$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6CEh-049Rn9xsjpBE8176VRO9dM.roa File: 6CEh-049Rn9xsjpBE8176VRO9dM.roa (raw, json) Hash identifier: zDVg5bUclMZ4v6nO/2iQc0rq92bxGfVW8LEVXhGr4hQ= Subject key identifier: E8:21:21:FB:4E:3D:46:7F:71:B2:3A:41:13:CD:7B:E9:54:4E:F5:D3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16CA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6CEh-049Rn9xsjpBE8176VRO9dM.roa Signing time: Tue 31 Mar 2026 08:02:30 +0000 ROA not before: Tue 31 Mar 2026 08:02:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5834 (0x16ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E82121FB4E3D467F71B23A4113CD7BE9544EF5D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:0c:82:26:2b:fd:3b:f8:a8:13:2e:9e:14: 24:46:93:7e:ee:bd:89:45:6c:87:64:1d:86:15:a3: ce:e3:e1:60:58:0c:a3:47:6a:32:e8:70:41:99:bd: ad:e4:74:10:83:9e:78:82:3a:7a:da:53:fe:f9:07: a0:70:e1:3c:15:a9:96:29:99:2a:71:ba:4e:41:b5: 1a:b2:80:17:66:7e:e9:ca:10:10:b9:e5:bc:30:f4: c3:ee:82:82:82:76:5d:fd:cd:52:40:d0:58:26:7c: 76:fc:4e:bd:87:a5:a2:bc:13:ae:d0:07:3d:21:bc: 32:2c:df:50:ee:f9:5f:ba:af:43:e7:24:c2:c5:76: 28:68:b8:c3:35:6b:c2:99:44:29:40:0c:cf:0e:0f: c4:f9:c4:b6:be:89:82:1c:fa:97:16:ed:58:1b:73: 27:d5:02:39:95:99:5a:77:2d:1b:5a:0e:7d:73:ca: 91:fa:2e:64:d3:18:e3:7f:d3:93:9a:2d:3a:d2:6d: aa:2d:cb:7b:24:eb:d8:b3:f6:b1:96:d4:85:e4:27: 18:b2:d0:ea:d0:1e:3b:d3:ae:57:2a:ff:d6:d2:d3: 8d:86:b6:0f:18:a6:60:c7:af:74:64:e5:3e:94:9d: d5:f8:f7:e7:bd:a4:d9:1c:5a:13:9b:a1:b4:76:4c: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:21:21:FB:4E:3D:46:7F:71:B2:3A:41:13:CD:7B:E9:54:4E:F5:D3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6CEh-049Rn9xsjpBE8176VRO9dM.roa sbgp-ipAddrBlock: critical IPv4: 220.210.60.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:a0:25:4c:06:54:9d:ed:c6:d4:47:c8:3a:a1:93:8b:80:35: ca:5d:6b:5e:bc:03:7e:ab:03:8e:f3:51:16:ba:f8:02:d8:4d: ec:d8:d6:02:8f:a8:d1:60:f6:81:80:96:72:2a:8b:ad:1a:58: 2a:d8:40:11:61:5f:71:eb:14:8b:96:3f:06:68:c6:72:4f:ac: 8d:15:2c:6d:a2:a7:86:17:d3:ab:10:ab:ee:a3:8a:4f:55:31: 30:a5:aa:13:b5:a2:e6:13:5e:06:32:4c:7a:28:72:d6:dc:0a: d7:02:f9:1a:9c:15:ca:91:be:73:c5:fb:46:1b:0b:fd:eb:0d: 2e:c9:bf:d3:f6:e9:d4:b8:fe:91:c0:cb:74:dc:a8:1f:a3:e0: a1:73:57:16:c3:32:7e:34:38:02:d0:ef:6b:a4:b5:38:69:31: dc:b6:2c:49:17:c2:79:be:f7:4a:1a:e3:89:3e:30:6a:e9:ae: 16:e0:9e:6a:e5:c3:3f:7e:ea:48:4d:02:4f:f9:1d:69:d4:de: 9e:eb:1f:73:bc:6a:47:79:29:21:f2:75:ef:fd:d7:17:38:cf: 84:eb:d1:48:3c:b0:6c:4a:4c:c4:3b:e3:45:47:94:6e:af:8b: 6d:e3:f0:3e:51:29:46:2a:86:8e:4c:26:7c:a4:72:70:a0:55: f5:27:a7:8f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU4MjEyMUZCNEUzRDQ2 N0Y3MUIyM0E0MTEzQ0Q3QkU5NTQ0RUY1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNjAyCJiv9O/ioEy6eFCRGk37uvYlFbIdkHYYVo87j4WBYDKNH ajLocEGZva3kdBCDnniCOnraU/75B6Bw4TwVqZYpmSpxuk5BtRqygBdmfunKEBC5 5bww9MPugoKCdl39zVJA0FgmfHb8Tr2HpaK8E67QBz0hvDIs31Du+V+6r0PnJMLF dihouMM1a8KZRClADM8OD8T5xLa+iYIc+pcW7VgbcyfVAjmVmVp3LRtaDn1zypH6 LmTTGON/05OaLTrSbaoty3sk69iz9rGW1IXkJxiy0OrQHjvTrlcq/9bS042Gtg8Y pmDHr3Rk5T6UndX49+e9pNkcWhObobR2TGeRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU6CEh+049Rn9xsjpBE8176VRO9dMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzZDRWgtMDQ5Um45eHNqcEJFODE3NlZSTzlkTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0jwwDQYJKoZIhvcNAQELBQADggEB AJ6gJUwGVJ3txtRHyDqhk4uANcpda168A36rA47zURa6+ALYTezY1gKPqNFg9oGA lnIqi60aWCrYQBFhX3HrFIuWPwZoxnJPrI0VLG2ip4YX06sQq+6jik9VMTClqhO1 ouYTXgYyTHooctbcCtcC+RqcFcqRvnPF+0YbC/3rDS7Jv9P26dS4/pHAy3TcqB+j 4KFzVxbDMn40OALQ72uktThpMdy2LEkXwnm+90oa44k+MGrprhbgnmrlwz9+6khN Ak/5HWnU3p7rH3O8akd5KSHyde/91xc4z4Tr0Ug8sGxKTMQ740VHlG6vi23j8D5R KUYqho5MJnykcnCgVfUnp48= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:37 2026 by rpki-client