$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/yucz_63nIbTORoDSKpA7MK8UCSI.roa File: yucz_63nIbTORoDSKpA7MK8UCSI.roa (raw, json) Hash identifier: yF/8kRyUjoQfu7kyz59UwO2bjkYDLZfLDuHwh7pDmtU= Subject key identifier: CA:E7:33:FF:AD:E7:21:B4:CE:46:80:D2:2A:90:3B:30:AF:14:09:22 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: F7 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/yucz_63nIbTORoDSKpA7MK8UCSI.roa Signing time: Tue 31 Mar 2026 07:31:12 +0000 ROA not before: Tue 31 Mar 2026 07:31:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18126 IP address blocks: 203.209.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Mar 31 07:31:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CAE733FFADE721B4CE4680D22A903B30AF140922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:da:74:17:93:8c:68:db:c6:d6:92:41:a9: 33:18:3b:0e:6a:17:79:39:7b:99:9f:96:cf:59:4c: c4:55:8c:64:77:9f:09:6e:96:1f:61:ea:df:90:8a: 5b:0a:3e:49:a8:7d:31:d4:cc:0c:74:c3:a2:f7:13: b1:33:36:98:b1:23:22:c9:6d:b5:a5:b8:7e:ce:0b: dc:c7:3d:a4:2d:96:14:7f:1d:5c:ea:fb:20:34:b3: d5:16:66:b6:27:e2:6c:f1:94:90:55:45:12:a3:87: f6:6d:98:e6:4c:13:80:a4:10:90:21:00:5d:93:40: d8:34:d3:9e:65:e1:7f:27:bc:8a:f8:07:28:ee:c9: fa:ec:52:a4:51:da:c3:e7:9c:6e:e3:ee:93:86:d4: 4d:4b:b3:2f:6b:0c:d3:da:d0:03:62:20:f8:1a:aa: 30:b4:ef:90:eb:28:85:45:91:a3:f8:9c:cc:ec:f8: d3:6c:79:b3:14:e3:51:11:f1:9f:1e:ec:f6:f6:14: 49:3a:42:09:b1:69:b6:91:93:c6:38:aa:ea:3f:5a: 5e:b6:61:e6:e5:f6:79:e2:f0:d7:1c:21:d8:0e:af: 6f:68:c6:ab:83:88:e9:3a:4d:5e:f2:f2:8a:6a:d1: a2:00:9a:b7:4e:09:bb:54:22:53:29:59:b9:7b:9e: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:33:FF:AD:E7:21:B4:CE:46:80:D2:2A:90:3B:30:AF:14:09:22 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/yucz_63nIbTORoDSKpA7MK8UCSI.roa sbgp-ipAddrBlock: critical IPv4: 203.209.176.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:c5:2d:3a:88:06:58:2d:89:83:07:e2:9d:8a:b6:3a:1f:78: dc:dc:f0:0f:c6:ad:bb:77:f4:e5:c6:5c:c4:de:21:94:93:8a: 77:bd:0a:2a:c2:3b:4d:8e:08:77:11:71:cc:8b:fa:41:82:3e: 16:75:e0:4f:71:f2:70:d2:20:a7:64:fa:cf:0c:34:f5:6c:ba: dd:d6:0c:06:55:b9:03:ea:9f:79:a9:1e:1b:9f:41:b9:b9:4b: 2e:e3:4b:03:9a:3e:92:2e:96:d0:85:92:93:1e:f2:61:52:76: 53:90:9f:30:00:cc:f3:cd:88:87:ba:d5:ae:89:c8:cb:e2:53: 0c:f6:f7:f9:b9:0d:23:a0:0d:9e:13:97:56:0a:c9:75:74:bc: f8:10:6d:7d:31:1c:3c:ea:ed:05:40:52:0c:ac:ca:c4:29:17: 1c:63:41:77:5c:46:f4:6b:1b:d7:57:1d:e5:05:72:80:97:db: ff:2f:ab:d2:af:ea:51:18:6f:a5:9c:42:b2:f2:1d:62:bf:d0: 10:c8:e0:ac:c3:b4:a2:d2:98:c0:bb:81:17:91:61:f6:dd:b1: 73:e5:07:1f:4d:c0:b3:04:b9:73:2f:0e:83:2e:30:5e:91:41: 4f:6f:9b:af:3f:7a:d3:08:2f:6d:5f:79:d2:ee:8f:16:47:27: a7:da:51:f9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw NzMxMTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBRTczM0ZGQURFNzIx QjRDRTQ2ODBEMjJBOTAzQjMwQUYxNDA5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Ztp0F5OMaNvG1pJBqTMYOw5qF3k5e5mfls9ZTMRVjGR3nwlu lh9h6t+QilsKPkmofTHUzAx0w6L3E7EzNpixIyLJbbWluH7OC9zHPaQtlhR/HVzq +yA0s9UWZrYn4mzxlJBVRRKjh/ZtmOZME4CkEJAhAF2TQNg0055l4X8nvIr4Byju yfrsUqRR2sPnnG7j7pOG1E1Lsy9rDNPa0ANiIPgaqjC075DrKIVFkaP4nMzs+NNs ebMU41ER8Z8e7Pb2FEk6QgmxabaRk8Y4quo/Wl62Yebl9nni8NccIdgOr29oxquD iOk6TV7y8opq0aIAmrdOCbtUIlMpWbl7nvyHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUyucz/63nIbTORoDSKpA7MK8UCSIwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTczL3l1Y3pfNjNuSWJUT1JvRFNLcEE3TUs4VUNTSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALL0bAwDQYJKoZIhvcNAQELBQADggEB AAvFLTqIBlgtiYMH4p2KtjofeNzc8A/Grbt39OXGXMTeIZSTine9CirCO02OCHcR ccyL+kGCPhZ14E9x8nDSIKdk+s8MNPVsut3WDAZVuQPqn3mpHhufQbm5Sy7jSwOa PpIultCFkpMe8mFSdlOQnzAAzPPNiIe61a6JyMviUwz29/m5DSOgDZ4Tl1YKyXV0 vPgQbX0xHDzq7QVAUgysysQpFxxjQXdcRvRrG9dXHeUFcoCX2/8vq9Kv6lEYb6Wc QrLyHWK/0BDI4KzDtKLSmMC7gReRYfbdsXPlBx9NwLMEuXMvDoMuMF6RQU9vm68/ etMIL21fedLujxZHJ6faUfk= -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:27 2026 by rpki-client