$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/y20X1pjmFx7JsC4UnXjEHGQk1U0.roa File: y20X1pjmFx7JsC4UnXjEHGQk1U0.roa (raw, json) Hash identifier: YI5UTmqmCS2ZEljRW5xIIrzphTWSTe6acZNl1bmWejU= Subject key identifier: CB:6D:17:D6:98:E6:17:1E:C9:B0:2E:14:9D:78:C4:1C:64:24:D5:4D Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 55 Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/y20X1pjmFx7JsC4UnXjEHGQk1U0.roa Signing time: Tue 31 Mar 2026 08:33:48 +0000 ROA not before: Tue 31 Mar 2026 08:33:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24259 IP address blocks: 103.246.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Mar 31 08:33:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CB6D17D698E6171EC9B02E149D78C41C6424D54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:35:21:9c:a9:5f:c3:d2:fc:3a:f9:2a:57: ee:67:f7:97:af:51:c7:48:1e:b7:00:36:f4:b6:c5: ea:17:9b:90:f9:36:c6:9b:99:d3:2f:4a:6a:a9:d4: bb:4e:c8:08:77:c1:16:44:08:e5:97:f0:c3:58:cf: 2e:e2:bc:a2:f3:35:7b:f8:ac:72:35:31:4e:a0:20: 53:da:42:10:9c:ea:47:18:39:9b:bb:ba:25:c6:ff: 4d:eb:60:14:3c:8a:76:a8:8d:5b:8f:1f:63:2a:ba: 29:cd:ca:90:95:17:cc:e0:a5:d5:7e:84:ed:8b:71: b8:83:0a:28:f5:2e:a3:4e:a5:58:f1:b2:11:cd:25: a6:fa:5b:b5:9b:fa:ba:3f:17:03:fd:92:8b:eb:c3: ae:b9:bb:0b:70:0b:ec:50:52:f8:20:20:b5:1f:4f: e5:53:0b:95:62:73:6a:ed:ce:e2:b4:93:4e:ec:a6: ae:94:1b:20:eb:97:45:5d:be:64:7c:18:93:32:bc: af:06:c0:b0:b8:e7:47:66:f7:94:c0:8b:35:2a:92: 55:37:a1:1e:b4:20:11:7f:79:5b:69:f7:5c:ae:5c: 9c:f2:c2:5f:2f:dc:9f:fc:89:94:bd:cd:52:fa:07: ea:1e:36:b6:8d:65:39:8a:3d:24:d3:25:cf:7c:45: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6D:17:D6:98:E6:17:1E:C9:B0:2E:14:9D:78:C4:1C:64:24:D5:4D X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/y20X1pjmFx7JsC4UnXjEHGQk1U0.roa sbgp-ipAddrBlock: critical IPv4: 103.246.68.0/22 Signature Algorithm: sha256WithRSAEncryption 48:88:c5:d2:bd:62:4c:28:ad:5e:2f:23:5b:f6:1b:d3:53:bb: 8c:43:77:18:f7:54:6c:c2:3b:c6:d1:9a:3b:42:d4:a6:97:a0: 6b:de:8d:38:7b:18:a6:4f:79:b9:5d:3f:91:aa:95:79:11:f1: 04:2d:ee:4b:85:d1:1a:08:f5:58:ac:86:0c:fe:39:ea:14:5b: dc:96:bd:1f:00:84:55:b2:c9:3f:e7:25:fb:b6:9b:fb:40:7d: 78:86:27:f0:a7:ff:78:8d:b0:42:88:a7:7f:62:34:54:90:ec: 09:12:f7:28:e1:91:ce:90:0f:51:14:e1:e8:8c:66:1e:5c:c3: 16:63:02:0f:8a:78:62:6f:c8:cb:a6:34:79:6e:13:36:e7:8d: c3:01:ca:c7:b0:b0:6e:1f:6c:06:be:86:62:f4:3c:78:fe:fb: 3f:f9:bd:39:b7:cc:28:3a:f7:b7:db:01:d4:e7:3e:71:13:4a: 9b:96:60:8d:f1:6d:5c:53:fe:77:ca:8e:a4:c4:6d:f3:52:52: c8:76:be:c5:4b:00:58:90:d9:53:e0:ca:0a:87:f8:0b:41:ed: 0e:17:a8:34:c5:72:a3:d3:47:f3:ba:c8:25:ca:c6:73:2c:6c: ce:37:57:30:ce:5f:fe:d6:d6:7c:f4:0f:19:2a:1f:b6:19:a1: f1:cc:c5:a1 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI2MDMzMTA4 MzM0OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0I2RDE3RDY5OEU2MTcx RUM5QjAyRTE0OUQ3OEM0MUM2NDI0RDU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO/CNSGcqV/D0vw6+SpX7mf3l69Rx0getwA29LbF6hebkPk2xpuZ 0y9KaqnUu07ICHfBFkQI5Zfww1jPLuK8ovM1e/iscjUxTqAgU9pCEJzqRxg5m7u6 Jcb/TetgFDyKdqiNW48fYyq6Kc3KkJUXzOCl1X6E7YtxuIMKKPUuo06lWPGyEc0l pvpbtZv6uj8XA/2Si+vDrrm7C3AL7FBS+CAgtR9P5VMLlWJzau3O4rSTTuymrpQb IOuXRV2+ZHwYkzK8rwbAsLjnR2b3lMCLNSqSVTehHrQgEX95W2n3XK5cnPLCXy/c n/yJlL3NUvoH6h42to1lOYo9JNMlz3xFcLkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTLbRfWmOYXHsmwLhSdeMQcZCTVTTAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MDYveTIwWDFwam1GeDdKc0M0VW5YakVIR1FrMVUwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmf2RDANBgkqhkiG9w0BAQsFAAOCAQEA SIjF0r1iTCitXi8jW/Yb01O7jEN3GPdUbMI7xtGaO0LUppega96NOHsYpk95uV0/ kaqVeRHxBC3uS4XRGgj1WKyGDP456hRb3Ja9HwCEVbLJP+cl+7ab+0B9eIYn8Kf/ eI2wQoinf2I0VJDsCRL3KOGRzpAPURTh6IxmHlzDFmMCD4p4Ym/Iy6Y0eW4TNueN wwHKx7Cwbh9sBr6GYvQ8eP77P/m9ObfMKDr3t9sB1Oc+cRNKm5ZgjfFtXFP+d8qO pMRt81JSyHa+xUsAWJDZU+DKCof4C0HtDheoNMVyo9NH87rIJcrGcyxszjdXMM5f /tbWfPQPGSofthmh8czFoQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:07:26 2026 by rpki-client