$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hyMr4m_QKD1EbK_D-W1sfaMcjZE.roa File: hyMr4m_QKD1EbK_D-W1sfaMcjZE.roa (raw, json) Hash identifier: X5eW7w6QhpBpJZ4B1x2OKM4U9rxG60/QBVEgvhCu7+0= Subject key identifier: 87:23:2B:E2:6F:D0:28:3D:44:6C:AF:C3:F9:6D:6C:7D:A3:1C:8D:91 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1370 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hyMr4m_QKD1EbK_D-W1sfaMcjZE.roa Signing time: Tue 31 Mar 2026 07:55:34 +0000 ROA not before: Tue 31 Mar 2026 07:55:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4976 (0x1370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=87232BE26FD0283D446CAFC3F96D6C7DA31C8D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:20:4a:b2:bd:27:6c:5e:e0:ab:ce:af:75:93: 00:21:dd:58:fc:8d:38:e6:a0:3c:7e:bc:66:ae:61: 3a:dc:62:e7:df:af:07:e6:8f:b9:13:b0:b2:1b:17: 24:9f:8b:d7:d7:62:17:76:15:aa:03:29:11:9b:7f: b7:99:f8:c1:a4:b4:ea:4c:85:c6:2a:81:6d:27:f0: c6:ce:96:8a:9a:df:06:a0:0b:1b:e4:3d:af:d3:b2: 9d:84:de:da:30:2f:0a:15:30:26:df:68:b6:a3:4d: 19:03:85:c8:45:7f:bb:05:28:08:b2:88:85:40:81: ab:01:e2:da:fe:ec:e1:e8:1c:e4:5a:28:86:c8:14: 94:93:a0:e3:ba:c8:18:74:be:f0:ea:6b:6e:fa:16: 90:cd:23:48:34:10:cf:b9:80:81:c1:8e:32:d6:35: 5a:ac:b3:f7:a8:11:78:69:c8:79:2d:dd:64:ed:a5: 33:68:35:1a:b9:a7:36:c9:2a:7a:78:7b:44:26:2f: 18:a3:c3:aa:c1:92:0d:dd:89:22:be:22:a7:f2:f8: a6:08:e0:91:4c:7f:13:02:f2:68:b2:77:2e:00:7b: 0b:10:aa:d2:16:23:a4:31:de:8b:b8:31:03:e2:0b: 4b:11:b2:5f:81:ec:7b:a0:58:0f:d5:04:17:b3:55: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:2B:E2:6F:D0:28:3D:44:6C:AF:C3:F9:6D:6C:7D:A3:1C:8D:91 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hyMr4m_QKD1EbK_D-W1sfaMcjZE.roa sbgp-ipAddrBlock: critical IPv4: 1.75.28.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:d0:d6:8f:21:a2:3d:e3:26:bf:b8:cf:e3:2f:f2:e4:18:85: ec:99:78:0b:4d:fb:8d:68:48:96:49:56:01:33:66:15:b0:27: a3:6f:46:c7:91:27:43:4c:3c:34:df:e7:94:cf:35:b1:05:0b: d0:60:06:eb:b4:38:e4:1b:b0:b0:c7:9d:dd:09:b7:23:f7:8c: d6:11:64:01:77:d7:6e:51:80:38:d1:9e:84:7c:ec:9a:e4:49: 5e:63:9c:7e:7e:e8:39:2d:28:5f:63:b0:ed:5c:fa:cf:2d:16: cf:28:43:af:1d:d8:76:98:e4:aa:57:5b:2a:c9:b7:08:ba:8d: 38:f6:7b:48:69:1d:ef:f7:28:54:b2:58:c9:1b:8c:1e:36:ee: 94:dc:bf:11:c8:5e:1e:f9:3f:d9:ba:ff:77:ba:a8:21:ab:ed: e6:f0:8e:96:44:dd:33:05:fe:cd:cb:8d:a6:7a:9c:ad:25:2d: 2a:4e:a2:19:82:5b:f7:88:29:f4:ec:03:fc:8e:47:1f:8e:c8: aa:9e:23:8f:c4:29:b4:99:f6:3e:6f:56:58:87:48:d8:c2:68: 53:80:7e:21:91:b1:59:fd:fd:9e:56:aa:42:d9:85:45:0c:56: c6:06:75:a3:1e:13:57:58:27:a0:91:03:ab:46:77:9b:e8:17: be:a1:7f:91 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3MjMyQkUyNkZEMDI4 M0Q0NDZDQUZDM0Y5NkQ2QzdEQTMxQzhEOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2IEqyvSdsXuCrzq91kwAh3Vj8jTjmoDx+vGauYTrcYuffrwfm j7kTsLIbFySfi9fXYhd2FaoDKRGbf7eZ+MGktOpMhcYqgW0n8MbOloqa3wagCxvk Pa/Tsp2E3towLwoVMCbfaLajTRkDhchFf7sFKAiyiIVAgasB4tr+7OHoHORaKIbI FJSToOO6yBh0vvDqa276FpDNI0g0EM+5gIHBjjLWNVqss/eoEXhpyHkt3WTtpTNo NRq5pzbJKnp4e0QmLxijw6rBkg3diSK+Iqfy+KYI4JFMfxMC8miydy4AewsQqtIW I6Qx3ou4MQPiC0sRsl+B7HugWA/VBBezVWovAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhyMr4m/QKD1EbK/D+W1sfaMcjZEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2h5TXI0bV9RS0QxRWJLX0QtVzFzZmFNY2paRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBSxwwDQYJKoZIhvcNAQELBQADggEB AI/Q1o8hoj3jJr+4z+Mv8uQYheyZeAtN+41oSJZJVgEzZhWwJ6NvRseRJ0NMPDTf 55TPNbEFC9BgBuu0OOQbsLDHnd0JtyP3jNYRZAF3125RgDjRnoR87JrkSV5jnH5+ 6DktKF9jsO1c+s8tFs8oQ68d2HaY5KpXWyrJtwi6jTj2e0hpHe/3KFSyWMkbjB42 7pTcvxHIXh75P9m6/3e6qCGr7ebwjpZE3TMF/s3LjaZ6nK0lLSpOohmCW/eIKfTs A/yORx+OyKqeI4/EKbSZ9j5vVliHSNjCaFOAfiGRsVn9/Z5WqkLZhUUMVsYGdaMe E1dYJ6CRA6tGd5voF76hf5E= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:07 2026 by rpki-client