$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PsAOl0FlWdS8dqTTXGdnRMw_X0w.roa File: PsAOl0FlWdS8dqTTXGdnRMw_X0w.roa (raw, json) Hash identifier: znvhQMbMruA5iqdHkaSf2x5JolifRsfJV/pyujugvpo= Subject key identifier: 3E:C0:0E:97:41:65:59:D4:BC:76:A4:D3:5C:67:67:44:CC:3F:5F:4C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14CC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PsAOl0FlWdS8dqTTXGdnRMw_X0w.roa Signing time: Tue 31 Mar 2026 07:58:18 +0000 ROA not before: Tue 31 Mar 2026 07:58:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5324 (0x14cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3EC00E97416559D4BC76A4D35C676744CC3F5F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:e5:25:44:79:c1:99:24:9e:50:8d:97:5e: 2d:4c:9d:bf:e6:62:e5:5f:6b:00:fc:cb:c9:67:11: f0:85:e5:e3:71:e6:71:d8:64:3b:07:94:29:36:b7: 7e:e6:62:04:f1:37:5d:64:d0:1f:fb:0d:1e:61:23: c3:8c:6a:a4:2e:8f:02:ac:f1:86:97:9d:a3:66:49: b8:93:bf:76:51:29:f7:23:50:3e:dc:d5:74:34:5a: 44:fd:cb:81:e8:81:c6:91:83:18:20:5d:17:67:5f: 3e:05:3b:ad:bf:e1:56:26:a2:1e:72:69:c3:74:0e: 47:80:19:68:e5:fe:b0:0c:bd:c5:f6:91:b3:ec:d1: 73:02:9e:0f:24:e0:42:7c:36:5a:6d:02:e1:7d:93: 53:d4:d1:e8:70:a8:d1:d0:af:b9:f7:3c:ec:8a:0a: 46:be:cb:ab:ca:34:27:f8:13:05:11:b2:51:ec:ef: 93:43:33:97:cd:8a:d7:78:33:4b:31:29:52:76:dc: 95:a1:8c:df:28:fc:22:07:b1:85:d3:fa:35:76:1a: 89:55:df:81:a9:b9:95:20:3f:7c:93:93:38:7c:2d: 0c:55:bd:9e:77:33:94:5a:26:c6:49:a8:36:d0:82: 79:a1:f8:e4:b1:f9:a8:ba:12:ed:5c:6c:77:74:67: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C0:0E:97:41:65:59:D4:BC:76:A4:D3:5C:67:67:44:CC:3F:5F:4C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PsAOl0FlWdS8dqTTXGdnRMw_X0w.roa sbgp-ipAddrBlock: critical IPv4: 1.75.212.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:b7:5a:9d:7a:f6:58:79:3a:e3:fa:7d:cb:cf:2e:b4:df:0a: 6e:25:81:3f:72:75:b2:e8:2b:1a:64:ef:f1:3f:69:3c:ca:9e: 23:c8:cd:16:f7:a3:e9:68:fd:00:8d:38:fd:eb:10:eb:bc:cf: c3:fb:82:e8:f6:8f:23:78:39:be:42:9c:60:48:b7:70:f6:b3: ee:1e:ed:08:cb:cd:1e:de:05:03:17:4f:5d:84:21:1f:bb:3a: 78:c7:2f:44:74:3b:ce:80:d7:7a:97:b3:bc:ea:25:17:d0:8f: fa:b4:fc:6c:1d:c0:8e:d5:47:13:5a:b0:3b:46:f5:b0:5e:6b: d1:49:2f:3b:fb:56:cb:0d:b7:f5:44:02:89:ca:64:fd:93:0b: 28:3b:86:3b:e3:28:40:b4:53:1a:f0:c8:49:13:2e:32:7b:9d: d9:8e:2a:e8:b9:7c:b1:57:57:30:01:73:63:f1:6c:96:98:55: fb:37:9e:6f:08:cb:b3:ed:29:fa:96:c8:e2:be:fc:ab:b3:ae: 56:bb:65:23:be:a8:5b:d1:02:31:1a:94:80:a1:41:b2:56:88: ff:17:74:a1:9b:de:95:02:1d:02:92:82:c8:ec:25:86:44:bb: 55:d0:41:c5:04:8c:a6:c0:2d:b4:c2:ae:c9:28:3d:e0:be:a1: d8:0b:8a:f4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNFQzAwRTk3NDE2NTU5 RDRCQzc2QTREMzVDNjc2NzQ0Q0MzRjVGNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx4uUlRHnBmSSeUI2XXi1Mnb/mYuVfawD8y8lnEfCF5eNx5nHY ZDsHlCk2t37mYgTxN11k0B/7DR5hI8OMaqQujwKs8YaXnaNmSbiTv3ZRKfcjUD7c 1XQ0WkT9y4HogcaRgxggXRdnXz4FO62/4VYmoh5yacN0DkeAGWjl/rAMvcX2kbPs 0XMCng8k4EJ8NlptAuF9k1PU0ehwqNHQr7n3POyKCka+y6vKNCf4EwURslHs75ND M5fNitd4M0sxKVJ23JWhjN8o/CIHsYXT+jV2GolV34GpuZUgP3yTkzh8LQxVvZ53 M5RaJsZJqDbQgnmh+OSx+ai6Eu1cbHd0Z8CRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUPsAOl0FlWdS8dqTTXGdnRMw/X0wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1BzQU9sMEZsV2RTOGRxVFRYR2RuUk13X1gwdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBS9QwDQYJKoZIhvcNAQELBQADggEB ADq3Wp169lh5OuP6fcvPLrTfCm4lgT9ydbLoKxpk7/E/aTzKniPIzRb3o+lo/QCN OP3rEOu8z8P7guj2jyN4Ob5CnGBIt3D2s+4e7QjLzR7eBQMXT12EIR+7OnjHL0R0 O86A13qXs7zqJRfQj/q0/GwdwI7VRxNasDtG9bBea9FJLzv7VssNt/VEAonKZP2T Cyg7hjvjKEC0UxrwyEkTLjJ7ndmOKui5fLFXVzABc2PxbJaYVfs3nm8Iy7PtKfqW yOK+/Kuzrla7ZSO+qFvRAjEalIChQbJWiP8XdKGb3pUCHQKSgsjsJYZEu1XQQcUE jKbALbTCrskoPeC+odgLivQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:36 2026 by rpki-client