$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SJRBmXNAOib9ylxg_570giQEmYY.roa File: SJRBmXNAOib9ylxg_570giQEmYY.roa (raw, json) Hash identifier: AKtd0uIcpMlAMSy+3XEwsOZXpYdbqBih6N4gA/6o2wY= Subject key identifier: 48:94:41:99:73:40:3A:26:FD:CA:5C:60:FF:9E:F4:82:24:04:99:86 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1541 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SJRBmXNAOib9ylxg_570giQEmYY.roa Signing time: Tue 31 Mar 2026 07:59:16 +0000 ROA not before: Tue 31 Mar 2026 07:59:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5441 (0x1541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4894419973403A26FDCA5C60FF9EF48224049986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:27:43:36:d0:65:aa:f6:72:a2:9e:03:cd: 4c:ef:99:4b:65:39:65:39:da:75:9e:86:0e:a8:67: 9b:68:28:31:56:e9:80:11:ed:fd:c6:d7:af:c6:4d: 98:d5:7e:a9:52:64:87:c0:2e:f4:bc:3c:f3:9b:7c: 1d:78:08:2a:41:14:c4:75:fa:e8:d5:fb:53:39:3c: 2a:71:76:1b:4d:d4:ff:6b:d7:50:9a:2d:aa:1c:98: 84:2c:a6:31:97:2a:38:68:6d:da:1c:52:9d:0a:18: e7:3a:0b:bf:4e:7b:31:c1:9e:1a:03:aa:42:20:ef: 99:31:ae:54:0b:9f:fb:f4:1f:ab:e6:d9:f7:87:18: 5c:c7:f7:ab:f9:cd:64:01:53:37:05:04:13:32:d9: c5:c3:6d:89:6e:17:d5:54:56:0d:8f:5b:92:cd:9b: b6:a3:40:50:b7:b0:a1:88:f5:e6:72:ef:ce:19:0a: 8d:79:a4:bb:a2:e9:8a:a2:f3:c4:96:19:60:69:2e: d8:72:dc:a2:24:80:90:7c:e5:b8:24:b2:b9:78:ed: 67:21:08:93:d1:89:b1:27:f6:9c:20:03:db:a1:86: 63:11:04:b1:ac:96:e6:67:6c:8d:31:dd:0e:9c:50: f2:04:62:72:c9:07:a9:e7:98:14:95:21:6c:21:c4: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:41:99:73:40:3A:26:FD:CA:5C:60:FF:9E:F4:82:24:04:99:86 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SJRBmXNAOib9ylxg_570giQEmYY.roa sbgp-ipAddrBlock: critical IPv4: 1.79.160.0/21 Signature Algorithm: sha256WithRSAEncryption 22:62:68:bc:ea:28:c4:02:79:bc:46:22:21:00:32:cf:dd:ec: e6:7e:fd:e8:35:21:f2:44:ae:30:1f:51:86:c4:e1:a7:1d:e1: 90:17:5f:c4:01:48:9a:71:0d:fd:27:4a:50:6e:e0:3d:57:f9: 72:24:a7:44:4f:af:45:5d:f8:5f:48:34:c4:1b:bc:ff:1d:7a: f9:b6:ef:e6:3e:11:af:89:97:e5:03:05:54:a7:b2:95:20:be: a9:fc:0f:a0:4f:0b:fa:d9:4f:7e:40:4b:fe:73:bd:a8:aa:42: 71:f3:c6:17:ab:aa:c0:e1:3c:70:f0:36:4d:b2:21:5c:dc:ab: 60:9f:d0:9f:4f:c9:8f:3a:0b:e3:56:b5:2d:9f:d4:9e:dd:87: 50:7c:3e:2f:89:51:90:d2:93:06:0c:8a:5c:48:47:e3:fe:34: 37:74:2a:a6:91:33:12:9a:e2:71:f4:b0:96:5c:58:ac:fe:70: 07:c7:68:7f:84:54:4b:4b:94:e2:26:5e:70:e9:24:58:d3:09: 5a:74:6e:27:3f:f3:70:f5:ea:cc:ea:0d:cb:b5:d5:f1:25:c7: 90:06:47:72:02:fe:d8:63:8f:0d:70:65:20:41:bf:c0:18:38: ab:7f:01:83:11:7c:35:05:07:df:50:fb:0e:c0:52:28:50:b6: aa:99:76:7d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4OTQ0MTk5NzM0MDNB MjZGRENBNUM2MEZGOUVGNDgyMjQwNDk5ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdjidDNtBlqvZyop4DzUzvmUtlOWU52nWehg6oZ5toKDFW6YAR 7f3G16/GTZjVfqlSZIfALvS8PPObfB14CCpBFMR1+ujV+1M5PCpxdhtN1P9r11Ca LaocmIQspjGXKjhobdocUp0KGOc6C79OezHBnhoDqkIg75kxrlQLn/v0H6vm2feH GFzH96v5zWQBUzcFBBMy2cXDbYluF9VUVg2PW5LNm7ajQFC3sKGI9eZy784ZCo15 pLui6Yqi88SWGWBpLthy3KIkgJB85bgksrl47WchCJPRibEn9pwgA9uhhmMRBLGs luZnbI0x3Q6cUPIEYnLJB6nnmBSVIWwhxD/BAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUSJRBmXNAOib9ylxg/570giQEmYYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1NKUkJtWE5BT2liOXlseGdfNTcwZ2lRRW1ZWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBT6AwDQYJKoZIhvcNAQELBQADggEB ACJiaLzqKMQCebxGIiEAMs/d7OZ+/eg1IfJErjAfUYbE4acd4ZAXX8QBSJpxDf0n SlBu4D1X+XIkp0RPr0Vd+F9INMQbvP8devm27+Y+Ea+Jl+UDBVSnspUgvqn8D6BP C/rZT35AS/5zvaiqQnHzxherqsDhPHDwNk2yIVzcq2Cf0J9PyY86C+NWtS2f1J7d h1B8Pi+JUZDSkwYMilxIR+P+NDd0KqaRMxKa4nH0sJZcWKz+cAfHaH+EVEtLlOIm XnDpJFjTCVp0bic/83D16szqDcu11fElx5AGR3IC/thjjw1wZSBBv8AYOKt/AYMR fDUFB99Q+w7AUihQtqqZdn0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:58 2026 by rpki-client