$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/idh2WZWgqSfhXtPd-nVPQ-oukzs.roa File: idh2WZWgqSfhXtPd-nVPQ-oukzs.roa (raw, json) Hash identifier: aD6bIVRX4gTjn6DcYAaAAA8UJPsUd7srhtKx2Gn6unQ= Subject key identifier: 89:D8:76:59:95:A0:A9:27:E1:5E:D3:DD:FA:75:4F:43:EA:2E:93:3B Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0166 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/idh2WZWgqSfhXtPd-nVPQ-oukzs.roa Signing time: Tue 31 Mar 2026 07:53:20 +0000 ROA not before: Tue 31 Mar 2026 07:53:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 203.183.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=89D8765995A0A927E15ED3DDFA754F43EA2E933B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:64:a2:e7:68:b9:24:c1:9e:0a:ff:e4:d5: 4b:48:bb:21:be:fd:7c:15:17:2b:fc:c9:26:09:c9: 10:59:58:ff:93:e4:aa:f6:f4:19:76:1b:1d:df:22: 64:2f:1d:12:21:91:d2:b1:ca:5f:98:0b:7e:45:90: e8:3d:d3:58:0d:42:44:76:07:ec:15:24:0c:b2:cf: 01:dd:a1:c3:89:6e:f6:5b:94:b9:48:79:70:45:25: 8e:64:6f:d6:39:e1:2e:39:6f:5d:bd:8d:df:ac:68: 57:b8:c3:91:64:3c:1f:d2:4e:f7:ef:fd:2a:01:80: e4:fc:67:b8:f2:4e:68:68:b7:49:b6:3b:ab:d0:3e: 8b:4d:1f:d2:ec:47:6a:44:9e:f0:8e:20:8c:d5:f8: 51:d4:47:f7:82:5e:a1:77:8f:53:45:81:cc:05:7e: 9a:35:c0:10:0a:f5:fa:db:e9:22:3d:ea:86:e3:9b: fb:c2:c8:d0:33:1b:40:b9:4d:af:5d:f9:e6:00:72: ca:aa:9f:3b:b2:ee:d0:32:04:44:62:a8:f7:42:d0: e2:2c:47:ef:6c:39:f5:de:b5:1b:e0:58:76:61:d8: 01:65:e4:84:6c:38:ca:4d:2b:0d:f4:01:99:97:50: 06:90:a5:5b:4b:df:c1:e6:0a:c1:78:d5:34:52:1e: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:76:59:95:A0:A9:27:E1:5E:D3:DD:FA:75:4F:43:EA:2E:93:3B X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/idh2WZWgqSfhXtPd-nVPQ-oukzs.roa sbgp-ipAddrBlock: critical IPv4: 203.183.0.0/17 Signature Algorithm: sha256WithRSAEncryption 62:28:a5:03:a3:17:25:18:ed:01:b8:01:81:d5:e2:b6:be:c7: 55:16:b6:e5:7c:a9:a3:39:34:8f:da:a8:18:8b:f7:6f:08:07: 7b:32:37:2d:a8:3d:8d:39:e8:cc:5c:79:cc:b8:18:15:eb:2d: b7:3f:2f:73:17:8e:96:09:c5:73:60:77:38:6f:2a:84:72:ac: e0:47:d2:6d:80:a7:05:55:68:87:2a:c9:68:fa:51:a9:2e:2f: b6:e5:3a:00:27:0e:04:af:08:b0:b6:37:20:9f:db:e1:c6:66: fa:13:24:c1:a4:2b:7c:7a:39:e5:a0:b3:2f:3a:75:06:68:ed: 68:94:77:db:d7:1e:70:fa:dc:fe:7b:b2:33:86:96:9c:4b:75: 62:51:9b:7f:8e:e6:40:ed:22:e9:6d:a9:56:b4:ed:cb:55:40: 66:fc:d1:fa:e5:63:de:ca:25:75:e3:d5:37:6e:bc:ce:5f:fe: 77:a4:c8:d5:dc:f8:a0:c7:67:4e:38:11:a3:49:39:a7:98:82: 71:de:46:aa:15:07:91:68:9d:bf:71:64:f9:b0:f7:04:87:3d: e4:72:0a:86:9b:a9:a8:1b:a4:0f:9a:12:4a:6e:f1:6b:52:98: 10:47:d5:ab:e4:1b:c8:6e:0b:c8:32:10:c3:7a:5b:df:fe:39: 5a:b5:3c:7e -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5RDg3NjU5OTVBMEE5 MjdFMTVFRDNEREZBNzU0RjQzRUEyRTkzM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCyWSi52i5JMGeCv/k1UtIuyG+/XwVFyv8ySYJyRBZWP+T5Kr2 9Bl2Gx3fImQvHRIhkdKxyl+YC35FkOg901gNQkR2B+wVJAyyzwHdocOJbvZblLlI eXBFJY5kb9Y54S45b129jd+saFe4w5FkPB/STvfv/SoBgOT8Z7jyTmhot0m2O6vQ PotNH9LsR2pEnvCOIIzV+FHUR/eCXqF3j1NFgcwFfpo1wBAK9frb6SI96objm/vC yNAzG0C5Ta9d+eYAcsqqnzuy7tAyBERiqPdC0OIsR+9sOfXetRvgWHZh2AFl5IRs OMpNKw30AZmXUAaQpVtL38HmCsF41TRSHpAJAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUidh2WZWgqSfhXtPd+nVPQ+oukzswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9pZGgyV1pXZ3FTZmhYdFBkLW5WUFEtb3VrenMucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHy7cAMA0GCSqGSIb3DQEBCwUA A4IBAQBiKKUDoxclGO0BuAGB1eK2vsdVFrblfKmjOTSP2qgYi/dvCAd7MjctqD2N OejMXHnMuBgV6y23Py9zF46WCcVzYHc4byqEcqzgR9JtgKcFVWiHKslo+lGpLi+2 5ToAJw4Erwiwtjcgn9vhxmb6EyTBpCt8ejnloLMvOnUGaO1olHfb1x5w+tz+e7Iz hpacS3ViUZt/juZA7SLpbalWtO3LVUBm/NH65WPeyiV149U3brzOX/53pMjV3Pig x2dOOBGjSTmnmIJx3kaqFQeRaJ2/cWT5sPcEhz3kcgqGm6moG6QPmhJKbvFrUpgQ R9Wr5BvIbgvIMhDDelvf/jlatTx+ -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:38 2026 by rpki-client