$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/iWmOutoktl89c7znYjswS8TYNmo.roa File: iWmOutoktl89c7znYjswS8TYNmo.roa (raw, json) Hash identifier: E3s1s6Zp/zF8pRNsC9nA+su895EQFAZBvKJ7tRqTJRo= Subject key identifier: 89:69:8E:BA:DA:24:B6:5F:3D:73:BC:E7:62:3B:30:4B:C4:D8:36:6A Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01D6 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/iWmOutoktl89c7znYjswS8TYNmo.roa Signing time: Tue 31 Mar 2026 07:54:14 +0000 ROA not before: Tue 31 Mar 2026 07:54:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.239.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=89698EBADA24B65F3D73BCE7623B304BC4D8366A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:cb:42:a0:4d:4b:75:d0:4e:94:77:68:2f: 4b:df:7a:62:50:90:37:df:3d:49:74:9f:00:21:85: 0d:f8:0f:d2:c6:a9:f4:95:c9:a2:48:2d:c5:80:f3: 8c:3d:5b:df:67:53:fa:17:13:c0:6b:32:de:37:e4: 71:26:64:2b:53:f1:47:18:23:98:0e:9e:3e:c1:6d: 93:34:7c:4d:96:4b:71:58:37:e0:fa:8d:8b:f4:52: 59:93:6b:b0:e3:69:1f:13:4d:0f:4d:ce:1a:8f:d7: 0d:4a:bb:fe:ed:dc:27:ee:20:52:42:bb:8e:55:35: 59:da:3f:3f:e6:40:9c:6e:5d:b2:98:52:27:e5:54: 12:b1:53:34:87:6c:2a:81:17:e4:0b:20:fc:21:14: 7d:15:23:c0:d8:ae:2b:f4:4c:76:42:f7:d2:d5:e2: 89:ff:e2:40:60:e9:a0:61:24:b3:fe:21:e9:fc:d0: 1d:80:b1:bf:9a:20:00:41:4f:a8:68:f1:ad:1d:9b: ac:86:18:46:a7:3a:32:68:19:3d:c0:46:b3:29:42: 88:73:b9:42:57:3e:9f:17:90:02:f7:80:12:a0:ad: a9:c1:14:88:88:b6:53:c4:61:46:4b:9a:13:f2:66: 35:2c:00:e9:00:5c:71:59:66:5f:33:68:9e:97:dd: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:8E:BA:DA:24:B6:5F:3D:73:BC:E7:62:3B:30:4B:C4:D8:36:6A X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/iWmOutoktl89c7znYjswS8TYNmo.roa sbgp-ipAddrBlock: critical IPv4: 202.239.32.0/19 Signature Algorithm: sha256WithRSAEncryption cb:9d:ab:ec:cf:0d:cc:9a:44:15:98:4f:6f:c6:47:fa:fb:e6: 8f:8a:da:5a:c5:91:14:bd:ce:87:40:1e:bb:99:36:d0:1c:6d: cf:a1:f0:db:94:b2:d7:c8:2a:61:33:5f:62:e2:80:e7:07:06: f1:51:10:36:0a:d4:10:22:f5:e1:f7:be:99:67:97:dd:a9:e9: 79:ae:b9:48:77:d4:c0:31:e8:18:54:af:2e:cb:af:b2:f4:2a: a3:0f:b4:2b:52:2e:82:6d:2f:2d:c6:e5:ce:8f:cd:88:12:1f: d9:d0:3a:70:d6:66:ef:35:86:2d:c4:24:c0:b5:bd:00:3d:16: c2:ee:c6:c9:08:35:56:3e:77:6b:59:5f:5e:02:d0:1f:2b:7c: 0e:b7:c8:05:7a:a4:b5:35:93:47:52:f8:a2:5f:fc:b4:38:65: 94:64:3f:c8:cf:25:a7:5c:9e:fe:96:0e:42:19:96:d1:89:24: 75:45:58:7a:2c:6d:32:ed:ca:42:e2:7f:b0:da:fe:cf:63:ba: fb:63:c9:ef:7f:81:61:3d:21:65:4d:f2:cc:4c:ad:35:bb:59: 79:34:57:d2:0a:81:cb:1f:5d:f9:b4:7f:36:fe:c7:be:50:9f: b3:2e:be:48:ca:09:bf:97:ed:bc:a9:61:39:a0:66:4d:fe:1d: 3a:13:f1:79 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5Njk4RUJBREEyNEI2 NUYzRDczQkNFNzYyM0IzMDRCQzREODM2NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3HstCoE1LddBOlHdoL0vfemJQkDffPUl0nwAhhQ34D9LGqfSV yaJILcWA84w9W99nU/oXE8BrMt435HEmZCtT8UcYI5gOnj7BbZM0fE2WS3FYN+D6 jYv0UlmTa7DjaR8TTQ9NzhqP1w1Ku/7t3CfuIFJCu45VNVnaPz/mQJxuXbKYUifl VBKxUzSHbCqBF+QLIPwhFH0VI8DYriv0THZC99LV4on/4kBg6aBhJLP+Ien80B2A sb+aIABBT6ho8a0dm6yGGEanOjJoGT3ARrMpQohzuUJXPp8XkAL3gBKgranBFIiI tlPEYUZLmhPyZjUsAOkAXHFZZl8zaJ6X3Qv7AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUiWmOutoktl89c7znYjswS8TYNmowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9pV21PdXRva3RsODljN3puWWpzd1M4VFlObW8ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyu8gMA0GCSqGSIb3DQEBCwUA A4IBAQDLnavszw3MmkQVmE9vxkf6++aPitpaxZEUvc6HQB67mTbQHG3PofDblLLX yCphM19i4oDnBwbxURA2CtQQIvXh976ZZ5fdqel5rrlId9TAMegYVK8uy6+y9Cqj D7QrUi6CbS8txuXOj82IEh/Z0Dpw1mbvNYYtxCTAtb0APRbC7sbJCDVWPndrWV9e AtAfK3wOt8gFeqS1NZNHUviiX/y0OGWUZD/IzyWnXJ7+lg5CGZbRiSR1RVh6LG0y 7cpC4n+w2v7PY7r7Y8nvf4FhPSFlTfLMTK01u1l5NFfSCoHLH135tH82/se+UJ+z Lr5Iygm/l+28qWE5oGZN/h06E/F5 -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:29 2026 by rpki-client