$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yFsgcHX9AkW8ZGL6V2BAuQ3GvOw.roa File: yFsgcHX9AkW8ZGL6V2BAuQ3GvOw.roa (raw, json) Hash identifier: FQ0XpL1zxosL5x0tpvjS4kmw2yC2ZGNOfjOmjzPZWWo= Subject key identifier: C8:5B:20:70:75:FD:02:45:BC:64:62:FA:57:60:40:B9:0D:C6:BC:EC Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01AC Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yFsgcHX9AkW8ZGL6V2BAuQ3GvOw.roa Signing time: Tue 31 Mar 2026 07:53:52 +0000 ROA not before: Tue 31 Mar 2026 07:53:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.252.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C85B207075FD0245BC6462FA576040B90DC6BCEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:99:9d:eb:66:43:8a:2b:7b:7c:8d:4e:ce: df:9f:99:17:50:77:28:58:90:67:d0:e2:da:90:40: 5d:08:85:c2:dc:a1:7d:80:65:6e:99:7d:37:c8:59: 43:c2:e9:c1:3e:49:2b:e9:57:d4:08:a7:5e:0d:64: 45:59:67:9b:64:12:a3:77:fe:a6:47:76:a6:f5:bd: 30:11:02:1c:22:d0:9d:70:fc:00:3e:28:3d:9e:b6: 45:6d:70:2e:74:7f:b6:1f:e7:75:78:f6:57:89:25: 40:05:2e:dc:76:81:a0:14:65:4d:b5:bb:df:86:6e: 0d:23:64:5e:cb:db:7c:b7:ca:0c:b9:7f:56:27:41: b9:5d:c6:8b:29:4c:fc:ed:bc:f1:5c:a3:ac:11:d7: 55:f5:86:57:7b:f0:b8:f2:a3:ff:07:c9:a3:15:aa: 9a:21:c4:64:23:18:f9:64:a8:90:1d:a0:fc:0d:f7: bf:bc:2b:4d:0c:3e:7f:8a:6f:02:b7:55:0d:ec:38: 26:47:49:98:1b:f1:81:a3:71:df:e9:0c:39:a2:4f: fe:71:17:0c:77:b2:33:3a:36:02:4c:9c:25:a2:72: d1:51:5c:02:5b:2a:20:ed:42:53:ef:41:86:fb:53: b5:4b:4b:bb:98:54:94:e2:6b:0c:4b:57:30:4a:b8: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5B:20:70:75:FD:02:45:BC:64:62:FA:57:60:40:B9:0D:C6:BC:EC X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yFsgcHX9AkW8ZGL6V2BAuQ3GvOw.roa sbgp-ipAddrBlock: critical IPv4: 210.252.96.0/22 Signature Algorithm: sha256WithRSAEncryption 24:79:5e:20:b9:70:dc:19:22:49:07:fe:9e:fa:bf:70:21:2e: 96:b7:f9:76:ab:fc:c8:5a:c9:d9:0b:cf:df:f4:2f:cc:bc:de: 4c:bc:0f:d2:09:c9:f7:7c:91:cd:1b:51:9f:74:fb:e3:18:d1: 1b:ad:ec:ba:26:2e:73:82:33:33:2b:1d:eb:dc:d8:2e:c2:ad: 21:77:92:54:c7:f0:b6:50:44:ad:02:fb:0c:43:79:e6:95:8c: e1:e2:dc:7c:ab:1a:cd:22:fb:ab:f9:b6:c5:35:0b:2f:90:a2: 28:cf:9b:05:5e:66:28:7a:d6:7c:aa:37:0d:9f:1c:7a:0c:9d: 19:11:4c:3b:bd:92:d6:54:54:9b:cf:49:e3:7a:06:6e:1f:90: b4:a7:cd:7c:0b:70:1d:85:37:c4:68:af:b8:1e:75:50:7e:45: dd:12:c1:05:01:c8:ac:93:00:90:01:43:e6:00:63:18:1e:99: 73:88:30:5d:26:7f:52:5d:57:10:dc:d4:10:50:fc:1a:a9:b8: dd:f1:61:97:ef:a4:cb:e4:4f:e3:8f:6a:c3:50:4c:96:35:00: 76:cf:82:51:3b:fa:53:61:4f:4c:10:e0:89:1c:2e:c7:05:fb: c8:3d:f6:6c:eb:77:e6:1a:d2:16:af:99:6f:85:d7:7e:af:41: b2:04:64:20 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4NUIyMDcwNzVGRDAy NDVCQzY0NjJGQTU3NjA0MEI5MERDNkJDRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr3pmd62ZDiit7fI1Ozt+fmRdQdyhYkGfQ4tqQQF0IhcLcoX2A ZW6ZfTfIWUPC6cE+SSvpV9QIp14NZEVZZ5tkEqN3/qZHdqb1vTARAhwi0J1w/AA+ KD2etkVtcC50f7Yf53V49leJJUAFLtx2gaAUZU21u9+Gbg0jZF7L23y3ygy5f1Yn QbldxospTPztvPFco6wR11X1hld78Ljyo/8HyaMVqpohxGQjGPlkqJAdoPwN97+8 K00MPn+KbwK3VQ3sOCZHSZgb8YGjcd/pDDmiT/5xFwx3sjM6NgJMnCWictFRXAJb KiDtQlPvQYb7U7VLS7uYVJTiawxLVzBKuHLpAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUyFsgcHX9AkW8ZGL6V2BAuQ3GvOwwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My95RnNnY0hYOUFrVzhaR0w2VjJCQXVRM0d2T3cucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0vxgMA0GCSqGSIb3DQEBCwUA A4IBAQAkeV4guXDcGSJJB/6e+r9wIS6Wt/l2q/zIWsnZC8/f9C/MvN5MvA/SCcn3 fJHNG1GfdPvjGNEbrey6Ji5zgjMzKx3r3Nguwq0hd5JUx/C2UEStAvsMQ3nmlYzh 4tx8qxrNIvur+bbFNQsvkKIoz5sFXmYoetZ8qjcNnxx6DJ0ZEUw7vZLWVFSbz0nj egZuH5C0p818C3AdhTfEaK+4HnVQfkXdEsEFAciskwCQAUPmAGMYHplziDBdJn9S XVcQ3NQQUPwaqbjd8WGX76TL5E/jj2rDUEyWNQB2z4JRO/pTYU9MEOCJHC7HBfvI PfZs63fmGtIWr5lvhdd+r0GyBGQg -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:39 2026 by rpki-client