$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/vgypQGvLT105_JtJi5k6b9iypDE.roa File: vgypQGvLT105_JtJi5k6b9iypDE.roa (raw, json) Hash identifier: Sy6AKvMNurs76hXaCN2HxMj8h2lrTmXjQxCAROT6r04= Subject key identifier: BE:0C:A9:40:6B:CB:4F:5D:39:FC:9B:49:8B:99:3A:6F:D8:B2:A4:31 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0195 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/vgypQGvLT105_JtJi5k6b9iypDE.roa Signing time: Tue 31 Mar 2026 07:38:20 +0000 ROA not before: Tue 31 Mar 2026 07:38:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 8220 IP address blocks: 202.95.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Mar 31 07:38:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BE0CA9406BCB4F5D39FC9B498B993A6FD8B2A431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:fd:65:2b:c7:a6:b8:c6:e1:1c:d3:c2:b7: c5:28:fa:3f:c2:5a:3c:12:8c:c2:ae:6c:35:dc:cc: c9:f1:b5:9c:97:6d:5b:3f:f3:37:67:a0:fa:a8:bb: d2:d6:b9:c1:1a:b7:ab:50:de:dc:c5:fc:08:67:5c: ba:80:ce:ad:0a:fb:30:3e:3b:bc:db:43:cf:39:51: c3:f6:f9:b9:cc:28:9b:4f:ce:a8:65:f2:7e:ff:88: 4b:90:a1:e7:aa:82:10:1e:dc:d8:98:4f:26:4c:64: db:b8:5c:a8:23:cc:7f:c3:4b:a9:4d:4e:bf:83:0d: 8c:48:43:48:ac:27:99:98:a4:ba:e5:ff:57:8d:4a: 55:bc:bb:68:35:da:2b:d9:f3:7a:27:76:b7:ce:ac: c4:45:b3:bf:3b:87:a3:24:12:2d:db:72:8b:02:48: fe:fe:74:a6:9b:87:e3:5f:37:5c:c0:1b:92:6d:78: 53:2a:5b:7a:fd:be:51:86:c1:2d:96:d6:29:d5:47: 1a:db:5b:c6:60:47:08:0f:46:0e:28:03:6d:b8:53: b9:6f:5f:f2:5f:28:32:41:49:ff:c7:8b:58:10:3f: c7:3b:41:7f:7d:1f:28:45:9f:c5:df:41:04:23:f1: ec:f7:4a:86:4b:4e:ea:95:da:8d:14:fd:f4:10:f0: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:A9:40:6B:CB:4F:5D:39:FC:9B:49:8B:99:3A:6F:D8:B2:A4:31 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/vgypQGvLT105_JtJi5k6b9iypDE.roa sbgp-ipAddrBlock: critical IPv4: 202.95.218.0/23 Signature Algorithm: sha256WithRSAEncryption b9:dd:16:31:5f:b8:ce:e1:dc:a5:88:a8:1b:22:90:3e:33:22: 90:c4:82:54:72:b7:a3:98:5b:d9:6a:3d:5b:fe:d8:d3:be:ba: 62:d7:af:0a:4f:63:aa:d3:4b:b9:15:d9:e1:9d:63:a8:09:6a: be:55:7c:37:ac:ad:96:c6:8d:55:0c:73:8e:01:37:0b:55:be: 69:31:6e:8d:3c:3d:0b:8f:66:67:64:40:a2:60:01:07:17:ec: b7:80:e0:a6:96:ef:1e:f7:6f:fc:ef:22:cf:08:83:c8:06:45: 57:7e:f6:a4:cf:e0:73:a2:03:1d:d9:ba:ad:ed:6b:8f:39:7a: ff:ce:4b:67:d2:71:dd:68:f4:de:fc:bf:81:db:1f:f2:09:29: db:d8:b9:29:97:8c:8c:28:90:3d:19:25:bd:40:98:a5:3e:c9: e5:59:45:cc:0f:96:e7:5c:42:26:21:a3:95:53:71:8d:aa:2e: 29:47:5b:e9:94:0b:77:70:8d:a9:92:a4:c0:2c:84:94:c6:e6: 47:aa:40:11:c0:aa:20:07:40:ec:ef:15:70:df:31:9c:96:4e: 95:e7:68:d9:9e:2f:26:8f:b2:e6:ad:ab:9e:b4:51:ab:ab:a2: b8:6a:ee:99:b1:bf:8d:25:3f:bb:48:e7:36:30:88:4b:7e:aa: 54:72:8f:e9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNjAzMzEw NzM4MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFMENBOTQwNkJDQjRG NUQzOUZDOUI0OThCOTkzQTZGRDhCMkE0MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCejP1lK8emuMbhHNPCt8Uo+j/CWjwSjMKubDXczMnxtZyXbVs/ 8zdnoPqou9LWucEat6tQ3tzF/AhnXLqAzq0K+zA+O7zbQ885UcP2+bnMKJtPzqhl 8n7/iEuQoeeqghAe3NiYTyZMZNu4XKgjzH/DS6lNTr+DDYxIQ0isJ5mYpLrl/1eN SlW8u2g12ivZ83ondrfOrMRFs787h6MkEi3bcosCSP7+dKabh+NfN1zAG5JteFMq W3r9vlGGwS2W1inVRxrbW8ZgRwgPRg4oA224U7lvX/JfKDJBSf/Hi1gQP8c7QX99 HyhFn8XfQQQj8ez3SoZLTuqV2o0U/fQQ8BLJAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvgypQGvLT105/JtJi5k6b9iypDEwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNDY5L3ZneXBRR3ZMVDEwNV9KdEppNWs2YjlpeXBERS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKX9owDQYJKoZIhvcNAQELBQADggEB ALndFjFfuM7h3KWIqBsikD4zIpDEglRyt6OYW9lqPVv+2NO+umLXrwpPY6rTS7kV 2eGdY6gJar5VfDesrZbGjVUMc44BNwtVvmkxbo08PQuPZmdkQKJgAQcX7LeA4KaW 7x73b/zvIs8Ig8gGRVd+9qTP4HOiAx3Zuq3ta485ev/OS2fScd1o9N78v4HbH/IJ KdvYuSmXjIwokD0ZJb1AmKU+yeVZRcwPludcQiYho5VTcY2qLilHW+mUC3dwjamS pMAshJTG5keqQBHAqiAHQOzvFXDfMZyWTpXnaNmeLyaPsuatq560Uaurorhq7pmx v40lP7tI5zYwiEt+qlRyj+k= -----END CERTIFICATE-----Generated at Sun Apr 19 09:50:47 2026 by rpki-client