$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qmZa_oknRUoz92BRBVEq5NKBoUk.roa File: qmZa_oknRUoz92BRBVEq5NKBoUk.roa (raw, json) Hash identifier: knqcnQrzmHkM8p6tLiosvGf9zrl3MnHo31/VIuVyIyQ= Subject key identifier: AA:66:5A:FE:89:27:45:4A:33:F7:60:51:05:51:2A:E4:D2:81:A1:49 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 019C Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qmZa_oknRUoz92BRBVEq5NKBoUk.roa Signing time: Tue 31 Mar 2026 07:53:46 +0000 ROA not before: Tue 31 Mar 2026 07:53:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.235.0.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AA665AFE8927454A33F7605105512AE4D281A149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:5d:10:ba:a6:0b:b6:a8:f6:a0:ef:ee:76: 3d:8f:6b:d7:b7:fa:78:ef:d3:31:c7:30:d6:66:d6: 27:20:be:c5:c2:be:04:a4:d7:b5:98:2f:71:13:b8: 98:e6:d5:88:cc:21:76:9c:02:fc:b2:ae:27:55:59: 58:73:6d:a0:67:a2:ed:5f:37:80:8e:45:69:86:49: aa:d7:e1:dd:a3:22:f9:66:5f:7f:ed:83:fe:d2:d1: 2b:35:06:ba:4f:cd:90:c4:03:81:fd:6e:1e:28:39: 0b:b5:bc:c0:db:52:99:2d:55:c2:7e:25:77:9c:9a: 18:47:8f:ca:cd:a0:5b:28:9e:c9:43:b4:73:fd:9b: c4:63:2c:5a:94:15:cc:7b:2a:db:8d:48:55:92:3e: 1e:bf:3d:63:40:73:4e:14:b9:09:92:f2:29:72:91: c5:c4:3a:aa:79:9f:88:f6:e9:62:bd:64:09:80:c1: 36:9c:67:1d:fa:cd:56:98:41:23:4e:c1:14:93:56: 84:b7:75:f8:84:eb:94:47:aa:78:b8:57:a1:32:09: f3:b9:2c:e2:3e:fb:95:33:c3:99:9c:15:c4:e5:e3: 13:07:11:c9:ba:a8:f4:3b:75:7e:f6:da:66:ec:90: ca:29:41:08:f1:46:f7:74:bd:5b:ff:fb:61:61:37: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:5A:FE:89:27:45:4A:33:F7:60:51:05:51:2A:E4:D2:81:A1:49 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qmZa_oknRUoz92BRBVEq5NKBoUk.roa sbgp-ipAddrBlock: critical IPv4: 210.235.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:67:7c:b5:ba:9f:4d:25:65:70:ec:a0:26:47:28:e7:12:65: 47:3a:08:42:a1:ed:bf:dd:5a:4c:70:74:50:4e:3e:3e:bc:36: fb:28:b8:0f:db:94:05:c4:b1:f2:2d:39:1d:dd:c3:51:46:9b: 2a:18:c8:de:d2:af:e8:a3:3d:a8:17:97:01:50:a9:a3:c0:72: 0e:3b:54:79:1f:de:e3:f6:26:46:ee:6f:38:a8:75:29:06:5c: ae:a8:3d:58:24:ef:c4:2a:d2:ec:ba:60:a0:46:08:90:60:e9: a1:b3:46:88:01:a2:a2:5d:75:46:3f:e2:9e:87:eb:8d:51:01: 87:ef:90:fb:87:8a:d7:65:f9:a7:17:02:7e:02:7c:81:31:28: 46:14:fd:0f:9e:01:8f:03:fa:1f:c0:55:a2:ac:4d:e5:bb:3f: b4:bf:05:d5:fe:e4:56:ba:dc:ae:92:66:43:d3:9a:d9:51:e5: 84:8d:c1:01:25:90:4c:1f:56:08:25:3d:49:21:c2:8d:aa:94: f4:bb:24:4c:71:71:44:eb:5e:3a:27:bb:e2:94:3a:91:69:55: f5:8c:95:82:82:b7:26:20:4e:5b:2a:70:e3:b0:7a:f8:45:31: f7:bc:8f:cc:13:7f:78:f9:9d:59:6f:fb:1e:9b:f9:a6:8e:ff: fc:df:eb:38 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBNjY1QUZFODkyNzQ1 NEEzM0Y3NjA1MTA1NTEyQUU0RDI4MUExNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKpV0QuqYLtqj2oO/udj2Pa9e3+njv0zHHMNZm1icgvsXCvgSk 17WYL3ETuJjm1YjMIXacAvyyridVWVhzbaBnou1fN4CORWmGSarX4d2jIvlmX3/t g/7S0Ss1BrpPzZDEA4H9bh4oOQu1vMDbUpktVcJ+JXecmhhHj8rNoFsonslDtHP9 m8RjLFqUFcx7KtuNSFWSPh6/PWNAc04UuQmS8ilykcXEOqp5n4j26WK9ZAmAwTac Zx36zVaYQSNOwRSTVoS3dfiE65RHqni4V6EyCfO5LOI++5Uzw5mcFcTl4xMHEcm6 qPQ7dX722mbskMopQQjxRvd0vVv/+2FhN/vHAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUqmZa/oknRUoz92BRBVEq5NKBoUkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9xbVphX29rblJVb3o5MkJSQlZFcTVOS0JvVWsucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0usAMA0GCSqGSIb3DQEBCwUA A4IBAQBdZ3y1up9NJWVw7KAmRyjnEmVHOghCoe2/3VpMcHRQTj4+vDb7KLgP25QF xLHyLTkd3cNRRpsqGMje0q/ooz2oF5cBUKmjwHIOO1R5H97j9iZG7m84qHUpBlyu qD1YJO/EKtLsumCgRgiQYOmhs0aIAaKiXXVGP+Keh+uNUQGH75D7h4rXZfmnFwJ+ AnyBMShGFP0PngGPA/ofwFWirE3luz+0vwXV/uRWutyukmZD05rZUeWEjcEBJZBM H1YIJT1JIcKNqpT0uyRMcXFE6146J7vilDqRaVX1jJWCgrcmIE5bKnDjsHr4RTH3 vI/ME394+Z1Zb/sem/mmjv/83+s4 -----END CERTIFICATE-----Generated at Wed Apr 1 16:01:48 2026 by rpki-client