$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/viPKa628zDsN0zRj2McEm7iummI.roa File: viPKa628zDsN0zRj2McEm7iummI.roa (raw, json) Hash identifier: chfl4n+mrgjG4HA8Z1EvVyoH/jevJ9ElWsO7J89VhTw= Subject key identifier: BE:23:CA:6B:AD:BC:CC:3B:0D:D3:34:63:D8:C7:04:9B:B8:AE:9A:62 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01C7 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/viPKa628zDsN0zRj2McEm7iummI.roa Signing time: Tue 31 Mar 2026 07:54:07 +0000 ROA not before: Tue 31 Mar 2026 07:54:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 211.133.254.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BE23CA6BADBCCC3B0DD33463D8C7049BB8AE9A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:19:11:58:86:ed:53:6e:e8:0a:67:c9:0a: e0:0d:3f:d3:cb:ff:8f:71:8c:04:26:9d:a0:fc:c1: 02:f9:62:f7:74:01:33:dc:fe:3f:e4:c4:8c:e7:ac: 3d:74:6a:15:c8:29:20:13:58:6c:14:16:23:ed:bb: 23:52:c0:fa:ea:00:77:50:a2:c4:5b:19:8e:94:36: 69:f5:23:48:7d:4a:1e:8d:67:f0:c7:e2:dd:93:d0: e2:79:87:6a:64:5f:53:a8:b0:74:87:7d:79:e3:5b: d6:e6:47:a8:2c:76:cf:cf:56:dc:1d:ef:2d:ad:8b: 3a:e5:c7:a8:60:86:d0:2c:2d:36:6c:a2:25:af:94: 07:d6:40:0e:8e:3e:23:c9:20:53:94:00:3c:19:9d: d5:0d:56:7d:fb:17:53:40:ba:1a:d6:23:73:e2:26: e8:88:0f:47:76:4a:ee:42:f4:5e:9f:72:15:ca:34: 6e:0f:ed:16:37:fb:04:ed:5f:51:d0:b0:ce:2a:b3: 9a:8b:43:bc:e0:1b:34:d7:8c:2d:ec:5d:f8:7e:8f: 79:03:25:59:bf:f2:e7:f4:6d:75:2c:52:93:db:f3: d0:7f:54:00:75:00:19:dc:4a:bc:c1:c9:fe:dc:50: 13:be:b8:14:b6:50:64:04:a3:53:1b:a1:24:67:82: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:23:CA:6B:AD:BC:CC:3B:0D:D3:34:63:D8:C7:04:9B:B8:AE:9A:62 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/viPKa628zDsN0zRj2McEm7iummI.roa sbgp-ipAddrBlock: critical IPv4: 211.133.254.0/23 Signature Algorithm: sha256WithRSAEncryption 30:79:3b:a4:38:c3:b7:27:76:0d:71:7f:33:ac:e8:ed:e9:de: 67:31:5e:29:27:d0:5a:b5:d4:85:c4:48:68:c5:0a:3a:74:7b: 36:f8:c1:e8:34:b4:0c:a7:42:b6:fb:2d:72:a8:e4:e9:79:19: 2b:04:0b:93:25:8f:0c:09:61:a6:01:b1:2e:62:45:0e:d9:ba: a1:83:e8:25:8b:0a:4c:e5:7d:de:99:42:c1:23:33:a7:9e:9c: 38:1a:0a:78:72:5a:d0:72:79:ab:c7:4b:c2:03:05:93:b0:bd: 3b:63:ff:6b:9a:a9:7b:0a:5f:b8:37:90:ed:fb:71:e5:75:f5: 90:cc:21:cd:fe:b7:5e:6c:06:0a:4a:65:82:44:0c:11:b9:52: a0:4a:d2:43:da:3d:7d:7b:17:3e:55:a8:cc:70:dd:b6:37:67: 4c:12:c7:0c:4c:92:40:0d:78:46:c9:a3:55:b7:bc:9d:6d:9f: 44:bb:49:ab:33:fb:25:b0:b1:2e:ed:63:ac:ce:08:fd:d8:cb: 5c:46:77:34:4b:7f:09:73:d9:79:88:73:6c:04:82:fc:fb:7c: 9d:63:94:02:94:e3:19:b5:e0:53:1f:17:5e:f2:0a:77:d8:c6: 3d:a1:1a:f9:be:0d:29:86:c4:7b:d5:1f:62:1f:a8:1b:46:ef: d0:12:48:dd -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFMjNDQTZCQURCQ0ND M0IwREQzMzQ2M0Q4QzcwNDlCQjhBRTlBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZbBkRWIbtU27oCmfJCuANP9PL/49xjAQmnaD8wQL5Yvd0ATPc /j/kxIznrD10ahXIKSATWGwUFiPtuyNSwPrqAHdQosRbGY6UNmn1I0h9Sh6NZ/DH 4t2T0OJ5h2pkX1OosHSHfXnjW9bmR6gsds/PVtwd7y2tizrlx6hghtAsLTZsoiWv lAfWQA6OPiPJIFOUADwZndUNVn37F1NAuhrWI3PiJuiID0d2Su5C9F6fchXKNG4P 7RY3+wTtX1HQsM4qs5qLQ7zgGzTXjC3sXfh+j3kDJVm/8uf0bXUsUpPb89B/VAB1 ABncSrzByf7cUBO+uBS2UGQEo1MboSRnghxDAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUviPKa628zDsN0zRj2McEm7iummIwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My92aVBLYTYyOHpEc04welJqMk1jRW03aXVtbUkucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB04X+MA0GCSqGSIb3DQEBCwUA A4IBAQAweTukOMO3J3YNcX8zrOjt6d5nMV4pJ9BatdSFxEhoxQo6dHs2+MHoNLQM p0K2+y1yqOTpeRkrBAuTJY8MCWGmAbEuYkUO2bqhg+gliwpM5X3emULBIzOnnpw4 Ggp4clrQcnmrx0vCAwWTsL07Y/9rmql7Cl+4N5Dt+3HldfWQzCHN/rdebAYKSmWC RAwRuVKgStJD2j19exc+VajMcN22N2dMEscMTJJADXhGyaNVt7ydbZ9Eu0mrM/sl sLEu7WOszgj92MtcRnc0S38Jc9l5iHNsBIL8+3ydY5QClOMZteBTHxde8gp32MY9 oRr5vg0phsR71R9iH6gbRu/QEkjd -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:13 2026 by rpki-client