$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kDBHQp038P1DFKWfHR8-MnuGOzo.roa File: kDBHQp038P1DFKWfHR8-MnuGOzo.roa (raw, json) Hash identifier: mO5EKc/auCg4SR0SoytWbHELJuRuBRgsrr5DRmczzmk= Subject key identifier: 90:30:47:42:9D:37:F0:FD:43:14:A5:9F:1D:1F:3E:32:7B:86:3B:3A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16CE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kDBHQp038P1DFKWfHR8-MnuGOzo.roa Signing time: Tue 31 Mar 2026 08:02:32 +0000 ROA not before: Tue 31 Mar 2026 08:02:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5838 (0x16ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=903047429D37F0FD4314A59F1D1F3E327B863B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:6c:7e:15:de:1b:c2:4a:31:62:0e:3d:de: df:61:6b:7b:89:0e:17:4b:fd:3a:62:9f:0b:53:f4: 4c:3c:67:70:eb:03:e9:62:d0:02:dd:89:69:9b:fa: 1a:66:c0:d5:99:a6:fe:8a:7d:e0:12:8f:03:4d:85: bc:aa:50:88:35:e7:b7:f8:32:42:73:68:11:61:20: 18:27:fd:9c:15:bf:c5:e7:66:6a:e0:43:cb:9f:66: 39:a9:35:2e:01:ba:0d:25:c8:92:0d:ab:aa:ba:3c: 57:b4:35:0b:d2:8e:72:d2:c8:9b:30:62:7e:b0:8e: f5:4a:88:0e:e3:ac:e5:3b:f3:95:a2:53:fc:d4:ba: 6c:9c:d5:ef:45:54:82:3b:67:be:02:b1:0a:1a:35: da:fe:72:68:34:94:92:d6:46:75:ae:fc:4f:a3:69: af:96:b6:37:f1:a5:40:f1:65:cf:dc:6d:1e:c2:34: 24:c8:cf:a5:4e:14:a2:25:87:a3:86:2e:dc:5e:1c: 0d:0a:0f:a3:aa:0a:68:8b:dc:f1:ba:87:f9:9d:c0: fa:72:b2:9b:de:05:c7:bb:fa:14:85:fc:73:93:7a: 6b:4b:85:ec:f1:0d:f7:f9:e7:cf:1b:d7:39:44:f1: 5f:75:db:86:a0:ea:45:06:fd:24:c6:8c:31:89:bd: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:47:42:9D:37:F0:FD:43:14:A5:9F:1D:1F:3E:32:7B:86:3B:3A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kDBHQp038P1DFKWfHR8-MnuGOzo.roa sbgp-ipAddrBlock: critical IPv4: 1.76.64.0/22 Signature Algorithm: sha256WithRSAEncryption 28:f7:ad:ef:2a:26:e0:aa:a1:53:f4:6b:65:d4:a0:1b:5a:f2: 7c:d9:52:3b:94:9f:fd:a9:c2:95:f9:99:aa:64:ea:10:fa:bf: dc:91:e2:21:86:72:72:51:4c:c5:58:bd:79:52:ef:78:fd:6c: c7:42:b4:79:4c:42:e8:9d:a0:53:78:a9:eb:f7:59:e3:ed:01: 31:bd:72:97:02:c5:3f:91:a0:de:53:30:42:d6:33:d2:50:89: 74:4c:58:6b:45:1c:98:4c:37:85:4a:96:f6:8d:62:bb:ad:8b: 51:e9:e9:06:27:27:a4:f9:96:6f:4b:78:20:a6:30:42:98:0a: 8b:53:7b:05:ed:19:26:3f:a7:60:10:61:b6:d5:90:f4:ed:be: 21:e3:05:80:94:64:1c:be:d0:f5:0a:52:f3:19:de:3d:3f:70: 6f:a2:84:5e:3e:42:3b:48:38:15:2e:0a:1b:be:30:22:54:62: 8d:1e:34:02:a3:ed:2f:6e:4a:2a:46:21:f1:73:e3:e1:37:cb: ea:ee:1d:d3:76:37:3f:1b:2c:e6:44:17:66:19:74:0f:9a:25: a1:f2:4f:54:d4:cb:2a:31:20:be:7b:3b:e1:63:a5:c9:c4:a0: 38:85:94:90:00:ff:aa:d9:55:d1:77:92:bd:66:24:29:0f:df: 92:dc:d0:23 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwMzA0NzQyOUQzN0Yw RkQ0MzE0QTU5RjFEMUYzRTMyN0I4NjNCM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA+2x+Fd4bwkoxYg493t9ha3uJDhdL/TpinwtT9Ew8Z3DrA+li 0ALdiWmb+hpmwNWZpv6KfeASjwNNhbyqUIg157f4MkJzaBFhIBgn/ZwVv8XnZmrg Q8ufZjmpNS4Bug0lyJINq6q6PFe0NQvSjnLSyJswYn6wjvVKiA7jrOU785WiU/zU umyc1e9FVII7Z74CsQoaNdr+cmg0lJLWRnWu/E+jaa+WtjfxpUDxZc/cbR7CNCTI z6VOFKIlh6OGLtxeHA0KD6OqCmiL3PG6h/mdwPpyspveBce7+hSF/HOTemtLhezx Dff5588b1zlE8V9124ag6kUG/STGjDGJvR1PAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkDBHQp038P1DFKWfHR8+MnuGOzowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tEQkhRcDAzOFAxREZLV2ZIUjgtTW51R096by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBTEAwDQYJKoZIhvcNAQELBQADggEB ACj3re8qJuCqoVP0a2XUoBta8nzZUjuUn/2pwpX5mapk6hD6v9yR4iGGcnJRTMVY vXlS73j9bMdCtHlMQuidoFN4qev3WePtATG9cpcCxT+RoN5TMELWM9JQiXRMWGtF HJhMN4VKlvaNYruti1Hp6QYnJ6T5lm9LeCCmMEKYCotTewXtGSY/p2AQYbbVkPTt viHjBYCUZBy+0PUKUvMZ3j0/cG+ihF4+QjtIOBUuChu+MCJUYo0eNAKj7S9uSipG IfFz4+E3y+ruHdN2Nz8bLOZEF2YZdA+aJaHyT1TUyyoxIL57O+FjpcnEoDiFlJAA /6rZVdF3kr1mJCkP35Lc0CM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:33 2026 by rpki-client