$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/r6Rvu5u9DdHjZbBUJ-7xTXBWCUI.roa File: r6Rvu5u9DdHjZbBUJ-7xTXBWCUI.roa (raw, json) Hash identifier: vCTSl7W80BZU6oNml3veDCp3uBrGq3SnpFrqR+4poXs= Subject key identifier: AF:A4:6F:BB:9B:BD:0D:D1:E3:65:B0:54:27:EE:F1:4D:70:56:09:42 Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: E4 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/r6Rvu5u9DdHjZbBUJ-7xTXBWCUI.roa Signing time: Tue 31 Mar 2026 07:31:30 +0000 ROA not before: Tue 31 Mar 2026 07:31:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18126 IP address blocks: 202.142.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Mar 31 07:31:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AFA46FBB9BBD0DD1E365B05427EEF14D70560942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:b9:91:3e:d0:8b:34:81:cd:90:9d:78:16: 31:17:14:af:83:a3:cb:e6:4b:45:08:a5:2f:2e:fd: 2a:61:42:d8:43:7b:67:65:e2:84:bc:08:1c:4d:41: 1e:b5:1f:f7:6b:c7:8c:aa:97:cb:78:95:1e:f5:a5: 44:89:99:79:ca:41:d5:ed:8a:2e:3b:b0:14:00:63: 77:81:85:a2:d7:24:4a:47:5a:ec:6e:e6:d7:55:38: cf:87:ff:00:04:6a:0d:c4:ce:35:69:20:81:3f:b4: 4d:d6:84:f8:5c:28:64:24:c7:94:c0:f6:8b:88:84: b2:75:0d:48:86:b5:c2:88:7c:69:1c:64:0f:8a:04: f4:98:e5:f1:36:52:7b:86:e4:c9:42:54:0b:83:98: 3f:eb:46:c7:ac:48:d0:a2:bb:6f:ba:90:4d:cb:97: 1f:47:2f:13:fd:9b:5f:1a:0f:ab:66:75:0f:9b:4b: 50:6d:3c:bd:54:0b:2f:18:59:9c:d0:47:3e:00:a9: 1c:9b:da:2a:cf:64:a6:6c:82:3e:e2:73:30:4e:78: 1c:bf:4f:e0:08:10:50:d4:7f:a4:87:82:a8:be:13: 55:5f:ec:b4:63:71:d8:01:19:e8:9b:b0:5a:a2:b3: b9:e5:e4:01:73:4c:9e:fd:09:f2:ca:20:4e:1d:d1: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A4:6F:BB:9B:BD:0D:D1:E3:65:B0:54:27:EE:F1:4D:70:56:09:42 X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/r6Rvu5u9DdHjZbBUJ-7xTXBWCUI.roa sbgp-ipAddrBlock: critical IPv4: 202.142.224.0/19 Signature Algorithm: sha256WithRSAEncryption ac:03:df:df:63:76:2d:3c:93:0d:cf:09:56:e5:fb:94:d6:74: 7c:11:3e:9f:ca:53:d2:43:b0:97:30:da:6b:9b:d6:46:63:36: f7:52:c0:86:74:ab:df:dd:71:2d:38:aa:5e:ba:29:96:60:52: 69:64:34:4e:87:3a:cd:04:ba:64:69:f1:1b:a3:ad:d7:31:d6: 30:c4:4b:1a:63:23:9a:6b:81:e1:57:44:cb:ce:bb:dc:1a:5b: 1a:cd:9a:f3:35:1c:58:55:8e:fd:c9:27:3e:68:07:79:80:0d: a7:7e:2c:24:90:2a:95:ee:ff:2f:1d:9c:3f:20:cb:38:ee:36: f9:b7:bf:1c:79:fe:ad:9a:b6:e5:5f:a8:69:aa:42:d5:12:d6: a2:0a:21:8a:71:ee:f9:8a:ed:ef:3f:54:75:0e:3e:2f:c7:81: 5d:6b:1d:e7:50:36:44:00:7f:32:c9:51:b8:3f:e3:47:6a:ac: e8:08:01:c0:2d:5f:d9:e6:f5:4f:36:36:ea:ba:ec:da:f9:77: 2f:b3:65:d2:92:8b:56:eb:78:d6:0a:a5:39:79:6b:3c:bd:b9: 26:7c:02:b3:ba:a7:7a:0b:c7:ab:ad:58:1b:ce:0d:73:a6:71: 53:3c:77:d1:3b:db:8a:cc:17:3d:81:70:e4:86:29:c7:6a:b5: 67:aa:59:12 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNjAzMzEw NzMxMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGQTQ2RkJCOUJCRDBE RDFFMzY1QjA1NDI3RUVGMTRENzA1NjA5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWrmRPtCLNIHNkJ14FjEXFK+Do8vmS0UIpS8u/SphQthDe2dl 4oS8CBxNQR61H/drx4yql8t4lR71pUSJmXnKQdXtii47sBQAY3eBhaLXJEpHWuxu 5tdVOM+H/wAEag3EzjVpIIE/tE3WhPhcKGQkx5TA9ouIhLJ1DUiGtcKIfGkcZA+K BPSY5fE2UnuG5MlCVAuDmD/rRsesSNCiu2+6kE3Llx9HLxP9m18aD6tmdQ+bS1Bt PL1UCy8YWZzQRz4AqRyb2irPZKZsgj7iczBOeBy/T+AIEFDUf6SHgqi+E1Vf7LRj cdgBGeibsFqis7nl5AFzTJ79CfLKIE4d0SvbAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUr6Rvu5u9DdHjZbBUJ+7xTXBWCUIwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xMDE3My9yNlJ2dTV1OURkSGpaYkJVSi03eFRYQldDVUkucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyo7gMA0GCSqGSIb3DQEBCwUA A4IBAQCsA9/fY3YtPJMNzwlW5fuU1nR8ET6fylPSQ7CXMNprm9ZGYzb3UsCGdKvf 3XEtOKpeuimWYFJpZDROhzrNBLpkafEbo63XMdYwxEsaYyOaa4HhV0TLzrvcGlsa zZrzNRxYVY79ySc+aAd5gA2nfiwkkCqV7v8vHZw/IMs47jb5t78cef6tmrblX6hp qkLVEtaiCiGKce75iu3vP1R1Dj4vx4Fdax3nUDZEAH8yyVG4P+NHaqzoCAHALV/Z 5vVPNjbquuza+Xcvs2XSkotW63jWCqU5eWs8vbkmfAKzuqd6C8errVgbzg1zpnFT PHfRO9uKzBc9gXDkhinHarVnqlkS -----END CERTIFICATE-----Generated at Fri Apr 17 22:11:23 2026 by rpki-client