$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dCzfzg9de8J4hfQsrFh_mWus2xo.roa File: dCzfzg9de8J4hfQsrFh_mWus2xo.roa (raw, json) Hash identifier: Hai5Ftbpvhs+4uGGchnKwsJkq4k4DkYk7EJWzoccaF4= Subject key identifier: 74:2C:DF:CE:0F:5D:7B:C2:78:85:F4:2C:AC:58:7F:99:6B:AC:DB:1A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1486 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dCzfzg9de8J4hfQsrFh_mWus2xo.roa Signing time: Tue 31 Mar 2026 07:57:42 +0000 ROA not before: Tue 31 Mar 2026 07:57:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5254 (0x1486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=742CDFCE0F5D7BC27885F42CAC587F996BACDB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:44:2a:92:0d:d1:f6:9b:4e:60:e1:a3:34: 7e:5f:9a:6c:bc:cd:3c:1e:e3:aa:47:8e:5e:3f:ac: 09:8e:82:b9:df:59:03:2e:57:d6:e4:a8:41:ee:7f: 05:bf:b5:5c:e5:e9:e4:25:1e:fa:db:61:ba:ba:cb: 1b:75:7e:f6:cf:14:de:d0:28:17:f6:0e:12:e2:d4: 78:b9:05:b5:5f:e6:3d:bd:30:5f:58:99:a1:39:c6: 03:24:5e:bf:19:ce:cd:70:7a:b7:38:bf:56:a3:db: cb:06:ee:cb:2b:c8:31:17:98:75:3a:59:63:88:0c: 26:8e:f0:c4:d4:04:4a:42:4d:1f:65:33:a0:46:9d: 33:63:36:11:88:37:a9:9c:0b:e8:46:77:20:b4:6d: af:8b:41:cd:2e:91:4d:6a:30:40:35:3b:50:85:d2: 1d:12:a9:8c:08:fb:16:bb:fc:64:c5:9b:68:32:e8: 67:53:54:4e:fa:e4:9a:6c:63:94:32:be:7c:99:82: a2:51:db:1d:e9:f9:0b:17:ea:f9:5a:c2:da:68:31: a2:a0:dd:07:7c:f0:af:3b:46:19:c2:9b:b3:ca:bc: 31:0d:02:5e:f6:40:78:60:7e:1d:9d:bf:d3:26:34: 39:d7:ab:50:53:fd:15:2d:b1:89:e0:80:e1:05:4e: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2C:DF:CE:0F:5D:7B:C2:78:85:F4:2C:AC:58:7F:99:6B:AC:DB:1A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dCzfzg9de8J4hfQsrFh_mWus2xo.roa sbgp-ipAddrBlock: critical IPv4: 1.79.38.0/23 Signature Algorithm: sha256WithRSAEncryption ce:c4:9c:a3:69:87:9d:8b:91:77:f1:51:89:8f:34:c2:63:cc: 38:39:cd:97:b0:28:87:98:54:21:a8:53:f2:b3:e2:db:65:04: 92:40:31:c3:f8:80:9a:12:7c:30:3f:6c:7e:f7:99:86:a5:b9: f6:a8:2e:e9:81:a8:7f:bb:86:9b:53:e4:5f:4b:f6:f1:15:a5: 9a:bb:39:2d:e1:d5:98:e5:9d:ca:74:1e:ac:17:c4:f6:60:66: 01:8a:2b:fc:5d:2e:31:2d:58:62:da:62:6f:e6:80:d4:0a:4f: 17:4d:ef:6d:c5:e6:3a:13:3b:ce:4e:f2:16:b4:1c:92:63:16: 29:91:66:c7:17:77:27:a4:44:d5:76:77:61:f3:99:08:22:40: 9b:75:1f:88:f1:4b:ce:ff:a4:e7:84:f6:60:e9:7a:90:47:4e: b2:8f:08:4c:a4:12:b7:10:5a:3f:41:58:86:31:3f:c7:e5:7f: d3:48:ad:44:ea:88:a1:80:93:87:fb:ec:e6:48:2e:25:db:56: 58:17:3c:89:9d:0b:47:55:1b:c1:00:4f:8d:6c:aa:d9:46:ec: 6a:16:44:a7:82:ee:e7:8f:50:eb:b2:cc:93:17:7f:1d:d3:b0: 4d:74:02:1a:8d:3a:7c:d8:88:19:b2:3a:9f:21:36:fa:24:39: 67:09:1a:09 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc0MkNERkNFMEY1RDdC QzI3ODg1RjQyQ0FDNTg3Rjk5NkJBQ0RCMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJVUQqkg3R9ptOYOGjNH5fmmy8zTwe46pHjl4/rAmOgrnfWQMu V9bkqEHufwW/tVzl6eQlHvrbYbq6yxt1fvbPFN7QKBf2DhLi1Hi5BbVf5j29MF9Y maE5xgMkXr8Zzs1werc4v1aj28sG7ssryDEXmHU6WWOIDCaO8MTUBEpCTR9lM6BG nTNjNhGIN6mcC+hGdyC0ba+LQc0ukU1qMEA1O1CF0h0SqYwI+xa7/GTFm2gy6GdT VE765JpsY5QyvnyZgqJR2x3p+QsX6vlawtpoMaKg3Qd88K87RhnCm7PKvDENAl72 QHhgfh2dv9MmNDnXq1BT/RUtsYnggOEFTquzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUdCzfzg9de8J4hfQsrFh/mWus2xowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2RDemZ6ZzlkZThKNGhmUXNyRmhfbVd1czJ4by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTyYwDQYJKoZIhvcNAQELBQADggEB AM7EnKNph52LkXfxUYmPNMJjzDg5zZewKIeYVCGoU/Kz4ttlBJJAMcP4gJoSfDA/ bH73mYalufaoLumBqH+7hptT5F9L9vEVpZq7OS3h1Zjlncp0HqwXxPZgZgGKK/xd LjEtWGLaYm/mgNQKTxdN723F5joTO85O8ha0HJJjFimRZscXdyekRNV2d2HzmQgi QJt1H4jxS87/pOeE9mDpepBHTrKPCEykErcQWj9BWIYxP8flf9NIrUTqiKGAk4f7 7OZILiXbVlgXPImdC0dVG8EAT41sqtlG7GoWRKeC7uePUOuyzJMXfx3TsE10AhqN OnzYiBmyOp8hNvokOWcJGgk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:59 2026 by rpki-client