$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kB2tYtw-flQVODKbdyIKtaQfXoc.roa File: kB2tYtw-flQVODKbdyIKtaQfXoc.roa (raw, json) Hash identifier: u4KYJELkRGu04Ai3ZvrO/z25WVL2krclvxsGulO0XiQ= Subject key identifier: 90:1D:AD:62:DC:3E:7E:54:15:38:32:9B:77:22:0A:B5:A4:1F:5E:87 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1522 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kB2tYtw-flQVODKbdyIKtaQfXoc.roa Signing time: Tue 31 Mar 2026 07:58:59 +0000 ROA not before: Tue 31 Mar 2026 07:58:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5410 (0x1522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=901DAD62DC3E7E541538329B77220AB5A41F5E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:a3:0a:94:8c:b7:af:9c:4f:ba:fb:a0:54: fc:8c:aa:e9:60:01:03:4c:d8:38:08:27:45:ba:55: 16:37:e7:89:af:05:d5:cb:76:ed:ac:e5:18:d2:01: 42:a5:07:90:5d:6a:28:e0:98:ce:98:2f:31:3c:f3: 60:6a:5f:3c:ad:b7:60:25:2c:a2:98:1d:a5:f4:cb: d5:51:36:72:80:9d:ed:3b:f0:e6:55:11:a3:b6:0f: 74:6c:88:b1:42:95:59:80:8d:d8:78:f6:9e:6e:06: b0:61:c8:18:33:86:36:8d:50:70:4c:8c:fc:ab:7c: 28:03:a1:1b:cb:1a:f0:f9:97:a1:85:23:91:a8:cf: d5:18:20:a7:89:5e:37:1f:17:75:31:01:ae:1f:be: 63:c7:4c:92:d2:96:74:51:32:06:0a:64:52:c9:ce: 44:af:ba:ca:bc:c5:66:00:45:f0:21:05:a8:70:c9: 1c:66:50:5f:e8:27:fe:da:cc:96:be:b3:94:2b:ef: b1:b1:64:f4:00:62:d8:81:52:93:8e:f9:35:5f:72: 2d:2a:cf:70:36:d7:af:98:f5:dd:d5:39:32:17:84: 17:b1:f7:fb:d6:c4:82:d6:b4:3a:cd:36:64:53:df: da:e1:7d:36:58:44:50:60:73:76:b8:55:ce:f1:df: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:AD:62:DC:3E:7E:54:15:38:32:9B:77:22:0A:B5:A4:1F:5E:87 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kB2tYtw-flQVODKbdyIKtaQfXoc.roa sbgp-ipAddrBlock: critical IPv4: 1.66.32.0/19 Signature Algorithm: sha256WithRSAEncryption a4:41:cd:0c:9b:3d:35:d1:25:17:ba:05:3d:c7:24:dd:1d:10: 94:24:d3:31:61:6e:87:64:81:3c:60:78:61:f9:89:e7:7b:7f: 73:fa:84:aa:a3:f6:fe:7e:52:81:1a:9a:28:80:c7:f5:ed:2a: 62:0d:3c:ed:84:93:e5:08:43:9f:8b:da:5b:6a:0c:b0:6f:5b: 72:45:67:de:a2:6b:fc:b8:ac:1f:03:22:4e:86:87:29:00:75: 24:7c:ed:16:68:1a:d2:f4:25:d5:6f:18:61:ac:2a:19:5a:8b: 87:f4:97:59:8e:3f:85:5f:73:8d:3a:d5:cd:d7:21:8e:d8:d3: 97:7d:96:e2:85:94:35:dc:2e:37:6b:d1:00:47:e5:44:f2:d7: a3:ef:f4:a4:d8:f9:67:6d:79:32:88:4f:27:b6:be:7d:6d:f3: 26:25:a3:be:fe:7d:ed:d4:a9:3b:f4:d1:83:ba:92:33:11:ae: 05:33:d7:53:4e:f6:1a:9e:d7:96:8e:20:63:ad:a7:40:d8:20: 70:4b:36:19:ea:d1:37:13:f9:34:54:d7:b3:ee:11:4e:77:d6: c9:d6:1b:5e:e9:86:28:00:30:ad:47:09:fa:c1:15:08:68:9d: 43:85:46:98:2a:f5:07:6c:8e:14:0c:fd:ea:bc:04:93:fc:c9: 98:67:0d:92 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwMURBRDYyREMzRTdF NTQxNTM4MzI5Qjc3MjIwQUI1QTQxRjVFODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDal6MKlIy3r5xPuvugVPyMqulgAQNM2DgIJ0W6VRY354mvBdXL du2s5RjSAUKlB5BdaijgmM6YLzE882BqXzytt2AlLKKYHaX0y9VRNnKAne078OZV EaO2D3RsiLFClVmAjdh49p5uBrBhyBgzhjaNUHBMjPyrfCgDoRvLGvD5l6GFI5Go z9UYIKeJXjcfF3UxAa4fvmPHTJLSlnRRMgYKZFLJzkSvusq8xWYARfAhBahwyRxm UF/oJ/7azJa+s5Qr77GxZPQAYtiBUpOO+TVfci0qz3A216+Y9d3VOTIXhBex9/vW xILWtDrNNmRT39rhfTZYRFBgc3a4Vc7x3/uzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkB2tYtw+flQVODKbdyIKtaQfXocwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tCMnRZdHctZmxRVk9ES2JkeUlLdGFRZlhvYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUBQiAwDQYJKoZIhvcNAQELBQADggEB AKRBzQybPTXRJRe6BT3HJN0dEJQk0zFhbodkgTxgeGH5ied7f3P6hKqj9v5+UoEa miiAx/XtKmINPO2Ek+UIQ5+L2ltqDLBvW3JFZ96ia/y4rB8DIk6GhykAdSR87RZo GtL0JdVvGGGsKhlai4f0l1mOP4Vfc4061c3XIY7Y05d9luKFlDXcLjdr0QBH5UTy 16Pv9KTY+WdteTKITye2vn1t8yYlo77+fe3UqTv00YO6kjMRrgUz11NO9hqe15aO IGOtp0DYIHBLNhnq0TcT+TRU17PuEU531snWG17phigAMK1HCfrBFQhonUOFRpgq 9QdsjhQM/eq8BJP8yZhnDZI= -----END CERTIFICATE-----Generated at Tue Apr 7 21:02:13 2026 by rpki-client