$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0CEZw7_CZ7HTmsC_P97PP8_wWnw.roa File: 0CEZw7_CZ7HTmsC_P97PP8_wWnw.roa (raw, json) Hash identifier: fK0F2TpkSCpYU4E+JVqeHklCWxGO1jI0ddQWEHoA9Qs= Subject key identifier: D0:21:19:C3:BF:C2:67:B1:D3:9A:C0:BF:3F:DE:CF:3F:CF:F0:5A:7C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0CEZw7_CZ7HTmsC_P97PP8_wWnw.roa Signing time: Tue 31 Mar 2026 08:02:37 +0000 ROA not before: Tue 31 Mar 2026 08:02:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5849 (0x16d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D02119C3BFC267B1D39AC0BF3FDECF3FCFF05A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:00:57:2a:f8:e3:23:2f:59:0d:e4:ec:10: 2a:89:80:cd:40:34:dd:64:61:05:d9:c3:48:90:04: 95:ba:36:87:c4:68:11:ce:35:cf:b2:d1:e6:d9:d3: 08:e1:da:51:30:6f:05:27:60:82:a1:f5:b6:0d:4f: 8d:d6:5c:d8:5e:f7:1f:7a:b9:d9:8c:da:70:8f:bc: 09:d4:4d:36:a8:dd:0c:8d:03:53:13:7e:48:79:e5: 7f:34:cb:47:1c:ff:a9:93:cd:85:9f:22:8f:dc:17: 9a:81:9f:f1:b4:a9:31:39:d1:1a:e3:8f:7c:9c:ff: a4:84:e4:1a:27:08:d1:4c:ac:c8:66:7a:04:67:0c: d5:70:7d:23:9b:1d:35:56:fa:a3:7d:d9:e6:b3:00: 5e:60:23:55:fe:9e:4f:3c:55:a3:a9:1b:9f:f2:78: 50:64:05:67:0d:79:81:fa:6c:27:9d:94:be:08:c3: 56:b9:5f:e1:1b:46:52:41:53:9d:24:1a:20:6a:d0: 89:78:51:6c:d5:fb:b4:60:10:54:94:11:ee:dc:c0: c3:0e:a8:0b:ae:83:9b:69:04:87:68:b3:61:3a:1b: 9c:e9:d2:cc:94:70:76:8c:c5:9b:fc:12:75:cc:93: 9b:93:4e:09:bf:5b:b6:2f:47:fc:bb:b2:ab:24:0a: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:19:C3:BF:C2:67:B1:D3:9A:C0:BF:3F:DE:CF:3F:CF:F0:5A:7C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0CEZw7_CZ7HTmsC_P97PP8_wWnw.roa sbgp-ipAddrBlock: critical IPv4: 27.230.102.0/23 Signature Algorithm: sha256WithRSAEncryption b3:e6:fd:fe:60:92:75:59:c9:91:84:fd:0c:4e:e7:86:cb:51: b0:aa:50:f8:1f:9b:53:20:aa:af:02:9a:61:28:2e:39:20:e5: 25:94:0a:0f:21:4f:79:86:9a:0c:7d:32:f1:3a:dd:fb:60:c8: ab:dd:d0:a9:96:f2:48:14:32:33:71:ba:cc:3f:41:3a:7c:c6: 38:92:3e:84:96:41:2b:38:58:00:39:6c:4e:1b:74:04:42:50: 83:a8:37:39:4a:1b:2a:c2:28:49:94:4b:20:03:73:5f:3f:f8: ea:fa:e7:9c:bc:b5:a6:83:49:27:6e:ee:62:a2:63:ca:40:97: 34:7b:82:74:23:49:0b:40:aa:f6:8f:7f:1e:de:b6:19:3e:1e: c0:49:f1:0a:8f:e8:3a:92:82:32:1c:72:1f:5c:48:fe:a5:f1: b8:6a:1d:58:c4:95:05:fc:2f:71:b4:87:be:af:46:76:b8:93: f0:a4:1d:9a:57:8d:fe:df:17:99:2e:e1:d7:f5:94:8c:ba:46: a8:3a:98:d7:ef:38:6b:7f:d9:ad:ff:ad:8e:0f:05:42:19:92: 94:92:69:27:d9:ee:e9:00:fa:e8:ac:21:9e:0c:c5:ea:ba:88: 37:ee:60:38:c4:5b:24:b9:bc:88:2e:c7:f1:72:5a:53:0e:c7: 4d:8b:a7:e6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwMjExOUMzQkZDMjY3 QjFEMzlBQzBCRjNGREVDRjNGQ0ZGMDVBN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9SgBXKvjjIy9ZDeTsECqJgM1ANN1kYQXZw0iQBJW6NofEaBHO Nc+y0ebZ0wjh2lEwbwUnYIKh9bYNT43WXNhe9x96udmM2nCPvAnUTTao3QyNA1MT fkh55X80y0cc/6mTzYWfIo/cF5qBn/G0qTE50Rrjj3yc/6SE5BonCNFMrMhmegRn DNVwfSObHTVW+qN92eazAF5gI1X+nk88VaOpG5/yeFBkBWcNeYH6bCedlL4Iw1a5 X+EbRlJBU50kGiBq0Il4UWzV+7RgEFSUEe7cwMMOqAuug5tpBIdos2E6G5zp0syU cHaMxZv8EnXMk5uTTgm/W7YvR/y7sqskChPdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU0CEZw7/CZ7HTmsC/P97PP8/wWnwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzBDRVp3N19DWjdIVG1zQ19QOTdQUDhfd1dudy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEb5mYwDQYJKoZIhvcNAQELBQADggEB ALPm/f5gknVZyZGE/QxO54bLUbCqUPgfm1Mgqq8CmmEoLjkg5SWUCg8hT3mGmgx9 MvE63ftgyKvd0KmW8kgUMjNxusw/QTp8xjiSPoSWQSs4WAA5bE4bdARCUIOoNzlK GyrCKEmUSyADc18/+Or655y8taaDSSdu7mKiY8pAlzR7gnQjSQtAqvaPfx7ethk+ HsBJ8QqP6DqSgjIcch9cSP6l8bhqHVjElQX8L3G0h76vRna4k/CkHZpXjf7fF5ku 4df1lIy6Rqg6mNfvOGt/2a3/rY4PBUIZkpSSaSfZ7ukA+uisIZ4Mxeq6iDfuYDjE WyS5vIgux/FyWlMOx02Lp+Y= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:43 2026 by rpki-client