$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k9w7jgMxU34gzmAbRttjLgzV5Z8.roa File: k9w7jgMxU34gzmAbRttjLgzV5Z8.roa (raw, json) Hash identifier: 3cZ7dHJn8m4IRVtTtAurLeon5UD/n70izCus1AzP/YU= Subject key identifier: 93:DC:3B:8E:03:31:53:7E:20:CE:60:1B:46:DB:63:2E:0C:D5:E5:9F Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01C1 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k9w7jgMxU34gzmAbRttjLgzV5Z8.roa Signing time: Tue 31 Mar 2026 07:54:03 +0000 ROA not before: Tue 31 Mar 2026 07:54:03 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.120.38.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=93DC3B8E0331537E20CE601B46DB632E0CD5E59F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:a6:97:3f:93:58:f6:e1:f2:a9:91:42:da: 02:0f:85:0e:32:37:4f:9f:df:e9:a8:45:a7:e2:92: 2c:a2:d3:f4:31:d8:c4:25:4b:72:3c:bd:4c:c0:2c: e4:68:e1:f2:a3:f4:eb:e6:ce:2a:0e:30:e6:cc:89: 1c:4e:40:85:94:e7:8d:23:19:f3:03:78:32:c7:f6: 4c:70:95:04:c7:e3:80:3d:b3:6c:3e:9f:e6:ca:37: c8:f5:f1:5e:13:93:f6:a2:7c:fe:80:6d:77:92:c6: 3c:21:86:34:83:ce:30:37:04:7f:93:dd:23:93:c8: 65:8b:6f:62:7d:8a:c8:b1:77:6e:6f:1f:d0:79:58: 57:30:42:ee:93:8c:2f:c8:ec:11:b3:3d:66:fe:73: 04:73:8a:57:d3:2a:75:bf:98:21:5c:61:27:40:92: 7a:2f:b5:4d:c3:e4:86:6b:93:95:19:94:80:2d:73: 34:55:5c:ae:6a:14:a5:cb:47:6e:41:97:65:f9:ed: 77:e8:32:ae:1c:ff:2b:87:d9:80:01:d7:50:e7:f9: 87:cf:66:40:c7:bb:ea:f2:a4:9a:53:7b:39:43:61: 1e:6e:85:59:39:7a:45:de:6f:2a:c0:d4:41:a2:8e: 8e:88:cf:3e:64:fa:ef:e2:a4:68:1a:75:d8:00:27: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DC:3B:8E:03:31:53:7E:20:CE:60:1B:46:DB:63:2E:0C:D5:E5:9F X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k9w7jgMxU34gzmAbRttjLgzV5Z8.roa sbgp-ipAddrBlock: critical IPv4: 211.120.38.0/23 Signature Algorithm: sha256WithRSAEncryption 42:92:5c:cd:ae:99:0d:21:b2:35:f9:dc:9b:b8:b7:54:f0:ec: e8:d5:f6:55:e1:14:9e:96:ef:1c:ae:e1:ec:92:aa:92:82:c1: 5a:35:87:29:0a:a6:93:67:48:69:c6:33:07:c5:49:9e:17:f8: 55:27:8e:09:2f:27:86:23:f7:63:c9:e3:61:c6:0d:58:8b:0b: 97:e4:99:7e:9d:92:70:cb:6c:be:e1:18:9c:ec:ac:a6:21:90: 58:75:19:bb:7e:23:1a:fe:b6:08:65:f0:41:19:c0:99:91:f0: e8:02:c9:1e:4f:21:bd:98:bb:7b:08:a9:84:e1:0b:e0:d2:20: 88:84:75:fd:e1:95:76:c6:77:d8:f1:01:45:d8:1b:18:26:2a: 6a:43:28:5f:b0:bb:bc:f1:3f:74:c5:97:0d:7b:61:1a:2d:1a: 31:5b:a5:a6:10:88:b2:d8:48:43:dc:67:8d:ea:ec:0e:bb:15: 8c:44:71:46:78:a3:e2:6d:9b:da:74:9e:ff:37:0a:46:8d:00: 5e:89:70:06:f9:b8:8f:49:74:b0:b2:95:6d:18:a0:67:7f:f4: 0d:6c:2b:0a:9c:d8:ae:c6:4d:8b:e1:30:da:15:76:12:e8:7d: 8e:78:e0:44:77:8c:fb:ac:d9:63:03:27:6e:cc:2f:7d:11:d8: fe:11:32:52 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzREMzQjhFMDMzMTUz N0UyMENFNjAxQjQ2REI2MzJFMENENUU1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9vaaXP5NY9uHyqZFC2gIPhQ4yN0+f3+moRafikiyi0/Qx2MQl S3I8vUzALORo4fKj9OvmzioOMObMiRxOQIWU540jGfMDeDLH9kxwlQTH44A9s2w+ n+bKN8j18V4Tk/aifP6AbXeSxjwhhjSDzjA3BH+T3SOTyGWLb2J9isixd25vH9B5 WFcwQu6TjC/I7BGzPWb+cwRzilfTKnW/mCFcYSdAknovtU3D5IZrk5UZlIAtczRV XK5qFKXLR25Bl2X57XfoMq4c/yuH2YAB11Dn+YfPZkDHu+rypJpTezlDYR5uhVk5 ekXebyrA1EGijo6Izz5k+u/ipGgaddgAJyQBAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUk9w7jgMxU34gzmAbRttjLgzV5Z8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9rOXc3amdNeFUzNGd6bUFiUnR0akxnelY1Wjgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB03gmMA0GCSqGSIb3DQEBCwUA A4IBAQBCklzNrpkNIbI1+dybuLdU8Ozo1fZV4RSelu8cruHskqqSgsFaNYcpCqaT Z0hpxjMHxUmeF/hVJ44JLyeGI/djyeNhxg1YiwuX5Jl+nZJwy2y+4Ric7KymIZBY dRm7fiMa/rYIZfBBGcCZkfDoAskeTyG9mLt7CKmE4Qvg0iCIhHX94ZV2xnfY8QFF 2BsYJipqQyhfsLu88T90xZcNe2EaLRoxW6WmEIiy2EhD3GeN6uwOuxWMRHFGeKPi bZvadJ7/NwpGjQBeiXAG+biPSXSwspVtGKBnf/QNbCsKnNiuxk2L4TDaFXYS6H2O eOBEd4z7rNljAyduzC99Edj+ETJS -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:44 2026 by rpki-client