$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fCy8iknCD-WFFxbb8LnEXYL1Nuo.roa File: fCy8iknCD-WFFxbb8LnEXYL1Nuo.roa (raw, json) Hash identifier: 0k0amO/PBea43W1nPT2a06ZGBKwAgXzUBiu6dtrmYG0= Subject key identifier: 7C:2C:BC:8A:49:C2:0F:E5:85:17:16:DB:F0:B9:C4:5D:82:F5:36:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16B8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fCy8iknCD-WFFxbb8LnEXYL1Nuo.roa Signing time: Tue 31 Mar 2026 08:02:23 +0000 ROA not before: Tue 31 Mar 2026 08:02:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5816 (0x16b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7C2CBC8A49C20FE5851716DBF0B9C45D82F536EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:c9:20:1f:2d:f2:3d:ac:bc:bc:1d:2c:d6: b5:bd:cc:15:8a:3c:18:d1:d2:e4:2c:69:ec:d2:6d: 07:5b:9c:5e:21:10:26:b5:aa:3b:d8:4d:0f:32:ac: 6d:11:0e:d8:77:96:bd:41:bf:cc:2e:fa:5f:76:03: 40:e3:9b:f4:46:c1:bd:24:2d:87:d1:43:09:b6:11: c9:8e:a2:a7:b6:94:88:32:ee:d1:55:99:34:c0:c0: a7:60:52:76:19:27:ca:f7:27:56:11:7e:f0:e0:21: d4:7b:8e:8f:0f:50:7e:83:a9:be:c5:c8:9b:3c:20: 1f:91:e5:e6:a1:5d:f7:e7:bc:2a:61:59:d8:d5:a1: 1e:84:5d:53:44:d9:27:e7:c5:90:a8:2b:78:65:f6: 0c:2d:50:32:f4:20:ac:6e:e5:19:04:dc:6c:c1:40: 81:f6:13:9a:8c:56:8c:e4:53:04:fa:8d:cb:23:1e: c6:16:c1:18:52:1a:ec:ed:f2:bc:19:8c:55:68:c8: 3f:fa:da:2f:a8:70:70:e0:09:52:a7:9e:e4:b4:79: e3:3a:d8:2d:01:6f:d8:7c:40:e3:3c:9d:0d:36:83: 22:47:1e:0d:9b:19:a4:8a:99:22:37:14:63:d9:5c: e1:fc:b2:c3:f4:5a:ee:98:7e:22:e7:45:f2:0b:c7: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2C:BC:8A:49:C2:0F:E5:85:17:16:DB:F0:B9:C4:5D:82:F5:36:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fCy8iknCD-WFFxbb8LnEXYL1Nuo.roa sbgp-ipAddrBlock: critical IPv4: 1.66.22.0/23 Signature Algorithm: sha256WithRSAEncryption e1:b1:d1:3d:04:5c:83:6f:10:27:e6:a7:1b:5b:d6:7e:d7:1d: f9:6d:f8:ac:45:ae:39:55:ac:9d:1b:4a:57:01:81:7f:a0:04: f6:30:9d:9c:4a:1b:26:28:66:4a:99:41:9d:94:50:8e:fe:cc: ff:6c:ec:8d:86:c2:3b:db:88:6d:a1:95:8a:0b:56:e1:aa:62: d0:cb:af:75:b8:9b:82:00:1e:f0:87:a1:c3:4e:75:14:e3:66: 7c:0a:26:8f:32:15:71:3b:cf:e8:01:98:37:2b:4f:a1:47:46: 5f:57:c7:a6:c1:2c:97:d3:3e:9d:db:6a:1e:64:ce:d3:9c:94: 11:6c:ec:ae:7e:1a:0c:82:52:bb:22:29:13:cd:b3:43:04:95: 79:ca:56:35:11:3a:ef:b5:6d:83:ec:ca:3f:c0:51:a5:4f:64: df:66:eb:d1:65:ef:9d:0f:8e:86:fe:f4:3c:b8:1d:ca:f2:f2: b9:f6:cf:b4:f5:b6:42:87:e2:b1:f4:35:ba:55:61:57:8f:22: 53:d2:5d:05:c1:c8:ae:ee:b1:dc:93:e2:21:aa:56:9d:c7:b4: 23:ec:31:1d:01:a8:2c:af:f9:14:60:52:d4:a6:bb:f2:ec:0f: fc:58:3c:a8:e5:b5:16:94:1a:b2:21:ab:8d:04:54:3d:8d:b0: 7b:e7:db:23 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdDMkNCQzhBNDlDMjBG RTU4NTE3MTZEQkYwQjlDNDVEODJGNTM2RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCDckgHy3yPay8vB0s1rW9zBWKPBjR0uQsaezSbQdbnF4hECa1 qjvYTQ8yrG0RDth3lr1Bv8wu+l92A0Djm/RGwb0kLYfRQwm2EcmOoqe2lIgy7tFV mTTAwKdgUnYZJ8r3J1YRfvDgIdR7jo8PUH6Dqb7FyJs8IB+R5eahXffnvCphWdjV oR6EXVNE2SfnxZCoK3hl9gwtUDL0IKxu5RkE3GzBQIH2E5qMVozkUwT6jcsjHsYW wRhSGuzt8rwZjFVoyD/62i+ocHDgCVKnnuS0eeM62C0Bb9h8QOM8nQ02gyJHHg2b GaSKmSI3FGPZXOH8ssP0Wu6YfiLnRfILxwXHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUfCy8iknCD+WFFxbb8LnEXYL1NuowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2ZDeThpa25DRC1XRkZ4YmI4TG5FWFlMMU51by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBQhYwDQYJKoZIhvcNAQELBQADggEB AOGx0T0EXINvECfmpxtb1n7XHflt+KxFrjlVrJ0bSlcBgX+gBPYwnZxKGyYoZkqZ QZ2UUI7+zP9s7I2GwjvbiG2hlYoLVuGqYtDLr3W4m4IAHvCHocNOdRTjZnwKJo8y FXE7z+gBmDcrT6FHRl9Xx6bBLJfTPp3bah5kztOclBFs7K5+GgyCUrsiKRPNs0ME lXnKVjUROu+1bYPsyj/AUaVPZN9m69Fl750Pjob+9Dy4Hcry8rn2z7T1tkKH4rH0 NbpVYVePIlPSXQXByK7usdyT4iGqVp3HtCPsMR0BqCyv+RRgUtSmu/LsD/xYPKjl tRaUGrIhq40EVD2NsHvn2yM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:46 2026 by rpki-client