$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iM6yB9sjNXdlObbXW2CeaTHKK6g.roa File: iM6yB9sjNXdlObbXW2CeaTHKK6g.roa (raw, json) Hash identifier: iRQwrOEkzcUi7ekXGnX0tg8K/h8dBnhQ5L6wElwCFdI= Subject key identifier: 88:CE:B2:07:DB:23:35:77:65:39:B6:D7:5B:60:9E:69:31:CA:2B:A8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13FA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iM6yB9sjNXdlObbXW2CeaTHKK6g.roa Signing time: Tue 31 Mar 2026 07:56:39 +0000 ROA not before: Tue 31 Mar 2026 07:56:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5114 (0x13fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=88CEB207DB2335776539B6D75B609E6931CA2BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7a:fb:08:6a:2c:29:a4:dd:51:e0:c8:8a:58: 0f:82:fb:f5:0d:c9:35:52:45:54:7a:c0:ef:f4:69: 44:16:b5:18:d6:c8:b6:f6:f9:96:c2:95:36:d7:1e: eb:31:66:4c:64:8a:97:4f:0e:56:f8:94:b5:b7:9a: 52:f7:20:d7:a8:0a:f8:32:83:4e:be:67:cf:a8:0b: bc:2b:44:9a:7c:88:cb:57:09:f4:13:ff:a5:8f:32: e9:90:95:9e:3c:88:f2:be:27:29:b1:a8:fd:d0:ae: c0:63:80:8c:dd:4d:55:f5:39:e4:9c:e0:89:dd:cb: 92:78:2d:7b:9d:9f:dc:28:ce:a5:98:b2:4c:24:3c: e0:ed:1a:c4:47:6d:ed:30:c9:f8:26:35:60:76:c5: 89:32:3e:4d:57:4a:f3:31:f4:73:23:f3:ca:0a:e2: 0f:b0:e5:64:0e:d9:17:0e:a4:70:74:ca:cf:22:e8: 3d:f7:d3:b2:8d:17:17:06:97:e7:c5:8f:ca:13:7a: fe:89:cc:5b:04:da:3e:a7:d2:c6:cb:4a:44:2a:4b: 96:d9:02:1b:8c:28:ea:61:e3:64:30:7d:63:16:89: 20:68:7d:36:3e:ce:81:8b:a7:29:2e:7b:eb:c9:59: bf:08:ff:d0:39:85:bb:bf:fb:a5:58:29:58:34:dc: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:B2:07:DB:23:35:77:65:39:B6:D7:5B:60:9E:69:31:CA:2B:A8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iM6yB9sjNXdlObbXW2CeaTHKK6g.roa sbgp-ipAddrBlock: critical IPv4: 49.98.144.0/22 Signature Algorithm: sha256WithRSAEncryption bb:08:44:ed:24:aa:a7:3e:61:05:4e:8b:8d:30:d8:78:ac:0b: 48:89:c4:eb:10:65:0c:44:9b:1b:c8:7c:66:d1:1a:df:44:25: 04:ec:44:ff:aa:4b:0a:ec:84:26:f2:54:af:f3:55:53:cd:41: 9c:2c:db:2c:2c:99:81:b0:0a:69:c5:e7:57:30:a4:82:15:11: 38:0b:79:c5:72:c8:aa:80:e0:84:cc:84:b5:c4:14:3b:b0:1e: b3:12:4d:1e:28:b2:f6:3d:22:8f:d4:31:d1:08:76:fd:61:1e: 7e:a9:b6:6b:a2:24:21:0a:c0:2c:72:ec:c5:bf:3e:cc:be:7e: f9:88:a3:a3:8f:99:e6:94:7c:34:f8:98:33:84:4f:50:8d:82: 08:e1:fe:74:50:7a:ae:7c:20:85:bf:0b:de:8f:7b:a5:f6:d7: 6e:1e:87:32:e2:c3:d9:f0:5c:e4:64:5c:b9:29:2d:eb:8c:f3: c4:96:14:a4:da:45:ab:9d:52:08:8e:bb:c5:be:7a:94:6e:67: 82:a1:81:cd:19:f7:01:a6:40:b6:6e:f1:98:2d:63:83:c1:5c: 9f:0d:bf:7b:5e:1e:a5:4b:d7:82:f9:c5:15:70:eb:2a:0b:14: 39:a1:c4:b9:d9:e3:ea:90:f1:50:1b:32:57:72:e5:a6:6a:33: d7:b1:b7:14 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4Q0VCMjA3REIyMzM1 Nzc2NTM5QjZENzVCNjA5RTY5MzFDQTJCQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnevsIaiwppN1R4MiKWA+C+/UNyTVSRVR6wO/0aUQWtRjWyLb2 +ZbClTbXHusxZkxkipdPDlb4lLW3mlL3INeoCvgyg06+Z8+oC7wrRJp8iMtXCfQT /6WPMumQlZ48iPK+JymxqP3QrsBjgIzdTVX1OeSc4Indy5J4LXudn9wozqWYskwk PODtGsRHbe0wyfgmNWB2xYkyPk1XSvMx9HMj88oK4g+w5WQO2RcOpHB0ys8i6D33 07KNFxcGl+fFj8oTev6JzFsE2j6n0sbLSkQqS5bZAhuMKOph42QwfWMWiSBofTY+ zoGLpykue+vJWb8I/9A5hbu/+6VYKVg03BH/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUiM6yB9sjNXdlObbXW2CeaTHKK6gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2lNNnlCOXNqTlhkbE9iYlhXMkNlYVRIS0s2Zy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYpAwDQYJKoZIhvcNAQELBQADggEB ALsIRO0kqqc+YQVOi40w2HisC0iJxOsQZQxEmxvIfGbRGt9EJQTsRP+qSwrshCby VK/zVVPNQZws2ywsmYGwCmnF51cwpIIVETgLecVyyKqA4ITMhLXEFDuwHrMSTR4o svY9Io/UMdEIdv1hHn6ptmuiJCEKwCxy7MW/Psy+fvmIo6OPmeaUfDT4mDOET1CN ggjh/nRQeq58IIW/C96Pe6X2124ehzLiw9nwXORkXLkpLeuM88SWFKTaRaudUgiO u8W+epRuZ4Khgc0Z9wGmQLZu8ZgtY4PBXJ8Nv3teHqVL14L5xRVw6yoLFDmhxLnZ 4+qQ8VAbMldy5aZqM9extxQ= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:14 2026 by rpki-client