$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y1U2bgaSF2buu4zFNPK79qbUq7I.roa File: Y1U2bgaSF2buu4zFNPK79qbUq7I.roa (raw, json) Hash identifier: e+tDApkpgSPhtnAqaAvfbXJDTLxKluo/LZwCQ+uyV0A= Subject key identifier: 63:55:36:6E:06:92:17:66:EE:BB:8C:C5:34:F2:BB:F6:A6:D4:AB:B2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 145B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y1U2bgaSF2buu4zFNPK79qbUq7I.roa Signing time: Tue 31 Mar 2026 07:57:23 +0000 ROA not before: Tue 31 Mar 2026 07:57:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5211 (0x145b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6355366E06921766EEBB8CC534F2BBF6A6D4ABB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:fe:8b:89:63:1e:63:8d:e1:39:1f:9a:7b: 74:a7:b4:40:a2:b2:5a:ce:90:04:f3:9b:bc:06:04: a6:59:4d:33:8d:a3:cd:91:6b:c7:38:90:c7:19:c9: 43:be:39:93:0d:bf:67:0b:91:af:57:73:7d:49:f8: 5f:2f:24:f9:59:24:30:d8:0e:08:3f:80:cc:98:6c: c9:bc:9e:c6:d9:eb:ab:5d:fc:8e:d3:84:5b:ac:fc: 67:3c:0c:26:37:6a:6c:4f:35:f4:32:26:36:b7:f1: fa:63:62:22:82:b6:5a:5d:12:35:1b:28:bd:2b:b4: ef:2c:dd:82:fa:93:c3:c8:55:ff:4a:48:8f:3f:a0: f9:06:e5:1e:ae:60:db:92:68:2c:9d:3e:0b:f9:1b: 81:94:fe:a5:40:16:32:cf:f5:c3:c9:2a:e7:21:1f: 99:1f:7e:0b:2c:f2:07:16:ad:b7:d9:a5:54:5c:a5: b0:95:35:4c:9e:61:01:c6:b9:4a:2d:58:a2:67:a5: 78:aa:67:27:a2:8e:21:77:ca:08:5b:fc:56:80:0e: 9c:d4:46:2c:ec:fa:9d:b5:07:0a:5b:00:a5:b0:04: 65:d1:b3:66:be:2a:69:a9:cd:44:0c:04:2b:a8:ad: 19:d4:8d:39:76:c0:ed:1a:58:71:ee:de:b7:9f:fe: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:55:36:6E:06:92:17:66:EE:BB:8C:C5:34:F2:BB:F6:A6:D4:AB:B2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y1U2bgaSF2buu4zFNPK79qbUq7I.roa sbgp-ipAddrBlock: critical IPv4: 1.79.26.0/23 Signature Algorithm: sha256WithRSAEncryption 77:7c:4d:46:6c:e4:41:61:27:86:dc:d2:b9:0f:65:a5:41:4e: c6:0a:ed:a6:d3:68:56:9e:71:01:6e:01:c7:2f:62:cf:60:89: df:0c:b3:e7:21:bb:04:bc:09:15:af:72:18:28:1e:07:86:aa: c1:3e:94:83:6a:02:2d:46:76:53:2f:14:9d:92:04:f8:72:58: 41:ce:3d:f7:b2:32:e7:53:c2:76:aa:b6:db:61:ff:98:64:ff: 66:45:77:db:a5:22:fa:f5:a2:e2:54:27:44:94:75:0d:c3:8c: 06:ba:c4:b4:d3:0e:57:4e:fc:0b:b9:17:5d:38:a3:44:ac:cb: a5:23:61:64:0e:72:12:ae:91:c8:77:6a:f9:ed:c5:23:7c:0d: 16:7f:75:3b:ca:f7:e7:5f:35:d0:25:a3:e3:c1:84:0b:27:64: 8e:71:f3:f4:3d:b2:52:4d:89:99:3b:b4:47:d2:ca:28:5b:d3: 18:3b:b6:fc:1f:65:5f:3b:e6:15:c4:ad:7c:99:5f:ca:46:cc: bd:67:42:bc:5f:1f:1b:18:63:e8:31:b4:f7:30:e2:28:50:f8: ab:80:66:ef:11:2c:7b:94:d2:8e:71:4d:14:81:a2:86:30:a5: 3f:3f:5a:8a:7a:3f:77:91:8b:11:98:b4:99:ea:27:7d:73:dd: 7a:e4:28:28 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzNTUzNjZFMDY5MjE3 NjZFRUJCOENDNTM0RjJCQkY2QTZENEFCQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7x/6LiWMeY43hOR+ae3SntECislrOkATzm7wGBKZZTTONo82R a8c4kMcZyUO+OZMNv2cLka9Xc31J+F8vJPlZJDDYDgg/gMyYbMm8nsbZ66td/I7T hFus/Gc8DCY3amxPNfQyJja38fpjYiKCtlpdEjUbKL0rtO8s3YL6k8PIVf9KSI8/ oPkG5R6uYNuSaCydPgv5G4GU/qVAFjLP9cPJKuchH5kffgss8gcWrbfZpVRcpbCV NUyeYQHGuUotWKJnpXiqZyeijiF3yghb/FaADpzURizs+p21BwpbAKWwBGXRs2a+ KmmpzUQMBCuorRnUjTl2wO0aWHHu3ref/p6hAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUY1U2bgaSF2buu4zFNPK79qbUq7IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1kxVTJiZ2FTRjJidXU0ekZOUEs3OXFiVXE3SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTxowDQYJKoZIhvcNAQELBQADggEB AHd8TUZs5EFhJ4bc0rkPZaVBTsYK7abTaFaecQFuAccvYs9gid8Ms+chuwS8CRWv chgoHgeGqsE+lINqAi1GdlMvFJ2SBPhyWEHOPfeyMudTwnaqttth/5hk/2ZFd9ul Ivr1ouJUJ0SUdQ3DjAa6xLTTDldO/Au5F104o0Ssy6UjYWQOchKukch3avntxSN8 DRZ/dTvK9+dfNdAlo+PBhAsnZI5x8/Q9slJNiZk7tEfSyihb0xg7tvwfZV875hXE rXyZX8pGzL1nQrxfHxsYY+gxtPcw4ihQ+KuAZu8RLHuU0o5xTRSBooYwpT8/Wop6 P3eRixGYtJnqJ31z3XrkKCg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:57 2026 by rpki-client