$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/849/iCrYkOtvGr3pBcQEGxTn4gvdZag.roa File: iCrYkOtvGr3pBcQEGxTn4gvdZag.roa (raw, json) Hash identifier: EM3dDau+ZiGrAKvOJ59gYJQguj9iSqbEGXPwH3mQCLg= Subject key identifier: 88:2A:D8:90:EB:6F:1A:BD:E9:05:C4:04:1B:14:E7:E2:0B:DD:65:A8 Certificate issuer: /CN=6A190BA2C8486DC8491D868D7738D3F4DD0F2A3C Certificate serial: 03 Authority key identifier: 6A:19:0B:A2:C8:48:6D:C8:49:1D:86:8D:77:38:D3:F4:DD:0F:2A:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/iCrYkOtvGr3pBcQEGxTn4gvdZag.roa Signing time: Fri 26 Jun 2026 07:06:55 +0000 ROA not before: Fri 26 Jun 2026 07:06:55 +0000 ROA not after: Wed 16 Jun 2027 07:24:48 +0000 asID: 23632 IP address blocks: 211.2.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A190BA2C8486DC8491D868D7738D3F4DD0F2A3C Validity Not Before: Jun 26 07:06:55 2026 GMT Not After : Jun 16 07:24:48 2027 GMT Subject: CN=882AD890EB6F1ABDE905C4041B14E7E20BDD65A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:92:55:bc:94:25:a2:40:1e:46:87:c4:e8: f1:1a:e1:9c:e1:40:87:5a:96:c7:24:22:2e:bd:f9: 83:fc:6b:b8:8e:84:fd:0a:05:cf:56:f4:89:6c:80: 5c:f1:a8:ce:28:31:2b:85:9a:b5:c1:52:07:11:fb: e1:98:d8:a6:b1:3b:3f:05:17:48:e4:70:b8:72:e2: 0d:08:60:ac:34:ee:a6:a1:81:ef:b7:a6:30:9d:20: 56:d2:e5:43:d2:21:b1:ff:2b:02:ea:be:93:80:8a: 45:61:d4:28:8a:7d:cf:4e:d4:90:69:ff:5e:d5:37: 5d:f8:a4:80:c7:df:9f:5c:f3:17:60:8d:76:aa:5f: ae:a6:73:2c:95:08:d4:9f:01:0b:7e:00:ce:b1:42: 34:de:3b:bb:94:18:6a:8f:c2:c8:bc:18:e3:b7:80: 73:43:0c:3f:fe:3a:fe:aa:ac:ae:f1:eb:19:c8:84: d0:c9:a1:50:01:36:22:09:75:93:e8:52:91:9c:bc: db:ad:44:2e:e3:c8:81:f8:54:ed:d9:a8:bc:47:d4: e6:f2:ae:e6:e8:2c:fe:9d:1b:60:2b:31:68:de:50: 19:81:fc:f1:f6:47:06:f3:cd:ec:86:47:cf:47:e5: a6:8c:65:58:1e:5c:a1:df:01:5f:d5:36:45:be:51: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:D8:90:EB:6F:1A:BD:E9:05:C4:04:1B:14:E7:E2:0B:DD:65:A8 X509v3 Authority Key Identifier: keyid:6A:19:0B:A2:C8:48:6D:C8:49:1D:86:8D:77:38:D3:F4:DD:0F:2A:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/iCrYkOtvGr3pBcQEGxTn4gvdZag.roa sbgp-ipAddrBlock: critical IPv4: 211.2.176.0/21 Signature Algorithm: sha256WithRSAEncryption 35:19:44:85:00:20:ac:20:e2:da:7a:9b:7d:ef:ad:1c:59:da: 