$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/X2iRrjxxUpVqBH8X9xEspgXF5NQ.roa File: X2iRrjxxUpVqBH8X9xEspgXF5NQ.roa (raw, json) Hash identifier: dIXvvs02S069TaRdyUUfU34zqKQNlU8dA960oF110h8= Subject key identifier: 5F:68:91:AE:3C:71:52:95:6A:04:7F:17:F7:11:2C:A6:05:C5:E4:D4 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 5A Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/X2iRrjxxUpVqBH8X9xEspgXF5NQ.roa Signing time: Tue 31 Mar 2026 08:33:50 +0000 ROA not before: Tue 31 Mar 2026 08:33:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24259 IP address blocks: 202.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Mar 31 08:33:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5F6891AE3C7152956A047F17F7112CA605C5E4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:55:e6:bc:c7:50:74:14:45:d8:f9:47:29: 1c:eb:5d:85:bc:d9:60:72:0b:0d:eb:41:3d:26:5b: 01:91:e0:eb:d1:43:38:7a:b1:48:48:7d:37:26:c0: 22:8c:32:0f:60:b9:68:55:66:b6:29:74:99:85:4e: a2:56:a0:9c:b3:21:0c:66:ae:79:5f:2f:26:f2:c8: 70:ec:c4:ea:b6:62:b6:09:12:53:50:d4:64:21:74: c5:61:af:75:fa:d6:7e:ab:15:92:8d:f4:a5:65:da: dd:4a:2f:30:d9:0d:16:a0:ec:ff:1d:53:97:18:1c: b7:09:ac:ce:42:14:19:09:6a:3b:a3:be:ab:18:1a: 61:98:af:2c:a4:44:0b:c8:be:88:03:cf:1d:6a:c4: 2b:db:4b:78:ba:4c:e0:a1:78:4e:4f:c4:60:75:89: 21:83:ab:63:25:dc:be:aa:91:a1:27:c0:cc:5f:59: 55:d6:81:d0:66:7a:7d:fa:e0:07:7d:4b:78:52:a7: 55:33:24:e3:ce:8e:55:c9:c2:5c:38:17:e3:6c:a8: 55:a1:af:23:13:e1:f5:1c:f7:3d:66:13:21:cc:dd: 09:c8:06:53:3e:1e:b3:dc:07:05:be:e9:20:7b:12: 18:1d:ce:c1:5d:c0:0d:09:55:7c:ba:ec:d2:8a:2d: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:91:AE:3C:71:52:95:6A:04:7F:17:F7:11:2C:A6:05:C5:E4:D4 X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/X2iRrjxxUpVqBH8X9xEspgXF5NQ.roa sbgp-ipAddrBlock: critical IPv4: 202.89.240.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:f4:9d:45:8e:41:e7:e6:bf:a3:95:3b:4f:05:a7:0b:84:04: fa:f4:db:85:88:c0:85:3c:49:a7:f4:44:07:98:78:f0:8a:68: a7:45:3b:a3:b6:e6:f6:0c:d5:8e:b5:50:e8:48:b5:21:66:b5: 72:3c:aa:95:6e:09:cc:a3:67:d0:ee:0b:70:72:13:80:60:29: 4d:37:69:bb:63:06:9c:8f:0b:6d:c8:7b:20:69:81:c4:03:66: ee:2a:9e:a6:37:13:8f:82:cf:7a:28:f8:96:21:0d:eb:9e:f2: 0f:f1:af:e2:82:4f:64:89:2d:ca:6f:4a:eb:71:e1:8c:dd:61: 91:db:5d:61:57:16:de:59:39:85:e1:2c:db:6d:04:c4:02:c1: c1:ea:3e:48:a2:a8:b5:21:49:b5:1e:04:c6:db:95:07:3c:02: c3:02:5e:b3:89:e8:75:41:11:cf:54:7f:e9:d7:db:3d:d9:e2: c0:22:54:17:0e:bb:45:9e:e6:d5:76:20:4c:91:20:94:39:58: 5b:a5:51:a3:3c:2e:43:c1:f0:e9:9b:d4:de:b8:27:1a:d0:f2: 38:cb:34:e3:9f:2f:39:15:c6:cc:95:1a:e3:64:be:52:76:54: e2:07:ed:3a:4a:73:5b:48:19:85:f0:a1:10:57:df:7e:38:ca: 5a:9c:7c:a4 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI2MDMzMTA4 MzM1MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUY2ODkxQUUzQzcxNTI5 NTZBMDQ3RjE3RjcxMTJDQTYwNUM1RTRENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANbLVea8x1B0FEXY+UcpHOtdhbzZYHILDetBPSZbAZHg69FDOHqx SEh9NybAIowyD2C5aFVmtil0mYVOolagnLMhDGaueV8vJvLIcOzE6rZitgkSU1DU ZCF0xWGvdfrWfqsVko30pWXa3UovMNkNFqDs/x1TlxgctwmszkIUGQlqO6O+qxga YZivLKREC8i+iAPPHWrEK9tLeLpM4KF4Tk/EYHWJIYOrYyXcvqqRoSfAzF9ZVdaB 0GZ6ffrgB31LeFKnVTMk486OVcnCXDgX42yoVaGvIxPh9Rz3PWYTIczdCcgGUz4e s9wHBb7pIHsSGB3OwV3ADQlVfLrs0ootxZUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRfaJGuPHFSlWoEfxf3ESymBcXk1DAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MDYvWDJpUnJqeHhVcFZxQkg4WDl4RXNwZ1hGNU5RLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pZ8DANBgkqhkiG9w0BAQsFAAOCAQEA jvSdRY5B5+a/o5U7TwWnC4QE+vTbhYjAhTxJp/REB5h48Ipop0U7o7bm9gzVjrVQ 6Ei1IWa1cjyqlW4JzKNn0O4LcHITgGApTTdpu2MGnI8Lbch7IGmBxANm7iqepjcT j4LPeij4liEN657yD/Gv4oJPZIktym9K63HhjN1hkdtdYVcW3lk5heEs220ExALB weo+SKKotSFJtR4ExtuVBzwCwwJes4nodUERz1R/6dfbPdniwCJUFw67RZ7m1XYg TJEglDlYW6VRozwuQ8Hw6ZvU3rgnGtDyOMs0458vORXGzJUa42S+UnZU4gftOkpz W0gZhfChEFfffjjKWpx8pA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:54:21 2026 by rpki-client