$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYhxf0GDSQBX6tTiOmqYlSUasDE.roa File: DYhxf0GDSQBX6tTiOmqYlSUasDE.roa (raw, json) Hash identifier: +d2ae1v7sQeetRocc5G1GIAnJ3gZjsqjumkrxl4QGgA= Subject key identifier: 0D:88:71:7F:41:83:49:00:57:EA:D4:E2:3A:6A:98:95:25:1A:B0:31 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1422 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYhxf0GDSQBX6tTiOmqYlSUasDE.roa Signing time: Tue 31 Mar 2026 07:56:54 +0000 ROA not before: Tue 31 Mar 2026 07:56:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5154 (0x1422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0D88717F4183490057EAD4E23A6A9895251AB031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:81:6f:cf:c7:2a:47:47:fb:6c:7e:2f:c2:42: ef:31:4d:6b:a9:91:be:6f:c4:b7:dc:91:16:f5:40: 59:00:fd:a1:21:0e:da:98:21:13:f1:85:91:8f:ef: 4e:bd:d4:82:af:42:dd:05:78:54:f1:d2:86:51:25: 62:d4:5e:f3:4c:b4:fb:73:c3:b5:55:53:bb:a0:f9: 6f:e2:6c:a1:c2:d9:89:4a:72:f3:02:8d:ef:ac:b8: 87:f6:2c:3e:f8:6c:74:8f:0e:21:b8:59:66:59:b8: 39:e5:e2:81:0f:35:a5:63:2d:55:70:c4:3b:b0:93: f6:37:ad:ac:c9:c0:2e:f5:f7:a5:e6:93:26:27:0d: d3:f1:9a:ad:a7:20:63:df:f0:6f:94:d2:19:ea:ad: 93:13:bb:e5:c4:77:61:fa:dd:8d:74:d0:62:93:76: 1e:fc:b7:c0:c1:8a:37:f9:c4:89:b6:62:42:51:5c: 59:4d:60:56:8e:3c:f0:a7:a7:eb:bc:3b:f6:5a:90: 9b:04:9b:cc:37:81:14:7d:b5:73:55:c8:eb:a0:33: 8d:ed:49:3c:3f:d3:d8:82:56:ff:5c:a9:85:c3:46: 93:2d:1f:f3:57:b6:1c:df:78:b7:b4:8c:37:7a:f9: 61:26:ef:ce:b9:39:50:82:2b:93:b7:4b:4c:32:73: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:88:71:7F:41:83:49:00:57:EA:D4:E2:3A:6A:98:95:25:1A:B0:31 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYhxf0GDSQBX6tTiOmqYlSUasDE.roa sbgp-ipAddrBlock: critical IPv4: 1.78.34.0/23 Signature Algorithm: sha256WithRSAEncryption d8:6c:08:da:b8:9a:f2:e1:8b:f3:df:2a:61:67:05:8a:dc:21: e0:8f:a2:88:39:83:38:db:68:11:b8:fb:a6:dc:2e:fd:ae:5e: ee:e4:55:20:34:2c:90:7d:fc:c7:ea:d5:76:f8:50:12:1d:09: 61:d3:29:4f:65:47:d4:0b:31:f6:ba:b9:8c:27:a6:76:4f:29: d3:9b:ad:b1:31:ae:28:d9:40:ec:85:74:c5:ce:6c:4c:e0:b2: cb:85:e8:45:e1:ec:4b:00:a1:e2:c4:4f:d7:09:f0:72:df:cf: b0:70:ad:72:60:3c:81:ef:ad:2d:62:ca:71:ac:eb:4e:07:e1: 27:12:7e:ca:3b:ec:02:98:a2:db:ce:75:1d:f2:53:23:f8:e0: b9:1c:49:e1:60:bf:30:1d:26:f9:5a:0b:69:c7:9f:3f:5a:f5: aa:b1:3e:0b:98:17:29:c1:19:f9:be:e1:02:a5:66:0b:a6:57: e9:36:ca:a8:5a:62:fe:34:39:96:4a:9b:19:09:24:c2:8c:9e: 2c:0d:66:ab:1c:b3:51:ac:9f:79:7e:fd:df:a7:39:43:a9:d2: 6c:a9:3b:32:af:d0:91:9e:4b:be:04:e8:c0:80:61:20:fc:b1: 18:98:df:73:de:ca:02:27:e2:85:66:f3:62:c9:6a:04:6b:a2: 7e:92:c2:b1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEODg3MTdGNDE4MzQ5 MDA1N0VBRDRFMjNBNkE5ODk1MjUxQUIwMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzgW/PxypHR/tsfi/CQu8xTWupkb5vxLfckRb1QFkA/aEhDtqY IRPxhZGP70691IKvQt0FeFTx0oZRJWLUXvNMtPtzw7VVU7ug+W/ibKHC2YlKcvMC je+suIf2LD74bHSPDiG4WWZZuDnl4oEPNaVjLVVwxDuwk/Y3razJwC7196XmkyYn DdPxmq2nIGPf8G+U0hnqrZMTu+XEd2H63Y100GKTdh78t8DBijf5xIm2YkJRXFlN YFaOPPCnp+u8O/ZakJsEm8w3gRR9tXNVyOugM43tSTw/09iCVv9cqYXDRpMtH/NX thzfeLe0jDd6+WEm7865OVCCK5O3S0wyc8+1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUDYhxf0GDSQBX6tTiOmqYlSUasDEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0RZaHhmMEdEU1FCWDZ0VGlPbXFZbFNVYXNERS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTiIwDQYJKoZIhvcNAQELBQADggEB ANhsCNq4mvLhi/PfKmFnBYrcIeCPoog5gzjbaBG4+6bcLv2uXu7kVSA0LJB9/Mfq 1Xb4UBIdCWHTKU9lR9QLMfa6uYwnpnZPKdObrbExrijZQOyFdMXObEzgssuF6EXh 7EsAoeLET9cJ8HLfz7BwrXJgPIHvrS1iynGs604H4ScSfso77AKYotvOdR3yUyP4 4LkcSeFgvzAdJvlaC2nHnz9a9aqxPguYFynBGfm+4QKlZgumV+k2yqhaYv40OZZK mxkJJMKMniwNZqscs1Gsn3l+/d+nOUOp0mypOzKv0JGeS74E6MCAYSD8sRiY33Pe ygIn4oVm82LJagRron6SwrE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:27 2026 by rpki-client