$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yDv60urshyiRw-ptUuvz72vODcg.roa File: yDv60urshyiRw-ptUuvz72vODcg.roa (raw, json) Hash identifier: j3h+CZDR3ATzdWNEUxbB7GrxnVpCIq+UpBqFmLXRYZQ= Subject key identifier: C8:3B:FA:D2:EA:EC:87:28:91:C3:EA:6D:52:EB:F3:EF:6B:CE:0D:C8 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0568 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yDv60urshyiRw-ptUuvz72vODcg.roa Signing time: Tue 31 Mar 2026 08:19:59 +0000 ROA not before: Tue 31 Mar 2026 08:19:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 202.75.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C83BFAD2EAEC872891C3EA6D52EBF3EF6BCE0DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:bd:5b:60:e8:89:0f:ae:0b:a6:4f:8c:33: 9c:02:e2:22:5a:1c:37:f1:d9:bf:0c:b8:b6:e9:8c: 6a:bf:c5:a6:6a:e2:16:84:e9:23:7f:0a:17:72:ef: f8:58:96:1b:02:69:f8:e0:41:97:7d:38:9b:3d:75: 0b:43:3a:14:3a:00:34:16:68:e1:c2:86:c6:f6:38: 6b:14:37:07:b9:3a:5b:b5:62:00:92:e7:9c:74:30: a7:2a:32:b3:43:6b:ea:55:86:f6:bf:15:f2:b1:2b: e2:4f:5d:87:2f:e6:22:b1:27:3a:60:c9:0c:37:d8: be:b9:c9:ed:2f:70:e2:1d:2c:b8:6e:bc:f5:09:36: c2:f0:09:97:6e:d6:56:69:0e:ae:65:fe:c3:21:3a: 48:f7:1b:78:3b:3d:2d:65:92:e4:19:f5:f3:13:6c: c0:0b:bd:52:c9:c8:90:b4:c3:61:40:3a:ad:71:80: 78:7d:ed:05:5f:cb:8e:21:2b:a8:ae:3a:08:6e:ca: de:c3:d1:6a:fb:4e:02:ed:9d:43:9e:ba:a5:40:4c: c9:a2:8f:a1:5a:34:01:4c:e4:f4:c8:fb:ff:47:b0: 39:b8:da:02:00:bc:d9:8c:0d:bb:3b:61:46:59:45: a8:67:6d:93:da:e4:9c:3d:db:72:73:54:9b:14:24: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3B:FA:D2:EA:EC:87:28:91:C3:EA:6D:52:EB:F3:EF:6B:CE:0D:C8 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yDv60urshyiRw-ptUuvz72vODcg.roa sbgp-ipAddrBlock: critical IPv4: 202.75.232.0/22 Signature Algorithm: sha256WithRSAEncryption 27:e4:9e:8e:5c:89:4a:94:8f:5b:17:ed:60:3d:ef:58:41:b8: 56:17:ea:d1:50:d5:a3:60:05:d1:2c:f0:d9:ec:b5:5c:b3:c5: 89:83:72:d9:0c:87:89:04:73:a9:ec:10:b2:21:bb:92:99:1d: 2b:14:09:4a:88:a3:c7:19:50:0d:57:bb:74:ae:98:ae:5a:71: b6:51:48:16:b9:5d:f4:15:48:20:05:1d:b0:d6:28:c3:46:59: e8:07:c3:73:11:da:bf:be:7d:f8:3d:7f:0b:cc:31:f0:f9:c9: f0:5d:68:b4:a2:24:9d:49:fb:46:79:1f:e4:c0:aa:3e:ad:78: 16:36:e4:68:4d:dc:5c:fb:fb:9a:a6:d7:a8:f2:d8:b7:56:47: bc:73:fd:63:fb:73:15:de:21:df:75:b2:2b:3f:ed:f3:44:0d: 0f:54:b9:e8:74:a8:4b:3c:4b:df:c4:c5:d1:9d:92:ef:d7:48: 3c:8d:f9:5d:af:07:61:27:7b:f1:45:63:13:44:47:49:03:e2: 43:41:86:7e:f4:67:9b:d4:db:de:59:54:e1:32:d2:e0:38:b0: 5b:ee:25:7f:02:00:e0:98:90:99:a4:d9:16:b4:d7:f9:9e:8c: 14:62:e3:3e:1c:9d:5d:7c:2b:79:c6:94:d8:ad:71:fc:cc:30: 83:b1:fc:78 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4M0JGQUQyRUFFQzg3 Mjg5MUMzRUE2RDUyRUJGM0VGNkJDRTBEQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBx71bYOiJD64Lpk+MM5wC4iJaHDfx2b8MuLbpjGq/xaZq4haE 6SN/Chdy7/hYlhsCafjgQZd9OJs9dQtDOhQ6ADQWaOHChsb2OGsUNwe5Olu1YgCS 55x0MKcqMrNDa+pVhva/FfKxK+JPXYcv5iKxJzpgyQw32L65ye0vcOIdLLhuvPUJ NsLwCZdu1lZpDq5l/sMhOkj3G3g7PS1lkuQZ9fMTbMALvVLJyJC0w2FAOq1xgHh9 7QVfy44hK6iuOghuyt7D0Wr7TgLtnUOeuqVATMmij6FaNAFM5PTI+/9HsDm42gIA vNmMDbs7YUZZRahnbZPa5Jw923JzVJsUJLpLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUyDv60urshyiRw+ptUuvz72vODcgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L3lEdjYwdXJzaHlpUnctcHRVdXZ6NzJ2T0RjZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKS+gwDQYJKoZIhvcNAQELBQADggEB ACfkno5ciUqUj1sX7WA971hBuFYX6tFQ1aNgBdEs8NnstVyzxYmDctkMh4kEc6ns ELIhu5KZHSsUCUqIo8cZUA1Xu3SumK5acbZRSBa5XfQVSCAFHbDWKMNGWegHw3MR 2r++ffg9fwvMMfD5yfBdaLSiJJ1J+0Z5H+TAqj6teBY25GhN3Fz7+5qm16jy2LdW R7xz/WP7cxXeId91sis/7fNEDQ9Uueh0qEs8S9/ExdGdku/XSDyN+V2vB2Ene/FF YxNER0kD4kNBhn70Z5vU295ZVOEy0uA4sFvuJX8CAOCYkJmk2Ra01/mejBRi4z4c nV18K3nGlNitcfzMMIOx/Hg= -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:39 2026 by rpki-client