$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2LJxqrDu_ST20GvsE8By1PRefZY.roa File: 2LJxqrDu_ST20GvsE8By1PRefZY.roa (raw, json) Hash identifier: 6sRiLoDz661DNNyYtUovpINaT/KNIv7f55QtEEH+dLk= Subject key identifier: D8:B2:71:AA:B0:EE:FD:24:F6:D0:6B:EC:13:C0:72:D4:F4:5E:7D:96 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1747 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2LJxqrDu_ST20GvsE8By1PRefZY.roa Signing time: Tue 31 Mar 2026 08:03:30 +0000 ROA not before: Tue 31 Mar 2026 08:03:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5959 (0x1747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D8B271AAB0EEFD24F6D06BEC13C072D4F45E7D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:3b:7a:05:40:ca:6f:ee:81:fa:31:63:95: 82:44:5c:d2:fd:f1:7b:ad:8b:1f:2f:8e:4f:bf:30: fe:64:3e:34:0a:8a:80:82:36:2c:f0:73:40:76:c6: 8e:7e:19:a8:c8:f0:e7:c5:9a:92:3f:3f:69:a3:ae: 97:a5:17:a9:dd:5e:0a:4f:f5:50:39:02:32:c4:fd: fb:e1:c9:50:f7:35:96:73:12:4d:b7:ac:d5:2c:71: 6d:bb:ac:96:6a:c0:2b:aa:3a:0d:10:a1:51:33:80: a4:cc:1f:2c:de:bc:4a:0a:fd:51:d1:6e:b9:a2:08: 4a:a9:5a:78:e9:7a:62:6d:1d:5f:ee:52:bd:c7:d4: 84:ea:dd:2e:90:41:4d:ea:da:77:d7:00:ee:39:a7: 7b:6b:8c:7d:86:c4:ee:2e:57:6e:63:22:bb:ad:44: 07:32:5d:1b:86:24:c3:84:c7:e2:a2:5d:49:08:de: be:3b:4e:e3:21:b9:88:83:65:b8:f5:40:30:df:3d: 34:7b:fb:e5:45:34:ad:25:66:f6:b8:a1:ff:b7:01: 7a:f2:6e:ba:67:90:8c:26:0d:e1:9b:74:95:e0:7f: 43:28:f0:51:ab:0f:b6:2e:de:7c:eb:f0:c2:4c:3d: 25:af:63:69:31:7d:a2:c2:6e:04:7a:65:66:da:4d: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:71:AA:B0:EE:FD:24:F6:D0:6B:EC:13:C0:72:D4:F4:5E:7D:96 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2LJxqrDu_ST20GvsE8By1PRefZY.roa sbgp-ipAddrBlock: critical IPv4: 1.72.128.0/19 Signature Algorithm: sha256WithRSAEncryption 0f:b4:9c:0f:1a:9a:93:d0:29:3e:9a:0d:95:93:55:46:2a:ac: 0e:d2:cd:68:0d:1b:99:b5:1f:c2:3a:e9:54:6f:b3:e2:5c:b6: f7:11:29:f5:c0:a7:7c:6a:e9:86:89:c7:bf:5f:89:eb:58:8b: e2:e6:1c:a6:4c:65:39:9e:f9:d3:b3:47:9c:8b:bb:30:3e:f1: bf:bc:1a:e1:cc:b6:6e:98:97:75:96:c6:df:85:62:13:b1:87: 9a:e3:7d:8a:86:68:13:69:be:18:6b:62:21:18:e4:2a:b7:bc: d8:fa:51:82:5c:4b:55:93:39:62:4a:1d:23:22:f6:ff:0b:2d: e7:39:9d:a4:67:8c:07:18:10:9c:7e:e3:b7:98:93:56:73:2d: af:f2:28:65:41:7e:cc:9b:01:06:64:b2:e5:6f:ea:4d:9e:f6: 02:56:59:32:96:84:9a:dd:88:dc:66:23:4e:a3:4c:2d:b4:de: bf:8d:60:05:7c:d5:f5:e2:cc:80:1c:34:03:43:1c:5c:04:42: 06:6f:c3:3f:d3:b0:1a:aa:9c:7b:ba:2f:04:ae:8d:5d:a1:db: 88:bf:c7:f6:dc:22:21:a5:a0:01:3d:58:c9:b8:e3:5b:76:90: 0d:b6:79:1d:fd:a9:58:38:46:21:c4:b5:b5:bd:af:bc:c0:d9: 07:53:cc:d5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4QjI3MUFBQjBFRUZE MjRGNkQwNkJFQzEzQzA3MkQ0RjQ1RTdEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrHzt6BUDKb+6B+jFjlYJEXNL98Xutix8vjk+/MP5kPjQKioCC Nizwc0B2xo5+GajI8OfFmpI/P2mjrpelF6ndXgpP9VA5AjLE/fvhyVD3NZZzEk23 rNUscW27rJZqwCuqOg0QoVEzgKTMHyzevEoK/VHRbrmiCEqpWnjpemJtHV/uUr3H 1ITq3S6QQU3q2nfXAO45p3trjH2GxO4uV25jIrutRAcyXRuGJMOEx+KiXUkI3r47 TuMhuYiDZbj1QDDfPTR7++VFNK0lZva4of+3AXrybrpnkIwmDeGbdJXgf0Mo8FGr D7Yu3nzr8MJMPSWvY2kxfaLCbgR6ZWbaTXmlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2LJxqrDu/ST20GvsE8By1PRefZYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzJMSnhxckR1X1NUMjBHdnNFOEJ5MVBSZWZaWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUBSIAwDQYJKoZIhvcNAQELBQADggEB AA+0nA8ampPQKT6aDZWTVUYqrA7SzWgNG5m1H8I66VRvs+JctvcRKfXAp3xq6YaJ x79fietYi+LmHKZMZTme+dOzR5yLuzA+8b+8GuHMtm6Yl3WWxt+FYhOxh5rjfYqG aBNpvhhrYiEY5Cq3vNj6UYJcS1WTOWJKHSMi9v8LLec5naRnjAcYEJx+47eYk1Zz La/yKGVBfsybAQZksuVv6k2e9gJWWTKWhJrdiNxmI06jTC203r+NYAV81fXizIAc NANDHFwEQgZvwz/TsBqqnHu6LwSujV2h24i/x/bcIiGloAE9WMm441t2kA22eR39 qVg4RiHEtbW9r7zA2QdTzNU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:41 2026 by rpki-client