$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eqQj4Pbx9sHkj9qeN2-1IzvBiRk.roa File: eqQj4Pbx9sHkj9qeN2-1IzvBiRk.roa (raw, json) Hash identifier: YyhXFSdKLiBrjO5ongwOLZOvaXhMs9vmNk0kGJKSFbM= Subject key identifier: 7A:A4:23:E0:F6:F1:F6:C1:E4:8F:DA:9E:37:6F:B5:23:3B:C1:89:19 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01B3 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eqQj4Pbx9sHkj9qeN2-1IzvBiRk.roa Signing time: Tue 31 Mar 2026 07:53:56 +0000 ROA not before: Tue 31 Mar 2026 07:53:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.2.204.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7AA423E0F6F1F6C1E48FDA9E376FB5233BC18919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:fe:96:e5:28:37:76:3c:7e:89:c8:5c:d0: 96:39:7c:6c:58:42:0a:6a:40:7a:85:23:74:2f:60: 39:a3:13:7d:64:a1:ef:66:bb:8d:bb:12:5a:a1:dc: d5:fb:5c:56:5c:8d:e9:84:4f:2f:5e:62:1e:dc:9a: 7b:44:31:bf:81:6e:23:66:be:9f:03:d2:79:19:28: 54:e0:f1:4f:63:84:38:20:08:35:31:c8:96:d0:f3: cf:03:74:58:85:0d:2b:74:82:76:22:d8:d1:3c:cc: 25:4c:fc:5c:4f:ea:4b:5d:2d:d5:39:61:d3:35:32: a2:80:59:a4:48:d3:77:84:9a:e8:b8:28:9b:15:cb: d0:77:24:30:c6:4b:bd:bd:99:3b:f2:10:f2:75:47: fb:de:7d:f4:1b:f4:de:99:71:3c:6c:a4:9e:2d:1e: b1:b0:54:65:0c:ff:aa:a6:5d:63:e9:11:a8:0f:6b: d5:03:48:b6:4f:83:16:99:17:71:be:1b:ab:a5:bf: bd:cc:10:ae:66:de:72:47:f0:0e:d1:cd:f2:fa:b3: 82:dc:28:9c:32:6e:be:13:db:81:48:cb:49:b2:98: bc:77:2f:80:28:1a:84:0b:bf:8b:84:cb:14:3e:1e: 77:ad:54:f2:c0:03:69:6f:79:cc:88:48:f5:4a:34: 09:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A4:23:E0:F6:F1:F6:C1:E4:8F:DA:9E:37:6F:B5:23:3B:C1:89:19 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eqQj4Pbx9sHkj9qeN2-1IzvBiRk.roa sbgp-ipAddrBlock: critical IPv4: 211.2.204.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:28:b7:7b:26:17:1c:61:7a:5c:c8:b1:1b:c2:74:3e:ec:62: 67:32:93:57:ab:72:a7:55:c9:f9:57:22:ff:c6:18:1a:11:e3: 22:f4:94:62:8c:69:b1:db:b7:e6:72:07:ee:83:48:00:70:e6: 47:2b:e6:82:01:1f:13:4a:ee:ef:c3:63:1f:fd:25:71:20:60: 19:b1:e4:e5:5c:1e:ac:c7:df:e0:f4:ca:78:16:85:c6:de:e8: cf:48:e8:09:c5:0a:49:42:67:86:a6:16:da:c5:c4:4a:21:66: 6e:e3:9a:1c:99:0c:b2:a1:76:f7:9a:f1:1d:75:76:67:98:b5: 35:50:2d:30:fe:ef:10:74:c0:90:99:32:31:18:19:3e:89:b8: df:4e:b2:e6:92:a7:06:af:01:6f:72:a4:49:35:5b:d2:30:b5: cb:cb:3d:2a:ab:be:6a:fd:81:65:90:66:b5:9f:35:89:07:d8: ae:de:78:f0:7f:f4:82:2a:23:fc:d9:63:ee:42:28:55:2f:f6: e6:5c:d8:9d:f6:32:66:b3:95:7d:39:11:47:a7:2d:f9:8c:bb: 2d:2b:3c:6e:12:be:d0:4e:28:ab:0e:6c:b9:44:b2:21:c9:0f: a2:e5:ba:17:38:94:7b:0f:d7:4c:86:4c:84:30:8a:70:2f:fe: aa:47:77:b7 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdBQTQyM0UwRjZGMUY2 QzFFNDhGREE5RTM3NkZCNTIzM0JDMTg5MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBqf6W5Sg3djx+ichc0JY5fGxYQgpqQHqFI3QvYDmjE31koe9m u427Elqh3NX7XFZcjemETy9eYh7cmntEMb+BbiNmvp8D0nkZKFTg8U9jhDggCDUx yJbQ888DdFiFDSt0gnYi2NE8zCVM/FxP6ktdLdU5YdM1MqKAWaRI03eEmui4KJsV y9B3JDDGS729mTvyEPJ1R/veffQb9N6ZcTxspJ4tHrGwVGUM/6qmXWPpEagPa9UD SLZPgxaZF3G+G6ulv73MEK5m3nJH8A7RzfL6s4LcKJwybr4T24FIy0mymLx3L4Ao GoQLv4uEyxQ+HnetVPLAA2lvecyISPVKNAkDAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUeqQj4Pbx9sHkj9qeN2+1IzvBiRkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9lcVFqNFBieDlzSGtqOXFlTjItMUl6dkJpUmsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0wLMMA0GCSqGSIb3DQEBCwUA A4IBAQAfKLd7JhccYXpcyLEbwnQ+7GJnMpNXq3KnVcn5VyL/xhgaEeMi9JRijGmx 27fmcgfug0gAcOZHK+aCAR8TSu7vw2Mf/SVxIGAZseTlXB6sx9/g9Mp4FoXG3ujP SOgJxQpJQmeGphbaxcRKIWZu45ocmQyyoXb3mvEddXZnmLU1UC0w/u8QdMCQmTIx GBk+ibjfTrLmkqcGrwFvcqRJNVvSMLXLyz0qq75q/YFlkGa1nzWJB9iu3njwf/SC KiP82WPuQihVL/bmXNid9jJms5V9ORFHpy35jLstKzxuEr7QTiirDmy5RLIhyQ+i 5boXOJR7D9dMhkyEMIpwL/6qR3e3 -----END CERTIFICATE-----Generated at Wed Apr 1 15:58:21 2026 by rpki-client