64EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:a2:bd:86:49:b8:c5:c4:c9:d2:27:b8:cf: b7:e4:5c:91:89:5c:d1:72:8d:57:15:75:a3:33:48: cf:bc:c6:2f:fa:f1:b9:23:95:f4:a7:f2:0e:98:08: a5:c3:4d:fe:fd:0d:0f:97:1a:84:20:37:48:1d:61: 81:5d:83:7c:ea:a8:ce:73:1b:2c:59:98:fe:0b:53: aa:6d:d0:54:e3:e9:57:36:0a:01:15:f6:1d:88:75: ea:6b:8d:cb:c0:b0:6b:0a:a0:5e:f3:81:6b:d6:80: 9c:71:93:93:c7:ad:af:6f:53:7a:34:d0:c8:6c:6a: b0:1e:53:92:e5:36:a6:7c:a5:08:3a:02:fb:7f:a4: 4d:f5:34:48:70:56:80:c3:d7:57:7d:a2:db:46:16: 2d:25:99:ec:7a:97:f2:a3:fa:bc:b1:83:d4:41:76: 15:dd:cf:c6:15:86:47:ab:5d:a8:4b:d5:93:ec:6e: b1:46:87:9a:77:bc:8d:da:e4:f3:19:f2:2d:5c:da: a0:24:32:e6:c5:8e:f3:34:60:e1:5e:db:d7:79:f2: 37:14:2f:54:03:b1:a6:6f:57:fc:f3:f9:11:a9:0c: f0:aa:db:91:7d:c8:12:8c:d8:de:a9:58:0b:74:e6: 36:8c:d0:a0:4b:3c:00:76:73:67:38:1a:39:7a:22: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CC:84:20:C0:A1:F0:A1:AD:BE:A6:BC:98:BC:93:68:71:5F:64:EB X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a8yEIMCh8KGtvqa8mLyTaHFfZOs.roa sbgp-ipAddrBlock: critical IPv4: 203.183.156.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:74:bc:83:f8:a9:68:25:e5:05:7f:22:40:f6:60:15:fe:8d: 97:61:cb:7a:f3:65:b5:50:f4:a9:c8:ea:5f:fa:3b:00:3c:7a: a7:92:5f:0c:60:c2:99:b0:c1:d9:9d:88:f2:10:e5:4b:76:b6: ff:c4:9b:92:5a:2a:39:50:be:39:3e:66:1f:2c:a1:39:8f:92: ea:38:70:cf:06:59:7b:df:dd:58:37:7f:70:a3:8b:18:c9:48: d4:7b:01:2b:c7:21:70:6a:8f:52:83:36:31:2a:72:09:09:c3: 25:6a:c4:7d:cd:5d:48:d3:3b:50:ed:f8:bc:ae:25:d7:16:f0: 24:1f:e4:89:12:2f:a2:01:00:c1:c6:d5:e4:ac:37:82:fd:82: 9e:3b:6e:e7:03:f6:83:64:f3:f3:44:0a:b2:ec:e8:46:0a:96: e3:c6:0c:59:80:60:72:d3:a4:af:bd:d7:05:d3:2a:a5:8e:27: 72:ea:3b:56:21:20:a3:e2:51:5e:d2:9c:1c:ec:20:e1:ef:ac: 2d:54:0b:40:4a:f8:31:f1:da:db:f7:bd:ff:f4:2f:e3:a3:dc: cc:bd:00:1f:e7:98:4c:55:35:b8:65:8b:17:2e:35:b6:29:63: 35:a5:31:35:08:03:1f:25:62:95:97:48:c7:4f:b1:de:d1:61: 30:36:40:de -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZCQ0M4NDIwQzBBMUYw QTFBREJFQTZCQzk4QkM5MzY4NzE1RjY0RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/DKK9hkm4xcTJ0ie4z7fkXJGJXNFyjVcVdaMzSM+8xi/68bkj lfSn8g6YCKXDTf79DQ+XGoQgN0gdYYFdg3zqqM5zGyxZmP4LU6pt0FTj6Vc2CgEV 9h2IdeprjcvAsGsKoF7zgWvWgJxxk5PHra9vU3o00MhsarAeU5LlNqZ8pQg6Avt/ pE31NEhwVoDD11d9ottGFi0lmex6l/Kj+ryxg9RBdhXdz8YVhkerXahL1ZPsbrFG h5p3vI3a5PMZ8i1c2qAkMubFjvM0YOFe29d58jcUL1QDsaZvV/zz+RGpDPCq25F9 yBKM2N6pWAt05jaM0KBLPAB2c2c4Gjl6IsW9AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUa8yEIMCh8KGtvqa8mLyTaHFfZOswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9hOHlFSU1DaDhLR3R2cWE4bUx5VGFIRmZaT3Mucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy7ecMA0GCSqGSIb3DQEBCwUA A4IBAQAedLyD+KloJeUFfyJA9mAV/o2XYct682W1UPSpyOpf+jsAPHqnkl8MYMKZ sMHZnYjyEOVLdrb/xJuSWio5UL45PmYfLKE5j5LqOHDPBll7391YN39wo4sYyUjU ewErxyFwao9SgzYxKnIJCcMlasR9zV1I0ztQ7fi8riXXFvAkH+SJEi+iAQDBxtXk rDeC/YKeO27nA/aDZPPzRAqy7OhGCpbjxgxZgGBy06SvvdcF0yqljidy6jtWISCj 4lFe0pwc7CDh76wtVAtASvgx8drb973/9C/jo9zMvQAf55hMVTW4ZYsXLjW2KWM1 pTE1CAMfJWKVl0jHT7He0WEwNkDe -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:27 2026 by rpki-client