$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/l4FTsxo6RJp5o00HteQHMH4q89M.roa File: l4FTsxo6RJp5o00HteQHMH4q89M.roa (raw, json) Hash identifier: rIS+7bNltYv6Zsdp+0pehS9B7CQD0ZQWlsRWFoDz13M= Subject key identifier: 97:81:53:B3:1A:3A:44:9A:79:A3:4D:07:B5:E4:07:30:7E:2A:F3:D3 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0149 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/l4FTsxo6RJp5o00HteQHMH4q89M.roa Signing time: Tue 31 Mar 2026 07:53:05 +0000 ROA not before: Tue 31 Mar 2026 07:53:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.152.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=978153B31A3A449A79A34D07B5E407307E2AF3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:59:af:77:ec:db:b9:4e:f8:d5:1e:4b:a4: 99:a4:e2:71:dc:9b:a1:f6:cd:23:b5:18:35:01:34: cc:1e:8e:a3:79:e8:d4:c4:b7:e6:46:a6:ad:ba:85: 10:d3:62:d3:9b:24:07:ef:48:bd:8a:39:75:b6:12: f9:ff:94:ba:73:6a:c9:e6:76:27:3d:fe:fc:93:88: 28:7f:4d:a1:61:e5:87:07:8f:2c:d2:5a:40:2f:6a: 09:20:0c:cf:3f:5d:56:9f:7a:91:d8:e4:01:4a:dd: fa:97:04:9e:48:3c:7a:0e:89:7e:4f:4f:69:9e:95: d5:b1:c3:0a:2e:81:fe:a6:ee:5b:16:33:b5:97:27: b6:06:20:58:84:46:ba:d3:ae:10:db:39:50:2c:f0: a5:9f:1a:31:d0:09:9e:ae:b0:68:e5:3a:47:67:3b: 3f:7f:06:73:3d:b8:e6:0d:10:d4:90:ca:b6:52:01: bd:08:fc:dd:43:d0:5c:93:0b:98:68:28:48:32:7e: c5:15:06:d1:58:37:2f:5f:fb:4e:19:6a:c9:28:49: c5:af:5b:65:a4:f0:0e:61:2e:c2:fb:f2:3a:a4:f3: c2:99:6a:d5:76:46:b4:6d:cd:7f:41:f1:d6:8c:20: a2:38:9c:00:ed:13:c3:d1:8a:ae:7b:4d:86:f2:d8: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:81:53:B3:1A:3A:44:9A:79:A3:4D:07:B5:E4:07:30:7E:2A:F3:D3 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/l4FTsxo6RJp5o00HteQHMH4q89M.roa sbgp-ipAddrBlock: critical IPv4: 210.152.0.0/20 Signature Algorithm: sha256WithRSAEncryption 12:00:b9:74:ef:d3:4f:bd:6a:44:ad:51:ac:c6:de:54:e7:ac: d9:dc:84:54:78:7d:a3:06:9a:c7:6a:d0:50:7f:d8:d1:77:16: 4e:dc:bc:a6:ef:cb:c0:0d:95:01:e6:71:a5:e1:63:59:47:ef: 57:bb:4e:6e:4b:78:8a:80:24:3a:11:b2:cd:9d:8d:78:9a:17: 09:07:e5:e9:c2:d4:dd:ff:cc:9d:86:6b:25:44:56:28:f1:70: 69:fe:99:ac:f4:77:c4:60:69:0b:bb:93:8a:e6:e1:a7:cf:17: e1:24:ed:a7:e8:a9:bc:89:7c:98:21:39:80:4c:c0:0f:fb:b1: e6:d7:db:e2:f2:64:ff:29:2d:32:f9:ad:76:fe:a9:21:25:04: a9:5b:57:79:88:34:e4:e6:e1:dc:12:57:f2:b2:94:fc:8a:ea: b5:e0:8f:2a:c6:97:74:d4:c5:91:20:6a:48:e6:26:fc:84:41: 88:6b:2b:ba:c4:37:92:3d:67:da:7a:d2:32:6f:6b:97:a2:ba: b7:5a:7a:8a:ec:af:e9:08:ae:f7:1d:36:e5:dd:a8:b8:02:31: 0c:d1:8d:e0:dd:41:b6:fa:7b:01:cd:58:d3:aa:01:59:c9:b0: dd:c9:ad:f3:3f:1d:86:a9:17:d0:5a:43:31:a5:9c:e7:cf:53: 7c:b5:21:fe -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3ODE1M0IzMUEzQTQ0 OUE3OUEzNEQwN0I1RTQwNzMwN0UyQUYzRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUdVmvd+zbuU741R5LpJmk4nHcm6H2zSO1GDUBNMwejqN56NTE t+ZGpq26hRDTYtObJAfvSL2KOXW2Evn/lLpzasnmdic9/vyTiCh/TaFh5YcHjyzS WkAvagkgDM8/XVafepHY5AFK3fqXBJ5IPHoOiX5PT2meldWxwwougf6m7lsWM7WX J7YGIFiERrrTrhDbOVAs8KWfGjHQCZ6usGjlOkdnOz9/BnM9uOYNENSQyrZSAb0I /N1D0FyTC5hoKEgyfsUVBtFYNy9f+04ZaskoScWvW2Wk8A5hLsL78jqk88KZatV2 RrRtzX9B8daMIKI4nADtE8PRiq57TYby2FPHAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUl4FTsxo6RJp5o00HteQHMH4q89MwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9sNEZUc3hvNlJKcDVvMDBIdGVRSE1INHE4OU0ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0pgAMA0GCSqGSIb3DQEBCwUA A4IBAQASALl079NPvWpErVGsxt5U56zZ3IRUeH2jBprHatBQf9jRdxZO3Lym78vA DZUB5nGl4WNZR+9Xu05uS3iKgCQ6EbLNnY14mhcJB+XpwtTd/8ydhmslRFYo8XBp /pms9HfEYGkLu5OK5uGnzxfhJO2n6Km8iXyYITmATMAP+7Hm19vi8mT/KS0y+a12 /qkhJQSpW1d5iDTk5uHcElfyspT8iuq14I8qxpd01MWRIGpI5ib8hEGIayu6xDeS PWfaetIyb2uXorq3WnqK7K/pCK73HTbl3ai4AjEM0Y3g3UG2+nsBzVjTqgFZybDd ya3zPx2GqRfQWkMxpZznz1N8tSH+ -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:30 2026 by rpki-client