$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/hgqhk7o70a0qC3uBRS44YTjWbE8.roa File: hgqhk7o70a0qC3uBRS44YTjWbE8.roa (raw, json) Hash identifier: Wi/ganso75AbB2CjV6iPqrq2yngf71jnlaFQYzmOlPM= Subject key identifier: 86:0A:A1:93:BA:3B:D1:AD:2A:0B:7B:81:45:2E:38:61:38:D6:6C:4F Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Certificate serial: 38 Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/hgqhk7o70a0qC3uBRS44YTjWbE8.roa Signing time: Tue 31 Mar 2026 08:44:45 +0000 ROA not before: Tue 31 Mar 2026 08:44:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 59108 IP address blocks: 153.124.208.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10 Validity Not Before: Mar 31 08:44:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=860AA193BA3BD1AD2A0B7B81452E386138D66C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:f4:bf:a2:ee:97:c2:31:ae:9d:13:22:ac: 91:cc:84:85:a4:e5:79:eb:74:2b:74:95:bf:e7:83: 7e:f8:f6:5b:e3:2c:b0:85:e2:31:64:87:42:b4:bb: c1:0e:6a:db:06:bc:05:f7:3d:99:c7:1a:c5:9e:92: 77:ce:81:fc:47:91:12:84:59:ae:d8:8d:23:d2:c7: fc:84:82:32:0a:e3:9c:0b:81:f0:7b:84:93:94:b1: 80:06:d4:c4:cf:fd:34:e5:51:ef:e5:4e:01:d5:5f: 54:84:ff:80:ff:0f:57:92:e7:dd:99:dd:cc:5e:86: 68:b4:02:07:ff:69:45:a4:8e:49:97:d9:5b:55:3b: 0e:e3:af:31:93:a3:d1:c5:93:65:b0:d8:33:fc:06: 74:c9:27:36:57:d1:81:fb:ca:25:0c:27:29:bf:3b: 2f:a8:5f:80:da:2b:e1:5a:36:87:6f:a7:f9:00:47: db:6b:a8:b2:e6:43:4a:03:af:5a:13:f7:38:50:60: bb:2d:f6:04:15:08:73:c3:3e:8d:c7:d1:46:b0:ae: fe:c6:f5:42:51:0c:f0:6b:82:fa:f2:a9:3c:6a:9e: 28:fc:ed:56:f4:5b:76:94:6e:f0:e4:77:65:6e:10: e4:5b:65:6c:48:45:2b:ea:c4:d3:77:65:10:71:a0: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:A1:93:BA:3B:D1:AD:2A:0B:7B:81:45:2E:38:61:38:D6:6C:4F X509v3 Authority Key Identifier: keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/hgqhk7o70a0qC3uBRS44YTjWbE8.roa sbgp-ipAddrBlock: critical IPv4: 153.124.208.0/20 Signature Algorithm: sha256WithRSAEncryption b2:06:f0:8a:52:dc:e5:56:8e:9a:15:30:a0:06:14:ff:b4:16: ed:bd:e1:49:de:ea:e3:1d:2f:8b:f2:f9:06:ce:7f:06:1a:8b: 1e:32:5f:0c:ec:23:c6:90:af:fd:f0:1f:56:be:4c:5c:78:d5: 63:04:f3:a7:3d:46:71:23:25:a4:ac:92:71:be:48:3c:c7:22: 8c:92:8e:ad:e1:29:8c:a3:22:7f:1f:db:1b:b5:3c:a6:46:b8: 42:f4:59:bd:b4:4a:0b:9c:64:fd:b5:17:8b:c3:13:e6:5b:c3: 11:bd:2c:ed:ff:a8:e8:50:87:3a:00:d1:f9:86:1c:46:00:52: 54:00:05:6f:5f:09:96:49:d2:08:27:cc:34:91:19:a3:87:c4: 9e:6b:6e:ca:46:85:4c:e6:2f:20:8b:cd:bd:cf:69:a7:dd:aa: b3:03:02:6a:8e:e5:7b:59:33:80:a7:ff:2a:1a:a0:13:91:2e: e4:41:1a:d0:75:91:12:e8:3b:56:60:62:7b:ce:9d:23:25:92: 77:8e:38:98:18:ba:bb:09:2a:a3:31:21:af:38:91:cd:ca:ea: e4:75:f8:c3:ac:26:10:1a:32:75:d1:14:13:86:09:81:08:1b: b0:46:46:05:a7:64:88:30:7f:9d:3e:66:ff:6b:f0:90:2b:7a: 67:27:92:b5 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI2MDMzMTA4 NDQ0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODYwQUExOTNCQTNCRDFB RDJBMEI3QjgxNDUyRTM4NjEzOEQ2NkM0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM2i9L+i7pfCMa6dEyKskcyEhaTleet0K3SVv+eDfvj2W+MssIXi MWSHQrS7wQ5q2wa8Bfc9mccaxZ6Sd86B/EeREoRZrtiNI9LH/ISCMgrjnAuB8HuE k5SxgAbUxM/9NOVR7+VOAdVfVIT/gP8PV5Ln3ZndzF6GaLQCB/9pRaSOSZfZW1U7 DuOvMZOj0cWTZbDYM/wGdMknNlfRgfvKJQwnKb87L6hfgNor4Vo2h2+n+QBH22uo suZDSgOvWhP3OFBguy32BBUIc8M+jcfRRrCu/sb1QlEM8GuC+vKpPGqeKPztVvRb dpRu8OR3ZW4Q5FtlbEhFK+rE03dlEHGgwN0CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSGCqGTujvRrSoLe4FFLjhhONZsTzAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac 2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1 YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yNzEvaGdxaGs3bzcwYTBxQzN1QlJTNDRZVGpXYkU4LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJl80DANBgkqhkiG9w0BAQsFAAOCAQEA sgbwilLc5VaOmhUwoAYU/7QW7b3hSd7q4x0vi/L5Bs5/BhqLHjJfDOwjxpCv/fAf Vr5MXHjVYwTzpz1GcSMlpKyScb5IPMcijJKOreEpjKMifx/bG7U8pka4QvRZvbRK C5xk/bUXi8MT5lvDEb0s7f+o6FCHOgDR+YYcRgBSVAAFb18JlknSCCfMNJEZo4fE nmtuykaFTOYvIIvNvc9pp92qswMCao7le1kzgKf/KhqgE5Eu5EEa0HWREug7VmBi e86dIyWSd444mBi6uwkqozEhrziRzcrq5HX4w6wmEBoyddEUE4YJgQgbsEZGBadk iDB/nT5m/2vwkCt6ZyeStQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:43:14 2026 by rpki-client