$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3OTF90cVMWh5AuST0d6d2l6LodQ.roa File: 3OTF90cVMWh5AuST0d6d2l6LodQ.roa (raw, json) Hash identifier: LM9MBib1GDF9B1rUjYted0emv72dz4tuKyErXVYOnh0= Subject key identifier: DC:E4:C5:F7:47:15:31:68:79:02:E4:93:D1:DE:9D:DA:5E:8B:A1:D4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1405 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3OTF90cVMWh5AuST0d6d2l6LodQ.roa Signing time: Tue 31 Mar 2026 07:56:43 +0000 ROA not before: Tue 31 Mar 2026 07:56:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DCE4C5F7471531687902E493D1DE9DDA5E8BA1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:62:d5:f7:f2:c6:e4:fb:fd:43:b3:3e:2b: f7:20:35:3f:a1:5d:35:45:d0:1c:fd:5d:76:df:50: 8b:f7:87:11:99:ca:fa:cd:de:01:ab:70:6c:3f:cc: 5e:a5:9f:61:ae:ab:6f:a0:5e:56:1d:4a:ee:21:98: 9a:b9:75:63:f8:13:a0:bf:e9:b6:a0:ec:3d:ec:81: 14:50:84:77:f1:dd:7a:f5:36:3b:bc:d1:14:4a:a7: 3c:ce:49:90:bf:f9:23:04:f4:54:bd:df:8e:0f:1b: 61:42:2e:c4:7c:b6:46:77:72:62:44:48:96:7d:90: 3c:63:22:a3:a0:be:1a:3d:a2:86:87:4a:78:31:85: e4:ff:be:a9:19:44:a2:00:07:39:f9:a4:7f:08:7b: 36:79:fd:f8:30:25:4e:80:cf:1d:31:9e:73:f8:50: 11:6c:09:3c:2a:67:f5:e8:8b:0b:9d:ce:a6:d3:74: f4:a2:83:cc:ee:ae:b6:a3:ba:6e:d6:c0:a3:a5:7b: 12:56:d7:a8:d0:cb:d2:54:eb:11:d0:93:26:a4:86: 2c:4e:80:94:41:57:51:ca:8a:67:7d:dd:a7:0b:f4: 2d:81:ae:0e:2f:34:13:48:2a:57:8b:1f:98:b7:9a: 61:6f:0b:80:02:17:d8:52:8b:5a:a7:91:dc:41:d0: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:C5:F7:47:15:31:68:79:02:E4:93:D1:DE:9D:DA:5E:8B:A1:D4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3OTF90cVMWh5AuST0d6d2l6LodQ.roa sbgp-ipAddrBlock: critical IPv4: 1.73.239.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:05:a2:85:9e:ac:a6:4a:d1:11:d8:29:f4:35:33:88:55:39: 0b:79:b0:0a:7e:fc:83:04:6b:8b:06:56:e7:02:3b:9f:61:96: 6a:e0:0d:7a:90:bd:ea:22:0b:1b:b4:19:f0:6f:8e:45:23:2d: a4:28:fa:3b:c8:98:09:d9:ca:1b:de:0e:36:4b:55:db:12:f2: ad:1d:e1:01:c4:ce:cb:fe:d5:ea:1d:ff:80:39:35:e5:ca:5c: 0d:14:d7:dc:62:a7:e0:a9:31:d4:26:e0:90:7d:20:8a:6e:b2: b3:17:02:54:cd:c9:75:be:6c:45:c9:37:fa:81:81:ab:b7:c9: 23:8a:99:6f:fe:20:1b:98:3a:d4:4e:29:00:d7:08:d9:35:e6: 14:e4:11:cd:8e:db:3c:d5:73:67:7a:6e:9c:bf:e7:b8:c6:b7: a2:78:c8:1b:31:28:7d:05:67:99:72:13:9d:5a:05:6a:71:22: 55:8f:21:08:fb:42:bc:27:1f:8e:8d:1f:74:5e:4d:99:e7:59: 40:fe:c7:f7:6e:7c:ba:39:af:b8:27:03:28:78:c0:89:94:a8: 37:fc:c3:34:7b:0d:b5:f7:7d:30:2b:74:5e:bc:f0:40:90:51: 9c:ea:fd:34:7b:37:38:16:ef:e2:30:a9:b2:2f:f7:8c:f8:4d: 02:b5:52:6c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDRTRDNUY3NDcxNTMx Njg3OTAyRTQ5M0QxREU5RERBNUU4QkExRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYWmLV9/LG5Pv9Q7M+K/cgNT+hXTVF0Bz9XXbfUIv3hxGZyvrN 3gGrcGw/zF6ln2Guq2+gXlYdSu4hmJq5dWP4E6C/6bag7D3sgRRQhHfx3Xr1Nju8 0RRKpzzOSZC/+SME9FS9344PG2FCLsR8tkZ3cmJESJZ9kDxjIqOgvho9ooaHSngx heT/vqkZRKIABzn5pH8IezZ5/fgwJU6Azx0xnnP4UBFsCTwqZ/XoiwudzqbTdPSi g8zurrajum7WwKOlexJW16jQy9JU6xHQkyakhixOgJRBV1HKimd93acL9C2Brg4v NBNIKleLH5i3mmFvC4ACF9hSi1qnkdxB0De7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3OTF90cVMWh5AuST0d6d2l6LodQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNPVEY5MGNWTVdoNUF1U1QwZDZkMmw2TG9kUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSe8wDQYJKoZIhvcNAQELBQADggEB ADwFooWerKZK0RHYKfQ1M4hVOQt5sAp+/IMEa4sGVucCO59hlmrgDXqQveoiCxu0 GfBvjkUjLaQo+jvImAnZyhveDjZLVdsS8q0d4QHEzsv+1eod/4A5NeXKXA0U19xi p+CpMdQm4JB9IIpusrMXAlTNyXW+bEXJN/qBgau3ySOKmW/+IBuYOtROKQDXCNk1 5hTkEc2O2zzVc2d6bpy/57jGt6J4yBsxKH0FZ5lyE51aBWpxIlWPIQj7QrwnH46N H3ReTZnnWUD+x/dufLo5r7gnAyh4wImUqDf8wzR7DbX3fTArdF688ECQUZzq/TR7 NzgW7+IwqbIv94z4TQK1Umw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:47 2026 by rpki-client