$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jycQRy0YvULA56KnUm7yuJfLo50.roa File: jycQRy0YvULA56KnUm7yuJfLo50.roa (raw, json) Hash identifier: bJyA0wmpkUvkozLTNMPnujPqceHOgMc1+bbCM7s7c9I= Subject key identifier: 8F:27:10:47:2D:18:BD:42:C0:E7:A2:A7:52:6E:F2:B8:97:CB:A3:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17C9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jycQRy0YvULA56KnUm7yuJfLo50.roa Signing time: Tue 31 Mar 2026 08:04:33 +0000 ROA not before: Tue 31 Mar 2026 08:04:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6089 (0x17c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8F2710472D18BD42C0E7A2A7526EF2B897CBA39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:93:77:1b:80:96:46:4b:7b:37:1b:7a:72: e6:a9:94:38:67:a5:72:03:5c:f0:f5:03:74:1c:c9: 71:bf:cc:05:07:37:fa:c8:1f:73:57:dd:56:d1:c5: 6f:7b:19:cb:e3:25:f7:49:2e:77:4f:c5:6d:41:de: 2d:14:36:f0:d7:f5:5a:6b:ad:88:af:78:85:89:c5: c8:a4:1a:70:7d:70:87:80:e6:40:1f:13:d5:f3:fa: 01:a2:45:76:6a:15:ef:2a:58:7c:56:5a:79:26:40: de:70:c7:bf:a3:10:92:57:2c:e8:40:23:5d:0c:fe: c3:cb:3c:98:75:f2:9d:41:82:a3:59:9f:53:f2:47: 5f:50:49:46:0d:8a:82:78:18:db:c5:57:8e:6b:10: 65:3d:da:a0:18:97:f4:d4:2a:fa:7d:8b:2f:af:25: e2:38:66:09:2f:1f:f3:51:e2:8b:d0:1b:14:a5:e4: ad:47:33:18:af:8c:57:8e:82:07:4d:8b:03:c3:01: 03:e2:e4:8b:fb:42:d1:88:ab:4f:d3:b6:23:d7:46: 0a:89:e0:ae:3f:36:1b:07:fd:da:48:ea:f3:b6:81: cf:82:5d:44:5f:1d:5e:a0:6f:77:07:aa:d7:73:ea: 61:a0:88:04:d4:27:ab:12:5b:eb:f6:c2:38:7c:4a: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:27:10:47:2D:18:BD:42:C0:E7:A2:A7:52:6E:F2:B8:97:CB:A3:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jycQRy0YvULA56KnUm7yuJfLo50.roa sbgp-ipAddrBlock: critical IPv4: 220.159.233.0/24 Signature Algorithm: sha256WithRSAEncryption ad:9a:6f:54:10:f8:36:68:bd:49:55:b2:19:e4:0a:70:b0:9d: fb:a6:a9:7a:94:89:13:f1:3c:00:11:2c:ff:2e:b7:10:a4:90: cd:c6:bb:d6:96:83:cd:a0:cf:a5:e3:d6:ad:44:69:47:ed:44: bf:32:be:fc:bb:0d:88:5c:10:3c:6a:74:cc:ec:f2:81:0a:14: e0:44:ed:df:49:dd:fb:ab:42:74:76:9e:2b:3f:67:9e:03:80: 1a:f1:48:57:eb:ef:66:95:b0:63:88:f0:d5:e6:ca:8e:b4:ce: e8:48:5b:a4:4c:2f:ad:4f:4c:4e:cf:14:82:89:4c:15:7c:e9: 2f:d9:fd:78:ff:f8:5f:c9:46:5e:67:ec:0b:a5:0e:a2:63:fb: cf:c3:20:43:b9:12:39:2d:2e:c3:a4:ab:33:c7:20:0c:51:95: 8f:88:98:b3:c9:a4:f7:6f:65:9f:38:d2:39:0a:5d:23:0f:15: 87:cf:4b:2f:cc:3d:73:40:38:cb:ea:4f:12:8c:75:8d:aa:59: dd:84:30:e1:fa:c6:58:0c:82:c3:4f:4f:5c:cf:f0:a8:c7:d8: ee:58:62:a4:c0:2c:7b:c0:2c:23:10:9f:77:a9:ee:85:95:0f: 96:07:71:20:48:3d:e8:e9:f4:47:f5:1c:56:4e:ce:4e:83:3e: a6:fb:83:88 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGMjcxMDQ3MkQxOEJE NDJDMEU3QTJBNzUyNkVGMkI4OTdDQkEzOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfpJN3G4CWRkt7Nxt6cuaplDhnpXIDXPD1A3QcyXG/zAUHN/rI H3NX3VbRxW97GcvjJfdJLndPxW1B3i0UNvDX9VprrYiveIWJxcikGnB9cIeA5kAf E9Xz+gGiRXZqFe8qWHxWWnkmQN5wx7+jEJJXLOhAI10M/sPLPJh18p1BgqNZn1Py R19QSUYNioJ4GNvFV45rEGU92qAYl/TUKvp9iy+vJeI4ZgkvH/NR4ovQGxSl5K1H MxivjFeOggdNiwPDAQPi5Iv7QtGIq0/TtiPXRgqJ4K4/NhsH/dpI6vO2gc+CXURf HV6gb3cHqtdz6mGgiATUJ6sSW+v2wjh8SjOfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUjycQRy0YvULA56KnUm7yuJfLo50wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2p5Y1FSeTBZdlVMQTU2S25VbTd5dUpmTG81MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADcn+kwDQYJKoZIhvcNAQELBQADggEB AK2ab1QQ+DZovUlVshnkCnCwnfumqXqUiRPxPAARLP8utxCkkM3Gu9aWg82gz6Xj 1q1EaUftRL8yvvy7DYhcEDxqdMzs8oEKFOBE7d9J3furQnR2nis/Z54DgBrxSFfr 72aVsGOI8NXmyo60zuhIW6RML61PTE7PFIKJTBV86S/Z/Xj/+F/JRl5n7AulDqJj +8/DIEO5EjktLsOkqzPHIAxRlY+ImLPJpPdvZZ840jkKXSMPFYfPSy/MPXNAOMvq TxKMdY2qWd2EMOH6xlgMgsNPT1zP8KjH2O5YYqTALHvALCMQn3ep7oWVD5YHcSBI Pejp9Ef1HFZOzk6DPqb7g4g= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:25 2026 by rpki-client