$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/oCBh-tdgcB3SqtTd3Xs1KnreM98.roa File: oCBh-tdgcB3SqtTd3Xs1KnreM98.roa (raw, json) Hash identifier: 2ZkukzCUQ/DiBWZZtQCwd2YpUNcaZwovAaZoJQO+fnM= Subject key identifier: A0:20:61:FA:D7:60:70:1D:D2:AA:D4:DD:DD:7B:35:2A:7A:DE:33:DF Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 019D Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/oCBh-tdgcB3SqtTd3Xs1KnreM98.roa Signing time: Tue 31 Mar 2026 07:53:46 +0000 ROA not before: Tue 31 Mar 2026 07:53:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.235.4.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A02061FAD760701DD2AAD4DDDD7B352A7ADE33DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:bb:12:dd:2f:ea:b3:0d:7a:c7:ab:9f:bb: 1f:7b:b0:3a:9d:3d:c7:e7:09:86:41:63:fa:da:8c: fa:2f:15:89:36:75:80:87:3b:84:89:b0:aa:03:e6: 8b:b3:6f:9b:57:ab:e2:2a:6c:bf:a1:05:91:b6:fa: b5:4c:db:1d:58:cc:b8:87:43:33:9a:1d:83:7f:a5: dd:2d:5d:0f:6b:d6:cd:26:4e:e0:5c:87:2e:15:d7: 91:c7:c7:54:e6:00:d6:88:de:b8:03:05:08:f2:50: 3a:52:1f:af:35:26:5d:df:75:95:44:3b:2a:bc:88: ba:78:50:49:e0:58:62:00:f5:60:18:73:24:79:05: c3:0f:19:73:eb:62:18:2d:3f:cd:93:ee:06:f3:b6: b4:49:bb:b4:05:51:91:5e:ee:1c:bf:26:a8:cd:86: 64:b6:41:25:63:8c:6d:35:a8:51:8f:dd:04:f8:c9: d2:c2:80:e9:13:fb:af:43:1a:b7:52:1b:c6:52:85: 2a:f3:d9:39:65:5d:cd:01:bf:c7:a7:8e:b5:7c:dc: b8:44:8a:e2:85:b4:74:18:61:63:c5:6b:94:c5:7a: 60:52:e5:27:7d:d0:c5:f2:a2:fb:92:85:c5:98:7d: 3f:73:e7:27:b0:fd:4f:80:8f:f4:43:0e:ce:31:a9: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:20:61:FA:D7:60:70:1D:D2:AA:D4:DD:DD:7B:35:2A:7A:DE:33:DF X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/oCBh-tdgcB3SqtTd3Xs1KnreM98.roa sbgp-ipAddrBlock: critical IPv4: 210.235.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:b0:d9:66:c3:ba:2b:23:c6:39:52:b1:13:bf:e7:cc:6d:5b: cc:58:1a:6f:b1:cf:f8:ed:95:84:c7:da:1b:51:f9:d8:1d:17: 09:18:c2:d4:57:97:9c:e9:fd:19:11:b7:e2:14:8d:7f:01:73: 7a:95:50:a4:ac:77:b8:ca:07:6c:6b:51:88:a1:91:48:fb:9c: 37:89:b4:00:41:85:17:a1:e3:77:bb:9a:13:a6:52:55:78:60: dd:71:ea:6d:0f:06:62:57:22:6a:61:cb:27:7c:79:0b:00:00: d0:e0:95:6a:18:ae:8a:12:55:bb:9e:7c:40:ed:f2:fe:bb:0e: a3:7d:00:08:8f:38:01:be:5e:7b:06:7b:ad:d3:15:0a:74:96: 47:d2:64:2a:c3:15:27:e6:33:e6:84:2a:aa:53:02:63:ce:ec: ac:dd:14:70:17:f1:10:66:ca:8d:cf:2e:a4:4d:bc:eb:6e:4b: 62:15:4c:22:6c:93:2f:9a:3b:2d:7c:c3:4c:8e:a4:78:ab:38: 5a:23:39:0e:18:1a:b0:62:3f:8b:49:e6:82:a9:f1:ce:98:eb: 2e:9e:87:ce:73:40:eb:1a:7b:a8:72:8d:7c:d1:27:09:6f:63: 39:85:f6:49:6d:ca:82:f8:51:6d:82:d2:cd:77:4b:12:20:cd: e6:ee:11:b8 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwMjA2MUZBRDc2MDcw MUREMkFBRDREREREN0IzNTJBN0FERTMzREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6V7sS3S/qsw16x6ufux97sDqdPcfnCYZBY/rajPovFYk2dYCH O4SJsKoD5ouzb5tXq+IqbL+hBZG2+rVM2x1YzLiHQzOaHYN/pd0tXQ9r1s0mTuBc hy4V15HHx1TmANaI3rgDBQjyUDpSH681Jl3fdZVEOyq8iLp4UEngWGIA9WAYcyR5 BcMPGXPrYhgtP82T7gbztrRJu7QFUZFe7hy/JqjNhmS2QSVjjG01qFGP3QT4ydLC gOkT+69DGrdSG8ZShSrz2TllXc0Bv8enjrV83LhEiuKFtHQYYWPFa5TFemBS5Sd9 0MXyovuShcWYfT9z5yew/U+Aj/RDDs4xqX2BAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUoCBh+tdgcB3SqtTd3Xs1KnreM98wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9vQ0JoLXRkZ2NCM1NxdFRkM1hzMUtucmVNOTgucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0usEMA0GCSqGSIb3DQEBCwUA A4IBAQBusNlmw7orI8Y5UrETv+fMbVvMWBpvsc/47ZWEx9obUfnYHRcJGMLUV5ec 6f0ZEbfiFI1/AXN6lVCkrHe4ygdsa1GIoZFI+5w3ibQAQYUXoeN3u5oTplJVeGDd ceptDwZiVyJqYcsnfHkLAADQ4JVqGK6KElW7nnxA7fL+uw6jfQAIjzgBvl57Bnut 0xUKdJZH0mQqwxUn5jPmhCqqUwJjzuys3RRwF/EQZsqNzy6kTbzrbktiFUwibJMv mjstfMNMjqR4qzhaIzkOGBqwYj+LSeaCqfHOmOsunofOc0DrGnuoco180ScJb2M5 hfZJbcqC+FFtgtLNd0sSIM3m7hG4 -----END CERTIFICATE-----Generated at Wed Apr 1 16:02:50 2026 by rpki-client