$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DPbPcvvKSLv5bz1vHCFEnzbza0U.roa File: DPbPcvvKSLv5bz1vHCFEnzbza0U.roa (raw, json) Hash identifier: UZpLxad3cW8IuAUz2qgHU8Kcc/bUu+QsHBUTW6ihvqI= Subject key identifier: 0C:F6:CF:72:FB:CA:48:BB:F9:6F:3D:6F:1C:21:44:9F:36:F3:6B:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15CB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DPbPcvvKSLv5bz1vHCFEnzbza0U.roa Signing time: Tue 31 Mar 2026 08:00:26 +0000 ROA not before: Tue 31 Mar 2026 08:00:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5579 (0x15cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0CF6CF72FBCA48BBF96F3D6F1C21449F36F36B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:0c:97:28:8f:6b:0f:1f:f3:c0:ee:ea:7f: 3b:66:7c:e6:16:fc:39:eb:a3:1c:e7:92:fc:27:28: 5b:bc:f9:1a:09:81:02:dc:3a:e3:67:92:bf:ae:51: 6e:b0:e5:36:d9:92:01:6d:71:9d:57:57:54:c1:03: 2e:23:6a:a9:78:b7:3a:e9:85:ed:c6:94:11:b7:dc: 58:44:14:b1:34:f5:02:2a:33:d9:ab:c0:74:f1:8a: b0:f2:ac:ea:b5:ea:85:0b:f8:b5:d4:90:f5:4a:6c: cb:fc:9b:16:08:19:91:d2:2a:11:92:dc:23:be:93: 57:ad:6f:eb:14:a2:2e:19:69:64:bd:3c:ee:6f:c8: f9:5a:ec:93:d6:bf:00:6d:31:2c:5b:83:a8:04:ac: 99:9d:b1:a3:dd:4d:be:78:ac:22:92:82:06:89:b7: 2d:57:8c:d9:61:a4:cf:93:19:eb:75:3b:9c:01:2b: c3:35:51:23:e1:51:6e:4b:e8:60:10:04:32:12:ed: c9:26:f1:d5:3d:a9:5b:49:75:68:fa:e7:4c:27:1c: fe:f2:f3:b0:d0:b3:36:37:7c:2f:5e:5e:3d:a8:74: 8f:30:03:89:9f:de:c6:f7:55:a6:b7:30:17:12:54: d7:b4:9b:0f:46:3c:e4:85:c1:79:69:d6:89:a6:89: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F6:CF:72:FB:CA:48:BB:F9:6F:3D:6F:1C:21:44:9F:36:F3:6B:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DPbPcvvKSLv5bz1vHCFEnzbza0U.roa sbgp-ipAddrBlock: critical IPv4: 49.96.35.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:77:07:f7:72:74:7f:4c:88:9d:ff:90:a3:8c:3e:58:49:3f: cb:c0:f4:4e:0f:b4:f0:ef:9b:25:ba:69:18:9e:c8:83:4b:81: 73:97:97:9c:58:e8:69:3a:56:3c:68:bf:58:9c:f6:dc:b3:ec: 48:34:cd:13:93:9b:5c:be:95:f3:e2:84:8e:71:04:84:4a:59: c5:bb:ca:f5:c5:b0:44:20:97:44:80:b4:e0:9a:55:5b:cc:ee: e3:b9:47:61:07:24:0c:86:77:ef:8d:08:36:d0:c1:55:c7:92: d3:b3:8b:ea:97:5a:a8:4b:d2:3b:7a:f0:41:71:80:0d:20:02: 8b:63:1a:72:cf:66:6c:c3:2b:c4:d0:71:34:f1:83:03:a6:9e: 4d:73:40:75:08:93:ae:2e:96:d2:6c:3e:aa:ca:ec:92:87:ee: 6b:60:9b:b4:b4:e3:04:1f:a8:47:5e:04:a9:15:f0:2f:fd:07: 8a:89:c7:e8:f5:ec:16:cf:1f:6f:29:74:37:57:5e:8d:f6:9f: a1:2b:ce:3b:eb:2e:b4:70:6d:ed:59:65:de:04:40:ef:06:6b: 0a:ae:22:3b:2d:1f:02:d9:32:fa:0d:e4:85:4a:fd:bf:2f:23: ec:99:67:f5:cd:3a:78:5b:38:5a:4b:df:97:50:95:2f:d0:d5: d4:94:97:8c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMjZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDRjZDRjcyRkJDQTQ4 QkJGOTZGM0Q2RjFDMjE0NDlGMzZGMzZCNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/aAyXKI9rDx/zwO7qfztmfOYW/DnroxznkvwnKFu8+RoJgQLc OuNnkr+uUW6w5TbZkgFtcZ1XV1TBAy4jaql4tzrphe3GlBG33FhEFLE09QIqM9mr wHTxirDyrOq16oUL+LXUkPVKbMv8mxYIGZHSKhGS3CO+k1etb+sUoi4ZaWS9PO5v yPla7JPWvwBtMSxbg6gErJmdsaPdTb54rCKSggaJty1XjNlhpM+TGet1O5wBK8M1 USPhUW5L6GAQBDIS7ckm8dU9qVtJdWj650wnHP7y87DQszY3fC9eXj2odI8wA4mf 3sb3Vaa3MBcSVNe0mw9GPOSFwXlp1ommiewBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUDPbPcvvKSLv5bz1vHCFEnzbza0UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0RQYlBjdnZLU0x2NWJ6MXZIQ0ZFbnpiemEwVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYCMwDQYJKoZIhvcNAQELBQADggEB AF53B/dydH9MiJ3/kKOMPlhJP8vA9E4PtPDvmyW6aRieyINLgXOXl5xY6Gk6Vjxo v1ic9tyz7Eg0zROTm1y+lfPihI5xBIRKWcW7yvXFsEQgl0SAtOCaVVvM7uO5R2EH JAyGd++NCDbQwVXHktOzi+qXWqhL0jt68EFxgA0gAotjGnLPZmzDK8TQcTTxgwOm nk1zQHUIk64ultJsPqrK7JKH7mtgm7S04wQfqEdeBKkV8C/9B4qJx+j17BbPH28p dDdXXo32n6ErzjvrLrRwbe1ZZd4EQO8GawquIjstHwLZMvoN5IVK/b8vI+yZZ/XN OnhbOFpL35dQlS/Q1dSUl4w= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:53 2026 by rpki-client