$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aZ12jW5f83oA7ODZ2YVoF-X7Ko0.roa File: aZ12jW5f83oA7ODZ2YVoF-X7Ko0.roa (raw, json) Hash identifier: GF3ChurjNbRuxldeTKloWPIY1fOpzPTU1kijMf9gFTM= Subject key identifier: 69:9D:76:8D:6E:5F:F3:7A:00:EC:E0:D9:D9:85:68:17:E5:FB:2A:8D Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 018F Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aZ12jW5f83oA7ODZ2YVoF-X7Ko0.roa Signing time: Tue 31 Mar 2026 07:53:40 +0000 ROA not before: Tue 31 Mar 2026 07:53:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.171.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=699D768D6E5FF37A00ECE0D9D9856817E5FB2A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:0b:64:1c:5a:d4:de:72:a9:1b:28:30:c3: 2b:35:08:54:b4:f9:b8:63:ab:8d:b1:59:23:70:cb: d7:45:f6:a4:0d:5d:0b:2a:97:ab:22:e6:e4:c2:65: 43:1f:02:8d:25:28:a8:69:f5:73:00:c5:3c:8d:cc: db:1f:a4:04:5e:08:c9:47:e2:fc:23:c3:10:0d:ca: ed:5e:7b:13:96:2c:4f:63:86:fb:91:dd:56:ef:f3: 1d:4a:33:38:22:7d:6a:98:87:f7:0f:d0:87:35:8f: af:7a:9a:af:48:bd:23:00:78:b3:cb:28:a6:af:22: f5:3a:77:61:39:1c:ce:08:cc:7a:82:fe:c4:5e:eb: 8c:a8:21:a3:ef:c1:0d:d8:de:0c:f6:b9:05:43:1c: 6f:df:6b:22:25:a8:17:b8:1a:cc:cd:e8:06:ab:af: 92:c2:13:f7:d6:90:26:dc:59:e7:c8:6d:e1:ab:72: 22:1f:5b:68:a7:61:9f:4b:dc:db:d5:1a:79:d9:b9: 09:c3:45:5f:69:6b:2b:67:1e:21:ab:7c:f4:78:22: 0e:52:0a:66:dc:7d:cc:34:3b:bc:3a:03:c1:49:f0: 30:8a:93:48:b3:58:12:37:7a:4d:c7:6d:ea:95:60: b4:87:7f:53:41:f9:14:cf:38:5d:a4:13:ad:db:12: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:76:8D:6E:5F:F3:7A:00:EC:E0:D9:D9:85:68:17:E5:FB:2A:8D X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aZ12jW5f83oA7ODZ2YVoF-X7Ko0.roa sbgp-ipAddrBlock: critical IPv4: 210.171.96.0/22 Signature Algorithm: sha256WithRSAEncryption 78:dc:6b:4b:f2:c6:db:f5:d5:29:dd:fb:fe:3d:ff:80:70:45: 94:c3:38:00:bd:8e:52:21:b6:5b:0c:06:cb:c5:f0:32:98:8b: 7a:a4:5a:9d:20:dc:36:59:31:cf:13:ac:86:d8:ae:b8:82:a3: 91:e8:13:b7:2e:c6:e0:0d:e2:86:4e:88:af:dc:6c:f3:26:8d: 49:a0:dd:b8:27:86:91:f1:28:f0:e1:df:07:1f:7d:eb:54:34: 60:ea:90:e9:85:f0:19:75:00:fc:6f:b4:06:d7:d5:0e:1d:2e: e3:76:7f:a4:40:8f:00:95:88:65:6a:64:60:52:3d:84:4c:9c: d8:4d:f9:5c:83:c9:3d:ed:1a:ee:4f:fc:d4:b9:19:a1:37:6b: 61:eb:92:13:4d:28:22:83:25:81:34:02:96:32:5f:76:a0:a0: 2d:bb:9b:c7:5b:3d:24:b0:c8:c5:be:71:b7:2d:54:34:33:ae: 82:f9:a3:fd:e5:5a:76:1c:50:8e:ff:97:1a:68:f4:5e:6b:cd: ff:20:4d:21:81:00:1f:e7:1f:85:6f:83:a6:6b:af:4e:54:e4: a6:6f:6e:07:6e:fe:f3:bb:33:d6:da:b5:86:c2:86:c1:f3:5b: 9d:22:01:40:2c:06:4f:4b:0c:e6:4e:b1:3e:04:10:67:a2:9f: ff:ad:c7:72 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY5OUQ3NjhENkU1RkYz N0EwMEVDRTBEOUQ5ODU2ODE3RTVGQjJBOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlIgtkHFrU3nKpGygwwys1CFS0+bhjq42xWSNwy9dF9qQNXQsq l6si5uTCZUMfAo0lKKhp9XMAxTyNzNsfpAReCMlH4vwjwxANyu1eexOWLE9jhvuR 3Vbv8x1KMzgifWqYh/cP0Ic1j696mq9IvSMAeLPLKKavIvU6d2E5HM4IzHqC/sRe 64yoIaPvwQ3Y3gz2uQVDHG/fayIlqBe4GszN6Aarr5LCE/fWkCbcWefIbeGrciIf W2inYZ9L3NvVGnnZuQnDRV9paytnHiGrfPR4Ig5SCmbcfcw0O7w6A8FJ8DCKk0iz WBI3ek3HbeqVYLSHf1NB+RTPOF2kE63bEoLFAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUaZ12jW5f83oA7ODZ2YVoF+X7Ko0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9hWjEyalc1Zjgzb0E3T0RaMllWb0YtWDdLbzAucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0qtgMA0GCSqGSIb3DQEBCwUA A4IBAQB43GtL8sbb9dUp3fv+Pf+AcEWUwzgAvY5SIbZbDAbLxfAymIt6pFqdINw2 WTHPE6yG2K64gqOR6BO3LsbgDeKGToiv3GzzJo1JoN24J4aR8Sjw4d8HH33rVDRg 6pDphfAZdQD8b7QG19UOHS7jdn+kQI8AlYhlamRgUj2ETJzYTflcg8k97RruT/zU uRmhN2th65ITTSgigyWBNAKWMl92oKAtu5vHWz0ksMjFvnG3LVQ0M66C+aP95Vp2 HFCO/5caaPRea83/IE0hgQAf5x+Fb4Oma69OVOSmb24Hbv7zuzPW2rWGwobB81ud IgFALAZPSwzmTrE+BBBnop//rcdy -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:29 2026 by rpki-client