$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/YAbqGoRBQ16b2HkRd-V5TdpZ7tw.roa File: YAbqGoRBQ16b2HkRd-V5TdpZ7tw.roa (raw, json) Hash identifier: vY/q1hisTegkQ04ehEXdRAzJyCTmGVE6TlVFHz74KfI= Subject key identifier: 60:06:EA:1A:84:41:43:5E:9B:D8:79:11:77:E5:79:4D:DA:59:EE:DC Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 63 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/YAbqGoRBQ16b2HkRd-V5TdpZ7tw.roa Signing time: Tue 31 Mar 2026 08:16:35 +0000 ROA not before: Tue 31 Mar 2026 08:16:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7672 IP address blocks: 210.171.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: Mar 31 08:16:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6006EA1A8441435E9BD8791177E5794DDA59EEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:b7:27:6a:cc:53:5f:e3:35:6e:4e:6f:a6: 09:aa:bb:cf:1b:2e:be:2c:a2:c4:83:23:6d:84:e4: a6:7f:57:00:ac:47:5d:fa:9a:9c:bb:04:a7:12:b8: 7c:c0:88:ff:22:dd:d1:f1:51:f9:0e:22:2a:e4:ff: ff:b6:df:2a:17:8f:44:0a:51:62:2d:d0:90:9e:fc: b6:86:e5:7d:5f:79:1b:f0:26:6a:56:b7:5a:ee:b6: 98:6a:6d:4d:75:63:3b:86:3b:5e:1c:32:de:2e:90: 2d:6b:e9:05:d8:6e:15:d7:f8:c3:21:ee:47:66:a3: 8b:30:24:b5:ce:e0:41:b8:35:ae:48:4d:79:39:4c: b3:e1:aa:8a:2e:fb:04:56:04:40:d2:ec:e2:81:f1: f9:4f:81:6b:ca:21:43:7c:b1:0e:a3:83:73:9a:d3: ce:fe:a7:f8:f7:c4:66:ec:4e:8d:e9:da:c7:1d:7b: 53:2b:6f:2a:a5:c4:2e:84:f9:85:7a:06:f8:3c:d2: e1:d5:29:9f:70:ce:69:af:74:8a:cd:c4:1c:89:8a: b1:c4:35:64:1a:98:d4:05:9c:e8:8d:84:3e:84:8e: b4:06:67:01:7b:40:53:ec:f6:f1:0c:6c:78:37:c2: db:12:39:63:55:ff:c1:a0:ef:71:54:0f:4b:00:69: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:06:EA:1A:84:41:43:5E:9B:D8:79:11:77:E5:79:4D:DA:59:EE:DC X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/YAbqGoRBQ16b2HkRd-V5TdpZ7tw.roa sbgp-ipAddrBlock: critical IPv4: 210.171.208.0/20 Signature Algorithm: sha256WithRSAEncryption 10:8b:89:b0:4e:14:23:2a:2a:45:f6:70:39:9c:45:db:f3:55: 3c:a4:15:10:81:2a:85:81:34:f5:70:79:ab:f0:56:b7:aa:89: 20:b3:26:a0:02:c1:85:1b:60:03:92:32:88:3a:b8:c6:1b:35: b2:db:68:0f:3b:6c:67:43:59:cc:e8:e9:c1:54:51:84:33:74: 2d:5b:0d:21:18:f0:84:b9:21:70:d1:df:33:b8:60:2f:3e:bd: c9:5b:fd:de:4d:ce:e3:e8:49:24:80:f0:0a:90:8c:b3:80:84: f8:81:05:a9:53:5d:78:83:9d:ad:ea:7a:88:2d:8b:c3:ba:71: ef:9e:6b:53:7a:02:6d:cf:2e:6d:1f:aa:45:cd:ff:c4:b3:44: 5b:68:7d:0e:b2:87:49:91:02:0a:1e:b9:35:b4:ca:94:e8:5a: 89:ad:99:cf:19:e9:08:c5:48:1f:25:43:05:fd:a2:65:86:2d: d5:96:c5:a8:5e:99:ba:79:ee:e0:4e:56:4a:4c:a9:a9:d6:17: 17:2f:6f:b4:bd:2a:46:72:98:f9:26:24:0f:2d:aa:24:11:cd: 77:d2:17:ae:2b:9a:fc:cb:3a:67:56:97:e3:91:f6:3e:dd:b9: 8e:85:96:95:20:a8:42:6f:3e:f8:46:c4:6c:3c:c3:b7:ce:95: d4:a5:f5:4d -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MDMzMTA4 MTYzNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjAwNkVBMUE4NDQxNDM1 RTlCRDg3OTExNzdFNTc5NEREQTU5RUVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6ltydqzFNf4zVuTm+mCaq7zxsuviyixIMjbYTkpn9XAKxHXfqa nLsEpxK4fMCI/yLd0fFR+Q4iKuT//7bfKhePRApRYi3QkJ78toblfV95G/Amala3 Wu62mGptTXVjO4Y7Xhwy3i6QLWvpBdhuFdf4wyHuR2ajizAktc7gQbg1rkhNeTlM s+Gqii77BFYEQNLs4oHx+U+Ba8ohQ3yxDqODc5rTzv6n+PfEZuxOjenaxx17Uytv KqXELoT5hXoG+DzS4dUpn3DOaa90is3EHImKscQ1ZBqY1AWc6I2EPoSOtAZnAXtA U+z28QxseDfC2xI5Y1X/waDvcVQPSwBpqjMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRgBuoahEFDXpvYeRF35XlN2lnu3DAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yMzIvWUFicUdvUkJRMTZiMkhrUmQtVjVUZHBaN3R3LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNKr0DANBgkqhkiG9w0BAQsFAAOCAQEA EIuJsE4UIyoqRfZwOZxF2/NVPKQVEIEqhYE09XB5q/BWt6qJILMmoALBhRtgA5Iy iDq4xhs1sttoDztsZ0NZzOjpwVRRhDN0LVsNIRjwhLkhcNHfM7hgLz69yVv93k3O 4+hJJIDwCpCMs4CE+IEFqVNdeIOdrep6iC2Lw7px755rU3oCbc8ubR+qRc3/xLNE W2h9DrKHSZECCh65NbTKlOhaia2ZzxnpCMVIHyVDBf2iZYYt1ZbFqF6Zunnu4E5W SkypqdYXFy9vtL0qRnKY+SYkDy2qJBHNd9IXriua/Ms6Z1aX45H2Pt25joWWlSCo Qm8++EbEbDzDt86V1KX1TQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:11:33 2026 by rpki-client