$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OxLnfxJOiuM96YiHG_6Mc9BzQEU.roa File: OxLnfxJOiuM96YiHG_6Mc9BzQEU.roa (raw, json) Hash identifier: ikVoGQQl7640tIl9shf++WMBAVpJoHOn7elWpiN1W2w= Subject key identifier: 3B:12:E7:7F:12:4E:8A:E3:3D:E9:88:87:1B:FE:8C:73:D0:73:40:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1571 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OxLnfxJOiuM96YiHG_6Mc9BzQEU.roa Signing time: Tue 31 Mar 2026 07:59:39 +0000 ROA not before: Tue 31 Mar 2026 07:59:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5489 (0x1571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3B12E77F124E8AE33DE988871BFE8C73D0734045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:d8:cc:77:a0:99:d1:52:a8:3f:d9:ff:b7: 62:7e:83:19:4b:b9:49:ea:c3:1d:9e:6b:63:bf:05: 55:29:de:e2:f4:9a:62:73:7b:2c:04:94:fc:be:0e: da:9d:1e:95:80:03:b3:d8:5f:3e:b5:41:45:e0:44: 4c:91:1c:de:89:0b:a6:ed:76:0a:75:e3:f4:b1:9e: 3b:f3:49:4c:68:d2:70:8a:2c:eb:d4:21:e9:24:1a: a8:e5:ad:56:14:52:62:41:6a:bf:37:9e:1f:d9:09: 99:8f:e5:38:57:f2:87:79:e4:0e:34:b4:6a:1e:86: 92:e4:dd:7e:1c:09:e0:ad:4d:11:1b:29:f7:bb:d3: 60:51:0a:a0:fd:1e:f0:08:6a:5d:4d:86:56:5b:47: be:79:aa:94:5b:f3:4d:4f:47:9e:24:b6:90:46:71: e3:25:7e:f0:88:3b:32:10:2e:9c:1d:32:86:ad:6b: 3c:91:2f:fe:ca:6f:5b:8a:da:fc:f5:34:5f:1e:e3: 4f:a4:16:57:c2:e7:6f:94:73:29:ce:58:d3:dc:41: 6e:bd:25:31:6b:4d:6f:fa:c9:5e:38:a5:8f:a8:87: 8d:6e:b7:64:d2:81:ca:3f:de:21:56:0e:1f:b5:f4: 15:99:2c:37:39:17:dd:5e:c2:3f:5b:d8:97:20:fd: 3f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:E7:7F:12:4E:8A:E3:3D:E9:88:87:1B:FE:8C:73:D0:73:40:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OxLnfxJOiuM96YiHG_6Mc9BzQEU.roa sbgp-ipAddrBlock: critical IPv4: 1.76.8.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:90:d2:53:08:ee:f8:c0:19:20:b5:58:30:5d:f1:01:4c:bb: a8:a8:a2:a0:26:d2:88:5d:f3:35:fa:30:45:cd:cf:e7:a2:97: dd:0c:4c:78:ad:e0:2e:69:14:51:dc:19:e9:58:de:75:a0:5c: f4:4a:07:96:47:3f:12:80:fb:db:bc:d1:c7:15:a2:f7:37:32: 9f:73:5e:8b:eb:51:79:69:b2:a1:20:b4:34:62:59:3f:13:6d: 89:b7:15:75:d6:59:0a:3d:36:51:0d:af:ed:07:bb:c2:8c:1e: c5:df:fa:7d:75:83:79:7e:39:b6:0f:bf:e2:b0:f0:ae:36:5d: e6:66:c1:17:7e:8f:93:26:c9:28:ce:b6:ce:34:e4:78:e6:ce: ae:34:93:ea:2a:62:64:7a:0c:f8:fa:e8:52:c5:56:a6:c0:25: f5:0c:e4:d2:b0:1d:f0:13:47:a5:9c:63:b1:12:df:2f:5b:ef: d9:be:b0:5c:48:6f:b0:8c:e7:c2:7d:a8:98:75:45:69:49:d2: c2:f7:72:5a:ef:73:82:e2:c4:bd:20:fb:c5:f0:fd:16:28:ab: c8:8f:a4:d9:81:e4:1e:af:6e:dc:7c:b1:a6:18:f0:98:63:12: 48:f1:c7:1a:9f:b5:3e:39:bf:68:7b:d7:f9:6e:5b:04:02:90: 81:17:40:31 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCMTJFNzdGMTI0RThB RTMzREU5ODg4NzFCRkU4QzczRDA3MzQwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF/NjMd6CZ0VKoP9n/t2J+gxlLuUnqwx2ea2O/BVUp3uL0mmJz eywElPy+DtqdHpWAA7PYXz61QUXgREyRHN6JC6btdgp14/SxnjvzSUxo0nCKLOvU IekkGqjlrVYUUmJBar83nh/ZCZmP5ThX8od55A40tGoehpLk3X4cCeCtTREbKfe7 02BRCqD9HvAIal1NhlZbR755qpRb801PR54ktpBGceMlfvCIOzIQLpwdMoatazyR L/7Kb1uK2vz1NF8e40+kFlfC52+UcynOWNPcQW69JTFrTW/6yV44pY+oh41ut2TS gco/3iFWDh+19BWZLDc5F91ewj9b2Jcg/T+JAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOxLnfxJOiuM96YiHG/6Mc9BzQEUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L094TG5meEpPaXVNOTZZaUhHXzZNYzlCelFFVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBTAgwDQYJKoZIhvcNAQELBQADggEB AFuQ0lMI7vjAGSC1WDBd8QFMu6iooqAm0ohd8zX6MEXNz+eil90MTHit4C5pFFHc GelY3nWgXPRKB5ZHPxKA+9u80ccVovc3Mp9zXovrUXlpsqEgtDRiWT8TbYm3FXXW WQo9NlENr+0Hu8KMHsXf+n11g3l+ObYPv+Kw8K42XeZmwRd+j5MmySjOts405Hjm zq40k+oqYmR6DPj66FLFVqbAJfUM5NKwHfATR6WcY7ES3y9b79m+sFxIb7CM58J9 qJh1RWlJ0sL3clrvc4LixL0g+8Xw/RYoq8iPpNmB5B6vbtx8saYY8JhjEkjxxxqf tT45v2h71/luWwQCkIEXQDE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:04 2026 by rpki-client