$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3DT4l2RIiD-eu6VhCPVQwEwVsFU.roa File: 3DT4l2RIiD-eu6VhCPVQwEwVsFU.roa (raw, json) Hash identifier: TvEHuPgPeJXGoAOyvZ9B84fO61b3skwPnN6bKb3e1hE= Subject key identifier: DC:34:F8:97:64:48:88:3F:9E:BB:A5:61:08:F5:50:C0:4C:15:B0:55 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1655 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3DT4l2RIiD-eu6VhCPVQwEwVsFU.roa Signing time: Tue 31 Mar 2026 08:01:36 +0000 ROA not before: Tue 31 Mar 2026 08:01:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5717 (0x1655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DC34F8976448883F9EBBA56108F550C04C15B055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:31:6d:52:b2:71:3c:b2:c5:b7:89:48:09: 43:f8:5b:43:f5:49:59:7c:9e:ad:18:55:4c:35:a9: f8:87:df:c0:6f:35:1f:6c:95:e0:d9:a8:ae:9e:f2: 63:43:44:14:b3:89:2d:53:63:d9:0e:a8:ff:1a:7b: c5:09:93:73:7f:f5:8b:46:92:2e:08:ea:9a:0b:36: 7a:2b:e2:a5:89:ad:54:20:40:84:28:87:9a:c9:72: fa:76:07:5e:35:23:4e:e6:56:21:30:8c:ed:ee:9e: 57:d7:72:98:e7:2b:85:b6:fd:cf:c2:15:42:f2:30: fa:11:c6:9a:9b:81:e3:73:94:70:3c:42:ae:be:6d: 02:d4:9a:9f:32:18:d6:94:8f:5a:c5:5a:72:a2:9c: 2c:af:e2:5c:14:88:c9:ee:50:eb:57:e5:2c:5b:1f: 7b:21:0f:7f:42:4e:b9:63:ad:e5:1f:c5:52:f1:02: a8:81:61:fb:c5:fc:de:09:d5:dd:38:58:05:6a:02: 68:92:da:63:ac:bc:79:8a:ff:aa:20:38:a8:32:20: f5:fb:3d:71:f1:00:0c:8d:3b:0f:65:27:6c:c6:cb: 0c:60:88:a9:3f:c5:05:82:42:1a:9b:dc:ba:2b:0f: 5c:19:82:c4:9b:b8:0b:3e:3f:33:56:58:96:64:bb: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:F8:97:64:48:88:3F:9E:BB:A5:61:08:F5:50:C0:4C:15:B0:55 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3DT4l2RIiD-eu6VhCPVQwEwVsFU.roa sbgp-ipAddrBlock: critical IPv4: 49.106.232.0/23 Signature Algorithm: sha256WithRSAEncryption 21:73:12:96:5b:02:67:06:94:be:7d:2c:4b:a0:c9:e1:9c:8d: 81:f9:c3:ec:89:5c:d7:a5:2b:55:d2:a8:8f:70:d6:0c:ed:2b: 74:20:4c:f9:34:88:50:63:6e:60:f4:81:3a:fc:07:1d:c2:0b: 8e:db:7c:dc:6f:96:a7:a2:95:29:17:e8:bc:7f:90:4f:88:63: 7c:40:ef:80:fb:2a:fa:05:a9:44:02:1b:c9:54:28:a8:2d:ee: d8:bd:92:54:e8:75:0a:9a:13:26:23:b8:bf:9e:3c:0b:37:33: e3:5f:16:0d:69:91:74:9a:c2:ce:36:fd:98:69:ba:a2:b4:fb: 60:1d:47:fb:45:4b:35:dd:03:2e:56:cb:35:2d:58:f9:c8:04: 9e:20:8d:6a:55:db:17:10:4e:86:84:ed:79:ca:2f:00:05:18: af:b7:b3:4f:c4:58:c6:ab:7f:ed:a6:a8:bf:14:11:52:ad:1c: e6:11:50:a7:10:5d:ab:54:00:76:26:ee:78:d3:f9:45:e8:07: a4:1c:1d:3d:94:14:59:25:c1:6d:8e:68:49:b5:17:14:2c:52: 74:60:7c:d3:17:10:1b:fc:bc:87:3c:44:7e:82:9c:87:f9:60: a9:f0:49:0d:e6:73:71:d8:c8:95:0f:e0:7a:34:4d:96:3b:90: a6:14:5e:30 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDMzRGODk3NjQ0ODg4 M0Y5RUJCQTU2MTA4RjU1MEMwNEMxNUIwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyjjFtUrJxPLLFt4lICUP4W0P1SVl8nq0YVUw1qfiH38BvNR9s leDZqK6e8mNDRBSziS1TY9kOqP8ae8UJk3N/9YtGki4I6poLNnor4qWJrVQgQIQo h5rJcvp2B141I07mViEwjO3unlfXcpjnK4W2/c/CFULyMPoRxpqbgeNzlHA8Qq6+ bQLUmp8yGNaUj1rFWnKinCyv4lwUiMnuUOtX5SxbH3shD39CTrljreUfxVLxAqiB YfvF/N4J1d04WAVqAmiS2mOsvHmK/6ogOKgyIPX7PXHxAAyNOw9lJ2zGywxgiKk/ xQWCQhqb3LorD1wZgsSbuAs+PzNWWJZku1h3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3DT4l2RIiD+eu6VhCPVQwEwVsFUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNEVDRsMlJJaUQtZXU2VmhDUFZRd0V3VnNGVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaugwDQYJKoZIhvcNAQELBQADggEB ACFzEpZbAmcGlL59LEugyeGcjYH5w+yJXNelK1XSqI9w1gztK3QgTPk0iFBjbmD0 gTr8Bx3CC47bfNxvlqeilSkX6Lx/kE+IY3xA74D7KvoFqUQCG8lUKKgt7ti9klTo dQqaEyYjuL+ePAs3M+NfFg1pkXSaws42/ZhpuqK0+2AdR/tFSzXdAy5WyzUtWPnI BJ4gjWpV2xcQToaE7XnKLwAFGK+3s0/EWMarf+2mqL8UEVKtHOYRUKcQXatUAHYm 7njT+UXoB6QcHT2UFFklwW2OaEm1FxQsUnRgfNMXEBv8vIc8RH6CnIf5YKnwSQ3m c3HYyJUP4Ho0TZY7kKYUXjA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:02 2026 by rpki-client