$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/ya4KUbo9jnqCJchVtFSpEFGDKk8.roa File: ya4KUbo9jnqCJchVtFSpEFGDKk8.roa (raw, json) Hash identifier: z8Tn/zxzNQLJtjCo0ktr7AbfWp7KAUCUWUIuRypI4m8= Subject key identifier: C9:AE:0A:51:BA:3D:8E:7A:82:25:C8:55:B4:54:A9:10:51:83:2A:4F Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D Certificate serial: 1C Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/ya4KUbo9jnqCJchVtFSpEFGDKk8.roa Signing time: Wed 25 Mar 2026 05:59:34 +0000 ROA not before: Wed 25 Mar 2026 05:59:34 +0000 ROA not after: Wed 24 Mar 2027 01:46:06 +0000 asID: 17511 IP address blocks: 202.216.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D Validity Not Before: Mar 25 05:59:34 2026 GMT Not After : Mar 24 01:46:06 2027 GMT Subject: CN=C9AE0A51BA3D8E7A8225C855B454A91051832A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:72:5e:1c:56:42:ee:6f:68:19:36:c2:17: 89:3a:6d:dd:f9:09:7c:7e:af:7b:c1:3d:36:89:d2: 01:e8:2e:e8:92:7f:72:27:5a:7d:6f:a7:71:b0:8c: 9b:d1:4a:09:05:70:c9:75:00:01:9b:67:e0:7a:cc: 38:b4:7b:24:e1:54:df:11:1f:9f:42:10:8e:bd:7d: 11:b4:f8:86:77:65:77:20:44:3d:31:38:fb:65:32: cf:52:63:9c:f1:1e:07:fd:83:5b:bf:d7:c2:3e:f7: f7:18:c7:bf:44:a1:0e:06:fd:aa:c8:f1:04:af:d3: d2:16:48:dd:ef:2a:a8:36:6b:09:9c:ec:20:aa:49: 55:47:ad:a2:24:37:a6:60:35:af:df:15:d9:3e:ec: da:37:c4:6c:d0:f4:5b:30:30:3d:4d:35:ba:ca:c1: 0c:37:b1:40:f0:85:2b:74:58:74:9d:22:c5:5e:fc: 88:30:dd:65:d9:25:0d:48:b3:6c:c3:58:d7:c2:57: 05:0b:2e:b1:cb:00:f4:86:72:73:5a:f6:0d:86:c8: 78:b6:7a:c1:ff:2b:73:c9:44:5a:85:67:04:d9:41: fa:5d:ed:fd:06:5c:0b:82:49:91:de:14:47:63:c9: 7f:79:01:8c:35:31:2e:61:cd:b1:0a:4b:46:4b:52: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:0A:51:BA:3D:8E:7A:82:25:C8:55:B4:54:A9:10:51:83:2A:4F X509v3 Authority Key Identifier: keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/ya4KUbo9jnqCJchVtFSpEFGDKk8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.216.48.0/20 Signature Algorithm: sha256WithRSAEncryption 82:18:4e:5f:56:b1:c8:2f:c2:36:c4:64:d8:88:94:9c:19:18: 56:1b:67:bf:d4:8c:cf:97:4f:c9:bc:09:5c:e5:8e:64:7a:09: 6e:5d:e4:e3:d0:a4:b0:bf:c4:9b:00:59:2c:a3:c2:32:2f:c2: 99:46:0e:a7:ef:10:36:1a:61:9e:9a:d7:b6:4a:bf:c7:d2:e4: e4:f6:44:f3:a2:b8:cb:a4:6a:b7:3d:f2:73:c7:f6:e2:b2:3f: 90:26:9b:e5:a4:66:9e:8b:09:5d:ee:de:2d:a7:dc:e5:25:0c: 1f:4c:80:7f:e5:22:b2:7f:49:c9:10:30:d1:1c:01:a2:11:3d: 86:b2:1f:79:00:a9:27:67:61:d2:10:c9:62:f9:91:a7:fd:47: 11:37:10:02:3e:ed:36:2b:ef:7f:6b:f9:58:12:1c:ca:4f:95: 98:d5:b3:ec:58:f0:14:a8:14:41:41:1d:5c:d2:ab:41:2f:27: 76:f7:7c:e0:5e:7a:aa:36:23:6f:e0:75:d9:c3:02:fb:9d:39: 08:b8:5c:d8:3e:64:6d:f6:a6:19:d6:20:f5:c9:3e:c3:c9:57: 14:aa:2a:23:58:e8:48:f2:23:6d:ed:ec:17:6c:d6:b0:06:2b: 17:42:9b:c0:61:be:b9:d0:0b:95:9e:cb:8a:2f:7b:5b:c7:d3: b6:6a:16:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1 NTkzNFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoQzlBRTBBNTFCQTNEOEU3 QTgyMjVDODU1QjQ1NEE5MTA1MTgzMkE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM50cl4cVkLub2gZNsIXiTpt3fkJfH6ve8E9NonSAegu6JJ/cida fW+ncbCMm9FKCQVwyXUAAZtn4HrMOLR7JOFU3xEfn0IQjr19EbT4hndldyBEPTE4 +2Uyz1JjnPEeB/2DW7/Xwj739xjHv0ShDgb9qsjxBK/T0hZI3e8qqDZrCZzsIKpJ VUetoiQ3pmA1r98V2T7s2jfEbND0WzAwPU01usrBDDexQPCFK3RYdJ0ixV78iDDd ZdklDUizbMNY18JXBQsuscsA9IZyc1r2DYbIeLZ6wf8rc8lEWoVnBNlB+l3t/QZc C4JJkd4UR2PJf3kBjDUxLmHNsQpLRktSv4MCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTJrgpRuj2OeoIlyFW0VKkQUYMqTzAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80OTMveWE0S1VibzlqbnFDSmNoVnRGU3BFRkdES2s4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrYMDANBgkqhkiG9w0BAQsFAAOCAQEAghhOX1axyC/CNsRk2IiUnBkYVhtn v9SMz5dPybwJXOWOZHoJbl3k49CksL/EmwBZLKPCMi/CmUYOp+8QNhphnprXtkq/ x9Lk5PZE86K4y6Rqtz3yc8f24rI/kCab5aRmnosJXe7eLafc5SUMH0yAf+Uisn9J yRAw0RwBohE9hrIfeQCpJ2dh0hDJYvmRp/1HETcQAj7tNivvf2v5WBIcyk+VmNWz 7FjwFKgUQUEdXNKrQS8ndvd84F56qjYjb+B12cMC+505CLhc2D5kbfamGdYg9ck+ w8lXFKoqI1joSPIjbe3sF2zWsAYrF0KbwGG+udALlZ7Lii97W8fTtmoWxg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:38 2026 by rpki-client