$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dO0eZXTZEK-NLiml1NnW6OblxVc.roa File: dO0eZXTZEK-NLiml1NnW6OblxVc.roa (raw, json) Hash identifier: +9nBSdC5k4rOkvYCYTqWFvWkg1PGoL6ikJDvfVF9LTY= Subject key identifier: 74:ED:1E:65:74:D9:10:AF:8D:2E:29:A5:D4:D9:D6:E8:E6:E5:C5:57 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 174D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dO0eZXTZEK-NLiml1NnW6OblxVc.roa Signing time: Tue 31 Mar 2026 08:03:33 +0000 ROA not before: Tue 31 Mar 2026 08:03:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.103.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5965 (0x174d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=74ED1E6574D910AF8D2E29A5D4D9D6E8E6E5C557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:8b:98:b1:de:78:ff:50:e4:c5:6b:97:48: 1c:3e:d2:01:50:4f:f5:8f:e1:03:c8:c8:83:b0:26: 91:8d:44:2b:af:57:47:01:0d:19:cd:4f:7a:17:af: 7e:fe:89:3b:49:d8:0f:5a:46:21:a7:51:44:d7:27: 91:d0:f8:d8:32:96:0a:19:e0:3d:72:5f:4e:0b:d4: a1:a1:11:c7:b5:25:13:0d:f1:70:28:8d:39:26:72: e8:77:ba:2b:3f:2d:89:6c:a9:51:51:68:52:67:c3: da:f5:4b:0c:93:c6:4a:6f:fb:39:c3:e1:30:4a:f4: 94:4b:e8:f6:4e:d9:0a:fe:e1:bb:65:21:d3:00:45: e5:10:25:fc:37:a5:97:9b:ba:e2:2f:d4:0e:7b:36: f5:b2:63:80:01:c0:0e:b5:33:b0:2b:d9:0a:02:65: 91:cc:04:24:9c:9f:e1:f7:17:93:ae:c1:9a:de:d9: 0a:f7:50:3d:cc:c2:a6:10:0d:f5:1d:15:03:81:1f: f3:25:f6:4b:06:77:b4:2e:0e:4e:dd:ad:b2:e4:a5: 6f:14:e8:bb:6c:14:39:9f:2d:a6:e5:f1:a2:37:d5: 20:d2:2a:72:ad:25:17:1e:0c:78:02:36:22:1c:8d: b8:7f:77:e6:d6:2a:2b:c5:e8:5c:2e:f8:a0:d5:cf: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:1E:65:74:D9:10:AF:8D:2E:29:A5:D4:D9:D6:E8:E6:E5:C5:57 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dO0eZXTZEK-NLiml1NnW6OblxVc.roa sbgp-ipAddrBlock: critical IPv4: 49.103.128.0/18 Signature Algorithm: sha256WithRSAEncryption 24:cc:96:6b:45:7d:ff:fa:8e:ab:38:c8:29:6d:ef:e2:98:cc: 17:f5:74:f1:06:58:21:1f:ce:e8:7c:19:c7:36:73:d5:54:d7: e5:65:2b:33:c1:8f:60:6e:07:36:76:6c:bc:0d:d7:03:35:ce: f1:c7:71:8c:f5:52:8d:53:0d:a7:43:de:01:a7:c1:6b:ea:a9: 67:df:c3:dd:94:11:bc:fe:6d:ea:af:16:64:3d:79:26:7c:d3: aa:59:ab:d1:f5:46:84:b4:5c:99:f3:aa:bb:ca:f9:ac:a5:1e: da:f3:2d:1b:8c:1d:d1:20:16:20:48:0b:26:93:a2:b1:ce:3c: 9a:7e:30:e9:8f:2e:72:03:58:6c:48:57:4d:98:b3:15:4e:7d: ab:c8:34:6b:17:f6:87:91:cc:29:56:f1:84:55:50:e0:a7:d5: 45:11:e6:c2:d9:b5:3c:ab:18:17:5f:dd:8e:d1:d5:63:45:01: b9:5d:08:f0:97:5b:63:67:e3:71:2a:14:1c:36:0c:1f:c6:f6: 22:3f:12:3a:26:c6:04:62:0a:1f:79:f6:af:44:23:ae:85:e6: ba:0f:97:d4:46:e4:d1:63:b8:e5:ee:39:9f:30:23:b2:df:41: f6:a7:d4:0e:76:10:6a:39:11:5f:1d:27:f7:56:f7:51:c8:fc: 99:49:a2:a7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc0RUQxRTY1NzREOTEw QUY4RDJFMjlBNUQ0RDlENkU4RTZFNUM1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHPIuYsd54/1DkxWuXSBw+0gFQT/WP4QPIyIOwJpGNRCuvV0cB DRnNT3oXr37+iTtJ2A9aRiGnUUTXJ5HQ+NgylgoZ4D1yX04L1KGhEce1JRMN8XAo jTkmcuh3uis/LYlsqVFRaFJnw9r1SwyTxkpv+znD4TBK9JRL6PZO2Qr+4btlIdMA ReUQJfw3pZebuuIv1A57NvWyY4ABwA61M7Ar2QoCZZHMBCScn+H3F5OuwZre2Qr3 UD3MwqYQDfUdFQOBH/Ml9ksGd7QuDk7drbLkpW8U6LtsFDmfLabl8aI31SDSKnKt JRceDHgCNiIcjbh/d+bWKivF6Fwu+KDVzyHVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUdO0eZXTZEK+NLiml1NnW6OblxVcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2RPMGVaWFRaRUstTkxpbWwxTm5XNk9ibHhWYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYxZ4AwDQYJKoZIhvcNAQELBQADggEB ACTMlmtFff/6jqs4yClt7+KYzBf1dPEGWCEfzuh8Gcc2c9VU1+VlKzPBj2BuBzZ2 bLwN1wM1zvHHcYz1Uo1TDadD3gGnwWvqqWffw92UEbz+beqvFmQ9eSZ806pZq9H1 RoS0XJnzqrvK+aylHtrzLRuMHdEgFiBICyaTorHOPJp+MOmPLnIDWGxIV02YsxVO favINGsX9oeRzClW8YRVUOCn1UUR5sLZtTyrGBdf3Y7R1WNFAbldCPCXW2Nn43Eq FBw2DB/G9iI/EjomxgRiCh959q9EI66F5roPl9RG5NFjuOXuOZ8wI7LfQfan1A52 EGo5EV8dJ/dW91HI/JlJoqc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:17 2026 by rpki-client