$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DZpyN54pQGDZlSHMSm5-2FhE3fY.roa File: DZpyN54pQGDZlSHMSm5-2FhE3fY.roa (raw, json) Hash identifier: mH19+VEvfG/UfmldxgIAbzdpQkqI62PzFRT6EWjNgKI= Subject key identifier: 0D:9A:72:37:9E:29:40:60:D9:95:21:CC:4A:6E:7E:D8:58:44:DD:F6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 150E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DZpyN54pQGDZlSHMSm5-2FhE3fY.roa Signing time: Tue 31 Mar 2026 07:58:50 +0000 ROA not before: Tue 31 Mar 2026 07:58:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5390 (0x150e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0D9A72379E294060D99521CC4A6E7ED85844DDF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:9b:58:bf:27:e8:f5:90:96:b6:18:c6:36: af:9a:59:08:6f:e7:3d:3c:f1:e3:09:e1:9a:e2:6f: 90:c2:0a:78:5a:5c:50:f9:00:af:66:0d:fa:fc:ae: dd:17:e8:65:95:65:e2:85:7e:ab:ff:6e:db:0d:1c: be:8e:2f:11:1f:ae:e4:31:8c:3d:76:b4:ad:36:d1: 62:7e:e9:d6:57:49:8d:3a:3b:66:b3:8a:25:58:2d: df:41:56:12:a1:fd:41:72:6a:fd:d6:45:d5:f7:df: 8c:6b:ab:ac:c9:5e:5c:b4:ec:f0:d5:e0:db:ee:17: 50:88:1c:d2:06:3b:f6:24:00:23:ec:0a:53:41:74: 09:76:2f:64:d2:1c:07:6b:bf:86:b8:63:46:68:93: 51:cc:64:6f:89:e3:ba:76:bf:70:4e:99:d6:02:58: b5:90:ed:b4:78:f9:16:94:91:db:12:b2:32:0e:f8: a9:64:96:87:ef:66:32:35:8a:36:af:40:9f:1a:fc: 78:f1:8e:49:b5:63:55:80:9a:ad:4d:d7:38:20:7b: 73:f8:e0:1b:87:4b:a8:62:0f:08:7e:b2:16:57:a4: 6e:85:bd:2c:4f:af:6f:da:51:71:50:af:9c:96:a2: 0b:14:86:b4:85:f9:0b:ea:a9:9a:f0:6d:91:b2:98: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9A:72:37:9E:29:40:60:D9:95:21:CC:4A:6E:7E:D8:58:44:DD:F6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DZpyN54pQGDZlSHMSm5-2FhE3fY.roa sbgp-ipAddrBlock: critical IPv4: 220.210.108.0/22 Signature Algorithm: sha256WithRSAEncryption 96:29:7d:24:ca:27:d9:6e:0d:1f:e7:32:14:c1:c7:2b:c8:02: 30:e8:9e:cf:15:86:0b:bb:37:5d:f6:0d:62:ef:28:62:69:87: 10:78:b4:e3:3c:fb:78:c6:f0:07:f9:c6:78:e2:73:63:95:9b: 21:db:c0:e9:a4:88:9a:0c:4d:fb:b3:47:e9:8a:29:d0:b0:09: 11:fc:a0:27:27:75:89:e1:68:6e:1d:dc:3a:e8:45:30:33:ea: 9a:2b:3e:14:c8:38:a2:c5:1c:81:7c:49:38:e6:ab:bb:cc:73: 0e:fe:f4:ca:b6:1c:bd:16:94:f6:55:2c:40:c2:32:d8:76:fa: 95:3a:32:03:2c:e2:b5:1d:25:6c:d3:aa:55:69:1e:a0:4d:89: f3:79:e5:d7:0a:83:e4:90:41:0b:f2:c3:01:ce:a3:30:11:d1: 5b:c4:22:9f:a8:08:81:d7:91:45:2a:89:da:71:6e:d5:b7:78: c7:1c:a2:c6:63:42:d6:c7:b1:66:9e:a0:58:65:f7:e2:51:6d: 3d:33:5e:68:43:a6:a9:d7:d6:bc:a5:5d:c6:ba:5b:4c:32:70: 54:98:c6:d8:d5:00:2b:5e:cf:c8:0f:29:ad:88:aa:6d:5d:00: 7d:c2:c6:5f:50:75:a6:bf:37:e2:40:18:a5:19:7f:e2:d0:15: 15:4c:57:3f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEOUE3MjM3OUUyOTQw NjBEOTk1MjFDQzRBNkU3RUQ4NTg0NERERjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlk5tYvyfo9ZCWthjGNq+aWQhv5z088eMJ4Zrib5DCCnhaXFD5 AK9mDfr8rt0X6GWVZeKFfqv/btsNHL6OLxEfruQxjD12tK020WJ+6dZXSY06O2az iiVYLd9BVhKh/UFyav3WRdX334xrq6zJXly07PDV4NvuF1CIHNIGO/YkACPsClNB dAl2L2TSHAdrv4a4Y0Zok1HMZG+J47p2v3BOmdYCWLWQ7bR4+RaUkdsSsjIO+Klk lofvZjI1ijavQJ8a/Hjxjkm1Y1WAmq1N1zgge3P44BuHS6hiDwh+shZXpG6FvSxP r2/aUXFQr5yWogsUhrSF+QvqqZrwbZGymDNfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUDZpyN54pQGDZlSHMSm5+2FhE3fYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0RacHlONTRwUUdEWmxTSE1TbTUtMkZoRTNmWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc0mwwDQYJKoZIhvcNAQELBQADggEB AJYpfSTKJ9luDR/nMhTBxyvIAjDons8Vhgu7N132DWLvKGJphxB4tOM8+3jG8Af5 xnjic2OVmyHbwOmkiJoMTfuzR+mKKdCwCRH8oCcndYnhaG4d3DroRTAz6porPhTI OKLFHIF8STjmq7vMcw7+9Mq2HL0WlPZVLEDCMth2+pU6MgMs4rUdJWzTqlVpHqBN ifN55dcKg+SQQQvywwHOozAR0VvEIp+oCIHXkUUqidpxbtW3eMccosZjQtbHsWae oFhl9+JRbT0zXmhDpqnX1rylXca6W0wycFSYxtjVACtez8gPKa2Iqm1dAH3Cxl9Q daa/N+JAGKUZf+LQFRVMVz8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:00 2026 by rpki-client