$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/y5HYNChMduoo-l2bfs2cWweMf2g.roa File: y5HYNChMduoo-l2bfs2cWweMf2g.roa (raw, json) Hash identifier: mLkXkK3yBJZkmdl2r1vtdIRBbrs7b9Eby07RdDN8Lis= Subject key identifier: CB:91:D8:34:28:4C:76:EA:28:FA:5D:9B:7E:CD:9C:5B:07:8C:7F:68 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01A0 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/y5HYNChMduoo-l2bfs2cWweMf2g.roa Signing time: Tue 31 Mar 2026 07:53:47 +0000 ROA not before: Tue 31 Mar 2026 07:53:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.235.24.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CB91D834284C76EA28FA5D9B7ECD9C5B078C7F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:5a:ac:17:a1:8d:18:87:bf:d5:1c:56:82: c4:f0:ce:a6:db:b5:75:5f:27:62:91:c3:02:35:db: da:ce:35:59:52:e4:24:65:9d:11:12:07:31:d4:96: 58:fd:b2:d5:8d:3e:f3:85:56:46:d0:9b:64:f1:bc: c8:dc:f8:47:1d:a0:fc:03:2d:7e:79:3c:d3:13:e3: 78:59:88:53:d9:af:f9:0e:fa:5a:49:81:c1:e7:9f: 26:fb:e0:01:9f:7a:3c:5d:c4:42:55:db:49:af:c3: dd:31:8e:05:c7:2e:66:05:6e:33:8e:ab:fb:97:4f: b5:aa:d5:d7:b8:51:ab:96:2a:3a:f2:7f:1a:89:0c: a2:6f:5b:b5:f4:0b:61:d7:dc:7c:de:e4:89:39:25: 12:42:ed:41:d8:be:da:c0:fc:33:e2:d8:e1:53:b0: 64:42:ed:59:cf:27:75:bf:49:9b:6d:d1:0b:af:61: bf:ae:62:f1:f7:c1:ea:ca:f3:4e:71:78:6e:56:00: 54:be:52:49:16:cd:a6:e3:a7:a8:ce:c9:ab:7f:e1: 20:46:3c:b8:44:3c:1a:a7:4f:59:72:35:a2:28:76: 51:f7:8b:15:3f:0b:92:e1:3e:ba:4d:53:26:ce:13: b5:e7:ae:aa:77:11:2d:c7:ae:d6:8a:83:f8:a4:24: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:91:D8:34:28:4C:76:EA:28:FA:5D:9B:7E:CD:9C:5B:07:8C:7F:68 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/y5HYNChMduoo-l2bfs2cWweMf2g.roa sbgp-ipAddrBlock: critical IPv4: 210.235.24.0/22 Signature Algorithm: sha256WithRSAEncryption 45:69:a0:15:24:98:5b:1a:73:57:14:66:df:34:83:60:b5:72: 53:8e:1a:a1:5b:4d:8b:4c:80:37:e5:ed:84:19:b8:7f:69:e8: 8f:a6:f6:6b:f1:fd:f0:df:62:26:fb:3a:1c:c0:0f:55:83:6a: 11:10:e1:62:76:87:d0:f0:7f:8c:7a:f8:db:74:95:0d:5b:2d: 7d:c8:9c:c0:dd:fd:72:15:a4:c0:9a:dc:8a:ee:8a:c8:f6:3d: 41:ae:70:0d:36:99:18:a3:65:62:2e:4d:64:a5:92:af:89:98: 7a:46:6b:fe:d4:0b:d5:a0:97:17:9f:cb:f1:bf:1c:ef:cc:63: ef:88:69:67:d4:58:af:cd:0c:9a:0b:93:1d:06:e5:28:16:5e: 78:1a:87:64:f8:53:7b:5c:38:db:81:8a:18:3f:47:00:3d:68: e0:94:28:7f:a7:c9:7a:4b:4a:be:5a:bd:1e:fe:bc:a9:5a:bb: e6:f8:dc:79:10:ec:63:1e:a3:3c:ac:0c:1e:e8:21:64:e7:a3: 25:db:40:27:56:1b:15:23:84:2d:40:40:4c:11:1e:00:56:5e: 9d:cf:96:3b:bb:c6:fc:b1:d4:58:9f:63:98:8e:30:e1:02:0f: 56:50:27:53:95:12:7f:57:e4:e6:76:6d:85:58:cc:bd:85:b6: 6b:0b:6a:42 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCOTFEODM0Mjg0Qzc2 RUEyOEZBNUQ5QjdFQ0Q5QzVCMDc4QzdGNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3NFqsF6GNGIe/1RxWgsTwzqbbtXVfJ2KRwwI129rONVlS5CRl nRESBzHUllj9stWNPvOFVkbQm2TxvMjc+EcdoPwDLX55PNMT43hZiFPZr/kO+lpJ gcHnnyb74AGfejxdxEJV20mvw90xjgXHLmYFbjOOq/uXT7Wq1de4UauWKjryfxqJ DKJvW7X0C2HX3Hze5Ik5JRJC7UHYvtrA/DPi2OFTsGRC7VnPJ3W/SZtt0QuvYb+u YvH3werK805xeG5WAFS+UkkWzabjp6jOyat/4SBGPLhEPBqnT1lyNaIodlH3ixU/ C5LhPrpNUybOE7Xnrqp3ES3HrtaKg/ikJIwhAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUy5HYNChMduoo+l2bfs2cWweMf2gwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My95NUhZTkNoTWR1b28tbDJiZnMyY1d3ZU1mMmcucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0usYMA0GCSqGSIb3DQEBCwUA A4IBAQBFaaAVJJhbGnNXFGbfNINgtXJTjhqhW02LTIA35e2EGbh/aeiPpvZr8f3w 32Im+zocwA9Vg2oREOFidofQ8H+MevjbdJUNWy19yJzA3f1yFaTAmtyK7orI9j1B rnANNpkYo2ViLk1kpZKviZh6Rmv+1AvVoJcXn8vxvxzvzGPviGln1FivzQyaC5Md BuUoFl54Godk+FN7XDjbgYoYP0cAPWjglCh/p8l6S0q+Wr0e/rypWrvm+Nx5EOxj HqM8rAwe6CFk56Ml20AnVhsVI4QtQEBMER4AVl6dz5Y7u8b8sdRYn2OYjjDhAg9W UCdTlRJ/V+Tmdm2FWMy9hbZrC2pC -----END CERTIFICATE-----Generated at Wed Apr 1 15:55:51 2026 by rpki-client