$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ym1wXZ2gCHFHteemulZrfpJUEpw.roa File: Ym1wXZ2gCHFHteemulZrfpJUEpw.roa (raw, json) Hash identifier: D8Q4GS7YXO+GCQQ+ahjWw29QIky7ds7TwNePjSz+nFo= Subject key identifier: 62:6D:70:5D:9D:A0:08:71:47:B5:E7:A6:BA:56:6B:7E:92:54:12:9C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1711 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ym1wXZ2gCHFHteemulZrfpJUEpw.roa Signing time: Tue 31 Mar 2026 08:03:05 +0000 ROA not before: Tue 31 Mar 2026 08:03:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5905 (0x1711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=626D705D9DA0087147B5E7A6BA566B7E9254129C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:26:fc:78:e4:23:3d:63:f4:23:87:e7:02: b2:ae:6f:11:88:e8:47:ec:2a:f0:80:f1:22:24:58: fb:1b:c2:2c:85:aa:45:7e:d1:7d:d4:a1:44:5e:17: 2b:24:86:16:42:73:8e:91:3f:30:b9:0b:08:21:97: b4:16:bd:57:fe:b7:a8:a5:ff:25:c3:fe:63:9a:d9: 29:86:95:f1:50:55:ef:18:0c:4a:74:83:21:5c:9f: 20:cd:93:d1:4c:de:fe:27:d7:1d:77:3d:e7:1b:c4: ef:9a:c1:c0:80:00:8a:be:d4:cb:29:e1:b7:e3:45: 82:be:bc:d6:72:9c:1a:09:0e:89:41:c4:e1:c4:21: e4:d7:d1:db:4c:66:c5:5c:93:f8:b0:6a:b3:7a:4d: 48:07:f0:75:2f:51:a3:61:7b:f3:92:b2:78:6d:f9: 40:dd:89:1f:cd:d3:b8:10:c7:a0:4e:0c:05:97:7c: e8:d2:0c:8a:86:5c:1d:d5:a1:ad:e4:e7:6c:37:3b: e8:14:27:fc:d6:4b:41:b3:c7:25:1e:f6:c2:2a:5d: 06:91:93:e6:7d:ce:f9:3b:4e:29:93:94:f5:41:3e: a6:99:fe:fc:12:f1:5e:ec:84:08:43:20:20:3a:c9: 51:6c:d4:4e:58:54:24:f9:e8:c7:ed:06:57:18:e2: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6D:70:5D:9D:A0:08:71:47:B5:E7:A6:BA:56:6B:7E:92:54:12:9C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ym1wXZ2gCHFHteemulZrfpJUEpw.roa sbgp-ipAddrBlock: critical IPv4: 220.159.30.0/24 Signature Algorithm: sha256WithRSAEncryption 50:2c:d8:c6:a8:25:1c:1e:f3:80:52:7b:96:1c:70:30:09:a5: da:a1:35:2c:60:12:a1:88:23:0a:bc:0e:ab:28:3d:f4:6c:56: c4:f2:d5:ad:0c:58:fd:43:3d:35:6b:3b:8f:c3:57:63:ee:51: 3e:e3:e4:85:8e:62:6f:75:96:fc:e1:e8:32:dc:eb:71:c5:38: 17:df:4e:b5:11:46:36:97:a9:a4:b2:30:3a:33:eb:98:b2:d6: f5:47:b6:92:fb:92:d3:79:1a:f2:0b:c9:c3:0f:24:65:88:f7: 4f:a0:23:11:0a:58:6f:c8:6e:ed:87:6d:d8:11:41:70:0e:9f: 10:12:80:8c:a4:76:54:23:5a:9e:d2:da:6f:ea:a0:ce:cc:15: be:92:f3:d7:16:0d:fb:68:05:9b:33:b2:85:0d:8f:d3:77:fc: 0a:b2:ba:df:d7:5a:2c:eb:c6:f4:ad:6e:8b:43:44:40:16:3b: 69:00:38:2d:42:69:1b:65:a6:88:41:c1:26:bf:c2:28:82:99: 03:95:dd:a0:b2:94:36:f9:07:35:5c:3e:08:da:95:a3:96:13: 10:d7:ea:51:9d:dd:a0:88:0b:0f:89:65:55:6f:4a:f1:c0:7d: de:00:8e:86:33:59:51:2b:81:6b:5f:6f:ad:ad:31:ad:3a:bb: 7d:ba:98:83 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyNkQ3MDVEOURBMDA4 NzE0N0I1RTdBNkJBNTY2QjdFOTI1NDEyOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk4ib8eOQjPWP0I4fnArKubxGI6EfsKvCA8SIkWPsbwiyFqkV+ 0X3UoUReFyskhhZCc46RPzC5Cwghl7QWvVf+t6il/yXD/mOa2SmGlfFQVe8YDEp0 gyFcnyDNk9FM3v4n1x13PecbxO+awcCAAIq+1Msp4bfjRYK+vNZynBoJDolBxOHE IeTX0dtMZsVck/iwarN6TUgH8HUvUaNhe/OSsnht+UDdiR/N07gQx6BODAWXfOjS DIqGXB3Voa3k52w3O+gUJ/zWS0GzxyUe9sIqXQaRk+Z9zvk7TimTlPVBPqaZ/vwS 8V7shAhDICA6yVFs1E5YVCT56MftBlcY4sSzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUYm1wXZ2gCHFHteemulZrfpJUEpwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1ltMXdYWjJnQ0hGSHRlZW11bFpyZnBKVUVwdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADcnx4wDQYJKoZIhvcNAQELBQADggEB AFAs2MaoJRwe84BSe5YccDAJpdqhNSxgEqGIIwq8DqsoPfRsVsTy1a0MWP1DPTVr O4/DV2PuUT7j5IWOYm91lvzh6DLc63HFOBffTrURRjaXqaSyMDoz65iy1vVHtpL7 ktN5GvILycMPJGWI90+gIxEKWG/Ibu2HbdgRQXAOnxASgIykdlQjWp7S2m/qoM7M Fb6S89cWDftoBZszsoUNj9N3/Aqyut/XWizrxvStbotDREAWO2kAOC1CaRtlpohB wSa/wiiCmQOV3aCylDb5BzVcPgjalaOWExDX6lGd3aCICw+JZVVvSvHAfd4AjoYz WVErgWtfb62tMa06u326mIM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:21 2026 by rpki-client