$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_8QsX6DH3m7hvDJ8Hn1p5YnF-TI.roa File: _8QsX6DH3m7hvDJ8Hn1p5YnF-TI.roa (raw, json) Hash identifier: CxFnACO16iZNdp3FY3ViJ3mMAoEIKqxzwiWc7Q4M1ek= Subject key identifier: FF:C4:2C:5F:A0:C7:DE:6E:E1:BC:32:7C:1E:7D:69:E5:89:C5:F9:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1496 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_8QsX6DH3m7hvDJ8Hn1p5YnF-TI.roa Signing time: Tue 31 Mar 2026 07:57:50 +0000 ROA not before: Tue 31 Mar 2026 07:57:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5270 (0x1496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FFC42C5FA0C7DE6EE1BC327C1E7D69E589C5F932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:73:3d:27:cd:65:82:7b:94:24:d2:8a:55:a5: 24:06:f4:50:08:27:15:49:8e:c6:da:56:cf:5b:25: 4e:5a:54:c5:5b:4a:43:90:aa:88:fc:5d:be:f9:b2: 5d:40:19:90:30:29:c1:e3:02:46:d7:e1:34:12:ab: 6c:64:93:5f:d5:6f:e1:39:c0:52:4c:a3:55:26:b0: 09:28:a8:6b:f8:3d:a5:1d:0a:47:d6:88:9b:fe:1c: 13:e1:ff:4c:a0:1f:16:de:7b:64:7c:62:1a:56:eb: 27:71:d6:09:9f:79:b9:3d:b6:7a:42:4d:41:ab:81: 33:40:13:8d:f1:67:b7:b5:8f:5f:71:07:79:bc:d1: ec:c0:7b:f8:2f:81:70:f3:17:4b:46:38:f6:39:37: b4:d4:f1:9e:a4:71:89:58:58:cf:5a:ce:3a:a0:30: 8c:bc:0b:f3:1d:dc:19:08:63:77:11:fa:85:db:5a: f6:d7:f1:62:78:81:3d:0c:b7:77:32:02:3c:5e:27: b9:d0:38:1c:c1:f5:43:35:ae:ee:5d:f9:b8:92:14: c6:36:32:3f:22:89:bc:cb:31:02:91:30:65:4a:d6: 59:e3:37:43:cc:a4:39:8e:34:7f:b2:fb:ed:92:63: 26:4f:b4:e5:03:c2:c3:e1:16:fe:b7:de:a6:d6:5e: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C4:2C:5F:A0:C7:DE:6E:E1:BC:32:7C:1E:7D:69:E5:89:C5:F9:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_8QsX6DH3m7hvDJ8Hn1p5YnF-TI.roa sbgp-ipAddrBlock: critical IPv4: 1.79.11.0/24 Signature Algorithm: sha256WithRSAEncryption c8:02:b0:2e:a9:72:3d:dd:52:e1:4e:b0:4d:14:86:71:a1:9e: 07:c2:8a:42:e6:eb:96:30:a8:54:32:c9:b8:83:45:61:4e:a0: 90:62:9b:9c:d3:1a:74:96:4e:47:d0:e5:ec:84:9b:ef:d2:22: cb:3e:8c:cb:ca:f4:46:e6:9e:24:c2:ca:f7:9c:12:bd:13:d1: bd:65:41:a7:63:58:ce:21:80:f1:cb:38:c1:75:54:fa:20:1f: 3b:b3:a6:0b:f6:69:f1:bc:3c:13:14:97:af:27:d2:c1:07:10: f0:8f:49:ec:4f:8b:b0:cc:e8:6f:a9:92:d0:67:84:b1:69:31: 55:50:a0:78:d6:59:78:5c:ef:6c:c2:61:cd:d5:83:26:8b:31: ad:01:35:1e:b4:05:d4:fd:a9:fd:21:a1:9b:72:a7:5e:6b:48: 0e:ad:50:bd:47:53:18:ab:cf:b3:1b:af:a4:c3:b0:a7:1c:30: e5:37:09:5a:b8:13:c0:3a:13:02:48:2e:5b:19:52:6c:59:d6: 2e:76:42:b9:a0:5e:e5:71:b9:32:77:51:d1:33:ea:9a:95:eb: 85:2e:9c:6c:47:dd:95:4b:05:7c:93:fc:61:7a:5c:ec:dd:0e: b4:8b:43:45:4e:fb:63:44:7a:d2:8d:68:4b:03:af:c5:8d:aa: 8f:c5:b9:85 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGQzQyQzVGQTBDN0RF NkVFMUJDMzI3QzFFN0Q2OUU1ODlDNUY5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkcz0nzWWCe5Qk0opVpSQG9FAIJxVJjsbaVs9bJU5aVMVbSkOQ qoj8Xb75sl1AGZAwKcHjAkbX4TQSq2xkk1/Vb+E5wFJMo1UmsAkoqGv4PaUdCkfW iJv+HBPh/0ygHxbee2R8YhpW6ydx1gmfebk9tnpCTUGrgTNAE43xZ7e1j19xB3m8 0ezAe/gvgXDzF0tGOPY5N7TU8Z6kcYlYWM9azjqgMIy8C/Md3BkIY3cR+oXbWvbX 8WJ4gT0Mt3cyAjxeJ7nQOBzB9UM1ru5d+biSFMY2Mj8iibzLMQKRMGVK1lnjN0PM pDmONH+y++2SYyZPtOUDwsPhFv633qbWXnDZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU/8QsX6DH3m7hvDJ8Hn1p5YnF+TIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L184UXNYNkRIM203aHZESjhIbjFwNVluRi1USS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTwswDQYJKoZIhvcNAQELBQADggEB AMgCsC6pcj3dUuFOsE0UhnGhngfCikLm65YwqFQyybiDRWFOoJBim5zTGnSWTkfQ 5eyEm+/SIss+jMvK9EbmniTCyvecEr0T0b1lQadjWM4hgPHLOMF1VPogHzuzpgv2 afG8PBMUl68n0sEHEPCPSexPi7DM6G+pktBnhLFpMVVQoHjWWXhc72zCYc3VgyaL Ma0BNR60BdT9qf0hoZtyp15rSA6tUL1HUxirz7Mbr6TDsKccMOU3CVq4E8A6EwJI LlsZUmxZ1i52QrmgXuVxuTJ3UdEz6pqV64UunGxH3ZVLBXyT/GF6XOzdDrSLQ0VO +2NEetKNaEsDr8WNqo/FuYU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:43 2026 by rpki-client