$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/O12QXoV8aE_IEbn4jHoxymph84I.roa File: O12QXoV8aE_IEbn4jHoxymph84I.roa (raw, json) Hash identifier: RzYcTJxCmueXAtcDhY3T5x4yerUOle2X9OjtzQlz6Jg= Subject key identifier: 3B:5D:90:5E:85:7C:68:4F:C8:11:B9:F8:8C:7A:31:CA:6A:61:F3:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 143F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O12QXoV8aE_IEbn4jHoxymph84I.roa Signing time: Tue 31 Mar 2026 07:57:10 +0000 ROA not before: Tue 31 Mar 2026 07:57:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5183 (0x143f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3B5D905E857C684FC811B9F88C7A31CA6A61F382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:78:16:af:31:a4:7c:d1:08:9a:38:5b:5e: f9:f8:9c:03:04:19:9d:74:cf:45:b1:1c:30:85:3c: ed:c1:47:8c:5a:e1:bc:7a:dd:36:21:1b:02:e6:d2: ac:68:4f:da:b6:7c:1e:b1:c1:4a:75:e2:2f:6c:7c: 1c:61:38:63:60:62:fc:17:1e:96:13:76:5f:42:20: 55:a3:cd:b2:d1:40:21:84:dd:81:4b:84:87:0a:e4: ca:46:c4:7b:bb:59:8c:ff:2b:f4:31:81:7e:9c:b1: 7c:df:57:7a:75:88:49:ec:6c:71:ef:02:7a:31:92: c8:80:a6:37:d5:b1:99:17:15:dd:b2:47:88:11:bb: 09:4a:00:b8:06:97:0d:76:a2:48:da:51:1d:bd:e1: 9f:d7:a1:db:08:4e:fa:94:df:e4:64:42:a1:3a:1d: bf:76:fe:04:9b:05:c9:b1:0c:fe:20:29:64:9e:bb: 59:2d:1a:90:af:f1:1c:01:22:1b:35:49:d6:5e:b3: 5a:e1:72:34:5a:5f:14:f1:f1:63:e1:68:42:b3:d3: b0:a5:86:b8:f8:c9:05:9a:84:15:37:8d:4b:f7:ab: 2f:f8:fb:7b:2c:a6:10:2c:51:5d:6e:bf:6c:a6:b0: 6e:15:b6:c9:fc:52:5b:d7:ee:cd:75:5f:1c:3f:39: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:90:5E:85:7C:68:4F:C8:11:B9:F8:8C:7A:31:CA:6A:61:F3:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O12QXoV8aE_IEbn4jHoxymph84I.roa sbgp-ipAddrBlock: critical IPv4: 1.79.36.0/23 Signature Algorithm: sha256WithRSAEncryption a9:fc:4b:73:a8:09:4f:2b:18:bf:9f:8e:90:20:33:9a:41:6b: eb:b1:fd:df:80:f2:6e:48:9a:13:a5:bb:fd:d7:f1:c9:17:90: ca:7a:57:5f:f4:28:38:a5:16:96:3f:a3:d5:ae:a1:5a:02:c8: 9f:54:9d:4a:d5:de:72:eb:87:a9:d5:5a:ed:45:46:a2:aa:d1: cc:3a:62:1a:9f:33:a1:d5:30:96:c7:8a:9c:98:44:20:ed:de: af:75:ea:c2:dc:1f:d2:09:4b:b0:30:5c:05:cf:3d:11:ae:bb: 79:45:e9:cb:c1:0a:b9:71:5a:52:09:cb:99:36:d9:4b:5c:05: 51:c4:b1:00:79:6f:0b:ae:79:9f:b3:ac:a7:0b:2a:2a:d2:d3: 0e:b4:6c:c7:91:0a:57:ab:af:8e:7b:20:36:68:a0:08:fd:a8: b5:37:ec:07:79:41:69:cd:f1:a0:a6:02:f1:26:a4:19:2f:f5: ba:19:9d:a0:2a:d3:63:d3:26:b4:c2:ea:a0:1b:84:66:7a:fb: 2f:85:75:f6:15:49:3d:3b:7d:56:40:fd:02:07:af:3c:1b:a1: 30:96:d7:6b:f4:dc:8e:af:ad:54:02:30:f7:dc:ea:3a:a5:50: dd:e1:62:a5:1e:30:f5:8a:db:08:cc:fe:ae:90:34:ed:78:51: db:be:b2:81 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCNUQ5MDVFODU3QzY4 NEZDODExQjlGODhDN0EzMUNBNkE2MUYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC703gWrzGkfNEImjhbXvn4nAMEGZ10z0WxHDCFPO3BR4xa4bx6 3TYhGwLm0qxoT9q2fB6xwUp14i9sfBxhOGNgYvwXHpYTdl9CIFWjzbLRQCGE3YFL hIcK5MpGxHu7WYz/K/QxgX6csXzfV3p1iEnsbHHvAnoxksiApjfVsZkXFd2yR4gR uwlKALgGlw12okjaUR294Z/XodsITvqU3+RkQqE6Hb92/gSbBcmxDP4gKWSeu1kt GpCv8RwBIhs1SdZes1rhcjRaXxTx8WPhaEKz07Clhrj4yQWahBU3jUv3qy/4+3ss phAsUV1uv2ymsG4Vtsn8UlvX7s11Xxw/OYZRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUO12QXoV8aE/IEbn4jHoxymph84IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L08xMlFYb1Y4YUVfSUVibjRqSG94eW1waDg0SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTyQwDQYJKoZIhvcNAQELBQADggEB AKn8S3OoCU8rGL+fjpAgM5pBa+ux/d+A8m5ImhOlu/3X8ckXkMp6V1/0KDilFpY/ o9WuoVoCyJ9UnUrV3nLrh6nVWu1FRqKq0cw6YhqfM6HVMJbHipyYRCDt3q916sLc H9IJS7AwXAXPPRGuu3lF6cvBCrlxWlIJy5k22UtcBVHEsQB5bwuueZ+zrKcLKirS 0w60bMeRClerr457IDZooAj9qLU37Ad5QWnN8aCmAvEmpBkv9boZnaAq02PTJrTC 6qAbhGZ6+y+FdfYVST07fVZA/QIHrzwboTCW12v03I6vrVQCMPfc6jqlUN3hYqUe MPWK2wjM/q6QNO14Udu+soE= -----END CERTIFICATE-----Generated at Tue Apr 7 22:25:15 2026 by rpki-client