$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xy4u5SOIRCUUAphd0ZN22Tvlwc.roa File: _xy4u5SOIRCUUAphd0ZN22Tvlwc.roa (raw, json) Hash identifier: fBlWrt7eOF8jh6T6KhxIV/5ACLSlgz9MqZ+dlHmIQa8= Subject key identifier: FF:1C:B8:BB:94:8E:21:10:94:50:0A:61:77:46:4D:DB:64:EF:97:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1767 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xy4u5SOIRCUUAphd0ZN22Tvlwc.roa Signing time: Tue 31 Mar 2026 08:03:44 +0000 ROA not before: Tue 31 Mar 2026 08:03:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.74.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5991 (0x1767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FF1CB8BB948E211094500A6177464DDB64EF9707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:17:00:ac:bd:3e:ee:70:14:76:82:ca:97: 6d:9a:3a:20:2e:b2:6e:33:43:50:d9:d4:c2:d9:6b: 83:73:1f:ff:65:41:c0:c1:1d:48:ce:37:a1:6b:93: e5:7d:b2:82:84:f9:d3:c8:45:2c:3b:eb:d6:3a:67: 7b:2c:97:5f:98:76:4e:d4:ac:e8:68:91:55:a5:c7: bb:cf:40:9e:4e:af:d3:25:96:fa:a6:0d:44:cb:dc: de:39:90:78:ec:77:f6:89:b8:ec:f4:e7:8c:3a:09: 87:8c:ae:e5:30:9c:d9:33:5e:81:11:af:67:0f:de: 63:de:e7:92:fe:21:94:4d:ae:bd:2c:31:f0:ff:8b: fa:54:fa:ec:94:28:d8:6e:53:e7:3d:59:a5:26:2f: b6:0d:2b:27:8e:5b:68:57:4f:3f:10:9c:0b:61:39: 5e:9a:0e:0c:05:d6:78:d6:de:64:38:e7:46:d0:fc: 3d:03:30:a3:bd:36:c4:22:3b:36:79:0a:7f:c5:3c: ef:41:80:f9:5d:81:d7:51:67:45:4c:43:87:6a:ad: bb:68:80:90:92:cd:c2:76:f5:72:ca:2b:a8:6e:cc: 4e:a9:23:6b:fd:13:90:3b:77:33:c2:48:6c:12:17: ca:19:21:06:45:85:28:20:3c:fd:96:15:5d:f4:f1: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1C:B8:BB:94:8E:21:10:94:50:0A:61:77:46:4D:DB:64:EF:97:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xy4u5SOIRCUUAphd0ZN22Tvlwc.roa sbgp-ipAddrBlock: critical IPv4: 1.74.200.0/22 Signature Algorithm: sha256WithRSAEncryption 85:eb:24:8f:95:b0:ad:35:0f:b0:88:69:61:66:c4:ca:d5:1a: 15:23:77:22:50:15:b9:de:47:60:5c:34:28:0f:ba:ed:9a:50: 45:45:dd:01:3a:5f:77:99:ae:2b:00:75:b5:ff:97:d6:c9:73: 4a:ef:1a:ec:3b:80:40:64:03:1d:0a:3b:2b:1c:88:3f:b4:af: 88:a8:b7:f9:9f:d0:c3:32:80:3b:71:95:6e:09:5c:f2:04:9e: fc:b4:6f:14:13:d1:72:23:2a:a3:36:c2:d6:7c:1c:e4:3a:91: cf:aa:a8:7a:1f:b6:55:2f:17:45:e7:31:2a:e4:5a:e0:b7:d8: a4:2c:24:8f:67:db:2f:ae:d9:e9:09:ce:3a:17:6b:8a:30:14: 92:21:44:06:e6:d7:5a:00:9f:3f:d8:5c:91:a8:5f:b9:e8:73: 18:b7:42:bc:db:34:7d:d8:eb:5b:e0:40:b5:29:2d:03:81:0f: 04:a1:d9:75:f1:43:1b:39:ef:80:1f:01:18:0a:f6:08:34:26: da:44:85:6c:b3:4b:53:b8:8e:ff:a9:1f:88:0f:81:3d:d9:bf: 11:a0:bc:ba:52:58:16:6e:b9:70:6b:f4:9e:e4:d2:ab:4f:0f: 46:99:91:7e:59:d3:de:a4:66:56:db:d8:29:f4:81:af:79:4c: 90:11:08:4b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGMUNCOEJCOTQ4RTIx MTA5NDUwMEE2MTc3NDY0RERCNjRFRjk3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDAxcArL0+7nAUdoLKl22aOiAusm4zQ1DZ1MLZa4NzH/9lQcDB HUjON6Frk+V9soKE+dPIRSw769Y6Z3ssl1+Ydk7UrOhokVWlx7vPQJ5Or9Mllvqm DUTL3N45kHjsd/aJuOz054w6CYeMruUwnNkzXoERr2cP3mPe55L+IZRNrr0sMfD/ i/pU+uyUKNhuU+c9WaUmL7YNKyeOW2hXTz8QnAthOV6aDgwF1njW3mQ450bQ/D0D MKO9NsQiOzZ5Cn/FPO9BgPldgddRZ0VMQ4dqrbtogJCSzcJ29XLKK6huzE6pI2v9 E5A7dzPCSGwSF8oZIQZFhSggPP2WFV308SXXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU/xy4u5SOIRCUUAphd0ZN22TvlwcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L194eTR1NVNPSVJDVVVBcGhkMFpOMjJUdmx3Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBSsgwDQYJKoZIhvcNAQELBQADggEB AIXrJI+VsK01D7CIaWFmxMrVGhUjdyJQFbneR2BcNCgPuu2aUEVF3QE6X3eZrisA dbX/l9bJc0rvGuw7gEBkAx0KOysciD+0r4iot/mf0MMygDtxlW4JXPIEnvy0bxQT 0XIjKqM2wtZ8HOQ6kc+qqHoftlUvF0XnMSrkWuC32KQsJI9n2y+u2ekJzjoXa4ow FJIhRAbm11oAnz/YXJGoX7nocxi3QrzbNH3Y61vgQLUpLQOBDwSh2XXxQxs574Af ARgK9gg0JtpEhWyzS1O4jv+pH4gPgT3ZvxGgvLpSWBZuuXBr9J7k0qtPD0aZkX5Z 096kZlbb2Cn0ga95TJARCEs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:03 2026 by rpki-client