$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7zbkx5nOpSaeiVO78l2gL0yzQWs.roa File: 7zbkx5nOpSaeiVO78l2gL0yzQWs.roa (raw, json) Hash identifier: ycuSyssdw93q4Z0vqwziC9TNKs6zcW1QZR9qcI21PWM= Subject key identifier: EF:36:E4:C7:99:CE:A5:26:9E:89:53:BB:F2:5D:A0:2F:4C:B3:41:6B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1583 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7zbkx5nOpSaeiVO78l2gL0yzQWs.roa Signing time: Tue 31 Mar 2026 07:59:46 +0000 ROA not before: Tue 31 Mar 2026 07:59:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5507 (0x1583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EF36E4C799CEA5269E8953BBF25DA02F4CB3416B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:04:be:73:46:b9:ba:67:c2:63:c3:ab:d5: 5c:ee:92:48:c7:9c:3d:6f:09:31:d5:f4:e0:59:96: 2f:0a:30:e3:28:31:1f:4d:2f:76:37:fc:c1:29:7f: 85:ad:0b:cf:9b:01:45:1d:2f:dc:33:a1:93:49:a3: f0:ad:f5:39:4b:39:32:0f:a3:d5:52:af:fb:18:36: 17:4e:b2:c3:1b:e4:78:57:c3:b7:82:64:3f:cd:61: 24:a8:93:8e:87:89:f4:4d:8d:9e:05:d6:e9:42:b2: 5e:6d:db:3b:7d:53:4e:74:dc:26:fb:1b:50:71:a3: 55:4e:52:f0:c8:46:81:37:c7:32:94:25:7f:69:b1: 52:2a:61:e8:02:01:65:aa:30:3b:32:59:29:80:16: 9c:7f:81:7d:5c:49:a6:af:b9:f1:6b:15:14:86:f1: 28:08:42:94:ea:5c:35:7f:84:e7:54:e7:15:65:00: 83:4e:28:04:9e:ba:36:67:2a:3e:25:9a:d4:e7:24: ad:79:70:05:6b:51:08:63:38:be:b6:af:18:07:0e: 93:ae:98:1b:e6:15:3f:05:9e:5c:24:53:e9:b3:72: 92:b1:88:55:b2:ba:ff:92:0e:fd:df:d6:e9:5b:5b: 12:c7:fa:d9:1c:a6:ca:4f:c7:a7:40:85:38:ff:3e: 1f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:36:E4:C7:99:CE:A5:26:9E:89:53:BB:F2:5D:A0:2F:4C:B3:41:6B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7zbkx5nOpSaeiVO78l2gL0yzQWs.roa sbgp-ipAddrBlock: critical IPv4: 1.72.16.0/20 Signature Algorithm: sha256WithRSAEncryption e3:63:fc:1f:38:4a:22:a0:ee:58:1e:bf:d9:14:4c:94:e0:9f: d3:e9:15:60:45:6b:03:7e:8a:1e:97:80:79:a3:19:4c:59:01: de:47:71:5f:0b:c1:d3:0c:21:fd:f0:98:ec:f4:03:0c:50:54: 88:e5:11:5b:7f:61:18:a8:b0:3b:cb:22:d8:f6:d6:f7:35:66: 3a:57:db:fc:66:9a:e6:b9:2b:40:41:b1:60:04:46:bb:cf:14: a0:d9:5e:9c:4c:40:6e:1e:cb:e9:31:10:c6:52:6a:0b:dc:2b: e1:42:f3:76:d8:df:a1:f8:00:93:7e:e2:86:c6:6c:07:20:dd: 71:7d:e5:14:f1:ae:cd:1b:7a:21:5a:e8:a0:b1:61:5f:e1:a0: f7:17:00:7a:22:15:ec:d6:53:b7:9a:23:33:eb:fd:d2:3e:03: 1b:f5:db:9c:da:91:05:59:08:b8:ce:05:35:fe:65:16:89:a0: 69:9b:72:71:29:99:12:81:44:30:8b:2f:05:18:27:31:00:7e: 1a:4c:44:79:bf:c2:d5:ae:d6:9a:3d:9b:d9:29:02:c9:d1:c6: ad:db:b0:7d:db:fd:aa:9a:2d:f0:53:2a:7f:62:d6:34:2b:16: 97:58:00:38:8c:e2:51:9c:42:c3:65:e0:25:a5:9e:04:f0:14: b8:d1:9d:66 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVGMzZFNEM3OTlDRUE1 MjY5RTg5NTNCQkYyNURBMDJGNENCMzQxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4lwS+c0a5umfCY8Or1VzukkjHnD1vCTHV9OBZli8KMOMoMR9N L3Y3/MEpf4WtC8+bAUUdL9wzoZNJo/Ct9TlLOTIPo9VSr/sYNhdOssMb5HhXw7eC ZD/NYSSok46HifRNjZ4F1ulCsl5t2zt9U0503Cb7G1Bxo1VOUvDIRoE3xzKUJX9p sVIqYegCAWWqMDsyWSmAFpx/gX1cSaavufFrFRSG8SgIQpTqXDV/hOdU5xVlAINO KASeujZnKj4lmtTnJK15cAVrUQhjOL62rxgHDpOumBvmFT8FnlwkU+mzcpKxiFWy uv+SDv3f1ulbWxLH+tkcpspPx6dAhTj/Ph9rAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU7zbkx5nOpSaeiVO78l2gL0yzQWswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5Lzd6Ymt4NW5PcFNhZWlWTzc4bDJnTDB5elFXcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQBSBAwDQYJKoZIhvcNAQELBQADggEB AONj/B84SiKg7lgev9kUTJTgn9PpFWBFawN+ih6XgHmjGUxZAd5HcV8LwdMMIf3w mOz0AwxQVIjlEVt/YRiosDvLItj21vc1ZjpX2/xmmua5K0BBsWAERrvPFKDZXpxM QG4ey+kxEMZSagvcK+FC83bY36H4AJN+4obGbAcg3XF95RTxrs0beiFa6KCxYV/h oPcXAHoiFezWU7eaIzPr/dI+Axv125zakQVZCLjOBTX+ZRaJoGmbcnEpmRKBRDCL LwUYJzEAfhpMRHm/wtWu1po9m9kpAsnRxq3bsH3b/aqaLfBTKn9i1jQrFpdYADiM 4lGcQsNl4CWlngTwFLjRnWY= -----END CERTIFICATE-----Generated at Tue Apr 7 21:02:11 2026 by rpki-client