$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0fKdxpJgvO7Pq0wzLaBy-0L4lRU.roa File: 0fKdxpJgvO7Pq0wzLaBy-0L4lRU.roa (raw, json) Hash identifier: tp+YwLIJ0w2zLNiV7ibzHmjs0QH1VNpR09n+w1V2EnQ= Subject key identifier: D1:F2:9D:C6:92:60:BC:EE:CF:AB:4C:33:2D:A0:72:FB:42:F8:95:15 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1735 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0fKdxpJgvO7Pq0wzLaBy-0L4lRU.roa Signing time: Tue 31 Mar 2026 08:03:22 +0000 ROA not before: Tue 31 Mar 2026 08:03:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.161.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5941 (0x1735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D1F29DC69260BCEECFAB4C332DA072FB42F89515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:60:d6:86:65:5b:62:86:1d:5d:ad:da:51: e5:38:44:7d:71:a9:eb:a8:92:04:31:b3:20:e9:22: ba:b9:97:4d:e1:da:70:49:fe:d7:1d:c3:82:57:0b: 1d:ec:07:9b:f0:c2:aa:98:59:2e:df:16:50:37:be: 53:64:70:08:50:2a:f7:9d:04:f1:2d:0f:91:8c:87: 32:09:ae:4e:87:3e:09:c4:ed:d9:58:2e:a0:1a:04: e0:08:1c:8b:1e:14:34:a1:53:8e:37:e0:98:c2:7b: e7:64:8e:cb:59:5f:70:c2:a8:07:46:f1:09:33:b6: 91:8d:42:fa:14:5e:a7:b6:25:38:4c:9a:42:9b:86: c6:33:69:a5:94:07:7d:53:ef:71:ab:4b:ad:d5:5f: 66:b0:13:aa:7b:a8:bd:53:0f:d8:9b:17:dc:22:e7: 46:84:48:87:50:d4:e9:a3:19:cc:fc:dc:7f:f4:e9: 75:2c:ba:af:1f:4b:7d:1a:86:52:24:35:59:c9:f2: d6:47:1b:0d:30:04:f4:d1:65:13:9a:53:67:46:a7: 57:d7:5a:97:61:b5:51:54:dd:b6:00:f2:3c:ff:1b: 58:f0:4b:3c:c8:28:0b:9d:e0:62:8b:8b:18:84:9e: 9d:c4:42:4c:59:d8:a4:54:55:df:c9:58:54:ed:36: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F2:9D:C6:92:60:BC:EE:CF:AB:4C:33:2D:A0:72:FB:42:F8:95:15 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0fKdxpJgvO7Pq0wzLaBy-0L4lRU.roa sbgp-ipAddrBlock: critical IPv4: 110.161.192.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:d4:e2:04:c8:0a:25:a8:5d:9b:6d:6b:e1:a3:6e:40:c5:84: 7c:40:ba:8c:5f:93:34:fc:2f:21:bb:1a:c7:6d:b9:29:ae:81: c8:48:4e:db:95:c9:9e:52:82:19:75:94:c3:e0:06:37:69:2c: 0c:43:d5:01:dd:28:86:09:50:1f:9f:8c:f4:8e:02:33:57:c1: 54:1c:f3:49:29:c2:ae:34:14:cc:78:ae:49:c3:d8:be:f2:cb: 79:12:b7:c4:eb:e2:d7:1a:a2:c4:6c:77:d8:72:63:e0:a4:d8: b5:d5:2e:e2:b2:d7:7b:aa:4a:06:2d:e3:af:00:55:9a:39:1e: 1f:8a:17:f5:09:b0:52:27:6c:00:2c:ce:ab:77:f1:65:38:de: d3:d3:6d:a3:91:06:fe:45:23:b2:42:2d:3f:d8:36:93:9f:97: 8a:7f:58:14:48:37:e0:52:37:33:e0:2f:7d:d4:07:95:74:60: 55:db:7d:28:29:20:b1:ce:27:26:b7:df:f4:3a:02:43:06:6d: 7c:f7:b6:d5:65:93:f2:be:51:7c:f6:f8:56:ef:a8:41:90:9b: 98:1f:e0:3c:b2:41:13:83:e9:01:92:e7:a5:49:28:b8:4c:3a: c0:63:8a:06:7d:32:a9:79:9e:0f:52:96:ad:57:be:d4:58:f9: 64:a8:a4:61 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxRjI5REM2OTI2MEJD RUVDRkFCNEMzMzJEQTA3MkZCNDJGODk1MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClK2DWhmVbYoYdXa3aUeU4RH1xqeuokgQxsyDpIrq5l03h2nBJ /tcdw4JXCx3sB5vwwqqYWS7fFlA3vlNkcAhQKvedBPEtD5GMhzIJrk6HPgnE7dlY LqAaBOAIHIseFDShU4434JjCe+dkjstZX3DCqAdG8QkztpGNQvoUXqe2JThMmkKb hsYzaaWUB31T73GrS63VX2awE6p7qL1TD9ibF9wi50aESIdQ1OmjGcz83H/06XUs uq8fS30ahlIkNVnJ8tZHGw0wBPTRZROaU2dGp1fXWpdhtVFU3bYA8jz/G1jwSzzI KAud4GKLixiEnp3EQkxZ2KRUVd/JWFTtNtFrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU0fKdxpJgvO7Pq0wzLaBy+0L4lRUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzBmS2R4cEpndk83UHEwd3pMYUJ5LTBMNGxSVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFuocAwDQYJKoZIhvcNAQELBQADggEB AC7U4gTICiWoXZtta+GjbkDFhHxAuoxfkzT8LyG7GsdtuSmugchITtuVyZ5Sghl1 lMPgBjdpLAxD1QHdKIYJUB+fjPSOAjNXwVQc80kpwq40FMx4rknD2L7yy3kSt8Tr 4tcaosRsd9hyY+Ck2LXVLuKy13uqSgYt468AVZo5Hh+KF/UJsFInbAAszqt38WU4 3tPTbaORBv5FI7JCLT/YNpOfl4p/WBRIN+BSNzPgL33UB5V0YFXbfSgpILHOJya3 3/Q6AkMGbXz3ttVlk/K+UXz2+FbvqEGQm5gf4DyyQROD6QGS56VJKLhMOsBjigZ9 Mql5ng9Slq1XvtRY+WSopGE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:29 2026 by rpki-client