$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/s68shzBfbLJTL-Y4pgZgzUfr13s.roa File: s68shzBfbLJTL-Y4pgZgzUfr13s.roa (raw, json) Hash identifier: lTgo0iaMp/rGfQ/8SgFZUIkprLCbTJZjPWGgafKenrI= Subject key identifier: B3:AF:2C:87:30:5F:6C:B2:53:2F:E6:38:A6:06:60:CD:47:EB:D7:7B Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: AC Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/s68shzBfbLJTL-Y4pgZgzUfr13s.roa Signing time: Tue 31 Mar 2026 08:37:17 +0000 ROA not before: Tue 31 Mar 2026 08:37:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 7679 IP address blocks: 218.219.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Mar 31 08:37:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B3AF2C87305F6CB2532FE638A60660CD47EBD77B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:b0:97:01:9c:e6:7c:a4:73:93:ff:de:b6: 34:12:08:19:f0:73:b4:70:5a:7e:af:8b:5d:cd:9e: a4:12:51:fe:7c:58:98:e7:6a:db:a6:5e:4b:b7:98: 44:12:71:6c:f1:6a:23:cc:de:6d:4c:86:f8:94:5c: 46:f1:8c:e4:1d:23:24:8d:e9:bf:2e:2d:84:a3:f2: d3:ac:8f:6c:49:2b:1a:a4:79:38:e9:06:b0:90:82: 49:f9:59:47:4c:41:84:22:74:d7:a9:08:ba:e4:43: eb:45:ff:f2:50:f9:01:2d:61:a4:19:9a:73:89:a0: f2:6d:66:6f:1f:6e:6c:3a:89:c8:88:d0:df:0b:d5: 57:fe:df:07:56:09:15:97:e7:28:1d:de:42:fd:4b: ae:02:18:af:e6:53:be:2e:c1:02:20:85:e0:42:ba: 7f:bf:b2:eb:bd:51:fd:0a:fe:3e:5c:2b:54:4d:d0: dc:d3:e9:7c:9b:73:74:2b:84:17:e5:8e:53:bb:9e: 00:af:03:e7:47:7a:30:62:ab:b4:f2:b9:a0:10:54: f8:69:a1:1c:01:05:18:ab:c4:02:cb:89:e8:b5:d7: 07:6d:44:34:1c:1d:7b:35:5f:86:59:2a:38:53:0f: bc:f0:43:ec:19:3c:d4:44:71:71:4a:b2:84:5b:d0: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:2C:87:30:5F:6C:B2:53:2F:E6:38:A6:06:60:CD:47:EB:D7:7B X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/s68shzBfbLJTL-Y4pgZgzUfr13s.roa sbgp-ipAddrBlock: critical IPv4: 218.219.128.0/20 Signature Algorithm: sha256WithRSAEncryption ae:ba:de:6d:8e:83:ed:d5:51:23:84:5b:cd:5a:54:3c:f2:05: 85:82:98:ba:cc:81:29:fc:62:ca:c9:9c:7c:b3:7b:76:f9:c1: 11:b6:13:ef:9a:25:ed:11:c5:f6:ac:e2:97:28:25:87:fc:27: 5c:9c:f9:f4:d1:c2:c7:fa:87:5a:f3:f5:cc:5b:e2:53:44:e2: 89:23:b6:72:45:2d:64:e5:ab:c1:8f:17:f2:f5:36:3a:ec:55: da:65:65:3c:69:4c:43:0c:5b:70:c0:6c:cb:d4:5a:5d:8f:dd: af:1a:50:58:48:96:ef:46:08:74:03:8d:d1:49:2f:53:86:81: 47:22:7d:1a:8f:d1:ca:b3:5c:87:dc:ff:5e:68:a4:42:ba:1d: 19:51:93:bc:3c:18:c5:db:fb:c9:d4:cb:d2:5d:5f:2d:85:bc: 58:64:9b:ce:85:65:0a:d7:01:33:90:64:59:68:e9:63:5c:23: 69:22:aa:45:21:90:a1:a5:b2:b2:64:f9:d7:0d:50:73:df:61: 3e:38:d6:0f:ad:66:4f:a1:e7:68:9c:6d:be:28:87:4a:43:74: ae:f7:a5:39:ee:f8:76:e7:ee:f0:64:5b:5f:d2:cd:eb:46:ba: 00:04:d6:e7:6d:79:80:6c:9a:24:d0:17:fd:c6:0d:7e:e8:19: 7b:e7:2b:29 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1 RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw ODM3MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIzQUYyQzg3MzA1RjZD QjI1MzJGRTYzOEE2MDY2MENENDdFQkQ3N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1b7CXAZzmfKRzk//etjQSCBnwc7RwWn6vi13NnqQSUf58WJjn atumXku3mEQScWzxaiPM3m1MhviUXEbxjOQdIySN6b8uLYSj8tOsj2xJKxqkeTjp BrCQgkn5WUdMQYQidNepCLrkQ+tF//JQ+QEtYaQZmnOJoPJtZm8fbmw6iciI0N8L 1Vf+3wdWCRWX5ygd3kL9S64CGK/mU74uwQIgheBCun+/suu9Uf0K/j5cK1RN0NzT 6Xybc3QrhBfljlO7ngCvA+dHejBiq7TyuaAQVPhpoRwBBRirxALLiei11wdtRDQc HXs1X4ZZKjhTD7zwQ+wZPNREcXFKsoRb0POzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUs68shzBfbLJTL+Y4pgZgzUfr13swHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3 WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMjQ5L3M2OHNoekJmYkxKVEwtWTRwZ1pnelVmcjEzcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa24AwDQYJKoZIhvcNAQELBQADggEB AK663m2Og+3VUSOEW81aVDzyBYWCmLrMgSn8YsrJnHyze3b5wRG2E++aJe0Rxfas 4pcoJYf8J1yc+fTRwsf6h1rz9cxb4lNE4okjtnJFLWTlq8GPF/L1NjrsVdplZTxp TEMMW3DAbMvUWl2P3a8aUFhIlu9GCHQDjdFJL1OGgUcifRqP0cqzXIfc/15opEK6 HRlRk7w8GMXb+8nUy9JdXy2FvFhkm86FZQrXATOQZFlo6WNcI2kiqkUhkKGlsrJk +dcNUHPfYT441g+tZk+h52icbb4oh0pDdK73pTnu+Hbn7vBkW1/SzetGugAE1udt eYBsmiTQF/3GDX7oGXvnKyk= -----END CERTIFICATE-----Generated at Tue Apr 7 21:07:03 2026 by rpki-client