$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BjxtYC5ZxZTvxfwkihh-yeMCBxo.roa File: BjxtYC5ZxZTvxfwkihh-yeMCBxo.roa (raw, json) Hash identifier: qIZglmpb4XZmKHSlmd6BaXsiAFCrrIX7yjGMpL6CuBY= Subject key identifier: 06:3C:6D:60:2E:59:C5:94:EF:C5:FC:24:8A:18:7E:C9:E3:02:07:1A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1515 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BjxtYC5ZxZTvxfwkihh-yeMCBxo.roa Signing time: Tue 31 Mar 2026 07:58:54 +0000 ROA not before: Tue 31 Mar 2026 07:58:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.74.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5397 (0x1515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=063C6D602E59C594EFC5FC248A187EC9E302071A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:ac:aa:db:d2:38:69:06:d3:e0:a0:de:3e: c3:e5:99:46:30:94:d7:fd:2f:5c:cf:04:e6:56:47: 02:b6:9d:ac:38:3a:c7:c4:b4:cf:ec:44:42:b2:07: 9c:18:a3:9b:ab:ca:b1:cd:bb:c4:40:95:74:37:86: 8a:db:1c:0c:28:27:00:8b:0d:db:7a:e0:cb:3a:57: d2:1f:36:ea:3e:3e:df:c8:64:19:8e:0d:02:9f:83: b6:f5:90:0b:9a:56:c2:18:48:cf:ad:a4:91:fa:cc: ac:c9:b7:97:f3:0d:bd:40:28:c3:23:59:7f:df:4b: 81:7f:3a:79:49:f7:9b:ef:1e:d9:71:ba:a7:f0:8d: bf:ba:76:05:c3:0e:15:f7:a1:be:36:b6:ff:ae:28: 2c:1e:26:44:2d:b1:89:30:de:d2:db:52:a8:55:94: c1:5e:10:f3:6b:ed:ae:bd:e9:6a:39:9e:35:e1:8c: e0:7c:f6:8c:78:58:6b:2d:42:b6:6c:3e:b7:f7:d2: e7:33:ab:d4:38:ce:37:3d:02:1b:61:19:c8:f0:f5: 30:ad:3f:9a:e3:25:44:3a:42:a7:9b:57:95:61:3a: e8:b1:46:87:2a:11:af:83:58:e9:4b:05:4a:ee:33: e0:64:8c:75:df:2e:91:64:e2:c7:3c:42:87:83:44: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3C:6D:60:2E:59:C5:94:EF:C5:FC:24:8A:18:7E:C9:E3:02:07:1A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BjxtYC5ZxZTvxfwkihh-yeMCBxo.roa sbgp-ipAddrBlock: critical IPv4: 1.74.200.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:1b:ab:38:31:ab:8e:09:85:1f:a4:fb:61:69:d6:83:7f:7c: 5b:33:ac:0d:60:8a:21:06:3d:a1:70:aa:75:2b:1f:12:03:40: d1:d3:ad:d6:31:9b:b0:22:6b:2b:30:f4:75:74:c6:ec:3c:da: 88:e3:15:83:0b:b3:7f:07:32:ba:4e:4a:03:19:68:46:3d:79: f4:ea:50:01:db:60:b9:c0:0a:8a:68:6c:07:c1:24:34:df:43: 11:00:d4:3b:2f:17:20:02:6c:46:b5:6f:3c:f6:f8:b8:21:8d: e6:a0:13:b4:f0:42:2b:4f:51:6e:9f:7b:13:4e:0d:c6:a2:49: f7:31:13:32:19:b4:29:1c:71:b9:ad:0b:b2:b1:aa:69:b3:15: cb:ab:f8:0d:8e:a6:bf:3b:55:3e:89:47:36:fd:35:7d:41:da: 99:51:65:16:13:bc:b0:9e:ff:08:48:99:c4:37:22:5a:4f:68: 18:a2:e7:6f:94:78:f4:aa:1b:3a:f8:a7:69:d3:f0:f2:22:46: e5:e1:fb:c9:79:71:a6:ee:7f:e4:6a:06:a8:ec:d4:c9:03:9f: 86:c9:fd:11:3c:93:07:db:bf:95:80:24:39:55:dd:fc:bf:c6: ad:8b:03:1e:0b:00:bb:78:aa:c1:b5:53:09:36:16:1d:07:84: 21:70:ce:db -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFRUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2M0M2RDYwMkU1OUM1 OTRFRkM1RkMyNDhBMTg3RUM5RTMwMjA3MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxeKyq29I4aQbT4KDePsPlmUYwlNf9L1zPBOZWRwK2naw4OsfE tM/sREKyB5wYo5uryrHNu8RAlXQ3horbHAwoJwCLDdt64Ms6V9IfNuo+Pt/IZBmO DQKfg7b1kAuaVsIYSM+tpJH6zKzJt5fzDb1AKMMjWX/fS4F/OnlJ95vvHtlxuqfw jb+6dgXDDhX3ob42tv+uKCweJkQtsYkw3tLbUqhVlMFeEPNr7a696Wo5njXhjOB8 9ox4WGstQrZsPrf30uczq9Q4zjc9AhthGcjw9TCtP5rjJUQ6QqebV5VhOuixRocq Ea+DWOlLBUruM+BkjHXfLpFk4sc8QoeDRBfHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUBjxtYC5ZxZTvxfwkihh+yeMCBxowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0JqeHRZQzVaeFpUdnhmd2tpaGgteWVNQ0J4by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBSsgwDQYJKoZIhvcNAQELBQADggEB AIsbqzgxq44JhR+k+2Fp1oN/fFszrA1giiEGPaFwqnUrHxIDQNHTrdYxm7Aiaysw 9HV0xuw82ojjFYMLs38HMrpOSgMZaEY9efTqUAHbYLnACopobAfBJDTfQxEA1Dsv FyACbEa1bzz2+LghjeagE7TwQitPUW6fexNODcaiSfcxEzIZtCkccbmtC7Kxqmmz Fcur+A2Opr87VT6JRzb9NX1B2plRZRYTvLCe/whImcQ3IlpPaBii52+UePSqGzr4 p2nT8PIiRuXh+8l5cabuf+RqBqjs1MkDn4bJ/RE8kwfbv5WAJDlV3fy/xq2LAx4L ALt4qsG1Uwk2Fh0HhCFwzts= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:56 2026 by rpki-client