$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hvrIFIf7eTCYjRobuve-Balaols.roa File: hvrIFIf7eTCYjRobuve-Balaols.roa (raw, json) Hash identifier: AUDOGHyYWzX27JRoMZYjTWCDm44jP5fEJefFOUJqm8Q= Subject key identifier: 86:FA:C8:14:87:FB:79:30:98:8D:1A:1B:BA:F7:BE:05:A9:5A:A2:5B Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01A4 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hvrIFIf7eTCYjRobuve-Balaols.roa Signing time: Tue 31 Mar 2026 07:53:49 +0000 ROA not before: Tue 31 Mar 2026 07:53:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.236.236.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=86FAC81487FB7930988D1A1BBAF7BE05A95AA25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:2a:c8:4e:c2:07:2f:c2:96:2d:48:15:17: 10:34:e1:10:72:5f:20:1b:d2:36:3b:6c:55:93:dd: e1:db:ad:a9:db:d1:07:cf:0b:d4:d9:74:80:12:65: 37:42:b8:1f:2b:25:71:17:b5:7f:6e:a7:99:e2:a7: 0a:6d:17:c4:1e:46:19:ba:d2:e5:8c:e5:ea:29:1e: 16:cf:9c:bf:b7:f8:b4:10:78:64:ce:62:eb:83:fd: 22:7e:d1:cf:6f:6c:9d:f9:7f:6b:f4:7f:ed:ba:b8: c9:cb:c3:ac:9c:e5:14:f2:00:bd:da:b3:87:e1:fb: d2:91:8c:cc:fd:a4:31:56:1f:f8:95:09:7a:16:42: fa:96:f2:60:3e:d7:b4:4e:9d:69:32:a9:13:8a:1a: ae:5f:ec:d6:fa:35:56:1b:95:51:89:7f:b2:38:4e: 63:05:e3:8c:e3:a0:3c:66:c6:6a:fb:7c:f5:db:7e: 18:1f:7e:79:f8:97:ed:dc:e4:35:d0:d3:67:b1:87: 2e:81:ed:cb:92:a9:7b:7d:94:e4:21:b6:85:5f:a5: 63:18:7c:80:18:68:91:77:ac:bd:e9:2f:da:05:8b: ab:30:e2:c5:09:c5:2e:2c:4d:79:b3:6e:23:10:37: 7b:dc:c7:11:67:65:a3:21:1d:47:41:61:25:d6:da: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FA:C8:14:87:FB:79:30:98:8D:1A:1B:BA:F7:BE:05:A9:5A:A2:5B X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hvrIFIf7eTCYjRobuve-Balaols.roa sbgp-ipAddrBlock: critical IPv4: 210.236.236.0/22 Signature Algorithm: sha256WithRSAEncryption 59:d7:74:03:51:d1:43:9c:98:b3:05:44:a2:f5:0d:71:05:e8: 78:a4:25:83:c2:b5:7c:3d:96:e5:78:8d:97:65:1a:c5:8c:0c: 62:e5:1f:6c:f2:4e:ff:2c:77:8b:ac:e7:ec:5e:f8:66:5c:69: 69:d3:17:89:95:0b:36:a5:6e:14:08:0f:cf:a3:cd:cf:a6:e9: 90:74:a7:87:1e:b4:26:b7:32:95:26:29:ff:2e:a8:26:ee:82: 63:47:8a:39:8f:da:a2:ba:22:8e:e4:ee:8e:80:f7:95:0e:bf: 0e:69:a5:0f:f6:36:3d:7f:c6:51:4d:38:a0:05:ff:c8:d9:5b: 17:eb:53:6d:87:5c:ca:02:ab:d7:1e:e9:03:00:4b:95:9a:80: ba:5f:fd:c3:b9:6d:09:3e:39:e3:2a:a3:5f:d2:96:c5:6b:c2: 45:5d:1c:14:7d:7b:26:96:c5:b6:c1:41:38:31:68:bb:e4:a5: 6f:b6:6c:5d:81:04:bf:d8:ac:44:20:78:a5:8f:ca:87:1b:e8: c5:dd:73:fc:e8:d4:72:39:1d:ab:0c:cf:22:12:94:a2:5a:bc: 73:09:6d:b7:b8:d8:c6:50:54:eb:7a:8b:f0:31:28:4c:af:87: 0d:3d:2a:10:8a:bb:10:47:7e:30:65:c4:25:db:fd:8e:03:cd: 03:76:4c:bf -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2RkFDODE0ODdGQjc5 MzA5ODhEMUExQkJBRjdCRTA1QTk1QUEyNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaoirITsIHL8KWLUgVFxA04RByXyAb0jY7bFWT3eHbranb0QfP C9TZdIASZTdCuB8rJXEXtX9up5nipwptF8QeRhm60uWM5eopHhbPnL+3+LQQeGTO YuuD/SJ+0c9vbJ35f2v0f+26uMnLw6yc5RTyAL3as4fh+9KRjMz9pDFWH/iVCXoW QvqW8mA+17ROnWkyqROKGq5f7Nb6NVYblVGJf7I4TmMF44zjoDxmxmr7fPXbfhgf fnn4l+3c5DXQ02exhy6B7cuSqXt9lOQhtoVfpWMYfIAYaJF3rL3pL9oFi6sw4sUJ xS4sTXmzbiMQN3vcxxFnZaMhHUdBYSXW2ge5AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUhvrIFIf7eTCYjRobuve+BalaolswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9odnJJRklmN2VUQ1lqUm9idXZlLUJhbGFvbHMucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0uzsMA0GCSqGSIb3DQEBCwUA A4IBAQBZ13QDUdFDnJizBUSi9Q1xBeh4pCWDwrV8PZbleI2XZRrFjAxi5R9s8k7/ LHeLrOfsXvhmXGlp0xeJlQs2pW4UCA/Po83PpumQdKeHHrQmtzKVJin/Lqgm7oJj R4o5j9qiuiKO5O6OgPeVDr8OaaUP9jY9f8ZRTTigBf/I2VsX61Nth1zKAqvXHukD AEuVmoC6X/3DuW0JPjnjKqNf0pbFa8JFXRwUfXsmlsW2wUE4MWi75KVvtmxdgQS/ 2KxEIHilj8qHG+jF3XP86NRyOR2rDM8iEpSiWrxzCW23uNjGUFTreovwMShMr4cN PSoQirsQR34wZcQl2/2OA80Ddky/ -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:25 2026 by rpki-client