$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HX5oS9ouRCbOyW7v9QDk9eXSxAQ.roa File: HX5oS9ouRCbOyW7v9QDk9eXSxAQ.roa (raw, json) Hash identifier: mruzmvhQqopA/vlXwF8S4KJox092iaQ9ZNx4RZmX3tY= Subject key identifier: 1D:7E:68:4B:DA:2E:44:26:CE:C9:6E:EF:F5:00:E4:F5:E5:D2:C4:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17B0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HX5oS9ouRCbOyW7v9QDk9eXSxAQ.roa Signing time: Tue 31 Mar 2026 08:04:21 +0000 ROA not before: Tue 31 Mar 2026 08:04:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6064 (0x17b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1D7E684BDA2E4426CEC96EEFF500E4F5E5D2C404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:50:2f:7b:43:33:f2:c1:a2:f0:f6:24:09: d3:2e:f1:48:e8:7a:8b:03:a5:3c:06:46:3b:3e:09: 8c:a0:77:14:64:63:6d:59:4d:28:8a:76:1d:31:ee: 51:d1:61:4b:40:61:f8:20:f9:80:a4:e6:cc:4a:de: 9f:70:fe:46:d6:ad:09:bb:0f:12:d7:d9:28:c2:d9: 14:6b:d6:39:a4:28:55:73:23:10:da:9d:74:e3:79: 06:5f:1a:ec:7f:53:58:ac:2b:86:d8:09:2f:1b:c6: 06:f3:ad:86:f9:f2:7b:89:75:f7:18:6f:a8:a1:5b: 69:90:fe:10:9a:8b:f0:66:7d:9e:74:8c:9f:f2:e3: 91:d6:d7:5b:f0:03:d1:e9:d9:63:16:2b:0e:c1:c1: a7:da:87:9a:8c:75:9e:a1:81:92:44:ca:e2:6b:80: 00:cc:b7:b7:80:3d:33:10:69:eb:3b:14:4c:e9:4a: e0:8e:bb:40:25:1e:d4:2e:37:e4:c3:11:f5:f7:85: f1:6c:32:6e:7c:ec:39:b7:97:a3:2b:b3:30:08:8f: 9c:c6:6c:69:39:cf:f5:37:95:3e:09:91:af:ad:71: fe:f7:26:3d:dd:9c:74:04:27:0e:bc:98:c1:48:ae: 32:ac:df:59:65:e3:fc:a8:99:30:3c:a8:0c:9a:40: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:68:4B:DA:2E:44:26:CE:C9:6E:EF:F5:00:E4:F5:E5:D2:C4:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HX5oS9ouRCbOyW7v9QDk9eXSxAQ.roa sbgp-ipAddrBlock: critical IPv4: 220.159.238.0/24 Signature Algorithm: sha256WithRSAEncryption 21:be:d0:01:aa:e2:54:82:d6:eb:d0:18:a2:07:49:2a:89:d7: d2:06:73:0c:21:e7:11:0e:28:c9:2a:fa:e3:ac:da:7b:f3:c5: c2:ba:7d:39:6b:45:61:68:ee:26:fa:3f:30:18:4c:31:cf:70: 66:c7:08:38:2c:9d:4a:1f:f3:49:84:74:ff:48:ce:b8:69:57: df:09:12:7a:52:68:b0:fa:44:6e:47:f1:2c:77:2b:8e:3a:23: 9a:f9:d9:df:fc:bb:c0:e7:ce:f0:f8:3a:17:82:52:0b:61:59: 8a:77:52:a4:7d:bd:1b:42:bd:34:5d:1a:84:48:30:65:69:9a: eb:66:74:71:43:1e:8a:ed:21:cf:ac:51:3f:5a:45:da:1b:60: e2:c2:44:fa:03:b1:ff:88:4c:74:18:55:6e:2b:ba:30:52:70: c9:22:b8:c6:c5:f7:46:45:9c:09:7c:8b:2c:6a:f5:83:8d:a3: be:5c:5a:66:77:c1:79:dc:1b:d7:6b:f9:18:b0:dc:3f:bf:ee: b9:bf:9a:3d:6a:68:35:da:6a:06:df:d1:23:b9:40:d9:22:64: 12:0a:db:8f:32:03:2c:89:cc:f8:6b:15:0e:cb:cf:c7:3c:08: 59:8a:6d:3e:bf:67:71:0c:78:f6:58:e2:4d:89:d3:b4:06:87: d0:33:d9:0c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFEN0U2ODRCREEyRTQ0 MjZDRUM5NkVFRkY1MDBFNEY1RTVEMkM0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiJFAve0Mz8sGi8PYkCdMu8UjoeosDpTwGRjs+CYygdxRkY21Z TSiKdh0x7lHRYUtAYfgg+YCk5sxK3p9w/kbWrQm7DxLX2SjC2RRr1jmkKFVzIxDa nXTjeQZfGux/U1isK4bYCS8bxgbzrYb58nuJdfcYb6ihW2mQ/hCai/BmfZ50jJ/y 45HW11vwA9Hp2WMWKw7Bwafah5qMdZ6hgZJEyuJrgADMt7eAPTMQaes7FEzpSuCO u0AlHtQuN+TDEfX3hfFsMm587Dm3l6MrszAIj5zGbGk5z/U3lT4Jka+tcf73Jj3d nHQEJw68mMFIrjKs31ll4/yomTA8qAyaQLXLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHX5oS9ouRCbOyW7v9QDk9eXSxAQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hYNW9TOW91UkNiT3lXN3Y5UURrOWVYU3hBUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADcn+4wDQYJKoZIhvcNAQELBQADggEB ACG+0AGq4lSC1uvQGKIHSSqJ19IGcwwh5xEOKMkq+uOs2nvzxcK6fTlrRWFo7ib6 PzAYTDHPcGbHCDgsnUof80mEdP9IzrhpV98JEnpSaLD6RG5H8Sx3K446I5r52d/8 u8DnzvD4OheCUgthWYp3UqR9vRtCvTRdGoRIMGVpmutmdHFDHortIc+sUT9aRdob YOLCRPoDsf+ITHQYVW4rujBScMkiuMbF90ZFnAl8iyxq9YONo75cWmZ3wXncG9dr +Riw3D+/7rm/mj1qaDXaagbf0SO5QNkiZBIK248yAyyJzPhrFQ7Lz8c8CFmKbT6/ Z3EMePZY4k2J07QGh9Az2Qw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:42 2026 by rpki-client