$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mo2B6-b0w6Vwjjsvd0PjCgW-qAs.roa File: mo2B6-b0w6Vwjjsvd0PjCgW-qAs.roa (raw, json) Hash identifier: btqR/zDS0LcxTEwJY5bSUquwT1lsZvFXvrBqxwpqP+c= Subject key identifier: 9A:8D:81:EB:E6:F4:C3:A5:70:8E:3B:2F:77:43:E3:0A:05:BE:A8:0B Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0164 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mo2B6-b0w6Vwjjsvd0PjCgW-qAs.roa Signing time: Tue 31 Mar 2026 07:53:20 +0000 ROA not before: Tue 31 Mar 2026 07:53:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.239.23.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9A8D81EBE6F4C3A5708E3B2F7743E30A05BEA80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:08:58:df:f5:b1:b2:71:2e:fe:69:9f:cd: e7:03:d8:ae:9d:3c:2c:b8:04:f6:01:09:5e:ff:78: 5f:e4:2e:a1:e5:51:87:e2:c5:92:57:00:82:18:e8: f5:c7:27:9b:cc:8c:fe:73:04:dc:12:7d:11:ff:b0: c4:ce:19:d0:31:80:ba:79:5e:43:02:bd:4f:cf:59: 54:a7:2b:10:99:3f:a7:e5:40:a4:31:6a:28:a8:3e: 03:4f:73:96:61:4d:e1:14:fc:6d:20:ec:91:d4:20: 6d:3d:e5:55:e3:34:39:4f:49:d4:f0:0e:89:ce:9b: 20:bb:6b:61:52:e4:b1:98:1b:75:4b:05:0d:2a:0e: 6e:f2:f7:64:a5:95:11:b4:e0:1b:b9:91:26:02:37: b8:c7:69:3b:43:85:45:6d:dd:3b:2b:20:07:95:19: ac:2a:82:c9:ad:e8:63:4e:a5:4a:71:d4:6b:49:e2: 2a:d7:31:c6:eb:e3:c9:0b:a5:ca:4d:1b:bc:a0:35: 18:3c:c9:d6:0a:b5:39:0c:a0:b3:38:b7:d8:c4:46: a0:1d:5d:d1:2d:8a:96:be:21:8a:40:37:f1:50:02: cb:01:e4:a8:8a:7f:83:bf:1b:0b:ef:ab:6f:cb:8f: 0c:63:af:bd:d6:83:d2:2a:31:34:15:64:33:04:44: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8D:81:EB:E6:F4:C3:A5:70:8E:3B:2F:77:43:E3:0A:05:BE:A8:0B X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mo2B6-b0w6Vwjjsvd0PjCgW-qAs.roa sbgp-ipAddrBlock: critical IPv4: 202.239.23.0/24 Signature Algorithm: sha256WithRSAEncryption 11:28:7c:54:da:dd:b5:a1:89:09:79:09:bd:c6:c6:48:89:c1: 0e:19:fc:29:ff:40:ae:91:a4:17:88:de:e8:7d:2a:75:10:d8: ca:82:35:c7:c1:98:8c:f3:43:22:a5:38:76:e1:b2:d8:74:62: f3:d6:82:9a:ac:2f:f2:db:39:80:8c:73:82:3c:e0:e8:80:59: db:1f:aa:54:46:af:df:b8:29:03:eb:df:e3:71:b9:ce:17:80: de:ff:72:4a:31:1b:eb:e9:f7:1c:0b:6f:d2:e6:f6:87:c3:08: 3b:3c:32:b0:8b:01:1e:bd:3a:c4:2b:ed:d6:3b:73:5e:da:29: f9:49:0a:a1:06:f1:36:80:ee:01:73:d8:93:90:f1:c8:54:e8: 5c:22:95:b6:d8:b9:1f:ea:a4:4f:0a:7d:fc:77:b3:82:ea:d6: 46:57:c9:b4:c9:79:b1:1b:08:1a:4d:5d:0b:32:b0:95:67:f0: 12:17:dd:3b:d8:40:e5:12:c5:b9:09:ee:00:cc:9f:0f:6d:d7: 39:ab:c4:1d:7e:0e:4e:87:3b:8d:2b:91:c1:38:48:13:13:01: b5:29:4d:1b:e1:8f:a4:e9:22:f9:2a:83:76:69:df:49:72:05: 08:d3:37:40:3a:3b:98:41:6d:32:c6:74:17:77:76:01:eb:da: cc:b8:eb:d5 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBOEQ4MUVCRTZGNEMz QTU3MDhFM0IyRjc3NDNFMzBBMDVCRUE4MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG6AhY3/WxsnEu/mmfzecD2K6dPCy4BPYBCV7/eF/kLqHlUYfi xZJXAIIY6PXHJ5vMjP5zBNwSfRH/sMTOGdAxgLp5XkMCvU/PWVSnKxCZP6flQKQx aiioPgNPc5ZhTeEU/G0g7JHUIG095VXjNDlPSdTwDonOmyC7a2FS5LGYG3VLBQ0q Dm7y92SllRG04Bu5kSYCN7jHaTtDhUVt3TsrIAeVGawqgsmt6GNOpUpx1GtJ4irX Mcbr48kLpcpNG7ygNRg8ydYKtTkMoLM4t9jERqAdXdEtipa+IYpAN/FQAssB5KiK f4O/Gwvvq2/Ljwxjr73Wg9IqMTQVZDMERKlzAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUmo2B6+b0w6Vwjjsvd0PjCgW+qAswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9tbzJCNi1iMHc2VndqanN2ZDBQakNnVy1xQXMucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyu8XMA0GCSqGSIb3DQEBCwUA A4IBAQARKHxU2t21oYkJeQm9xsZIicEOGfwp/0CukaQXiN7ofSp1ENjKgjXHwZiM 80MipTh24bLYdGLz1oKarC/y2zmAjHOCPODogFnbH6pURq/fuCkD69/jcbnOF4De /3JKMRvr6fccC2/S5vaHwwg7PDKwiwEevTrEK+3WO3Ne2in5SQqhBvE2gO4Bc9iT kPHIVOhcIpW22Lkf6qRPCn38d7OC6tZGV8m0yXmxGwgaTV0LMrCVZ/ASF9072EDl EsW5Ce4AzJ8Pbdc5q8Qdfg5OhzuNK5HBOEgTEwG1KU0b4Y+k6SL5KoN2ad9JcgUI 0zdAOjuYQW0yxnQXd3YB69rMuOvV -----END CERTIFICATE-----Generated at Wed Apr 1 15:58:23 2026 by rpki-client