$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lJqUhVbs5zZQRZE07t7uGpLlvTk.roa File: lJqUhVbs5zZQRZE07t7uGpLlvTk.roa (raw, json) Hash identifier: G2qLwuWFhuCuboYwROTMKieiJH9uiBD2pNzj35AEZSA= Subject key identifier: 94:9A:94:85:56:EC:E7:36:50:45:91:34:EE:DE:EE:1A:92:E5:BD:39 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0133 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lJqUhVbs5zZQRZE07t7uGpLlvTk.roa Signing time: Tue 31 Mar 2026 07:52:53 +0000 ROA not before: Tue 31 Mar 2026 07:52:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.230.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:52:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=949A948556ECE73650459134EEDEEE1A92E5BD39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:e0:eb:22:64:04:44:ab:49:fe:62:92:50: 5c:c6:93:23:c8:4a:88:e4:5a:e8:a9:5a:84:e4:77: 6f:72:df:49:5e:d6:df:9b:8a:0b:00:b3:48:7f:0e: f9:78:5a:7b:65:66:19:e0:8a:6f:60:8c:3f:e8:9b: 32:2f:e8:c4:83:a7:cf:bd:9f:84:2c:1e:50:c9:79: a2:f6:61:56:55:31:81:5a:d7:10:2b:9e:98:a8:d7: 4a:00:17:6e:e1:64:66:06:36:81:71:8a:e0:cd:31: 10:73:05:d0:3b:da:9a:66:f3:04:9a:13:31:98:e2: 29:c5:8a:56:8f:56:3a:1b:a9:3e:07:60:73:94:d0: 51:c8:5a:05:da:b9:3e:91:9b:68:1b:d1:2e:ec:7d: 36:01:8b:00:b8:72:5b:d6:2d:9e:f7:d3:45:28:ea: b6:75:c6:10:ba:12:22:01:1b:9e:b4:f7:58:76:ec: b5:96:b1:fe:68:a3:ee:6b:3c:ef:a9:72:77:2f:c3: 3c:e7:e1:17:69:a1:28:76:44:31:ad:c4:c0:a5:d8: 3f:f7:35:65:11:34:23:5e:5f:b7:8e:c0:2e:ce:db: 50:36:8a:1f:07:99:e7:85:12:9e:dc:63:f1:a8:4b: 93:57:32:95:23:9b:aa:57:48:0a:48:d6:94:1c:0b: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9A:94:85:56:EC:E7:36:50:45:91:34:EE:DE:EE:1A:92:E5:BD:39 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lJqUhVbs5zZQRZE07t7uGpLlvTk.roa sbgp-ipAddrBlock: critical IPv4: 202.230.207.0/24 Signature Algorithm: sha256WithRSAEncryption 29:63:3f:b5:05:ea:36:b8:ef:e2:e1:32:0a:d6:af:d1:38:ec: ab:1f:60:ce:04:70:33:dc:48:a6:be:b2:9b:f3:90:02:fe:4d: 60:7a:5b:03:e3:14:68:42:3e:d6:f6:3c:4f:17:ce:d5:7e:e3: c3:73:83:37:f2:b5:b7:d0:66:e9:42:12:bc:40:08:e4:be:a4: 22:3e:75:23:8a:28:c7:c5:d7:81:d9:1c:d2:cd:7e:cb:1c:4f: 47:00:09:a7:15:d0:93:3e:ea:83:ec:46:50:74:a8:43:e5:50: 3d:f5:83:2e:6f:32:f5:9a:fd:fb:07:79:ae:39:61:59:cc:cc: 4b:e9:eb:2f:20:81:6f:f6:5a:1e:3e:8e:bc:5b:b0:53:60:d3: 45:68:60:63:d0:e8:d6:f8:51:64:c6:18:a5:f0:2f:af:65:fb: b5:cb:78:b0:a4:74:10:cd:bb:bc:8d:f6:4b:fb:ab:91:e2:04: f7:ca:77:cd:9d:63:fc:45:de:f7:51:6b:05:4a:61:b5:1d:e5: 26:2d:90:fc:a1:b5:75:4d:3b:ac:b8:67:fd:83:3d:1e:7f:ac: 41:b6:1a:dd:0c:c9:80:af:ec:aa:5f:04:e2:b0:d8:94:9c:52: c8:54:22:04:55:2b:31:e5:2c:f3:1d:9c:ff:e7:cf:7c:47:22: c8:0d:4e:4b -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUyNTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0OUE5NDg1NTZFQ0U3 MzY1MDQ1OTEzNEVFREVFRTFBOTJFNUJEMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCihODrImQERKtJ/mKSUFzGkyPISojkWuipWoTkd29y30le1t+b igsAs0h/Dvl4WntlZhngim9gjD/omzIv6MSDp8+9n4QsHlDJeaL2YVZVMYFa1xAr npio10oAF27hZGYGNoFxiuDNMRBzBdA72ppm8wSaEzGY4inFilaPVjobqT4HYHOU 0FHIWgXauT6Rm2gb0S7sfTYBiwC4clvWLZ7300Uo6rZ1xhC6EiIBG56091h27LWW sf5oo+5rPO+pcncvwzzn4RdpoSh2RDGtxMCl2D/3NWURNCNeX7eOwC7O21A2ih8H meeFEp7cY/GoS5NXMpUjm6pXSApI1pQcC7clAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUlJqUhVbs5zZQRZE07t7uGpLlvTkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9sSnFVaFZiczV6WlFSWkUwN3Q3dUdwTGx2VGsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyubPMA0GCSqGSIb3DQEBCwUA A4IBAQApYz+1Beo2uO/i4TIK1q/ROOyrH2DOBHAz3EimvrKb85AC/k1gelsD4xRo Qj7W9jxPF87VfuPDc4M38rW30GbpQhK8QAjkvqQiPnUjiijHxdeB2RzSzX7LHE9H AAmnFdCTPuqD7EZQdKhD5VA99YMubzL1mv37B3muOWFZzMxL6esvIIFv9loePo68 W7BTYNNFaGBj0OjW+FFkxhil8C+vZfu1y3iwpHQQzbu8jfZL+6uR4gT3ynfNnWP8 Rd73UWsFSmG1HeUmLZD8obV1TTusuGf9gz0ef6xBthrdDMmAr+yqXwTisNiUnFLI VCIEVSsx5SzzHZz/5898RyLIDU5L -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:45 2026 by rpki-client