$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cRbXVSOrxwxdA3Ia6Lt6C4242p8.roa File: cRbXVSOrxwxdA3Ia6Lt6C4242p8.roa (raw, json) Hash identifier: I4S0P9j/DcZy1w1y1lN89rzDKA4Yto0x1s+XW3kDBGA= Subject key identifier: 71:16:D7:55:23:AB:C7:0C:5D:03:72:1A:E8:BB:7A:0B:8D:B8:DA:9F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cRbXVSOrxwxdA3Ia6Lt6C4242p8.roa Signing time: Tue 31 Mar 2026 07:58:25 +0000 ROA not before: Tue 31 Mar 2026 07:58:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5337 (0x14d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7116D75523ABC70C5D03721AE8BB7A0B8DB8DA9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:75:b4:08:47:0f:fd:91:b6:12:fe:5a:2c: ca:0c:cf:48:d4:b1:d8:81:fb:8e:9d:91:0c:20:f9: e3:42:6a:3b:39:b1:3b:7d:c1:5a:c3:d8:ab:64:8d: 81:93:2e:f7:29:5e:68:e4:b3:9c:2c:f2:ac:97:f3: e0:e8:9d:8e:a3:28:75:ba:d5:e4:c9:cc:b3:3c:84: 1b:e8:42:7c:bf:d4:ea:cb:c7:04:1c:cf:d4:48:a3: 77:02:23:0f:af:dd:4f:a5:48:3d:0b:6e:9a:e2:a8: ef:9a:d6:fb:65:d7:45:fc:ee:20:c0:6d:fa:22:30: b1:09:2b:ad:eb:54:a6:ac:6e:99:3a:ee:5a:74:63: 6e:b0:27:55:d4:d8:bc:d6:82:26:89:24:de:b6:e0: 7b:9b:2e:ea:ed:31:59:33:ec:00:52:c1:94:54:0e: ca:8c:c7:ec:c5:31:7f:e1:0b:fc:81:c7:ec:af:e7: cd:85:22:0f:3a:7a:47:33:94:1a:f5:1d:c9:9d:4e: 6f:38:38:0a:c7:a3:4c:42:ce:0a:20:ac:cf:8f:f2: 11:92:fd:2a:88:50:66:42:ce:de:23:c4:f4:41:d3: 66:af:30:78:96:bd:c9:fb:d1:ea:10:10:6d:b6:d8: 28:1f:30:3f:ea:19:9e:85:4f:3d:92:2c:b2:05:c7: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:16:D7:55:23:AB:C7:0C:5D:03:72:1A:E8:BB:7A:0B:8D:B8:DA:9F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cRbXVSOrxwxdA3Ia6Lt6C4242p8.roa sbgp-ipAddrBlock: critical IPv4: 1.75.248.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:ba:6c:a3:ab:07:7c:fc:84:3f:fa:4e:45:c9:dd:8e:18:7d: 9a:db:1e:87:a7:01:77:d3:0f:2c:a5:04:9c:03:2a:f7:47:bc: 11:29:b0:59:c2:3b:b2:b8:45:a5:f3:41:0e:6c:d5:b8:99:bc: 16:60:b2:30:83:76:d9:eb:a7:4f:39:e4:92:4d:d6:48:ed:1f: 27:b7:b8:08:25:33:df:bf:54:47:43:49:e4:56:42:8e:71:a0: 11:c5:20:22:dd:ee:5b:c9:71:7c:e8:b2:fe:3e:32:51:17:bb: 5d:78:51:e5:95:12:90:e5:4a:86:30:67:35:dc:01:a2:00:bf: 0f:5c:2f:35:e9:5c:d5:93:17:5b:de:2e:57:11:4f:2f:f2:5c: 95:e1:c6:8f:47:d0:80:1c:05:20:1c:3f:0a:4f:37:c3:e1:70: 4c:9d:00:d0:85:c6:54:a7:88:7b:ad:da:ab:c2:b3:e1:34:d8: 26:9d:71:71:79:b0:d5:77:2e:9a:77:1d:67:f6:e3:b2:7c:4b: 05:ec:25:70:aa:d9:f4:18:0b:62:22:4b:fa:a8:7e:2b:09:22: e4:db:cc:c1:05:a6:57:73:9e:af:90:1e:db:29:7a:97:13:76: 73:b7:6e:01:7e:1c:0b:f4:1f:ac:62:bf:46:ab:3c:66:e5:1c: 4e:52:8d:84 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcxMTZENzU1MjNBQkM3 MEM1RDAzNzIxQUU4QkI3QTBCOERCOERBOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCodXW0CEcP/ZG2Ev5aLMoMz0jUsdiB+46dkQwg+eNCajs5sTt9 wVrD2KtkjYGTLvcpXmjks5ws8qyX8+DonY6jKHW61eTJzLM8hBvoQny/1OrLxwQc z9RIo3cCIw+v3U+lSD0LbpriqO+a1vtl10X87iDAbfoiMLEJK63rVKasbpk67lp0 Y26wJ1XU2LzWgiaJJN624HubLurtMVkz7ABSwZRUDsqMx+zFMX/hC/yBx+yv582F Ig86ekczlBr1HcmdTm84OArHo0xCzgogrM+P8hGS/SqIUGZCzt4jxPRB02avMHiW vcn70eoQEG222CgfMD/qGZ6FTz2SLLIFxxg5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcRbXVSOrxwxdA3Ia6Lt6C4242p8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2NSYlhWU09yeHd4ZEEzSWE2THQ2QzQyNDJwOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBS/gwDQYJKoZIhvcNAQELBQADggEB AE26bKOrB3z8hD/6TkXJ3Y4YfZrbHoenAXfTDyylBJwDKvdHvBEpsFnCO7K4RaXz QQ5s1biZvBZgsjCDdtnrp0855JJN1kjtHye3uAglM9+/VEdDSeRWQo5xoBHFICLd 7lvJcXzosv4+MlEXu114UeWVEpDlSoYwZzXcAaIAvw9cLzXpXNWTF1veLlcRTy/y XJXhxo9H0IAcBSAcPwpPN8PhcEydANCFxlSniHut2qvCs+E02CadcXF5sNV3Lpp3 HWf247J8SwXsJXCq2fQYC2IiS/qofisJIuTbzMEFpldznq+QHtspepcTdnO3bgF+ HAv0H6xiv0arPGblHE5SjYQ= -----END CERTIFICATE-----Generated at Tue Apr 7 22:25:14 2026 by rpki-client