$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3cCfKFLTI-A22QS1PawM9Ed4SY.roa File: A3cCfKFLTI-A22QS1PawM9Ed4SY.roa (raw, json) Hash identifier: HAy3azNi922i3irVxBByfNB360navoJ9BRIJoPPzoU0= Subject key identifier: 03:77:02:7C:A1:4B:4C:8F:80:DB:64:12:D4:F6:B0:33:D1:1D:E1:26 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1447 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3cCfKFLTI-A22QS1PawM9Ed4SY.roa Signing time: Tue 31 Mar 2026 07:57:15 +0000 ROA not before: Tue 31 Mar 2026 07:57:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5191 (0x1447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0377027CA14B4C8F80DB6412D4F6B033D11DE126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:5b:3a:02:46:22:7b:6f:c1:79:71:11:ec: 3c:fd:2e:14:fc:d2:78:79:6e:86:1b:f6:61:22:0c: bb:20:35:5f:15:dd:37:eb:1d:4b:d0:c6:6c:0b:b8: a0:7e:bb:a6:fe:13:95:f6:85:ec:a7:65:9d:0b:03: 4b:63:21:76:14:09:b0:d2:e1:16:06:32:42:4e:5f: d1:12:c5:cf:5a:77:7c:60:7d:b1:e2:63:9a:2b:23: fb:40:6e:de:c6:4a:b5:64:d1:1d:e7:24:7a:0d:23: a3:b8:e8:5d:24:20:d1:63:57:21:28:34:78:d9:a9: f1:71:8e:ed:d0:44:79:01:e1:d7:19:a7:eb:90:bd: cd:20:9c:fc:a9:a8:e6:e1:3e:87:7e:5a:41:12:6d: 33:be:89:2e:f2:6c:b4:0e:31:04:92:d5:e5:8f:4d: b0:a3:af:1e:03:95:7e:82:c9:e9:96:4f:68:e1:9f: ac:7b:ff:d5:cf:de:0c:b9:4a:84:b0:30:80:c6:61: a3:3f:46:15:62:98:9f:d5:bf:30:3e:96:7b:07:c7: 42:bd:1e:06:7b:34:53:e6:00:ca:84:94:45:09:e8: 7d:40:7e:bd:b5:a8:aa:1a:5b:2c:6d:4e:28:84:ea: d9:52:6e:5f:df:b5:8f:1e:67:84:22:72:11:c9:2a: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:02:7C:A1:4B:4C:8F:80:DB:64:12:D4:F6:B0:33:D1:1D:E1:26 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3cCfKFLTI-A22QS1PawM9Ed4SY.roa sbgp-ipAddrBlock: critical IPv4: 1.79.98.0/23 Signature Algorithm: sha256WithRSAEncryption 18:35:de:38:6b:7c:05:2c:7d:21:3a:38:ba:ba:71:97:80:70: 15:02:0b:14:e4:5b:70:d8:a2:66:1a:2b:bc:5e:fb:48:81:47: 93:11:b1:bd:a7:da:0c:ff:28:7f:e9:4d:2c:0d:12:04:ef:d4: 15:b1:15:8a:cf:11:22:2e:72:21:4f:f3:67:bc:ca:60:77:d2: ec:44:e5:55:a8:55:c5:a4:95:ea:92:80:d9:4e:b3:10:c7:f3: 54:72:2d:5a:f9:a2:41:fb:70:25:78:29:80:8b:fd:a1:21:56: ea:84:3f:3b:fd:e5:67:82:1d:08:62:02:27:36:58:74:ca:d0: 48:00:a2:46:bb:82:6d:e3:d1:00:58:15:14:17:a6:1c:72:90: 86:a8:1c:ea:06:c2:0f:35:a0:e1:75:10:8d:32:a2:63:2e:ad: ac:d9:17:f2:c9:8d:bb:9b:37:33:0c:e7:ca:23:b2:21:67:74: 12:1b:a7:3a:01:fd:eb:ff:98:4b:ec:91:e2:8b:7c:c0:09:31: 90:19:9e:49:22:06:27:ed:aa:f5:7d:34:d4:bb:6e:2b:44:41: a9:1a:99:7f:a1:4c:40:a6:57:65:c2:b6:1a:aa:9e:13:cf:c2: c1:58:7a:8c:06:33:a7:3e:5d:ae:36:0a:dd:e0:a8:ad:e9:1e: 77:ea:54:c1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAzNzcwMjdDQTE0QjRD OEY4MERCNjQxMkQ0RjZCMDMzRDExREUxMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCggls6AkYie2/BeXER7Dz9LhT80nh5boYb9mEiDLsgNV8V3Tfr HUvQxmwLuKB+u6b+E5X2heynZZ0LA0tjIXYUCbDS4RYGMkJOX9ESxc9ad3xgfbHi Y5orI/tAbt7GSrVk0R3nJHoNI6O46F0kINFjVyEoNHjZqfFxju3QRHkB4dcZp+uQ vc0gnPypqObhPod+WkESbTO+iS7ybLQOMQSS1eWPTbCjrx4DlX6CyemWT2jhn6x7 /9XP3gy5SoSwMIDGYaM/RhVimJ/VvzA+lnsHx0K9HgZ7NFPmAMqElEUJ6H1Afr21 qKoaWyxtTiiE6tlSbl/ftY8eZ4QichHJKm57AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUA3cCfKFLTI+A22QS1PawM9Ed4SYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0EzY0NmS0ZMVEktQTIyUVMxUGF3TTlFZDRTWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBT2IwDQYJKoZIhvcNAQELBQADggEB ABg13jhrfAUsfSE6OLq6cZeAcBUCCxTkW3DYomYaK7xe+0iBR5MRsb2n2gz/KH/p TSwNEgTv1BWxFYrPESIuciFP82e8ymB30uxE5VWoVcWkleqSgNlOsxDH81RyLVr5 okH7cCV4KYCL/aEhVuqEPzv95WeCHQhiAic2WHTK0EgAoka7gm3j0QBYFRQXphxy kIaoHOoGwg81oOF1EI0yomMurazZF/LJjbubNzMM58ojsiFndBIbpzoB/ev/mEvs keKLfMAJMZAZnkkiBiftqvV9NNS7bitEQakamX+hTECmV2XCthqqnhPPwsFYeowG M6c+Xa42Ct3gqK3pHnfqVME= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:07 2026 by rpki-client