$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5fJXPI4-ISfNb5aYU0PMK4hdtU.roa File: k5fJXPI4-ISfNb5aYU0PMK4hdtU.roa (raw, json) Hash identifier: itk2hStZ8Q0E0G1fXiabTHhc1dyORj+sm+cjHvTsbjA= Subject key identifier: 93:97:C9:5C:F2:38:F8:84:9F:35:BE:5A:61:4D:0F:30:AE:21:76:D5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1852 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5fJXPI4-ISfNb5aYU0PMK4hdtU.roa Signing time: Tue 31 Mar 2026 08:05:44 +0000 ROA not before: Tue 31 Mar 2026 08:05:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6226 (0x1852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9397C95CF238F8849F35BE5A614D0F30AE2176D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:51:70:d8:91:01:ce:b1:3e:55:08:38:bd: ab:f3:8c:52:23:71:63:57:10:e6:69:22:08:d7:35: 8a:d9:76:c0:66:4e:38:a4:81:b9:32:76:07:8d:e8: ae:b2:af:ea:5e:d5:d1:e1:c9:09:ad:45:62:ea:68: 84:c8:eb:85:e3:9f:73:be:26:b5:39:4e:37:c5:2e: 4a:2a:90:44:b5:66:30:b9:fc:5d:83:25:ec:5b:3a: 86:8a:41:4c:ed:e2:b0:16:11:f2:93:4c:3b:4e:d6: 0b:05:ad:56:6f:76:d9:c9:45:3a:5a:e1:bb:79:63: d3:31:fe:a7:89:94:6b:53:ce:f8:c8:17:c6:d7:3b: 84:e8:66:3f:34:41:5a:59:79:71:00:a1:d2:8c:37: 52:59:fa:f0:b2:3e:61:cd:b9:f1:08:fe:ad:b0:1b: 68:b4:50:95:f2:da:4a:7f:f7:40:4e:97:22:20:ee: cf:bf:84:d1:ae:11:b2:66:3e:5a:a3:8a:b5:de:1e: 99:4a:67:2f:1d:f6:be:4a:1b:b0:3f:c8:4a:62:5f: 4c:da:34:b3:52:5c:01:f2:c7:8f:5c:c9:b0:6a:bd: e2:41:ca:e1:d2:09:37:e3:c4:af:a5:3b:18:00:70: f3:ce:b7:78:14:88:90:1b:99:29:e1:33:37:5d:ef: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:97:C9:5C:F2:38:F8:84:9F:35:BE:5A:61:4D:0F:30:AE:21:76:D5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5fJXPI4-ISfNb5aYU0PMK4hdtU.roa sbgp-ipAddrBlock: critical IPv4: 1.75.145.0/24 Signature Algorithm: sha256WithRSAEncryption 77:bd:a4:10:af:3a:38:be:3e:cd:a2:da:bb:61:7c:c9:af:68: 5f:af:1b:5b:32:19:09:2c:1e:9b:c4:a6:d3:9c:66:18:45:18: 55:35:12:70:db:cb:0b:1c:de:1b:49:e0:09:eb:9d:d7:fd:0d: 74:9a:a8:70:1d:2e:c2:40:39:23:af:87:2e:19:b0:08:e6:62: 76:72:2e:ab:47:5c:98:59:db:f2:bf:d1:93:c2:42:00:e2:fb: 8a:b5:e5:94:ec:06:55:0e:44:67:39:bc:38:96:95:99:e4:01: f5:4f:af:c1:84:08:85:8d:91:d7:de:d1:cd:58:d2:7a:20:5c: 22:43:4f:ae:e6:ee:2b:eb:c8:7c:e4:b9:2c:06:7c:fd:be:a0: 52:74:94:17:e0:a3:cc:56:4a:b7:d9:bc:a1:04:ba:d5:d6:5b: 59:28:ab:7d:1d:31:a2:94:6c:45:ce:e2:f7:b4:61:84:c2:aa: f1:90:fd:43:88:92:60:df:7c:90:e7:56:bb:3a:d2:0a:03:7c: 74:2f:3b:be:9f:3c:bf:43:a7:5e:69:05:93:97:87:87:11:89: 98:cc:75:59:c3:9a:8a:2f:74:6a:3f:77:05:1c:85:95:98:a4: bd:a1:a5:21:89:60:47:0f:e9:af:e4:81:69:5a:5d:71:97:4a: b6:b3:a6:a8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzOTdDOTVDRjIzOEY4 ODQ5RjM1QkU1QTYxNEQwRjMwQUUyMTc2RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+SVFw2JEBzrE+VQg4vavzjFIjcWNXEOZpIgjXNYrZdsBmTjik gbkydgeN6K6yr+pe1dHhyQmtRWLqaITI64Xjn3O+JrU5TjfFLkoqkES1ZjC5/F2D JexbOoaKQUzt4rAWEfKTTDtO1gsFrVZvdtnJRTpa4bt5Y9Mx/qeJlGtTzvjIF8bX O4ToZj80QVpZeXEAodKMN1JZ+vCyPmHNufEI/q2wG2i0UJXy2kp/90BOlyIg7s+/ hNGuEbJmPlqjirXeHplKZy8d9r5KG7A/yEpiX0zaNLNSXAHyx49cybBqveJByuHS CTfjxK+lOxgAcPPOt3gUiJAbmSnhMzdd7wxZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUk5fJXPI4+ISfNb5aYU0PMK4hdtUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2s1ZkpYUEk0LUlTZk5iNWFZVTBQTUs0aGR0VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABS5EwDQYJKoZIhvcNAQELBQADggEB AHe9pBCvOji+Ps2i2rthfMmvaF+vG1syGQksHpvEptOcZhhFGFU1EnDbywsc3htJ 4Anrndf9DXSaqHAdLsJAOSOvhy4ZsAjmYnZyLqtHXJhZ2/K/0ZPCQgDi+4q15ZTs BlUORGc5vDiWlZnkAfVPr8GECIWNkdfe0c1Y0nogXCJDT67m7ivryHzkuSwGfP2+ oFJ0lBfgo8xWSrfZvKEEutXWW1koq30dMaKUbEXO4ve0YYTCqvGQ/UOIkmDffJDn Vrs60goDfHQvO76fPL9Dp15pBZOXh4cRiZjMdVnDmoovdGo/dwUchZWYpL2hpSGJ YEcP6a/kgWlaXXGXSrazpqg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:44 2026 by rpki-client