$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XjjOLhNIKmP7Z-Gw5vh7QRn_-8g.roa File: XjjOLhNIKmP7Z-Gw5vh7QRn_-8g.roa (raw, json) Hash identifier: sHkbM5a7q+3cdskIygpy3AqOCZND9staYLCtHUFiUGE= Subject key identifier: 5E:38:CE:2E:13:48:2A:63:FB:67:E1:B0:E6:F8:7B:41:19:FF:FB:C8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17FD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XjjOLhNIKmP7Z-Gw5vh7QRn_-8g.roa Signing time: Tue 31 Mar 2026 08:04:56 +0000 ROA not before: Tue 31 Mar 2026 08:04:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6141 (0x17fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5E38CE2E13482A63FB67E1B0E6F87B4119FFFBC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:26:c6:bc:98:7e:94:01:44:6b:01:21:77: 9d:37:8c:a5:2a:20:7f:ea:35:5a:a8:98:4e:c7:a4: b2:de:29:8d:a9:6d:57:33:a3:81:7b:29:a0:78:68: 1a:ad:9e:2e:a6:b6:6b:1b:e4:5b:75:09:20:eb:1b: 42:5f:cc:d4:b7:fd:70:37:42:92:f1:15:e6:2c:26: cf:78:cb:bd:f9:78:31:75:1f:a0:48:34:5c:a7:62: 36:0d:8b:99:7e:59:43:f3:7a:04:f5:88:83:a5:57: 7b:47:55:16:bd:e5:ea:1c:91:71:f1:b5:49:d8:32: 96:ef:ef:10:0e:87:51:2d:cb:2f:82:d6:eb:cb:64: 99:77:c9:68:73:5e:6e:fb:ee:7f:51:c6:df:d0:2f: a4:02:d4:c2:16:2a:aa:b8:79:62:be:d0:7d:a4:0c: 91:e9:eb:e1:62:12:43:cf:84:d1:9a:ea:f6:27:7f: 88:d5:9d:58:60:2e:73:b0:4b:96:5b:52:8d:6b:96: 06:51:20:02:78:06:7e:a3:7b:9c:d1:ba:5f:cd:53: 74:db:1b:cd:4d:7f:d3:20:f8:e3:83:b0:82:9d:ec: d9:f7:e7:02:a0:15:14:a9:c5:3e:45:25:30:76:59: 31:9a:5c:c6:69:ab:ab:a9:b7:1d:59:9a:19:5d:ed: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:38:CE:2E:13:48:2A:63:FB:67:E1:B0:E6:F8:7B:41:19:FF:FB:C8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XjjOLhNIKmP7Z-Gw5vh7QRn_-8g.roa sbgp-ipAddrBlock: critical IPv4: 1.67.248.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:bd:29:70:e8:bf:00:9b:d3:8f:50:00:97:44:fd:8f:51:40: 7d:9a:13:f9:60:be:a9:bb:0e:af:eb:92:8e:47:70:fc:47:1a: cf:ce:65:a3:3f:46:17:d9:61:56:81:55:21:69:ef:80:41:ff: 46:49:46:53:32:64:39:2f:4d:5a:ac:1e:b1:07:29:4f:bc:9a: 74:33:8c:a6:24:69:d4:a4:e5:81:5f:a9:3b:1e:89:e9:fd:59: 6d:a5:8f:d8:b4:54:64:97:f2:d5:9b:9f:6a:f6:1b:95:63:c6: 57:1e:2b:50:08:93:e2:a0:a7:3e:cf:15:67:f4:f4:48:7b:c7: fc:25:62:9c:d3:84:75:8f:c7:7a:4b:08:4d:ca:2f:1f:d0:7a: 53:58:d0:3c:ac:cd:fc:5d:af:77:03:7b:5e:d2:28:d3:fe:4a: 9c:1d:d8:ff:a0:51:88:c0:76:14:08:ea:5c:d0:09:a6:1c:29: 01:1e:8b:2f:fa:17:b2:a0:b7:95:0f:6a:0a:d9:8d:17:1e:04: b5:b2:ca:62:35:ff:55:7a:3d:2c:91:a4:9a:ce:06:c5:f0:63: 75:50:e2:d3:e2:8f:cc:86:61:d4:ea:b7:f8:58:4c:6d:20:76: 98:ba:58:8d:f1:5b:08:f7:d5:42:5c:a5:5e:6b:ac:e0:5a:a9: 48:d9:e1:54 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFMzhDRTJFMTM0ODJB NjNGQjY3RTFCMEU2Rjg3QjQxMTlGRkZCQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvrSbGvJh+lAFEawEhd503jKUqIH/qNVqomE7HpLLeKY2pbVcz o4F7KaB4aBqtni6mtmsb5Ft1CSDrG0JfzNS3/XA3QpLxFeYsJs94y735eDF1H6BI NFynYjYNi5l+WUPzegT1iIOlV3tHVRa95eockXHxtUnYMpbv7xAOh1Etyy+C1uvL ZJl3yWhzXm777n9Rxt/QL6QC1MIWKqq4eWK+0H2kDJHp6+FiEkPPhNGa6vYnf4jV nVhgLnOwS5ZbUo1rlgZRIAJ4Bn6je5zRul/NU3TbG81Nf9Mg+OODsIKd7Nn35wKg FRSpxT5FJTB2WTGaXMZpq6uptx1Zmhld7YDzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXjjOLhNIKmP7Z+Gw5vh7QRn/+8gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1hqak9MaE5JS21QN1otR3c1dmg3UVJuXy04Zy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBQ/gwDQYJKoZIhvcNAQELBQADggEB AI+9KXDovwCb049QAJdE/Y9RQH2aE/lgvqm7Dq/rko5HcPxHGs/OZaM/RhfZYVaB VSFp74BB/0ZJRlMyZDkvTVqsHrEHKU+8mnQzjKYkadSk5YFfqTseien9WW2lj9i0 VGSX8tWbn2r2G5VjxlceK1AIk+Kgpz7PFWf09Eh7x/wlYpzThHWPx3pLCE3KLx/Q elNY0Dyszfxdr3cDe17SKNP+Spwd2P+gUYjAdhQI6lzQCaYcKQEeiy/6F7Kgt5UP agrZjRceBLWyymI1/1V6PSyRpJrOBsXwY3VQ4tPij8yGYdTqt/hYTG0gdpi6WI3x Wwj31UJcpV5rrOBaqUjZ4VQ= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:34 2026 by rpki-client