$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FEhSVxnmchyrGcuTLZjT2pV5qcs.roa File: FEhSVxnmchyrGcuTLZjT2pV5qcs.roa (raw, json) Hash identifier: 4XxQFef4jozu3/aJOU0XjEOfeuAUQQ0V5yC1+0nrb3E= Subject key identifier: 14:48:52:57:19:E6:72:1C:AB:19:CB:93:2D:98:D3:DA:95:79:A9:CB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1507 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FEhSVxnmchyrGcuTLZjT2pV5qcs.roa Signing time: Tue 31 Mar 2026 07:58:47 +0000 ROA not before: Tue 31 Mar 2026 07:58:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5383 (0x1507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1448525719E6721CAB19CB932D98D3DA9579A9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:f2:fa:fa:b5:69:40:14:29:c0:38:c0:37: cd:2b:8a:c1:b1:11:34:bd:3e:03:01:f0:8c:19:7d: 15:68:d7:1a:91:6a:38:30:9d:86:75:5d:0e:f6:7b: ec:ee:11:4e:ec:ed:dd:1e:42:a3:e1:f0:57:45:30: 94:9c:52:dc:62:ca:c9:96:61:ba:af:d5:dd:f1:da: 96:d0:3a:db:fe:fa:3a:69:94:5c:62:24:bc:23:4e: c8:14:ac:41:e5:b9:35:1f:14:e6:22:6a:61:5d:9c: 95:44:8f:80:15:2f:7f:8d:fc:cc:44:4b:ee:9e:65: d6:a6:13:db:84:60:17:92:79:47:3b:a1:c4:36:1a: 6c:9c:67:83:54:6e:01:39:0a:aa:c8:33:e1:81:85: 1c:22:ad:cb:77:df:6a:22:07:66:39:9c:ac:62:57: ca:a1:67:ba:f1:ec:13:ae:46:d9:32:64:ca:fe:7a: 63:79:8b:02:b7:5a:77:17:f6:20:1d:44:30:7e:69: 92:85:e3:e9:4f:cb:b8:a1:70:09:d4:60:a0:83:52: de:d7:71:f5:46:f6:c6:3a:c2:63:53:67:f1:e8:dc: bb:0c:9b:24:ab:18:e7:18:c4:e8:c7:4b:e6:e4:e1: a5:b3:7a:cf:f8:48:0d:3e:4e:6a:39:59:8a:51:ae: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:52:57:19:E6:72:1C:AB:19:CB:93:2D:98:D3:DA:95:79:A9:CB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FEhSVxnmchyrGcuTLZjT2pV5qcs.roa sbgp-ipAddrBlock: critical IPv4: 1.73.244.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:67:1d:0c:8f:25:f5:46:a9:84:fe:94:fc:25:e0:0f:ef:3f: ef:80:76:9e:ff:e7:5b:50:98:6b:72:56:ba:4e:1e:51:bb:c9: d5:78:66:aa:a2:74:b0:a2:3d:14:dc:34:87:4d:3f:5e:f1:da: 81:56:c5:7b:90:4f:18:ac:e4:b4:2b:5e:b1:1d:68:19:d4:4d: 04:6b:05:5a:3d:cc:6f:23:9e:3f:c4:6b:6a:df:3d:09:ac:67: 5a:d2:71:b7:36:aa:b5:5f:0f:73:68:45:94:c1:fc:36:38:6b: 4e:22:69:f6:68:af:e6:90:8e:61:54:48:85:8e:4e:56:bf:bb: 05:07:df:fc:0f:a8:a0:65:cc:c4:d5:3d:90:e5:5d:d9:da:8b: 8f:b7:a7:46:32:ea:6a:55:c5:21:d9:aa:1e:f5:bd:68:9a:83: e5:73:cc:b8:3b:91:fb:af:c6:be:c4:24:41:04:9c:4a:84:e7: d4:f2:50:6f:e2:39:b8:ec:e4:25:90:a4:c6:82:f3:0c:9f:9c: 89:05:15:e0:c3:f3:30:b9:1f:04:dd:74:0e:54:d4:ce:7c:a2: 2e:02:05:af:7c:0a:3f:0e:d8:ff:72:41:87:06:57:17:82:3b: a2:91:d7:da:00:5a:3f:58:83:c9:f3:e7:37:ff:13:a8:86:89: 76:04:ff:b5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0NDg1MjU3MTlFNjcy MUNBQjE5Q0I5MzJEOThEM0RBOTU3OUE5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0WvL6+rVpQBQpwDjAN80risGxETS9PgMB8IwZfRVo1xqRajgw nYZ1XQ72e+zuEU7s7d0eQqPh8FdFMJScUtxiysmWYbqv1d3x2pbQOtv++jpplFxi JLwjTsgUrEHluTUfFOYiamFdnJVEj4AVL3+N/MxES+6eZdamE9uEYBeSeUc7ocQ2 GmycZ4NUbgE5CqrIM+GBhRwirct332oiB2Y5nKxiV8qhZ7rx7BOuRtkyZMr+emN5 iwK3WncX9iAdRDB+aZKF4+lPy7ihcAnUYKCDUt7XcfVG9sY6wmNTZ/Ho3LsMmySr GOcYxOjHS+bk4aWzes/4SA0+Tmo5WYpRrjetAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUFEhSVxnmchyrGcuTLZjT2pV5qcswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0ZFaFNWeG5tY2h5ckdjdVRMWmpUMnBWNXFjcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBSfQwDQYJKoZIhvcNAQELBQADggEB AD5nHQyPJfVGqYT+lPwl4A/vP++Adp7/51tQmGtyVrpOHlG7ydV4ZqqidLCiPRTc NIdNP17x2oFWxXuQTxis5LQrXrEdaBnUTQRrBVo9zG8jnj/Ea2rfPQmsZ1rScbc2 qrVfD3NoRZTB/DY4a04iafZor+aQjmFUSIWOTla/uwUH3/wPqKBlzMTVPZDlXdna i4+3p0Yy6mpVxSHZqh71vWiag+VzzLg7kfuvxr7EJEEEnEqE59TyUG/iObjs5CWQ pMaC8wyfnIkFFeDD8zC5HwTddA5U1M58oi4CBa98Cj8O2P9yQYcGVxeCO6KR19oA Wj9Yg8nz5zf/E6iGiXYE/7U= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:55 2026 by rpki-client