$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/020he4LC1dcvS6OFL9NBsj0U9bo.roa File: 020he4LC1dcvS6OFL9NBsj0U9bo.roa (raw, json) Hash identifier: 1NPsmvjqhyK27nP5T5Tv/WR9WCZOBl5uw40EXHG4Tqc= Subject key identifier: D3:6D:21:7B:82:C2:D5:D7:2F:4B:A3:85:2F:D3:41:B2:3D:14:F5:BA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1565 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/020he4LC1dcvS6OFL9NBsj0U9bo.roa Signing time: Tue 31 Mar 2026 07:59:34 +0000 ROA not before: Tue 31 Mar 2026 07:59:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5477 (0x1565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D36D217B82C2D5D72F4BA3852FD341B23D14F5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:38:ac:a4:44:93:60:04:d7:be:78:4c:c4: 48:33:90:77:e4:8b:0d:63:c7:80:7e:16:67:1f:ff: cc:51:94:c2:3b:2c:f0:9e:08:43:22:c0:08:85:22: 06:ca:b6:64:50:f9:e2:00:59:59:c9:d1:71:37:f7: ee:de:05:2d:51:d9:63:23:1f:b2:5a:0b:3d:a0:d5: aa:7c:d7:87:a1:80:04:95:94:27:4b:1c:56:ee:7b: 28:bc:4a:26:dc:50:82:e8:6f:7d:24:d9:50:30:bf: c4:b2:67:88:c9:d1:5b:8d:c2:3e:2e:41:ff:8d:60: a6:76:66:83:18:42:be:28:16:12:3d:db:cf:d3:15: 4a:32:49:f8:09:b0:dc:ef:83:cd:6c:30:47:e9:3b: 1d:9f:f8:7d:51:bd:22:ab:21:ad:89:ed:75:30:5f: b7:0b:fe:55:c5:10:2a:5b:07:5b:6e:39:70:a1:72: 01:5b:be:ff:8a:96:c6:e3:a0:35:56:44:04:00:d8: 82:f4:b1:0b:50:2f:3c:96:3a:2f:de:70:8d:6a:50: 7a:96:fd:98:4e:ea:ec:f6:2f:ce:2e:ac:3a:e6:9b: 76:a3:7a:56:b8:e3:bc:be:9a:0d:ff:ad:2e:8f:91: 59:9d:06:a4:00:73:41:c0:f8:e7:aa:3b:72:4d:10: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:21:7B:82:C2:D5:D7:2F:4B:A3:85:2F:D3:41:B2:3D:14:F5:BA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/020he4LC1dcvS6OFL9NBsj0U9bo.roa sbgp-ipAddrBlock: critical IPv4: 1.72.12.0/22 Signature Algorithm: sha256WithRSAEncryption 03:5f:39:6e:bf:86:4b:d6:7e:b5:aa:f9:1f:f4:5d:9c:c9:97: 8c:0d:86:ce:c1:9b:21:91:dd:23:dc:f1:6f:77:34:0c:dd:e6: 0d:a7:d3:51:86:e1:92:4d:68:c5:4b:bd:ba:7a:3a:d5:c7:2b: 72:c7:a8:f3:e4:94:62:fe:65:7c:80:a1:ff:05:af:0c:a3:07: fc:6b:3a:97:57:27:49:45:42:70:90:51:b8:87:84:e9:a1:72: 02:64:6e:16:97:19:7d:cf:e5:6e:b0:e2:24:d8:8b:8c:66:66: 9a:f2:b8:34:79:ec:ad:e7:86:23:54:a7:cb:ba:0a:70:a1:62: 10:04:b7:84:e1:42:ee:d4:c1:49:4c:a1:df:38:83:9e:7b:7a: 8f:fd:78:90:5b:0b:ff:28:a4:3d:7e:a2:10:21:b0:ed:46:eb: 1d:57:7a:e4:45:ac:ff:01:39:de:57:69:11:6b:d3:3d:68:70: 8e:c6:34:6f:1e:6b:e8:c7:a2:9e:2b:d3:59:55:45:16:71:7c: b1:f5:d3:6f:89:a2:49:2d:75:7c:f5:5a:f3:30:6a:b6:f0:d0: 6c:f1:f2:1e:b9:37:80:14:ff:2b:f1:96:e9:b1:48:43:e0:30: a2:04:3e:2c:21:a0:03:cf:84:12:2a:53:df:27:e3:5f:c1:c5: cc:69:dd:33 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzNkQyMTdCODJDMkQ1 RDcyRjRCQTM4NTJGRDM0MUIyM0QxNEY1QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1ijispESTYATXvnhMxEgzkHfkiw1jx4B+Fmcf/8xRlMI7LPCe CEMiwAiFIgbKtmRQ+eIAWVnJ0XE39+7eBS1R2WMjH7JaCz2g1ap814ehgASVlCdL HFbueyi8SibcUILob30k2VAwv8SyZ4jJ0VuNwj4uQf+NYKZ2ZoMYQr4oFhI928/T FUoySfgJsNzvg81sMEfpOx2f+H1RvSKrIa2J7XUwX7cL/lXFECpbB1tuOXChcgFb vv+KlsbjoDVWRAQA2IL0sQtQLzyWOi/ecI1qUHqW/ZhO6uz2L84urDrmm3ajela4 47y+mg3/rS6PkVmdBqQAc0HA+OeqO3JNEKXDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU020he4LC1dcvS6OFL9NBsj0U9bowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzAyMGhlNExDMWRjdlM2T0ZMOU5Cc2owVTliby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBSAwwDQYJKoZIhvcNAQELBQADggEB AANfOW6/hkvWfrWq+R/0XZzJl4wNhs7BmyGR3SPc8W93NAzd5g2n01GG4ZJNaMVL vbp6OtXHK3LHqPPklGL+ZXyAof8FrwyjB/xrOpdXJ0lFQnCQUbiHhOmhcgJkbhaX GX3P5W6w4iTYi4xmZpryuDR57K3nhiNUp8u6CnChYhAEt4ThQu7UwUlMod84g557 eo/9eJBbC/8opD1+ohAhsO1G6x1XeuRFrP8BOd5XaRFr0z1ocI7GNG8ea+jHop4r 01lVRRZxfLH102+JokktdXz1WvMwarbw0Gzx8h65N4AU/yvxlumxSEPgMKIEPiwh oAPPhBIqU98n41/Bxcxp3TM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:54 2026 by rpki-client