$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/bxcnZSa3N1bsHcT-gK7LK5_O2Ns.roa File: bxcnZSa3N1bsHcT-gK7LK5_O2Ns.roa (raw, json) Hash identifier: MYcATnA1nA0VMSbqko5VfbmutVjTWaSFf2pG/UNn3rk= Subject key identifier: 6F:17:27:65:26:B7:37:56:EC:1D:C4:FE:80:AE:CB:2B:9F:CE:D8:DB Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01CF Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/bxcnZSa3N1bsHcT-gK7LK5_O2Ns.roa Signing time: Tue 31 Mar 2026 07:54:10 +0000 ROA not before: Tue 31 Mar 2026 07:54:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 203.137.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6F17276526B73756EC1DC4FE80AECB2B9FCED8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:9a:57:a0:97:fd:b9:c5:df:6b:fc:38:4c: 1b:6e:9e:40:bf:4f:fd:e0:13:a3:20:c2:5a:7a:3c: e4:b9:fb:bb:35:e2:f9:1e:e8:03:6a:9d:c9:24:7b: af:df:af:cc:c9:16:19:76:37:0f:f3:d2:db:96:a9: 39:4a:33:65:08:6e:f9:3f:cf:34:2b:87:1b:bd:48: b2:4e:4d:06:ae:37:8e:9a:82:a5:7f:c4:81:62:f5: 33:3e:f3:ad:c8:9c:bb:62:e4:98:80:db:3b:17:a2: 70:c5:1f:e3:c6:fe:e2:5f:09:c3:b2:c0:d6:0e:e2: cd:4e:43:18:82:8d:20:c4:7b:73:b1:14:19:8c:b3: e7:eb:58:f6:9f:3d:16:79:04:14:bc:67:1d:ae:3a: 48:e2:9a:fd:a0:65:65:01:ca:df:47:d4:46:a5:4e: 30:a2:1d:ab:07:d9:c5:cb:76:1a:7a:87:89:88:ce: f2:42:23:b7:59:c7:ba:8c:e5:ba:3c:c5:e1:6e:02: f0:db:1a:dd:0a:19:30:7e:fa:48:c3:5f:14:ee:fd: 4d:0f:8e:5a:bb:03:40:16:4a:a8:41:d8:11:c1:9c: c6:0e:89:65:6d:6f:8a:6e:d7:25:70:8d:f5:3e:72: 47:57:64:a6:bb:11:0c:61:4e:5d:24:0a:51:a1:da: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:17:27:65:26:B7:37:56:EC:1D:C4:FE:80:AE:CB:2B:9F:CE:D8:DB X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/bxcnZSa3N1bsHcT-gK7LK5_O2Ns.roa sbgp-ipAddrBlock: critical IPv4: 203.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:63:7f:99:02:91:34:6a:09:21:07:f4:f1:58:45:4f:32:c1: 4f:5d:48:04:e6:a2:bf:df:ac:c7:10:4d:ca:1e:21:b9:97:e6: 1c:01:3e:86:6a:fc:30:da:72:32:8a:d1:42:05:5c:14:ab:dd: d2:09:11:0a:d4:9c:3b:8f:74:0b:08:9e:4c:cb:34:7f:66:18: f3:23:0a:eb:24:55:06:95:a4:1d:d3:8f:42:74:85:6c:3f:3a: f2:95:ad:6c:f0:0f:9a:67:74:97:66:90:ea:0f:e3:ed:46:44: 0c:1d:78:40:98:36:a6:78:0c:3d:71:ac:8a:c7:04:dc:f9:8b: e1:4c:a1:3e:b6:89:e3:aa:66:db:df:ec:df:5a:f2:c7:34:d1: 10:16:ad:cd:a7:c8:5a:00:66:56:f0:ed:7f:bc:e0:2a:0c:48: c1:f4:d3:4c:51:5a:83:1d:f9:e0:6d:bd:cf:6f:81:92:fb:4f: 97:ae:04:5f:17:b6:8b:2d:13:1b:11:05:dc:9b:a8:1b:a2:06: 50:6b:ad:07:16:de:05:b7:05:92:50:8c:66:5c:f9:98:af:cb: c8:87:57:3b:9b:8b:0f:6f:e3:f9:31:d9:d4:48:5e:b7:3d:6c: 65:69:bc:d3:11:ad:92:68:70:be:bd:ca:87:f3:f6:2a:21:97: 81:29:00:e0 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZGMTcyNzY1MjZCNzM3 NTZFQzFEQzRGRTgwQUVDQjJCOUZDRUQ4REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHrppXoJf9ucXfa/w4TBtunkC/T/3gE6Mgwlp6POS5+7s14vke 6ANqnckke6/fr8zJFhl2Nw/z0tuWqTlKM2UIbvk/zzQrhxu9SLJOTQauN46agqV/ xIFi9TM+863InLti5JiA2zsXonDFH+PG/uJfCcOywNYO4s1OQxiCjSDEe3OxFBmM s+frWPafPRZ5BBS8Zx2uOkjimv2gZWUByt9H1EalTjCiHasH2cXLdhp6h4mIzvJC I7dZx7qM5bo8xeFuAvDbGt0KGTB++kjDXxTu/U0Pjlq7A0AWSqhB2BHBnMYOiWVt b4pu1yVwjfU+ckdXZKa7EQxhTl0kClGh2nzzAgMBAAGjggHcMIIB2DAdBgNVHQ4E FgQUbxcnZSa3N1bsHcT+gK7LK5/O2NswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9ieGNuWlNhM04xYnNIY1QtZ0s3TEs1X08yTnMucm9h MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy4kwDQYJKoZIhvcNAQELBQAD ggEBAFZjf5kCkTRqCSEH9PFYRU8ywU9dSATmor/frMcQTcoeIbmX5hwBPoZq/DDa cjKK0UIFXBSr3dIJEQrUnDuPdAsInkzLNH9mGPMjCuskVQaVpB3Tj0J0hWw/OvKV rWzwD5pndJdmkOoP4+1GRAwdeECYNqZ4DD1xrIrHBNz5i+FMoT62ieOqZtvf7N9a 8sc00RAWrc2nyFoAZlbw7X+84CoMSMH000xRWoMd+eBtvc9vgZL7T5euBF8Xtost ExsRBdybqBuiBlBrrQcW3gW3BZJQjGZc+Zivy8iHVzubiw9v4/kx2dRIXrc9bGVp vNMRrZJocL69yofz9iohl4EpAOA= -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:25 2026 by rpki-client