$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c8LfxZ--u9k0VsFBXSa3IN3dXwI.roa File: c8LfxZ--u9k0VsFBXSa3IN3dXwI.roa (raw, json) Hash identifier: D3PzR8iMDuL3wnUjiXIJr09K6L/Ec6aO1g/VNhlzZ2Y= Subject key identifier: 73:C2:DF:C5:9F:BE:BB:D9:34:56:C1:41:5D:26:B7:20:DD:DD:5F:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1468 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c8LfxZ--u9k0VsFBXSa3IN3dXwI.roa Signing time: Tue 31 Mar 2026 07:57:29 +0000 ROA not before: Tue 31 Mar 2026 07:57:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5224 (0x1468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=73C2DFC59FBEBBD93456C1415D26B720DDDD5F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:0b:a2:a9:bf:66:45:f8:00:21:b3:c3:c2: bd:64:9f:81:a0:38:84:74:88:df:dc:bb:2b:97:29: 12:48:ad:bf:bf:4c:d3:36:58:1a:e6:22:19:d2:b5: ea:ae:06:7d:0d:b4:64:52:56:1c:15:a1:30:0c:be: 26:7e:15:34:ac:87:40:de:68:e0:f6:8e:0c:aa:43: 6d:b2:07:21:3f:bd:34:df:50:4c:b4:b8:b2:75:7d: 44:68:bd:12:02:9a:1d:58:52:d6:41:a8:f2:ea:48: 41:80:89:1a:2c:95:8e:c8:d8:aa:40:74:63:f6:56: b0:f2:8c:e7:ce:44:2e:e0:de:4c:24:20:fb:bb:ce: 95:a4:70:54:c5:a2:6d:84:ad:1a:4b:63:76:40:a1: ec:6a:bc:ac:4f:6e:28:99:79:5f:af:64:a1:00:43: e9:9e:89:19:d9:0c:90:95:82:9c:7a:f7:04:74:c8: 27:90:87:d8:4e:c4:f0:72:45:04:0b:da:85:ac:92: 1a:4b:55:29:d7:60:81:55:d6:6c:cf:c3:2e:ef:96: f5:79:58:ed:00:1d:5b:61:ce:c8:a1:65:0a:2e:6a: 74:94:46:39:b6:69:82:d2:fe:c2:c7:88:af:a2:26: 47:69:c8:8f:97:85:17:2c:c0:70:c1:ef:44:76:e9: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C2:DF:C5:9F:BE:BB:D9:34:56:C1:41:5D:26:B7:20:DD:DD:5F:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c8LfxZ--u9k0VsFBXSa3IN3dXwI.roa sbgp-ipAddrBlock: critical IPv4: 1.79.88.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:86:b7:36:c5:0d:29:c8:91:a6:cd:1b:30:91:de:15:f6:7f: c0:00:78:ba:0a:13:71:e1:86:ea:0d:34:14:4e:3f:12:52:0f: 75:98:ee:c9:64:31:41:ca:1f:18:40:fb:7b:9d:f5:3c:40:0b: 44:8e:f8:23:bf:ac:8d:df:27:85:d6:65:90:1c:03:61:91:ef: 5c:3c:b9:8c:d6:61:b0:b5:20:47:04:6e:fa:e8:75:89:5a:97: 0c:82:52:9f:0e:79:0e:84:18:98:69:0d:0a:26:2f:f8:b5:f5: e6:5a:7e:59:94:80:ce:1c:26:de:e2:e4:c6:d0:06:10:8b:52: 3d:c1:56:14:4f:4c:14:1c:8f:1c:07:ac:f8:65:e8:f2:62:93: cf:8f:01:99:a2:78:83:23:cc:e1:92:56:cb:2b:40:0e:9f:06: 14:ab:13:4f:5d:34:ff:86:46:3a:4b:ff:98:3b:37:7b:6f:72: d0:6a:0b:b9:a4:03:61:c9:73:82:c7:4f:76:8a:47:8c:c5:a0: a1:bf:33:ce:91:a8:72:30:79:06:42:50:28:ba:8c:2d:0f:4a: 81:4f:ee:c8:83:2d:f5:b1:ad:09:09:27:0f:be:dd:5a:51:9a: 0d:8c:49:d4:38:de:68:b2:cb:d8:b8:b8:1e:65:8e:66:62:50: 36:c6:77:cb -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczQzJERkM1OUZCRUJC RDkzNDU2QzE0MTVEMjZCNzIwRERERDVGMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbsAuiqb9mRfgAIbPDwr1kn4GgOIR0iN/cuyuXKRJIrb+/TNM2 WBrmIhnStequBn0NtGRSVhwVoTAMviZ+FTSsh0DeaOD2jgyqQ22yByE/vTTfUEy0 uLJ1fURovRICmh1YUtZBqPLqSEGAiRoslY7I2KpAdGP2VrDyjOfORC7g3kwkIPu7 zpWkcFTFom2ErRpLY3ZAoexqvKxPbiiZeV+vZKEAQ+meiRnZDJCVgpx69wR0yCeQ h9hOxPByRQQL2oWskhpLVSnXYIFV1mzPwy7vlvV5WO0AHVthzsihZQouanSURjm2 aYLS/sLHiK+iJkdpyI+XhRcswHDB70R26aAHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUc8LfxZ++u9k0VsFBXSa3IN3dXwIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2M4TGZ4Wi0tdTlrMFZzRkJYU2EzSU4zZFh3SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABT1gwDQYJKoZIhvcNAQELBQADggEB AGuGtzbFDSnIkabNGzCR3hX2f8AAeLoKE3HhhuoNNBROPxJSD3WY7slkMUHKHxhA +3ud9TxAC0SO+CO/rI3fJ4XWZZAcA2GR71w8uYzWYbC1IEcEbvrodYlalwyCUp8O eQ6EGJhpDQomL/i19eZaflmUgM4cJt7i5MbQBhCLUj3BVhRPTBQcjxwHrPhl6PJi k8+PAZmieIMjzOGSVssrQA6fBhSrE09dNP+GRjpL/5g7N3tvctBqC7mkA2HJc4LH T3aKR4zFoKG/M86RqHIweQZCUCi6jC0PSoFP7siDLfWxrQkJJw++3VpRmg2MSdQ4 3miyy9i4uB5ljmZiUDbGd8s= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:44 2026 by rpki-client