$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3xxCvhTiWIEAX19BIdFOyaDjasM.roa File: 3xxCvhTiWIEAX19BIdFOyaDjasM.roa (raw, json) Hash identifier: PO80KQPSRyXHqPmayC3wCqxKIqDQL2aOes8euVpUnRg= Subject key identifier: DF:1C:42:BE:14:E2:58:81:00:5F:5F:41:21:D1:4E:C9:A0:E3:6A:C3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14EF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3xxCvhTiWIEAX19BIdFOyaDjasM.roa Signing time: Tue 31 Mar 2026 07:58:35 +0000 ROA not before: Tue 31 Mar 2026 07:58:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5359 (0x14ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DF1C42BE14E25881005F5F4121D14EC9A0E36AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:d3:45:f2:7c:81:7f:58:69:49:58:a8:c0: 89:b9:c4:b1:35:b6:4a:ae:e3:0e:6d:06:71:d1:92: 2c:cd:7d:2a:ad:84:b9:eb:55:01:65:1b:18:ee:46: d0:b6:f5:3c:78:a4:68:0c:72:39:b9:07:53:f0:6b: 9b:c2:ea:4f:97:cb:87:d1:dc:80:41:1b:bb:f6:f8: a7:e4:8c:ed:82:3a:18:cc:02:a3:39:f8:65:fd:56: 15:2e:20:e1:cb:26:1c:09:aa:2e:68:5f:ef:8a:29: 29:fd:3b:f3:e6:8f:ae:70:a7:72:7a:00:19:d0:10: dd:62:f4:85:ce:77:51:9e:6d:02:96:b3:d5:24:72: fe:94:43:e4:27:cb:62:9f:8f:12:87:49:e7:67:d3: 79:61:b2:6c:d3:a0:36:24:37:44:ac:20:a2:1e:de: d9:04:bc:e2:69:22:d9:db:6e:48:f5:37:f3:04:96: 6b:ea:28:24:72:a0:c0:53:8a:ac:df:f6:f4:e8:ac: 51:1b:7a:7d:2c:8a:76:88:2a:93:79:ca:94:87:47: 83:9a:1b:1b:31:96:08:bb:4f:e3:dc:fb:82:c7:b1: b1:4b:cd:6b:34:e0:57:2c:4d:36:19:39:2f:43:73: 71:3e:fc:f7:f5:ee:ab:2e:3b:4c:f2:4e:3e:da:55: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1C:42:BE:14:E2:58:81:00:5F:5F:41:21:D1:4E:C9:A0:E3:6A:C3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3xxCvhTiWIEAX19BIdFOyaDjasM.roa sbgp-ipAddrBlock: critical IPv4: 1.67.224.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:6c:b8:f1:7e:0c:83:29:b2:d9:0d:da:bb:31:cf:3f:4b:86: 4c:2a:9f:23:db:e5:31:80:0e:3a:84:c6:36:01:cb:16:1a:63: 3d:61:16:9a:c8:4d:14:b3:a2:69:f6:b9:5f:4b:3e:a2:5b:9e: 9b:8d:e6:7d:f5:d4:40:73:71:5c:00:7a:10:bc:6f:d0:93:b3: 92:7e:b1:b7:42:bc:fb:19:62:9d:94:2a:26:d0:e2:60:d6:14: 97:1b:e0:7d:83:e5:a6:5a:a8:ba:9c:80:94:a1:75:fc:6a:8f: a1:98:97:50:3c:b7:1e:6c:2a:4f:32:f3:ea:22:46:e3:02:4f: 65:70:e5:43:38:d7:9c:07:a9:d6:2a:5c:9d:0d:40:9e:8d:34: c1:72:be:d5:fa:75:ef:88:04:15:8b:13:50:a7:8f:c8:e5:9b: 83:b9:f2:b1:b1:4a:72:7d:91:6f:f3:43:4d:e8:4c:26:36:42: ba:16:c9:f7:61:15:12:9c:71:21:47:da:f4:06:1b:1d:b6:6a: 9f:f1:da:28:57:22:df:c8:89:0d:0b:b2:50:6e:f9:a8:cf:33: 5f:60:99:0d:dd:fd:40:c6:d9:56:0a:ad:bb:6c:c9:77:ff:38: 38:99:f7:8a:ea:95:8d:47:a1:05:9e:9f:ff:1c:85:5d:a4:d1: 24:5b:3d:4b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGMUM0MkJFMTRFMjU4 ODEwMDVGNUY0MTIxRDE0RUM5QTBFMzZBQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG9NNF8nyBf1hpSViowIm5xLE1tkqu4w5tBnHRkizNfSqthLnr VQFlGxjuRtC29Tx4pGgMcjm5B1Pwa5vC6k+Xy4fR3IBBG7v2+KfkjO2COhjMAqM5 +GX9VhUuIOHLJhwJqi5oX++KKSn9O/Pmj65wp3J6ABnQEN1i9IXOd1GebQKWs9Uk cv6UQ+Qny2KfjxKHSedn03lhsmzToDYkN0SsIKIe3tkEvOJpItnbbkj1N/MElmvq KCRyoMBTiqzf9vTorFEben0sinaIKpN5ypSHR4OaGxsxlgi7T+Pc+4LHsbFLzWs0 4FcsTTYZOS9Dc3E+/Pf17qsuO0zyTj7aVdgjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3xxCvhTiWIEAX19BIdFOyaDjasMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzN4eEN2aFRpV0lFQVgxOUJJZEZPeWFEamFzTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBQ+AwDQYJKoZIhvcNAQELBQADggEB AB1suPF+DIMpstkN2rsxzz9LhkwqnyPb5TGADjqExjYByxYaYz1hFprITRSzomn2 uV9LPqJbnpuN5n311EBzcVwAehC8b9CTs5J+sbdCvPsZYp2UKibQ4mDWFJcb4H2D 5aZaqLqcgJShdfxqj6GYl1A8tx5sKk8y8+oiRuMCT2Vw5UM415wHqdYqXJ0NQJ6N NMFyvtX6de+IBBWLE1Cnj8jlm4O58rGxSnJ9kW/zQ03oTCY2QroWyfdhFRKccSFH 2vQGGx22ap/x2ihXIt/IiQ0LslBu+ajPM19gmQ3d/UDG2VYKrbtsyXf/ODiZ94rq lY1HoQWen/8chV2k0SRbPUs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:33 2026 by rpki-client