$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JDh-adb-egPW5Ek_YCGf7zYyRNk.roa File: JDh-adb-egPW5Ek_YCGf7zYyRNk.roa (raw, json) Hash identifier: qPL87dLdsWQIbuPo1VMHixQsEV9LkOWw0Mv1AdItIZI= Subject key identifier: 24:38:7E:69:D6:FE:7A:03:D6:E4:49:3F:60:21:9F:EF:36:32:44:D9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17A2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JDh-adb-egPW5Ek_YCGf7zYyRNk.roa Signing time: Tue 31 Mar 2026 08:04:13 +0000 ROA not before: Tue 31 Mar 2026 08:04:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6050 (0x17a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=24387E69D6FE7A03D6E4493F60219FEF363244D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:cd:f0:a5:27:98:24:9a:55:df:13:82:4d: 32:59:b1:d9:00:74:45:e7:1e:e2:6e:26:50:54:fa: 3b:14:77:f7:b7:13:b9:72:9d:0c:37:55:11:58:de: 69:e7:be:b0:84:b9:ce:3c:9f:fb:69:d7:16:2d:ff: 07:ac:6d:09:a0:08:4c:c6:3c:f6:35:3c:5d:90:96: 76:19:9d:9d:53:3d:b1:64:41:59:6e:86:68:f6:21: b3:66:ec:0b:8d:14:26:22:f9:b0:47:e3:9f:67:dd: 49:9d:2f:25:35:af:ad:59:b8:12:89:4b:27:be:8b: 34:54:d7:62:f2:54:49:ef:62:fa:29:16:f0:f4:00: 89:b1:e2:cd:3a:fd:a9:59:52:95:15:5d:c3:dd:22: 6a:5b:33:3c:93:65:26:c5:86:63:4c:a0:73:86:da: 77:e6:e1:c7:06:70:a1:96:be:e0:78:84:4a:46:01: 44:3b:a2:00:27:f1:da:9a:08:b9:58:92:04:2b:55: 6a:74:a8:fe:02:ef:e0:f5:c0:fe:fc:94:52:9f:79: ce:97:50:f7:a2:ae:39:d9:56:d0:40:9d:8a:45:f8: 62:c2:77:91:cb:1c:29:0f:cd:c0:99:51:c1:8c:95: c6:26:84:b2:5a:d3:5a:15:27:1f:4c:00:ca:19:4c: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:38:7E:69:D6:FE:7A:03:D6:E4:49:3F:60:21:9F:EF:36:32:44:D9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JDh-adb-egPW5Ek_YCGf7zYyRNk.roa sbgp-ipAddrBlock: critical IPv4: 1.66.110.0/23 Signature Algorithm: sha256WithRSAEncryption 42:05:77:57:b0:2e:42:2e:80:b2:85:fc:92:91:60:18:14:d8: 91:92:da:83:ea:41:f6:91:75:dd:b2:b0:c5:42:41:25:6d:b2: 2c:9a:4b:a5:36:10:67:92:69:4c:b3:ff:b7:a8:99:02:e2:ae: 51:c3:5c:46:11:49:50:38:5a:2f:b8:c3:9e:eb:ce:6c:32:77: a4:41:2d:3f:d0:1a:71:94:5a:1a:f8:f7:41:e6:bf:49:d1:32: 9d:2a:44:20:e8:42:e9:36:17:eb:3c:2e:26:a2:f9:df:1e:68: 55:94:7b:81:ff:b1:61:4b:25:88:70:3e:83:b7:14:d0:a7:7a: 40:b9:83:45:74:93:ef:c5:ac:27:59:01:45:c8:87:b4:c6:74: 41:63:0d:2c:d9:6e:e2:3d:00:05:3a:ee:ba:4f:fe:d8:a0:9d: 70:b1:d9:98:26:8f:f2:5b:26:18:29:9e:aa:1d:15:11:57:e6: a5:43:d0:60:00:b2:45:b5:e8:40:4b:57:ff:3f:b6:4e:07:1b: 80:92:ce:33:4e:e7:07:28:78:fb:80:9d:9d:b8:91:37:95:07: ce:3a:98:49:a0:57:a0:e1:26:3c:7f:d6:e8:ba:c0:4a:2b:6a: 0b:60:e2:94:8a:cf:39:5d:df:d1:b0:81:bc:aa:fd:27:26:f4: 20:a6:04:be -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI0Mzg3RTY5RDZGRTdB MDNENkU0NDkzRjYwMjE5RkVGMzYzMjQ0RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGos3wpSeYJJpV3xOCTTJZsdkAdEXnHuJuJlBU+jsUd/e3E7ly nQw3VRFY3mnnvrCEuc48n/tp1xYt/wesbQmgCEzGPPY1PF2QlnYZnZ1TPbFkQVlu hmj2IbNm7AuNFCYi+bBH459n3UmdLyU1r61ZuBKJSye+izRU12LyVEnvYvopFvD0 AImx4s06/alZUpUVXcPdImpbMzyTZSbFhmNMoHOG2nfm4ccGcKGWvuB4hEpGAUQ7 ogAn8dqaCLlYkgQrVWp0qP4C7+D1wP78lFKfec6XUPeirjnZVtBAnYpF+GLCd5HL HCkPzcCZUcGMlcYmhLJa01oVJx9MAMoZTGZ5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUJDh+adb+egPW5Ek/YCGf7zYyRNkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0pEaC1hZGItZWdQVzVFa19ZQ0dmN3pZeVJOay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBQm4wDQYJKoZIhvcNAQELBQADggEB AEIFd1ewLkIugLKF/JKRYBgU2JGS2oPqQfaRdd2ysMVCQSVtsiyaS6U2EGeSaUyz /7eomQLirlHDXEYRSVA4Wi+4w57rzmwyd6RBLT/QGnGUWhr490Hmv0nRMp0qRCDo Quk2F+s8Liai+d8eaFWUe4H/sWFLJYhwPoO3FNCnekC5g0V0k+/FrCdZAUXIh7TG dEFjDSzZbuI9AAU67rpP/tignXCx2Zgmj/JbJhgpnqodFRFX5qVD0GAAskW16EBL V/8/tk4HG4CSzjNO5wcoePuAnZ24kTeVB846mEmgV6DhJjx/1ui6wEoragtg4pSK zzld39Gwgbyq/Scm9CCmBL4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:57 2026 by rpki-client