$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3VYuoMwRVGS_4LPO9SdJHLqNNBo.roa File: 3VYuoMwRVGS_4LPO9SdJHLqNNBo.roa (raw, json) Hash identifier: sJy+qsHusnIp9z20tES+w1VcKKqXSYUxqaUpgzB1YJI= Subject key identifier: DD:56:2E:A0:CC:11:54:64:BF:E0:B3:CE:F5:27:49:1C:BA:8D:34:1A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 136F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3VYuoMwRVGS_4LPO9SdJHLqNNBo.roa Signing time: Tue 31 Mar 2026 07:55:33 +0000 ROA not before: Tue 31 Mar 2026 07:55:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4975 (0x136f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DD562EA0CC115464BFE0B3CEF527491CBA8D341A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:f1:44:9c:30:51:f0:dd:d5:87:b6:43:31: c4:8f:a6:12:8f:4d:b9:5e:70:ff:17:97:48:f3:1d: 5a:2c:5d:68:d6:a7:29:e0:c0:47:ae:24:f1:3d:1c: fa:04:ab:11:23:10:eb:e5:17:9c:0e:bc:74:28:ce: 5b:ff:78:6e:03:82:04:88:5f:59:ee:37:e1:24:f9: 81:64:fd:b5:db:79:3c:c7:d2:24:2a:36:45:2c:e7: c0:a1:64:8c:9b:c1:18:28:97:e3:a1:90:b1:f2:33: 06:15:3f:28:5f:12:c5:51:b6:10:d5:9c:c7:5d:c8: a8:60:1f:47:62:5d:d6:d6:71:6e:86:a8:66:ac:cc: eb:18:5f:ad:82:bb:67:88:40:fc:74:c4:41:79:b8: 8d:39:84:38:9b:30:b4:9f:fb:b5:e8:41:0f:ef:fe: d6:b7:64:73:24:61:ec:57:ea:d2:f6:09:38:d4:fd: dd:10:14:c3:e7:3f:52:35:fb:2a:b1:e1:6f:22:7d: 9b:19:fe:5b:82:cd:a1:b1:13:b4:46:f6:09:ba:b1: 04:13:11:80:35:e4:b5:eb:10:ca:64:c0:97:e0:a7: 5d:1d:55:16:24:2e:4a:a9:9a:54:6e:67:a0:2b:c4: b6:5a:2e:be:fe:76:83:c4:17:1b:0e:ea:6f:84:ea: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:2E:A0:CC:11:54:64:BF:E0:B3:CE:F5:27:49:1C:BA:8D:34:1A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3VYuoMwRVGS_4LPO9SdJHLqNNBo.roa sbgp-ipAddrBlock: critical IPv4: 1.72.6.0/24 Signature Algorithm: sha256WithRSAEncryption 97:82:b3:d3:ac:29:15:62:65:4d:f8:3a:c0:25:d6:16:e7:20: a5:70:75:6e:b5:30:b7:86:68:3d:fb:9e:9d:19:c2:29:71:9e: f1:df:30:de:cf:c1:8d:43:21:17:9e:dd:ff:60:20:a1:2f:c1: 7e:ea:fa:6a:29:8f:23:60:b8:f7:cb:e9:12:b9:ca:8c:23:fc: 0d:3e:75:db:4e:54:75:4d:46:80:49:b7:c5:e0:66:62:66:e7: 62:8f:f4:76:94:2b:75:47:24:a3:e6:49:80:f8:ed:56:89:27: 41:3e:14:75:64:88:6b:76:97:1d:57:77:6e:e4:8a:e2:f0:d7: 92:41:94:8c:14:25:d6:3f:14:86:c2:36:e2:e5:ad:50:05:a0: f5:aa:27:9f:10:d5:43:5a:0b:8f:f4:af:3a:99:b0:dc:0f:6d: 24:54:b7:0c:7a:82:6a:46:96:44:fa:30:7a:f3:6d:f4:1d:09: e0:12:ec:8f:33:81:32:8e:b6:48:af:cd:18:d4:88:3a:66:70: f0:dc:97:13:9f:99:5f:c6:9c:ae:c9:3a:b7:12:1e:b4:53:fd: 1d:c4:71:45:c0:30:f1:d1:c1:78:f8:1f:17:25:c8:82:81:78: 3b:fd:0e:6c:16:7b:66:e3:fc:2a:4e:5e:64:37:00:31:0b:9d: 36:66:30:c8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERENTYyRUEwQ0MxMTU0 NjRCRkUwQjNDRUY1Mjc0OTFDQkE4RDM0MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL+fFEnDBR8N3Vh7ZDMcSPphKPTblecP8Xl0jzHVosXWjWpyng wEeuJPE9HPoEqxEjEOvlF5wOvHQozlv/eG4DggSIX1nuN+Ek+YFk/bXbeTzH0iQq NkUs58ChZIybwRgol+OhkLHyMwYVPyhfEsVRthDVnMddyKhgH0diXdbWcW6GqGas zOsYX62Cu2eIQPx0xEF5uI05hDibMLSf+7XoQQ/v/ta3ZHMkYexX6tL2CTjU/d0Q FMPnP1I1+yqx4W8ifZsZ/luCzaGxE7RG9gm6sQQTEYA15LXrEMpkwJfgp10dVRYk LkqpmlRuZ6ArxLZaLr7+doPEFxsO6m+E6ntpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3VYuoMwRVGS/4LPO9SdJHLqNNBowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNWWXVvTXdSVkdTXzRMUE85U2RKSExxTk5Cby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSAYwDQYJKoZIhvcNAQELBQADggEB AJeCs9OsKRViZU34OsAl1hbnIKVwdW61MLeGaD37np0ZwilxnvHfMN7PwY1DIRee 3f9gIKEvwX7q+mopjyNguPfL6RK5yowj/A0+ddtOVHVNRoBJt8XgZmJm52KP9HaU K3VHJKPmSYD47VaJJ0E+FHVkiGt2lx1Xd27kiuLw15JBlIwUJdY/FIbCNuLlrVAF oPWqJ58Q1UNaC4/0rzqZsNwPbSRUtwx6gmpGlkT6MHrzbfQdCeAS7I8zgTKOtkiv zRjUiDpmcPDclxOfmV/GnK7JOrcSHrRT/R3EcUXAMPHRwXj4HxclyIKBeDv9DmwW e2bj/CpOXmQ3ADELnTZmMMg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:37 2026 by rpki-client