4f:21:51:a1:c1:5e:8e:fe:17:66:0d:31:44:4f:a7:6c:58:88: 55:cd:89:42:eb:5b:dc:7e:a5:99:e9:a2:c8:0d:9b:4b:58:d0: 84:96:4c:0c:f3:8c:9a:e0:44:e2:f9:79:b8:90:79:f6:9c:65: fb:5a:b1:15:9b:0c:9a:d6:3d:ce:ad:60:48:e4:b8:da:50:6b: c3:25:d2:b3:32:0c:43:93:d0:e3:b9:31:01:e4:1a:9f:1c:fa: 70:1a:24:cf:1e:b0:ba:13:ce:1c:c9:68:30:4a:8f:65:62:cf: 21:96:a1:48:0e:35:75:df:97:f6:ae:ea:86:22:5d:9c:b1:01: 24:0f:9c:4b:92:f3:12:e2:0b:16:d2:94:32:a5:92:87:89:bd: 16:a4:eb:f3:e8:d0:4b:46:e0:fd:01:6d:e3:ce:b3:95:ab:6d: a2:cc:71:9c:b1:0e:e5:05:2d:e7:39:7d:91:d9:29:5b:c3:73: 0d:d1:12:2f:88:f4:38:97:40:7e:61:ad:f8:0b:08:cc:6d:0b: de:13:69:a2:7e:b3:29:4d:ba:0f:b4:ed:68:52:ae:1c:c4:71: d8:d4:02:a8:8e:f2:00:f4:38:4c:70:65:da:fc:aa:2a:50:72: 09:b7:1a:36 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTE5 MEJBMkM4NDg2REM4NDkxRDg2OEQ3NzM4RDNGNEREMEYyQTNDMB4XDTI2MDYyNjA3 MDY1NVoXDTI3MDYxNjA3MjQ0OFowMzExMC8GA1UEAxMoODgyQUQ4OTBFQjZGMUFC REU5MDVDNDA0MUIxNEU3RTIwQkRENjVBODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMa7klW8lCWiQB5Gh8To8RrhnOFAh1qWxyQiLr35g/xruI6E/QoF z1b0iWyAXPGozigxK4WatcFSBxH74ZjYprE7PwUXSORwuHLiDQhgrDTupqGB77em MJ0gVtLlQ9Ihsf8rAuq+k4CKRWHUKIp9z07UkGn/XtU3XfikgMffn1zzF2CNdqpf rqZzLJUI1J8BC34AzrFCNN47u5QYao/CyLwY47eAc0MMP/46/qqsrvHrGciE0Mmh UAE2Igl1k+hSkZy8261ELuPIgfhU7dmovEfU5vKu5ugs/p0bYCsxaN5QGYH88fZH BvPN7IZHz0flpoxlWB5cod8BX9U2Rb5RddkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSIKtiQ628avekFxAQbFOfiC91lqDAfBgNVHSMEGDAWgBRqGQuiyEhtyEkdho13 ONP03Q8qPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQ5L2Foa0xvc2hJYmNoSkhZYU5kempUOU4wUEtqdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Foa0xvc2hJYmNoSkhZYU5kempUOU4w UEtqdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84NDkvaUNyWWtPdHZHcjNwQmNRRUd4VG40Z3ZkWmFnLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9MCsDANBgkqhkiG9w0BAQsFAAOCAQEA NRlEhQAgrCDi2nqbfe+tHFnaTyFRocFejv4XZg0xRE+nbFiIVc2JQutb3H6lmemi yA2bS1jQhJZMDPOMmuBE4vl5uJB59pxl+1qxFZsMmtY9zq1gSOS42lBrwyXSszIM Q5PQ47kxAeQanxz6cBokzx6wuhPOHMloMEqPZWLPIZahSA41dd+X9q7qhiJdnLEB JA+cS5LzEuILFtKUMqWSh4m9FqTr8+jQS0bg/QFt486zlattosxxnLEO5QUt5zl9 kdkpW8NzDdESL4j0OJdAfmGt+AsIzG0L3hNpon6zKU26D7TtaFKuHMRx2NQCqI7y APQ4THBl2vyqKlByCbcaNg== -----END CERTIFICATE-----Generated at Tue Jul 7 13:31:12 2026 by rpki-client