$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SHQerCBctj77bTukeLlllRbltk.roa File: 5SHQerCBctj77bTukeLlllRbltk.roa (raw, json) Hash identifier: OlneKQ7faLVi6yHDLqR11AY1Wor+jRuV2ymF44LVIZw= Subject key identifier: E5:21:D0:7A:B0:81:72:D8:FB:ED:B4:EE:91:E2:E5:96:54:5B:96:D9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 160D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SHQerCBctj77bTukeLlllRbltk.roa Signing time: Tue 31 Mar 2026 08:01:01 +0000 ROA not before: Tue 31 Mar 2026 08:01:01 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5645 (0x160d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:01 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E521D07AB08172D8FBEDB4EE91E2E596545B96D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:2c:ee:8e:a0:a9:32:b0:89:c2:4f:6a:3b: 34:45:98:c4:b4:87:19:62:25:a8:46:15:ff:fc:67: dc:3c:ac:a6:30:3b:d0:a8:18:25:8d:c9:c2:bd:ba: 08:25:9c:f4:e1:48:78:84:c4:f8:bb:b0:73:02:ce: 93:cf:2c:79:d5:e5:c0:f9:1e:42:71:73:05:9e:76: 17:34:fc:5d:5b:4e:82:9e:ab:c5:71:5c:68:a9:aa: f4:ed:8f:ae:86:14:6a:8b:0f:4f:7f:f6:93:65:82: b8:b5:ca:76:54:f7:da:0f:34:58:a2:90:56:44:bf: 7c:78:90:74:16:fb:f0:f4:66:b8:41:9e:35:49:93: 98:28:70:9c:58:3a:4e:cb:4b:cb:5d:4b:35:8c:cf: e8:bb:e4:d2:9d:75:28:fc:00:e6:30:c7:ce:ce:ab: 95:6b:4a:52:7a:1b:a7:2e:aa:99:22:87:e8:d7:0c: 2b:c4:fb:4f:b7:ff:de:e6:48:cc:f7:5f:be:ea:1c: 7e:4a:7d:ae:d7:f6:99:35:8b:fc:35:12:01:00:2b: 9a:36:b3:3a:22:95:5b:7e:6b:09:66:0d:94:01:6d: 12:ad:c1:3f:0a:8b:b8:a2:dd:06:97:08:05:bc:83: dc:14:fc:e2:d0:37:39:ad:29:2e:7b:78:ad:fc:48: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:D0:7A:B0:81:72:D8:FB:ED:B4:EE:91:E2:E5:96:54:5B:96:D9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SHQerCBctj77bTukeLlllRbltk.roa sbgp-ipAddrBlock: critical IPv4: 49.96.216.0/22 Signature Algorithm: sha256WithRSAEncryption bd:60:09:df:30:93:ae:ff:bb:81:fc:9c:01:92:31:32:2f:89: 1b:3a:89:c3:6d:ac:1e:61:bf:d3:04:68:2c:5f:ec:bc:9f:5c: 8f:2b:09:90:20:61:8a:8a:97:8d:19:9b:66:36:48:d0:43:55: 36:f5:4d:69:97:ed:8d:51:36:4b:93:f9:12:ad:4a:6c:90:7b: 8f:a4:cf:4b:0e:76:31:b5:dd:91:6f:47:fa:81:9b:96:57:f7: 0a:11:30:84:1d:53:2f:bb:89:bb:ff:88:55:f3:71:17:92:cb: 8b:61:2c:d6:a0:7f:f5:2a:ef:66:9d:f2:4d:7b:67:f3:89:b3: 33:dc:be:27:f9:a7:58:96:59:51:de:ef:84:54:27:c9:47:e9: 13:c0:99:90:2b:e0:6e:3f:89:0d:e1:07:b4:17:4a:10:ab:33: e4:ad:31:c1:0d:e0:82:76:3f:ba:6b:fd:31:5c:28:32:1f:bf: ba:05:11:8c:13:0a:10:45:47:df:f6:75:e3:25:7b:c6:06:0d: 3c:92:03:eb:ad:ca:78:23:53:09:aa:9e:e0:d0:3c:db:af:96: 5c:98:3c:ff:93:52:5d:66:a0:8f:83:d6:c4:2d:e7:7b:80:75: e7:0f:42:9a:57:49:19:6c:77:37:40:14:2c:0d:89:1c:4b:df: 48:8f:e6:c9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1MjFEMDdBQjA4MTcy RDhGQkVEQjRFRTkxRTJFNTk2NTQ1Qjk2RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWSSzujqCpMrCJwk9qOzRFmMS0hxliJahGFf/8Z9w8rKYwO9Co GCWNycK9ugglnPThSHiExPi7sHMCzpPPLHnV5cD5HkJxcwWedhc0/F1bToKeq8Vx XGipqvTtj66GFGqLD09/9pNlgri1ynZU99oPNFiikFZEv3x4kHQW+/D0ZrhBnjVJ k5gocJxYOk7LS8tdSzWMz+i75NKddSj8AOYwx87Oq5VrSlJ6G6cuqpkih+jXDCvE +0+3/97mSMz3X77qHH5Kfa7X9pk1i/w1EgEAK5o2szoilVt+awlmDZQBbRKtwT8K i7ii3QaXCAW8g9wU/OLQNzmtKS57eK38SL+zAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU5SHQerCBctj77bTukeLlllRbltkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzVTSFFlckNCY3RqNzdiVHVrZUxsbGxSYmx0ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYNgwDQYJKoZIhvcNAQELBQADggEB AL1gCd8wk67/u4H8nAGSMTIviRs6icNtrB5hv9MEaCxf7LyfXI8rCZAgYYqKl40Z m2Y2SNBDVTb1TWmX7Y1RNkuT+RKtSmyQe4+kz0sOdjG13ZFvR/qBm5ZX9woRMIQd Uy+7ibv/iFXzcReSy4thLNagf/Uq72ad8k17Z/OJszPcvif5p1iWWVHe74RUJ8lH 6RPAmZAr4G4/iQ3hB7QXShCrM+StMcEN4IJ2P7pr/TFcKDIfv7oFEYwTChBFR9/2 deMle8YGDTySA+utyngjUwmqnuDQPNuvllyYPP+TUl1moI+D1sQt53uAdecPQppX SRlsdzdAFCwNiRxL30iP5sk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:59 2026 by rpki-client