$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/crs90-kVZiQ3OUssGSFvfdICrmY.roa File: crs90-kVZiQ3OUssGSFvfdICrmY.roa (raw, json) Hash identifier: eNmuxrt1hGXGMbM2iMq5aA6G/1OcXK6IhDjBJgW/ZKM= Subject key identifier: 72:BB:3D:D3:E9:15:66:24:37:39:4B:2C:19:21:6F:7D:D2:02:AE:66 Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Certificate serial: 2F Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/crs90-kVZiQ3OUssGSFvfdICrmY.roa Signing time: Sun 01 Mar 2026 01:35:31 +0000 ROA not before: Sun 01 Mar 2026 01:35:31 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 23827 IP address blocks: 211.14.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Validity Not Before: Mar 1 01:35:31 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=72BB3DD3E915662437394B2C19216F7DD202AE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:1d:15:f6:6a:1b:4d:d4:2f:8c:ed:f5:65: 25:eb:26:a3:c1:e8:d7:ae:11:db:7d:3c:10:67:25: 6c:4f:55:d3:3d:07:09:4e:a1:df:06:07:51:91:1f: f3:9e:16:91:14:b7:ec:1c:d8:56:a7:5a:a4:6a:b4: ee:79:b8:3b:6d:56:bf:cc:17:8a:7b:bb:a7:6f:c9: b7:87:f5:9d:37:ce:e9:e0:ba:bf:cb:85:67:6e:3a: a2:0f:8b:b7:5a:18:d0:1d:d6:83:76:71:7d:e1:e5: e0:30:6a:bf:ee:03:61:0e:68:5e:78:9a:c5:95:ce: 94:19:fe:c7:4e:f1:46:26:9c:5f:4b:67:66:b5:fa: 87:1d:c5:73:32:c0:79:76:e5:9d:6d:34:ed:8a:6b: 64:94:58:c3:d3:61:99:7b:e0:6b:47:9f:76:77:18: 75:e6:0c:05:eb:00:f1:0f:fb:b3:4f:fd:2d:87:55: 41:93:7a:3f:12:3f:f6:47:d4:28:f8:97:08:82:e8: e6:8d:64:93:cc:a8:b8:5c:2b:ae:54:72:47:da:60: d6:28:dd:d3:d7:f1:6e:35:04:4b:38:d9:1a:7d:a7: f0:d7:0c:18:57:32:f2:8a:02:47:12:79:c9:6b:f6: 34:cb:16:9f:16:62:8f:1f:39:07:40:73:46:b0:1b: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BB:3D:D3:E9:15:66:24:37:39:4B:2C:19:21:6F:7D:D2:02:AE:66 X509v3 Authority Key Identifier: keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/crs90-kVZiQ3OUssGSFvfdICrmY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.200.0/21 Signature Algorithm: sha256WithRSAEncryption 35:e3:e8:ac:b6:75:62:a1:52:54:5a:ad:3e:19:ff:8d:9a:6a: a2:a2:4d:27:15:02:61:90:38:2d:9c:ae:37:0f:e7:4e:27:19: 9d:72:63:a8:1a:96:61:e4:f8:d2:4a:b6:2e:6b:74:36:9c:b5: f6:68:c8:d2:42:b3:db:c3:98:68:35:34:38:1d:27:da:a8:ec: 3c:d1:62:70:b1:dc:e5:c6:e2:ac:1d:b5:1b:86:02:3a:d4:49: 6c:e6:14:63:a7:e6:1c:45:2e:d9:04:f6:f6:d3:fe:37:fc:08: 4a:7c:93:4f:7f:76:58:24:7e:31:36:09:c1:1b:b9:fc:3c:96: 40:1c:14:5f:9f:a1:ac:87:1c:6b:b2:90:2d:72:8c:f1:c8:a7: e1:09:7e:e8:44:29:7b:c8:ab:40:21:62:1a:b9:66:66:5b:96: 6c:b1:af:d9:ce:2b:de:bc:87:97:d8:c8:bc:00:32:35:d0:58: 76:f9:d5:8e:ca:d6:ca:e0:93:df:f1:51:66:04:13:99:de:2b: eb:e8:98:1e:df:1e:ae:49:f6:58:75:fb:e2:0d:00:02:cc:45: d8:06:aa:f4:3b:96:29:2b:f0:b3:48:6d:6b:87:01:9e:05:d1: 35:f8:80:93:5a:2d:b8:94:0c:1c:eb:50:91:66:1a:e6:cc:d4: c0:27:ec:95 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERDgy OUQ2NDZENTNFQ0YyOTg5NTBCNjg3NTMyREU5MjZFQzdFQkMwMB4XDTI2MDMwMTAx MzUzMVoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzJCQjNERDNFOTE1NjYy NDM3Mzk0QjJDMTkyMTZGN0REMjAyQUU2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANooHRX2ahtN1C+M7fVlJesmo8Ho164R2308EGclbE9V0z0HCU6h 3wYHUZEf854WkRS37BzYVqdapGq07nm4O21Wv8wXinu7p2/Jt4f1nTfO6eC6v8uF Z246og+Lt1oY0B3Wg3ZxfeHl4DBqv+4DYQ5oXniaxZXOlBn+x07xRiacX0tnZrX6 hx3FczLAeXblnW007YprZJRYw9NhmXvga0efdncYdeYMBesA8Q/7s0/9LYdVQZN6 PxI/9kfUKPiXCILo5o1kk8youFwrrlRyR9pg1ijd09fxbjUESzjZGn2n8NcMGFcy 8ooCRxJ5yWv2NMsWnxZijx85B0BzRrAb5H8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRyuz3T6RVmJDc5SywZIW990gKuZjAfBgNVHSMEGDAWgBTdgp1kbVPs8piVC2h1 Mt6SbsfrwDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODkxLzNZS2RaRzFUN1BLWWxRdG9kVExla203SDY4QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzNZS2RaRzFUN1BLWWxRdG9kVExla203 SDY4QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTEvY3JzOTAta1ZaaVEzT1Vzc0dTRnZmZElDcm1ZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9MOyDANBgkqhkiG9w0BAQsFAAOCAQEANePorLZ1YqFSVFqtPhn/jZpqoqJN JxUCYZA4LZyuNw/nTicZnXJjqBqWYeT40kq2Lmt0Npy19mjI0kKz28OYaDU0OB0n 2qjsPNFicLHc5cbirB21G4YCOtRJbOYUY6fmHEUu2QT29tP+N/wISnyTT392WCR+ MTYJwRu5/DyWQBwUX5+hrIcca7KQLXKM8cin4Ql+6EQpe8irQCFiGrlmZluWbLGv 2c4r3ryHl9jIvAAyNdBYdvnVjsrWyuCT3/FRZgQTmd4r6+iYHt8erkn2WHX74g0A AsxF2Aaq9DuWKSvws0hta4cBngXRNfiAk1otuJQMHOtQkWYa5szUwCfslQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:04:43 2026 by rpki-client