$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DSJBQt63Y0wrSpTUkNj7z5uZn1c.roa File: DSJBQt63Y0wrSpTUkNj7z5uZn1c.roa (raw, json) Hash identifier: Gpyg9wlVx58r0gcNx+w2UvfdM9MvVe/Sh5W2Bw+k+v0= Subject key identifier: 0D:22:41:42:DE:B7:63:4C:2B:4A:94:D4:90:D8:FB:CF:9B:99:9F:57 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1511 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DSJBQt63Y0wrSpTUkNj7z5uZn1c.roa Signing time: Tue 31 Mar 2026 07:58:51 +0000 ROA not before: Tue 31 Mar 2026 07:58:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5393 (0x1511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0D224142DEB7634C2B4A94D490D8FBCF9B999F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:5e:b1:a6:df:c3:51:16:e8:a9:7e:02:e1: e5:28:5d:59:ba:9c:9e:b6:09:6c:a6:f8:8a:f1:09: ed:5e:82:c4:5a:53:39:33:42:df:35:a0:9b:60:b9: c8:9f:24:43:3d:6f:d4:25:6c:9b:b0:ca:e8:29:2d: 70:62:23:60:87:27:4c:42:09:dc:d9:2d:f4:d2:f7: 8a:c0:34:cf:86:84:c4:d0:ce:0d:b9:10:57:f0:00: 3e:b4:ba:73:42:b5:6e:a3:df:ea:b0:05:92:2c:a4: d0:11:57:07:ea:01:a4:d4:58:32:c4:ed:4c:30:1f: 49:7a:b5:94:a1:50:bd:47:86:62:9c:7f:32:7d:f1: c4:e0:7c:c7:3e:d0:b5:10:9e:e9:c9:a8:19:f2:c8: 76:1b:f7:0a:88:14:5a:7e:de:b8:f1:10:e8:33:82: 71:47:d7:fd:ab:0e:65:7a:2b:81:17:71:f5:65:6a: 7f:4e:11:d1:7a:5d:3a:40:bb:f8:93:10:80:ab:dd: 73:2e:2a:98:17:2d:b6:05:af:1f:02:e0:ab:e4:91: 3b:4f:23:90:3f:e2:7e:15:1e:ca:b7:2e:fc:cb:0c: a0:c3:60:fd:2e:d8:c5:15:82:e6:e5:7a:8c:ef:fd: dc:0f:56:6f:7e:a0:5b:f2:d7:1c:a5:29:48:3d:cc: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:22:41:42:DE:B7:63:4C:2B:4A:94:D4:90:D8:FB:CF:9B:99:9F:57 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DSJBQt63Y0wrSpTUkNj7z5uZn1c.roa sbgp-ipAddrBlock: critical IPv4: 220.210.60.0/22 Signature Algorithm: sha256WithRSAEncryption 90:7b:03:fd:ee:1f:b2:89:0d:1b:85:f6:e2:9e:a0:5c:96:b4: 48:61:88:2d:ba:33:a4:38:3b:ae:14:09:25:2b:27:43:61:f3: 8f:49:9d:85:ae:ee:30:37:47:45:54:8f:c6:17:0e:ed:80:d0: bd:d8:8d:d5:e2:35:77:74:8c:a0:1e:3b:65:80:02:ad:d5:f2: da:31:99:fa:f3:eb:11:c0:fc:09:b4:44:f3:33:e5:1f:94:48: 58:bd:7f:c7:94:3e:51:ae:01:0e:db:76:e1:ed:58:ab:3d:57: 7a:ef:7d:76:ec:4b:1e:ca:bb:97:20:c7:53:75:8e:b9:4e:9d: 05:4e:6a:28:2f:0d:45:31:a4:59:a5:9c:a5:66:c8:30:04:02: 10:48:01:35:fa:ff:92:1b:7e:d9:ac:3a:f6:e7:41:b7:1d:95: 2a:ac:33:7f:c7:73:ac:81:01:ff:2b:10:62:92:1e:30:6f:b5: 63:43:27:9a:e0:12:a3:48:20:31:e8:67:3c:be:6e:45:df:d8: 4e:0a:fd:91:6d:ff:28:07:56:b1:26:56:e8:19:35:f4:e9:0f: 5a:fe:77:29:6c:90:e7:de:05:ba:3c:8e:54:54:27:38:72:df: 59:dd:5e:13:b9:13:a4:56:7c:15:c0:3f:3b:f6:bc:9a:02:f4: bc:c4:5d:b6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEMjI0MTQyREVCNzYz NEMyQjRBOTRENDkwRDhGQkNGOUI5OTlGNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKlF6xpt/DURboqX4C4eUoXVm6nJ62CWym+IrxCe1egsRaUzkz Qt81oJtgucifJEM9b9QlbJuwyugpLXBiI2CHJ0xCCdzZLfTS94rANM+GhMTQzg25 EFfwAD60unNCtW6j3+qwBZIspNARVwfqAaTUWDLE7UwwH0l6tZShUL1HhmKcfzJ9 8cTgfMc+0LUQnunJqBnyyHYb9wqIFFp+3rjxEOgzgnFH1/2rDmV6K4EXcfVlan9O EdF6XTpAu/iTEICr3XMuKpgXLbYFrx8C4KvkkTtPI5A/4n4VHsq3LvzLDKDDYP0u 2MUVgubleozv/dwPVm9+oFvy1xylKUg9zFWjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUDSJBQt63Y0wrSpTUkNj7z5uZn1cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0RTSkJRdDYzWTB3clNwVFVrTmo3ejV1Wm4xYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc0jwwDQYJKoZIhvcNAQELBQADggEB AJB7A/3uH7KJDRuF9uKeoFyWtEhhiC26M6Q4O64UCSUrJ0Nh849JnYWu7jA3R0VU j8YXDu2A0L3YjdXiNXd0jKAeO2WAAq3V8toxmfrz6xHA/Am0RPMz5R+USFi9f8eU PlGuAQ7bduHtWKs9V3rvfXbsSx7Ku5cgx1N1jrlOnQVOaigvDUUxpFmlnKVmyDAE AhBIATX6/5IbftmsOvbnQbcdlSqsM3/Hc6yBAf8rEGKSHjBvtWNDJ5rgEqNIIDHo Zzy+bkXf2E4K/ZFt/ygHVrEmVugZNfTpD1r+dylskOfeBbo8jlRUJzhy31ndXhO5 E6RWfBXAPzv2vJoC9LzEXbY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:07 2026 by rpki-client