$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/je0mf-vD6xW5nLCXdpFsEJnD00I.roa File: je0mf-vD6xW5nLCXdpFsEJnD00I.roa (raw, json) Hash identifier: iJShxnbxSiAOVWarIXS/wz0uKAAOjvrWTF/1sgNRsds= Subject key identifier: 8D:ED:26:7F:EB:C3:EB:15:B9:9C:B0:97:76:91:6C:10:99:C3:D3:42 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14EB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/je0mf-vD6xW5nLCXdpFsEJnD00I.roa Signing time: Tue 31 Mar 2026 07:58:33 +0000 ROA not before: Tue 31 Mar 2026 07:58:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5355 (0x14eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8DED267FEBC3EB15B99CB09776916C1099C3D342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:47:fa:ca:84:f7:b0:b9:8f:fa:c7:04:1c:ae: 2e:18:13:b9:70:52:b7:75:46:a7:4d:b1:aa:a4:81: 7d:48:44:3f:a2:42:2a:c6:fd:39:e9:2a:48:0c:b4: a9:ff:45:97:df:d4:09:21:ce:40:50:ca:2e:30:df: dd:db:36:c4:12:5f:30:3a:b5:fb:c4:5a:53:7c:26: c5:ff:2c:ac:f1:8f:13:be:84:25:24:61:60:07:e0: 71:23:f1:bb:c8:22:75:37:2d:99:1a:67:12:34:8f: ef:4e:b0:30:75:30:1f:6a:fa:7c:2c:d4:13:96:b5: 9c:3f:e7:7f:42:f0:8a:1f:ba:8c:48:ef:51:07:f9: ff:53:b9:de:bc:22:87:8f:a9:94:a0:6e:45:0b:9e: d7:09:26:39:84:ac:a5:96:34:ec:61:fc:e8:99:0c: 5c:f3:2b:ef:41:2c:de:4c:22:6e:96:91:cd:21:67: fd:f5:61:0b:4d:82:95:9d:fc:f7:29:2f:39:88:7c: 2f:08:7a:62:69:01:f8:5b:ea:35:11:26:e5:92:97: 27:77:a9:e4:f4:21:37:ec:34:d6:1a:eb:8d:1f:03: aa:6c:a1:d9:f8:83:f0:a3:41:0a:c4:ca:1c:db:26: 66:e9:bb:ef:47:37:6f:44:38:de:47:0e:91:68:4d: 9d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:ED:26:7F:EB:C3:EB:15:B9:9C:B0:97:76:91:6C:10:99:C3:D3:42 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/je0mf-vD6xW5nLCXdpFsEJnD00I.roa sbgp-ipAddrBlock: critical IPv4: 110.163.58.0/24 Signature Algorithm: sha256WithRSAEncryption da:d8:f1:fc:3f:f7:35:67:a6:93:22:c9:a1:0e:b9:2a:fe:61: ee:0c:3e:a1:4a:08:69:25:20:af:9f:6b:c6:1d:59:a3:55:81: 27:f9:f4:85:b6:bb:ce:0f:c0:af:4d:9e:3f:97:2a:24:86:1f: ed:20:b8:ca:88:da:d1:06:8e:7c:9f:ae:96:ac:32:2d:40:29: b8:25:66:8e:c9:28:70:31:a6:ab:6b:2e:64:de:43:8d:0f:d3: f9:c4:03:4b:ba:38:a8:77:41:0a:e2:d0:b3:6b:06:5f:f3:6d: 40:95:26:04:71:17:9a:66:af:ff:ff:0f:e5:0e:91:a8:30:31: eb:5f:3d:25:ff:ad:bf:71:c5:45:98:40:e6:a0:87:54:e1:ee: c6:03:0c:02:b4:0f:39:74:14:40:20:13:12:ab:01:53:12:9c: 09:f8:a1:df:64:00:47:df:ab:2c:54:45:fe:0b:f9:fd:cc:c9: 69:a4:e5:b9:66:2c:e8:7b:e4:0a:06:4e:ef:bb:f8:44:eb:e6: ac:00:d6:40:ea:05:ae:94:c1:89:d7:40:c7:66:31:cd:ef:7e: f1:8c:9e:cb:71:54:09:f4:2a:10:00:1a:c2:ac:59:03:0f:07: 60:0f:0a:db:83:55:0e:a6:c7:3f:b4:c9:6d:ee:c6:e9:31:19: bc:c1:3e:e8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhERUQyNjdGRUJDM0VC MTVCOTlDQjA5Nzc2OTE2QzEwOTlDM0QzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoR/rKhPewuY/6xwQcri4YE7lwUrd1RqdNsaqkgX1IRD+iQirG /TnpKkgMtKn/RZff1AkhzkBQyi4w393bNsQSXzA6tfvEWlN8JsX/LKzxjxO+hCUk YWAH4HEj8bvIInU3LZkaZxI0j+9OsDB1MB9q+nws1BOWtZw/539C8IofuoxI71EH +f9Tud68IoePqZSgbkULntcJJjmErKWWNOxh/OiZDFzzK+9BLN5MIm6Wkc0hZ/31 YQtNgpWd/PcpLzmIfC8IemJpAfhb6jURJuWSlyd3qeT0ITfsNNYa640fA6psodn4 g/CjQQrEyhzbJmbpu+9HN29EON5HDpFoTZ2BAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUje0mf+vD6xW5nLCXdpFsEJnD00IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2plMG1mLXZENnhXNW5MQ1hkcEZzRUpuRDAwSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuozowDQYJKoZIhvcNAQELBQADggEB ANrY8fw/9zVnppMiyaEOuSr+Ye4MPqFKCGklIK+fa8YdWaNVgSf59IW2u84PwK9N nj+XKiSGH+0guMqI2tEGjnyfrpasMi1AKbglZo7JKHAxpqtrLmTeQ40P0/nEA0u6 OKh3QQri0LNrBl/zbUCVJgRxF5pmr///D+UOkagwMetfPSX/rb9xxUWYQOagh1Th 7sYDDAK0Dzl0FEAgExKrAVMSnAn4od9kAEffqyxURf4L+f3MyWmk5blmLOh75AoG Tu+7+ETr5qwA1kDqBa6UwYnXQMdmMc3vfvGMnstxVAn0KhAAGsKsWQMPB2APCtuD VQ6mxz+0yW3uxukxGbzBPug= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:32 2026 by rpki-client