$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/f4xQE-2EzIQUSwh6XVFw1AtzCWo.roa File: f4xQE-2EzIQUSwh6XVFw1AtzCWo.roa (raw, json) Hash identifier: SGNxigXKfH5wClfHtGfQawzlakYxrfydhGj/9ms6+t8= Subject key identifier: 7F:8C:50:13:ED:84:CC:84:14:4B:08:7A:5D:51:70:D4:0B:73:09:6A Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0194 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/f4xQE-2EzIQUSwh6XVFw1AtzCWo.roa Signing time: Tue 31 Mar 2026 07:53:42 +0000 ROA not before: Tue 31 Mar 2026 07:53:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.171.120.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7F8C5013ED84CC84144B087A5D5170D40B73096A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:ad:cf:a4:c2:33:dc:a8:8e:fa:99:4c:54: 82:2a:51:d7:aa:f5:87:e4:f7:09:bf:e1:7b:c9:b2: f7:3f:04:81:b5:26:44:57:bb:05:ae:b7:1a:46:48: 0d:12:02:c4:d1:f5:19:f6:35:6b:ff:cb:d3:77:93: 7e:36:c6:5d:9a:33:63:1c:ff:07:b4:15:85:a0:2b: 88:3c:a5:cf:34:1e:52:03:d6:39:67:90:c6:96:6a: 23:4e:da:ab:96:e7:9e:0d:f3:af:18:79:d8:c2:df: 02:ce:2c:4f:75:01:be:d4:a0:3d:d8:58:b2:70:9b: 79:9d:3c:c3:2d:6d:e7:e7:60:1b:d6:9b:8f:32:70: b0:94:99:ab:b4:95:dd:a1:d1:c6:03:a6:9c:ac:81: 1f:da:99:36:4c:17:8f:b8:2b:f4:ff:b8:86:17:e3: 7d:ee:d0:46:1b:9d:f9:7d:57:55:0d:a3:96:41:8a: 2b:4c:94:a2:ae:d4:9c:68:db:ca:3f:a5:04:84:dc: 70:a9:f7:89:d9:68:de:84:15:d6:55:26:5e:34:ca: 6b:0c:f5:94:9d:0c:a3:04:41:7c:f3:2f:8a:3a:07: a9:2e:82:e5:62:55:c5:86:1e:11:9e:3c:85:26:83: 7c:7f:e6:1d:52:43:13:b3:45:70:b1:c7:2e:45:aa: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:50:13:ED:84:CC:84:14:4B:08:7A:5D:51:70:D4:0B:73:09:6A X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/f4xQE-2EzIQUSwh6XVFw1AtzCWo.roa sbgp-ipAddrBlock: critical IPv4: 210.171.120.0/23 Signature Algorithm: sha256WithRSAEncryption 75:4f:63:5a:a6:fb:14:00:99:f7:4e:00:93:c7:2f:01:b6:aa: 95:52:81:5a:28:52:00:a5:94:d0:41:77:45:5d:9a:ec:a8:6e: b9:da:33:67:44:e2:47:4b:e2:6e:f7:fd:19:62:f0:6a:73:0c: a6:15:8d:59:66:8c:13:7f:2e:78:c8:da:d2:38:1f:ae:11:7a: 27:0c:a7:1c:4f:60:c1:05:31:dc:36:25:0b:55:4b:23:19:19: 1b:63:8b:a1:c5:4b:6f:3c:5e:93:26:82:7e:93:19:57:d1:ef: 69:00:57:a0:dc:c5:98:08:f6:2b:e0:ea:91:e0:6a:9f:da:67: 1b:6d:52:17:3d:13:50:c9:cc:4b:39:89:e3:48:07:0a:37:28: 73:51:7e:d5:25:93:26:fb:19:93:b7:52:cc:e8:bd:54:63:fc: b7:ac:f1:70:b9:b0:f5:f9:db:de:0a:8b:b1:a3:2c:c1:6a:7b: ac:71:4f:00:af:b2:0c:2c:fd:7b:d2:88:7b:6d:16:3c:38:b3: 91:d9:f6:e8:36:0a:18:43:b6:6d:d8:04:78:8e:04:b5:fc:75: 27:9d:7e:41:c3:5d:9b:01:a7:16:22:e0:44:be:8b:e8:3e:6c: d1:4a:83:da:01:87:85:b7:ea:84:92:dc:c1:5e:5f:8c:ef:5d: d0:93:4b:13 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdGOEM1MDEzRUQ4NEND ODQxNDRCMDg3QTVENTE3MEQ0MEI3MzA5NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWa3PpMIz3KiO+plMVIIqUdeq9Yfk9wm/4XvJsvc/BIG1JkRX uwWutxpGSA0SAsTR9Rn2NWv/y9N3k342xl2aM2Mc/we0FYWgK4g8pc80HlID1jln kMaWaiNO2quW554N868YedjC3wLOLE91Ab7UoD3YWLJwm3mdPMMtbefnYBvWm48y cLCUmau0ld2h0cYDppysgR/amTZMF4+4K/T/uIYX433u0EYbnfl9V1UNo5ZBiitM lKKu1Jxo28o/pQSE3HCp94nZaN6EFdZVJl40ymsM9ZSdDKMEQXzzL4o6B6kuguVi VcWGHhGePIUmg3x/5h1SQxOzRXCxxy5FqkF7AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUf4xQE+2EzIQUSwh6XVFw1AtzCWowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9mNHhRRS0yRXpJUVVTd2g2WFZGdzFBdHpDV28ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0qt4MA0GCSqGSIb3DQEBCwUA A4IBAQB1T2NapvsUAJn3TgCTxy8BtqqVUoFaKFIApZTQQXdFXZrsqG652jNnROJH S+Ju9/0ZYvBqcwymFY1ZZowTfy54yNrSOB+uEXonDKccT2DBBTHcNiULVUsjGRkb Y4uhxUtvPF6TJoJ+kxlX0e9pAFeg3MWYCPYr4OqR4Gqf2mcbbVIXPRNQycxLOYnj SAcKNyhzUX7VJZMm+xmTt1LM6L1UY/y3rPFwubD1+dveCouxoyzBanuscU8Ar7IM LP170oh7bRY8OLOR2fboNgoYQ7Zt2AR4jgS1/HUnnX5Bw12bAacWIuBEvovoPmzR SoPaAYeFt+qEktzBXl+M713Qk0sT -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:13 2026 by rpki-client