$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iSu4Id2O6b2wY1noytGxlPs1Ksc.roa File: iSu4Id2O6b2wY1noytGxlPs1Ksc.roa (raw, json) Hash identifier: ss8OPJKXcGV8zBIHPAtI7vEvh0bR/1bkT2Cmn7XO+BA= Subject key identifier: 89:2B:B8:21:DD:8E:E9:BD:B0:63:59:E8:CA:D1:B1:94:FB:35:2A:C7 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0651 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iSu4Id2O6b2wY1noytGxlPs1Ksc.roa Signing time: Tue 31 Mar 2026 07:27:36 +0000 ROA not before: Tue 31 Mar 2026 07:27:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 220.216.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=892BB821DD8EE9BDB06359E8CAD1B194FB352AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:b4:ce:08:6c:51:d8:87:12:ad:f3:b0:d5: de:04:84:09:6b:a8:00:12:80:25:27:98:e7:4c:7f: 0c:38:da:f4:da:4b:ad:3f:af:4b:14:23:d6:c8:a5: 0e:1b:9d:bc:7c:b6:ba:28:7a:89:e5:15:2e:60:cf: f8:e6:72:55:c9:e4:24:c1:f8:6f:5c:db:2e:90:e0: 2c:b8:d2:7a:23:f7:c9:0f:0e:c9:85:21:c1:72:f5: 48:c5:e5:ea:75:f1:5e:3c:15:a6:c3:69:4a:11:44: 12:a9:7a:31:d4:1c:0d:2d:d2:8c:b2:e7:92:2c:08: 6b:40:1a:ca:06:c9:33:46:36:96:4b:db:37:d5:f4: 48:ff:32:ff:c0:99:64:9d:38:87:e4:78:31:5d:22: d4:3a:3f:3e:8e:07:5f:a0:21:58:68:45:f3:e5:7f: 7e:10:24:d6:0d:53:a5:5e:4d:b2:f0:34:63:49:00: f6:92:84:75:61:4b:06:d6:eb:2a:ef:74:17:d3:46: d9:2d:86:18:64:a3:6f:0a:67:91:72:d4:8c:8f:e1: 12:5a:86:52:64:c0:dc:49:d7:9b:48:d6:45:37:21: 33:f2:24:dc:e0:ee:fc:45:99:f1:cc:e6:21:e8:c3: d9:4e:7f:23:c7:da:77:13:8b:2c:7b:6a:2d:06:38: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2B:B8:21:DD:8E:E9:BD:B0:63:59:E8:CA:D1:B1:94:FB:35:2A:C7 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iSu4Id2O6b2wY1noytGxlPs1Ksc.roa sbgp-ipAddrBlock: critical IPv4: 220.216.96.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:b6:05:c8:d9:a9:46:fd:89:31:ee:bf:a9:58:37:ce:0d:31: e7:b6:6e:80:bd:35:d0:b8:e9:7d:69:2e:5e:80:96:f4:a9:b1: fa:e4:2d:4a:b8:85:48:44:36:06:9e:d2:3c:48:99:b5:92:cf: f9:f5:99:98:74:bf:af:82:ba:20:c8:12:06:4d:a6:f5:bf:29: 14:fd:39:7c:b4:ac:bb:e6:5b:3e:cf:00:a4:36:cb:65:7b:77: cf:29:18:7a:8a:55:05:e5:5e:94:ac:3c:a7:9a:67:39:44:03: 46:f1:61:7a:5b:1d:2a:2e:7a:b2:b3:65:d6:2f:52:fd:00:2b: b1:9e:df:0c:74:39:5f:89:78:58:8e:d6:41:51:e8:7d:b4:56: ff:fc:0c:67:07:ee:a4:64:26:bf:e1:67:01:d0:ec:7f:e7:14: b5:27:06:97:41:cc:af:f3:91:d8:69:f9:43:17:dd:6d:ab:64: 68:04:eb:35:b1:0c:b1:52:37:b4:76:25:e3:8e:8d:4d:9f:2d: eb:c4:e0:4e:a4:04:07:46:1c:f9:49:fb:c9:c6:73:5a:77:1d: 10:d4:2d:fc:d8:23:7b:1e:4e:47:65:77:44:f8:dd:62:3b:ae: 83:9f:bf:c2:ec:04:fd:2b:25:14:0b:36:d2:d4:7a:48:44:3a: 37:e6:42:02 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5MkJCODIxREQ4RUU5 QkRCMDYzNTlFOENBRDFCMTk0RkIzNTJBQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwWLTOCGxR2IcSrfOw1d4EhAlrqAASgCUnmOdMfww42vTaS60/ r0sUI9bIpQ4bnbx8trooeonlFS5gz/jmclXJ5CTB+G9c2y6Q4Cy40noj98kPDsmF IcFy9UjF5ep18V48FabDaUoRRBKpejHUHA0t0oyy55IsCGtAGsoGyTNGNpZL2zfV 9Ej/Mv/AmWSdOIfkeDFdItQ6Pz6OB1+gIVhoRfPlf34QJNYNU6VeTbLwNGNJAPaS hHVhSwbW6yrvdBfTRtkthhhko28KZ5Fy1IyP4RJahlJkwNxJ15tI1kU3ITPyJNzg 7vxFmfHM5iHow9lOfyPH2ncTiyx7ai0GON5XAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUiSu4Id2O6b2wY1noytGxlPs1KscwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L2lTdTRJZDJPNmIyd1kxbm95dEd4bFBzMUtzYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc2GAwDQYJKoZIhvcNAQELBQADggEB ADq2BcjZqUb9iTHuv6lYN84NMee2boC9NdC46X1pLl6AlvSpsfrkLUq4hUhENgae 0jxImbWSz/n1mZh0v6+CuiDIEgZNpvW/KRT9OXy0rLvmWz7PAKQ2y2V7d88pGHqK VQXlXpSsPKeaZzlEA0bxYXpbHSouerKzZdYvUv0AK7Ge3wx0OV+JeFiO1kFR6H20 Vv/8DGcH7qRkJr/hZwHQ7H/nFLUnBpdBzK/zkdhp+UMX3W2rZGgE6zWxDLFSN7R2 JeOOjU2fLevE4E6kBAdGHPlJ+8nGc1p3HRDULfzYI3seTkdld0T43WI7roOfv8Ls BP0rJRQLNtLUekhEOjfmQgI= -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:00 2026 by rpki-client