$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FxcjqdeFW_ThSxxk0s9kOrhVy8w.roa File: FxcjqdeFW_ThSxxk0s9kOrhVy8w.roa (raw, json) Hash identifier: 54Xh+/wnxsvX8n6ycLzivEJ2+3KdvW0B8EwCTIEiosw= Subject key identifier: 17:17:23:A9:D7:85:5B:F4:E1:4B:1C:64:D2:CF:64:3A:B8:55:CB:CC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1566 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FxcjqdeFW_ThSxxk0s9kOrhVy8w.roa Signing time: Tue 31 Mar 2026 07:59:35 +0000 ROA not before: Tue 31 Mar 2026 07:59:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5478 (0x1566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=171723A9D7855BF4E14B1C64D2CF643AB855CBCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:71:13:2c:61:64:c7:02:4f:1b:11:2d:82: a5:ec:b4:6f:44:26:b0:ea:75:df:36:93:68:75:db: fb:7d:6e:e8:54:0c:78:49:bd:57:21:8a:ad:82:c5: b4:f3:42:08:0d:93:ca:ac:ba:3b:11:ce:dd:a9:70: 85:14:29:17:bc:51:fa:19:06:86:2f:ed:4f:bd:47: 82:a6:24:2d:61:2b:46:61:9a:c5:9b:c3:ea:e8:85: 48:2b:f2:6d:61:cb:a1:7d:8b:18:64:75:37:bf:7e: 7b:8c:3f:74:47:21:30:ae:da:34:a4:20:f6:55:ce: 1d:f7:49:20:60:27:73:ec:8b:72:5b:88:e9:93:d8: 77:eb:84:ac:0e:7b:5f:f8:f0:65:e8:2c:6a:dc:b4: 43:c2:3f:da:d1:e5:70:aa:bf:fa:a4:37:8c:b7:64: 2f:51:26:14:14:d8:b8:09:fe:f6:13:0f:cf:4e:96: cb:de:b9:e4:64:c6:fe:5a:d6:2d:b4:90:ca:b2:9a: 71:11:c9:e8:59:34:8a:57:d7:eb:95:bf:14:5d:b3: 80:77:13:13:c2:ed:68:01:37:54:5d:90:66:82:0a: 55:e5:b2:ac:be:77:02:6c:b0:30:7b:80:e3:52:e3: 64:8e:e4:82:56:7f:2a:34:4c:ee:78:21:5c:99:b7: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:23:A9:D7:85:5B:F4:E1:4B:1C:64:D2:CF:64:3A:B8:55:CB:CC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FxcjqdeFW_ThSxxk0s9kOrhVy8w.roa sbgp-ipAddrBlock: critical IPv4: 1.72.10.0/23 Signature Algorithm: sha256WithRSAEncryption 18:d6:a9:24:c7:1e:ad:cb:35:2e:63:3c:c3:1c:a7:d2:b3:24: e4:e2:a1:e4:38:51:ea:cd:e7:6e:14:63:19:e6:6b:fa:1a:b8: 23:e3:75:fd:ce:f8:c8:ce:af:6b:17:82:8c:1a:0d:a7:4a:34: 36:35:8c:34:14:3a:18:20:17:ee:b7:f6:c7:cc:c7:c7:9d:24: 13:7c:00:7e:16:f1:35:b3:d6:6a:1d:f1:7d:d3:6f:9d:42:f1: c7:af:32:d5:69:1b:88:d9:6b:7b:9f:39:25:6e:01:7f:ca:33: 5d:f0:88:ca:f3:bb:4a:25:4d:67:2a:2e:0d:cf:82:76:14:0e: 58:5e:e7:c2:d5:c5:c3:2a:64:58:e4:6d:35:a1:d9:bc:33:94: 2a:1a:f6:13:c2:f9:e3:3b:54:1a:40:39:88:96:70:78:9b:1f: 78:35:05:f7:34:80:2c:b3:63:c6:fe:25:7a:d5:3c:dc:25:86: 01:d0:d7:f1:ba:cd:75:e3:08:dc:6b:74:c9:38:f5:c7:38:bc: a7:1f:52:c3:c3:5a:8a:9b:00:d5:6a:cc:48:10:64:6e:d8:1d: 48:0f:4b:6f:f0:d5:5a:98:7d:4e:8a:c9:76:4f:c8:ba:67:e8: b8:82:0a:a9:f8:56:f6:1f:12:94:83:21:a1:a1:ce:94:a5:d5: e9:b0:d8:ab -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3MTcyM0E5RDc4NTVC RjRFMTRCMUM2NEQyQ0Y2NDNBQjg1NUNCQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdtnETLGFkxwJPGxEtgqXstG9EJrDqdd82k2h12/t9buhUDHhJ vVchiq2CxbTzQggNk8qsujsRzt2pcIUUKRe8UfoZBoYv7U+9R4KmJC1hK0ZhmsWb w+rohUgr8m1hy6F9ixhkdTe/fnuMP3RHITCu2jSkIPZVzh33SSBgJ3Psi3JbiOmT 2HfrhKwOe1/48GXoLGrctEPCP9rR5XCqv/qkN4y3ZC9RJhQU2LgJ/vYTD89Olsve ueRkxv5a1i20kMqymnERyehZNIpX1+uVvxRds4B3ExPC7WgBN1RdkGaCClXlsqy+ dwJssDB7gONS42SO5IJWfyo0TO54IVyZt2dHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUFxcjqdeFW/ThSxxk0s9kOrhVy8wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0Z4Y2pxZGVGV19UaFN4eGswczlrT3JoVnk4dy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBSAowDQYJKoZIhvcNAQELBQADggEB ABjWqSTHHq3LNS5jPMMcp9KzJOTioeQ4UerN524UYxnma/oauCPjdf3O+MjOr2sX gowaDadKNDY1jDQUOhggF+639sfMx8edJBN8AH4W8TWz1mod8X3Tb51C8cevMtVp G4jZa3ufOSVuAX/KM13wiMrzu0olTWcqLg3PgnYUDlhe58LVxcMqZFjkbTWh2bwz lCoa9hPC+eM7VBpAOYiWcHibH3g1Bfc0gCyzY8b+JXrVPNwlhgHQ1/G6zXXjCNxr dMk49cc4vKcfUsPDWoqbANVqzEgQZG7YHUgPS2/w1VqYfU6KyXZPyLpn6LiCCqn4 VvYfEpSDIaGhzpSl1emw2Ks= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:14 2026 by rpki-client