$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iH3xMXjiPGEEE35b53pQa5xiWVs.roa File: iH3xMXjiPGEEE35b53pQa5xiWVs.roa (raw, json) Hash identifier: 9w6BusQIVIKNd5rCB10Lk+nNI0PiuctZnL3YxDFKwkc= Subject key identifier: 88:7D:F1:31:78:E2:3C:61:04:13:7E:5B:E7:7A:50:6B:9C:62:59:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1620 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iH3xMXjiPGEEE35b53pQa5xiWVs.roa Signing time: Tue 31 Mar 2026 08:01:11 +0000 ROA not before: Tue 31 Mar 2026 08:01:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5664 (0x1620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=887DF13178E23C6104137E5BE77A506B9C62595B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:31:69:61:72:26:05:63:54:d6:54:13:52: 57:26:57:c0:08:fe:69:5c:ef:30:6a:11:9a:e2:e9: 9b:49:06:29:17:77:ea:a7:f5:db:4d:00:a5:42:85: 90:e7:9d:d8:5d:31:bc:7a:6c:48:7f:92:08:67:2b: 39:ed:69:db:33:1d:f2:c0:98:e5:07:7d:e4:42:33: 17:7b:87:f2:7d:5b:d4:e5:3d:5e:e5:4f:81:10:c3: f5:8f:09:9e:b5:4c:0c:35:5d:40:7f:1c:d8:18:31: 5f:04:74:54:3d:48:26:6b:77:27:41:2d:d2:7f:f7: ac:56:8b:b3:7d:de:66:6d:93:ac:41:9a:8f:dc:30: fd:ca:3a:b6:a7:57:c4:84:2a:85:58:99:4c:8a:62: 98:53:2b:09:54:07:78:d4:d5:3c:0c:d8:d4:fc:e7: 67:99:c8:7b:78:36:76:3e:32:ef:bd:b7:3e:cb:bd: 24:6f:3c:60:f4:e6:7c:e9:f6:6d:c4:49:e3:1a:03: 58:a7:70:bb:46:c4:8b:db:15:14:e3:e5:8f:57:52: 23:2d:5b:d7:ad:3b:a7:4b:01:4b:76:70:43:6a:26: d9:e9:76:3c:aa:47:6e:da:ab:f2:15:0c:85:e7:06: 01:b1:f3:f1:b8:78:1f:d0:12:f6:68:b9:75:47:ef: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7D:F1:31:78:E2:3C:61:04:13:7E:5B:E7:7A:50:6B:9C:62:59:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iH3xMXjiPGEEE35b53pQa5xiWVs.roa sbgp-ipAddrBlock: critical IPv4: 49.96.12.0/22 Signature Algorithm: sha256WithRSAEncryption c9:e6:28:52:e1:58:15:77:8e:35:14:03:fb:56:62:53:da:9a: a7:4e:46:8b:14:6f:03:cd:c8:e0:ad:ca:9f:7b:c6:0b:6e:73: 15:d0:b2:bf:dd:17:e8:1e:bb:53:92:94:4d:8f:c1:dd:6b:20: b0:f9:d7:56:14:37:66:f6:76:db:ee:ed:13:5a:1c:8c:54:7b: e6:22:45:5b:3f:22:0f:41:fb:74:8c:ad:13:e6:2f:43:a6:34: 83:12:38:66:03:74:5d:c3:9e:dc:70:a2:26:4d:b2:9e:01:61: 60:c4:51:1b:03:59:6a:56:ca:91:3d:bb:c0:04:61:03:e5:9c: 97:b5:ab:9a:c2:75:73:6b:68:90:4b:43:60:78:1f:a9:15:c2: 22:7c:50:d2:75:c4:1d:87:6d:d9:d0:52:78:50:9c:bf:90:e7: b5:b0:89:fa:25:da:56:58:03:d7:48:b7:46:87:8a:e2:ca:ca: 31:63:01:f1:f7:b6:cd:ff:24:be:7e:d6:ff:e7:ca:1f:3c:44: 73:45:ba:86:c6:4f:32:2f:ed:97:d6:38:42:d9:d1:25:97:5a: c8:f4:bc:b2:69:76:89:7d:b9:99:a1:9a:4b:2b:7d:e9:c6:66: 0c:d8:ca:b7:a1:c6:46:fe:eb:9e:f8:c3:a4:c9:00:10:34:56: 99:4c:e7:34 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4N0RGMTMxNzhFMjND NjEwNDEzN0U1QkU3N0E1MDZCOUM2MjU5NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjDjFpYXImBWNU1lQTUlcmV8AI/mlc7zBqEZri6ZtJBikXd+qn 9dtNAKVChZDnndhdMbx6bEh/kghnKzntadszHfLAmOUHfeRCMxd7h/J9W9TlPV7l T4EQw/WPCZ61TAw1XUB/HNgYMV8EdFQ9SCZrdydBLdJ/96xWi7N93mZtk6xBmo/c MP3KOranV8SEKoVYmUyKYphTKwlUB3jU1TwM2NT852eZyHt4NnY+Mu+9tz7LvSRv PGD05nzp9m3ESeMaA1incLtGxIvbFRTj5Y9XUiMtW9etO6dLAUt2cENqJtnpdjyq R27aq/IVDIXnBgGx8/G4eB/QEvZouXVH75ZdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUiH3xMXjiPGEEE35b53pQa5xiWVswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2lIM3hNWGppUEdFRUUzNWI1M3BRYTV4aVdWcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYAwwDQYJKoZIhvcNAQELBQADggEB AMnmKFLhWBV3jjUUA/tWYlPamqdORosUbwPNyOCtyp97xgtucxXQsr/dF+geu1OS lE2Pwd1rILD511YUN2b2dtvu7RNaHIxUe+YiRVs/Ig9B+3SMrRPmL0OmNIMSOGYD dF3DntxwoiZNsp4BYWDEURsDWWpWypE9u8AEYQPlnJe1q5rCdXNraJBLQ2B4H6kV wiJ8UNJ1xB2HbdnQUnhQnL+Q57Wwifol2lZYA9dIt0aHiuLKyjFjAfH3ts3/JL5+ 1v/nyh88RHNFuobGTzIv7ZfWOELZ0SWXWsj0vLJpdol9uZmhmksrfenGZgzYyreh xkb+6574w6TJABA0VplM5zQ= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:47 2026 by rpki-client