$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XiUxEWjHLoeC8iGlAFXMuOWIOl4.roa File: XiUxEWjHLoeC8iGlAFXMuOWIOl4.roa (raw, json) Hash identifier: Oo7Qaqim6QeKmHGHyzPT23T+muk9qqTuRglWIhauU4A= Subject key identifier: 5E:25:31:11:68:C7:2E:87:82:F2:21:A5:00:55:CC:B8:E5:88:3A:5E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17C8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XiUxEWjHLoeC8iGlAFXMuOWIOl4.roa Signing time: Tue 31 Mar 2026 08:04:33 +0000 ROA not before: Tue 31 Mar 2026 08:04:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6088 (0x17c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5E25311168C72E8782F221A50055CCB8E5883A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:25:ec:6f:fe:17:76:21:fe:9f:20:a2:e1: 92:1e:94:4e:c0:c3:68:7d:63:32:b2:0c:6c:06:a3: 02:f9:b2:0d:14:a3:4e:c4:c2:cd:52:e5:ef:83:39: ea:58:95:d1:95:88:12:8b:a4:14:53:a9:d2:47:2a: e4:86:24:ad:c9:42:22:04:27:7b:81:f6:54:02:97: 19:fa:74:b7:6e:cb:81:51:26:97:97:f1:b8:52:3b: 4b:b6:02:7a:ff:84:41:db:02:84:72:91:25:ac:8f: 3f:a5:4d:fa:bb:c1:9f:31:46:f5:82:45:75:95:b9: b0:73:69:5f:fe:e0:91:6b:6f:22:72:b6:d8:ef:ed: 96:38:77:d8:f8:67:9f:e9:e9:a6:a9:8d:51:75:25: de:70:08:0c:de:fc:fc:21:0f:52:3d:ef:de:4c:1e: 92:05:0e:45:b0:09:a3:84:99:0e:1c:4e:ac:6c:92: 0a:11:62:07:be:91:c9:10:3c:8e:a6:7d:67:1d:5f: 23:34:a5:53:7e:e6:3f:70:b9:aa:f6:08:a1:6a:21: 0b:d0:c2:80:38:b4:a6:24:69:37:36:4f:49:11:08: f9:fa:99:a1:24:ae:af:cb:1e:dc:95:80:7a:64:8a: b5:63:ec:e4:cd:9c:c3:a2:0c:31:45:ea:a0:aa:e5: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:31:11:68:C7:2E:87:82:F2:21:A5:00:55:CC:B8:E5:88:3A:5E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XiUxEWjHLoeC8iGlAFXMuOWIOl4.roa sbgp-ipAddrBlock: critical IPv4: 1.72.10.0/24 Signature Algorithm: sha256WithRSAEncryption e0:0a:b7:7a:4c:81:aa:43:df:2b:13:ef:81:75:75:bd:d4:b1: 57:c8:4b:31:10:0b:4c:29:53:88:32:e5:05:50:04:c8:32:a5: 97:2c:c9:ac:3d:88:bf:b0:54:2f:46:ff:9d:db:74:17:03:c7: 1e:42:65:72:d7:e6:64:dc:99:d9:bd:eb:5e:0f:6f:86:1e:8b: 96:9d:c3:c3:30:db:bb:3d:b7:16:8d:4a:c7:35:9d:64:07:85: 85:28:1c:d4:d7:80:22:63:9b:e8:de:1e:1d:4a:d4:59:42:55: 82:fa:3e:f2:5e:cb:ae:ed:d9:50:94:a9:49:73:dd:82:bb:c2: 46:42:56:57:21:55:a4:b9:9f:44:48:97:b0:ac:8a:4b:65:60: 86:6a:47:c2:cc:09:d9:4c:87:47:8c:86:6a:a1:94:b4:6d:c4: a7:09:02:ba:ae:b2:68:0e:b8:34:2c:c2:96:88:2d:21:10:06: 7c:ea:e2:40:4f:67:c4:40:8b:c9:d4:40:56:4e:be:8e:c7:32: 17:f7:22:c5:c5:8a:c1:c6:c9:70:cc:16:38:0b:77:ad:b3:dd: 7a:36:1d:94:f7:44:e8:d5:4d:dd:6b:e9:38:c9:91:29:70:f5: fd:06:3f:08:1b:59:d6:97:51:a0:9b:69:05:94:ff:41:70:20: 7d:8d:aa:e7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFMjUzMTExNjhDNzJF ODc4MkYyMjFBNTAwNTVDQ0I4RTU4ODNBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUZSXsb/4XdiH+nyCi4ZIelE7Aw2h9YzKyDGwGowL5sg0Uo07E ws1S5e+DOepYldGViBKLpBRTqdJHKuSGJK3JQiIEJ3uB9lQClxn6dLduy4FRJpeX 8bhSO0u2Anr/hEHbAoRykSWsjz+lTfq7wZ8xRvWCRXWVubBzaV/+4JFrbyJyttjv 7ZY4d9j4Z5/p6aapjVF1Jd5wCAze/PwhD1I9795MHpIFDkWwCaOEmQ4cTqxskgoR Yge+kckQPI6mfWcdXyM0pVN+5j9wuar2CKFqIQvQwoA4tKYkaTc2T0kRCPn6maEk rq/LHtyVgHpkirVj7OTNnMOiDDFF6qCq5V7JAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXiUxEWjHLoeC8iGlAFXMuOWIOl4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1hpVXhFV2pITG9lQzhpR2xBRlhNdU9XSU9sNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSAowDQYJKoZIhvcNAQELBQADggEB AOAKt3pMgapD3ysT74F1db3UsVfISzEQC0wpU4gy5QVQBMgypZcsyaw9iL+wVC9G /53bdBcDxx5CZXLX5mTcmdm9614Pb4Yei5adw8Mw27s9txaNSsc1nWQHhYUoHNTX gCJjm+jeHh1K1FlCVYL6PvJey67t2VCUqUlz3YK7wkZCVlchVaS5n0RIl7Csiktl YIZqR8LMCdlMh0eMhmqhlLRtxKcJArqusmgOuDQswpaILSEQBnzq4kBPZ8RAi8nU QFZOvo7HMhf3IsXFisHGyXDMFjgLd62z3Xo2HZT3ROjVTd1r6TjJkSlw9f0GPwgb WdaXUaCbaQWU/0FwIH2Nquc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:45 2026 by rpki-client