$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yimUHH1--QNJFZT5KQ3ZUGjjTnE.roa File: yimUHH1--QNJFZT5KQ3ZUGjjTnE.roa (raw, json) Hash identifier: P4sdCKCZKBFQ3S1t6lXrTvX31JypmhGcpa5JeIGxAwA= Subject key identifier: CA:29:94:1C:7D:7E:F9:03:49:15:94:F9:29:0D:D9:50:68:E3:4E:71 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 013B Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yimUHH1--QNJFZT5KQ3ZUGjjTnE.roa Signing time: Tue 31 Mar 2026 07:52:56 +0000 ROA not before: Tue 31 Mar 2026 07:52:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.234.147.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:52:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CA29941C7D7EF903491594F9290DD95068E34E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:fa:d2:22:54:3d:e5:cc:79:11:3a:42:01: c4:a0:dc:e3:4f:4c:32:f9:68:8a:77:1e:de:1d:2d: 43:7f:72:40:ff:c8:e3:20:79:3e:0e:3f:54:0e:6d: d1:c8:d1:46:fd:c5:87:2f:e6:50:12:dd:c8:54:57: c7:b9:19:29:61:29:d1:a0:ea:84:70:50:bc:c7:63: fd:80:92:a4:05:f6:4d:c1:5c:13:ea:aa:67:6e:27: 81:5e:73:82:b1:38:48:31:09:69:67:03:2d:d9:b0: 35:d4:87:0e:5b:17:ab:fb:8a:aa:f7:4a:5e:2c:ad: d9:f8:5f:5e:cc:6d:ab:b8:59:cd:ea:f3:0a:69:16: c4:c7:38:cb:bd:ab:70:3c:f1:4b:56:43:b1:c6:7a: 8b:a5:79:08:50:97:e9:94:db:ba:1f:a3:37:fb:1a: aa:b7:d7:bd:f4:f0:00:0b:ba:26:70:91:ed:71:38: dc:53:39:eb:79:9b:3c:cd:ba:9b:7e:0e:9b:44:ef: 86:1f:b7:6d:74:2f:df:d9:0a:dd:0e:b7:55:8b:0d: 8e:fd:db:cc:d9:e1:48:6c:31:41:9c:b8:bf:64:29: 1e:12:25:34:82:72:ec:ac:39:20:7e:12:ba:9f:e5: 00:77:63:09:ff:85:c2:47:92:93:64:81:a5:40:de: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:94:1C:7D:7E:F9:03:49:15:94:F9:29:0D:D9:50:68:E3:4E:71 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yimUHH1--QNJFZT5KQ3ZUGjjTnE.roa sbgp-ipAddrBlock: critical IPv4: 202.234.147.0/24 Signature Algorithm: sha256WithRSAEncryption 63:28:5b:dc:ee:27:c9:a1:fe:f9:5d:ef:a6:a1:17:46:bf:66: 17:7e:3d:17:a7:7d:9e:9f:42:01:28:2b:30:b9:49:c5:b8:0b: 75:b7:b7:ed:d9:2b:b9:f0:ee:67:a7:4a:23:96:27:be:7f:7e: 2f:f1:59:ff:c4:97:cd:1f:90:3e:99:fa:eb:34:1d:68:92:cc: 24:ef:0e:2c:df:d0:d1:fa:e5:a2:11:c1:10:97:cd:ca:e6:ae: 1a:20:e9:0f:23:0e:25:34:bc:83:2c:32:70:d1:7d:58:f0:8a: 1d:07:3b:c1:00:25:3d:12:d7:29:5f:15:9a:01:77:bc:d2:ec: e4:aa:9c:60:64:3c:b7:69:eb:d8:bc:43:49:a5:dc:cd:6d:16: 26:43:3b:e0:d5:b3:74:ec:da:fb:78:e9:1a:7f:26:ba:9c:35: 0d:13:1f:98:ee:c2:c0:57:5a:13:b3:1f:cd:ce:f1:1f:5b:c1: 12:c5:70:a1:cb:b7:c0:20:2d:a5:06:7a:76:af:56:6d:4e:42: 2a:bd:7d:0f:f5:c0:8d:d4:ad:69:c6:e6:4d:8e:96:39:02:e3: c4:2a:76:47:e4:c5:d2:ab:b2:95:72:21:5d:de:02:07:83:48: 12:38:9c:26:11:7a:6d:50:ea:1a:42:c4:9a:a4:60:51:82:a6: ff:9b:68:0a -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICATswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUyNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBMjk5NDFDN0Q3RUY5 MDM0OTE1OTRGOTI5MEREOTUwNjhFMzRFNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzVvrSIlQ95cx5ETpCAcSg3ONPTDL5aIp3Ht4dLUN/ckD/yOMg eT4OP1QObdHI0Ub9xYcv5lAS3chUV8e5GSlhKdGg6oRwULzHY/2AkqQF9k3BXBPq qmduJ4Fec4KxOEgxCWlnAy3ZsDXUhw5bF6v7iqr3Sl4srdn4X17Mbau4Wc3q8wpp FsTHOMu9q3A88UtWQ7HGeouleQhQl+mU27ofozf7Gqq317308AALuiZwke1xONxT Oet5mzzNupt+DptE74Yft210L9/ZCt0Ot1WLDY7928zZ4UhsMUGcuL9kKR4SJTSC cuysOSB+Erqf5QB3Ywn/hcJHkpNkgaVA3osTAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUyimUHH1++QNJFZT5KQ3ZUGjjTnEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My95aW1VSEgxLS1RTkpGWlQ1S1EzWlVHampUbkUucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyuqTMA0GCSqGSIb3DQEBCwUA A4IBAQBjKFvc7ifJof75Xe+moRdGv2YXfj0Xp32en0IBKCswuUnFuAt1t7ft2Su5 8O5np0ojlie+f34v8Vn/xJfNH5A+mfrrNB1okswk7w4s39DR+uWiEcEQl83K5q4a IOkPIw4lNLyDLDJw0X1Y8IodBzvBACU9EtcpXxWaAXe80uzkqpxgZDy3aevYvENJ pdzNbRYmQzvg1bN07Nr7eOkafya6nDUNEx+Y7sLAV1oTsx/NzvEfW8ESxXChy7fA IC2lBnp2r1ZtTkIqvX0P9cCN1K1pxuZNjpY5AuPEKnZH5MXSq7KVciFd3gIHg0gS OJwmEXptUOoaQsSapGBRgqb/m2gK -----END CERTIFICATE-----Generated at Wed Apr 1 15:58:26 2026 by rpki-client