$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZUTnEVRUbmtg_HfGRU_fKsWSLAs.roa File: ZUTnEVRUbmtg_HfGRU_fKsWSLAs.roa (raw, json) Hash identifier: 03liufb6WjlfyKIi5bCBFEqj6szo/sFbGzVXfNIetZQ= Subject key identifier: 65:44:E7:11:54:54:6E:6B:60:FC:77:C6:45:4F:DF:2A:C5:92:2C:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15E4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZUTnEVRUbmtg_HfGRU_fKsWSLAs.roa Signing time: Tue 31 Mar 2026 08:00:38 +0000 ROA not before: Tue 31 Mar 2026 08:00:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5604 (0x15e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6544E71154546E6B60FC77C6454FDF2AC5922C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:13:12:3e:6e:ff:a2:57:c1:ef:fb:24:a1: d0:3c:2d:d1:83:1e:4e:b0:9f:95:60:64:d4:33:e3: cf:a4:36:3c:ab:4b:47:e2:b3:d3:c0:93:a4:07:4d: 41:ff:da:aa:39:69:03:3e:e0:d0:ce:04:33:9d:5f: eb:4f:20:44:fb:da:bf:76:97:a2:f1:4c:cd:f1:f6: 51:ff:77:c3:73:a1:8a:cd:50:45:86:ae:45:bc:fc: a0:26:05:ae:04:04:e3:af:7b:3c:ac:98:b8:14:85: 16:cf:44:c9:7a:c1:9c:d0:fa:d6:8c:be:30:14:f2: 3c:63:14:47:d5:ec:44:37:b1:a1:fd:1d:fc:e4:1f: 79:d9:52:54:66:2d:b5:81:85:d9:a5:66:1a:05:0a: 99:52:95:ed:b0:63:f5:f7:29:62:1c:13:eb:58:c6: d4:25:3b:c0:3c:c5:5e:f2:76:7e:4e:d3:32:f9:87: 27:56:04:f3:06:73:04:57:de:e0:6d:63:fe:92:02: c2:d8:5a:8c:2c:f2:db:bf:95:e3:84:24:94:42:01: 79:f8:40:49:40:1d:95:44:e6:a4:f7:e1:15:0c:82: ba:d3:00:6c:c0:2c:9c:1b:6a:fc:c8:9a:03:dd:ca: 69:8a:75:20:b4:1f:bb:31:1d:0f:8f:8b:c9:da:75: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:E7:11:54:54:6E:6B:60:FC:77:C6:45:4F:DF:2A:C5:92:2C:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZUTnEVRUbmtg_HfGRU_fKsWSLAs.roa sbgp-ipAddrBlock: critical IPv4: 49.98.68.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:cd:a8:c6:22:9c:c1:6c:3b:4e:26:54:ba:69:11:fb:25:8b: 99:58:6a:02:d0:c0:99:d2:17:b0:6c:18:af:74:f1:7b:42:77: 77:0e:70:d0:79:3a:73:9f:04:16:f0:fc:87:67:e5:bc:65:04: 7d:ab:17:53:b5:a2:f6:d2:72:65:f1:ee:f3:d1:fa:83:87:0c: bc:be:bc:e3:8b:8b:53:be:c4:42:1c:78:4e:85:b4:b1:0b:a2: 3f:fd:2e:90:8f:4d:3a:4e:f3:32:a4:fa:9f:3c:4b:77:64:f1: 08:13:50:eb:68:f0:f7:9e:8f:79:6a:c5:dd:05:95:2b:29:77: 8c:aa:88:06:9d:9f:b5:4c:93:09:5c:77:f5:40:b7:d0:3d:08: 0b:2d:dc:a6:f6:11:d5:70:ac:e7:59:5c:a7:fd:e3:f3:d6:da: 8e:d4:7f:fe:97:9b:ea:32:a5:81:b9:0a:32:e4:9e:4e:46:a0: 92:39:6d:fd:31:e8:11:fc:d1:a7:7a:09:27:cf:f4:8e:27:ca: 38:60:fe:b7:72:d7:9f:53:14:09:e0:57:bd:1a:f9:b4:60:e3: 33:81:0f:04:e6:5b:eb:28:97:df:fb:c6:64:99:e6:e6:85:6a: fc:3b:c3:5a:30:fd:29:ca:27:48:56:df:00:10:eb:ea:b4:81: 5f:ba:21:f1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1NDRFNzExNTQ1NDZF NkI2MEZDNzdDNjQ1NEZERjJBQzU5MjJDMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbFxMSPm7/olfB7/skodA8LdGDHk6wn5VgZNQz48+kNjyrS0fi s9PAk6QHTUH/2qo5aQM+4NDOBDOdX+tPIET72r92l6LxTM3x9lH/d8NzoYrNUEWG rkW8/KAmBa4EBOOvezysmLgUhRbPRMl6wZzQ+taMvjAU8jxjFEfV7EQ3saH9Hfzk H3nZUlRmLbWBhdmlZhoFCplSle2wY/X3KWIcE+tYxtQlO8A8xV7ydn5O0zL5hydW BPMGcwRX3uBtY/6SAsLYWows8tu/leOEJJRCAXn4QElAHZVE5qT34RUMgrrTAGzA LJwbavzImgPdymmKdSC0H7sxHQ+Pi8naddUbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUZUTnEVRUbmtg/HfGRU/fKsWSLAswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1pVVG5FVlJVYm10Z19IZkdSVV9mS3NXU0xBcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYkQwDQYJKoZIhvcNAQELBQADggEB AHzNqMYinMFsO04mVLppEfsli5lYagLQwJnSF7BsGK908XtCd3cOcNB5OnOfBBbw /Idn5bxlBH2rF1O1ovbScmXx7vPR+oOHDLy+vOOLi1O+xEIceE6FtLELoj/9LpCP TTpO8zKk+p88S3dk8QgTUOto8Peej3lqxd0FlSspd4yqiAadn7VMkwlcd/VAt9A9 CAst3Kb2EdVwrOdZXKf94/PW2o7Uf/6Xm+oypYG5CjLknk5GoJI5bf0x6BH80ad6 CSfP9I4nyjhg/rdy159TFAngV70a+bRg4zOBDwTmW+sol9/7xmSZ5uaFavw7w1ow /SnKJ0hW3wAQ6+q0gV+6IfE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:40 2026 by rpki-client