$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kUYK7flae2cmjadDBNK0_-i4XXY.roa File: kUYK7flae2cmjadDBNK0_-i4XXY.roa (raw, json) Hash identifier: en9kDfjZnZ0fHXrSWIOxMJ2YYHaSUfDn99nCQXEWMvA= Subject key identifier: 91:46:0A:ED:F9:5A:7B:67:26:8D:A7:43:04:D2:B4:FF:E8:B8:5D:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1535 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kUYK7flae2cmjadDBNK0_-i4XXY.roa Signing time: Tue 31 Mar 2026 07:59:11 +0000 ROA not before: Tue 31 Mar 2026 07:59:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5429 (0x1535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=91460AEDF95A7B67268DA74304D2B4FFE8B85D76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:35:be:35:70:44:39:bd:41:db:25:b7:ec: d9:7a:20:f1:36:e4:f5:d8:56:ef:83:9d:ee:d7:67: 97:60:b3:ab:6c:47:35:a4:d1:09:f3:d9:d2:0c:9d: 2c:dc:92:cf:43:ab:2a:65:34:fb:4a:56:c1:25:d8: b5:03:28:d5:b4:cf:10:a6:41:71:18:63:97:bf:f7: 6c:5a:a6:9e:c0:7d:2b:ec:c0:08:16:a9:e7:0e:78: 65:7f:25:19:d7:8b:c1:1a:03:94:d2:13:92:ac:99: 4d:8c:ba:42:35:a7:40:da:e0:22:29:b4:35:98:17: 40:ff:a8:31:0c:81:cc:f7:b8:9e:22:82:ee:ac:fd: 9d:7a:1e:61:3d:b6:71:4f:ad:0f:58:82:a5:b2:1d: 98:56:5f:67:f5:e5:cd:54:d7:bd:b7:04:7a:0a:a0: 51:9b:78:1c:f0:c5:c1:b1:a3:09:c3:69:42:4c:45: ad:5d:87:8c:07:88:0d:a9:57:4d:d1:1c:30:b6:2e: c5:39:4e:5d:52:2b:07:94:d7:4d:95:8c:2f:dc:e5: 31:87:1e:da:e5:fb:bc:68:02:f5:3c:55:5c:84:97: 72:f1:2b:24:77:0b:fe:d2:a8:a5:9e:d4:2b:a5:ba: b4:3b:4f:ed:fb:54:c4:44:be:63:37:d0:3c:de:0f: 20:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:0A:ED:F9:5A:7B:67:26:8D:A7:43:04:D2:B4:FF:E8:B8:5D:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kUYK7flae2cmjadDBNK0_-i4XXY.roa sbgp-ipAddrBlock: critical IPv4: 1.67.192.0/19 Signature Algorithm: sha256WithRSAEncryption c3:e3:44:7d:f9:63:93:79:3e:d8:82:7d:9c:ac:05:90:2b:fa: 6f:b2:b8:8b:16:05:ab:99:be:f2:2b:1a:9a:3f:31:ac:42:42: 75:dd:cb:ed:e2:06:0c:61:b1:1b:56:e1:6d:c0:ab:d5:f8:f9: 81:63:f5:e0:05:c4:e5:33:de:f9:69:fb:cf:5e:64:f3:81:d7: a1:9a:72:81:27:e7:55:ac:ab:c7:04:6b:e4:53:d7:6d:80:f1: b4:38:a5:c9:bd:9b:2b:4e:7f:28:c9:36:19:b5:d1:c3:e4:70: 6f:69:74:89:cf:d4:0a:f8:4c:14:04:c7:75:75:42:3c:9d:e7: 47:e6:10:b9:66:c2:20:d0:b5:bf:c9:10:2c:18:6c:c2:0f:ff: 37:34:ba:79:af:fa:8f:90:59:d4:b2:22:05:0b:1f:8b:87:5a: d2:a9:5d:83:b4:08:c0:d4:64:4d:c1:b5:40:ac:95:a7:9e:10: 11:85:4e:7b:de:0d:b5:e0:e1:7b:73:1f:ef:a1:59:94:9e:b4: 23:5e:2e:54:9f:c3:70:fc:0f:2f:18:26:e8:53:9f:2d:52:b5: d5:36:0f:29:90:3d:6f:af:db:67:16:d4:9f:5c:44:52:b7:50: e9:20:a2:5d:4f:81:c1:0f:31:cd:86:a2:95:df:26:3f:86:96: bb:b7:e9:15 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkxNDYwQUVERjk1QTdC NjcyNjhEQTc0MzA0RDJCNEZGRThCODVENzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVCTW+NXBEOb1B2yW37Nl6IPE25PXYVu+Dne7XZ5dgs6tsRzWk 0Qnz2dIMnSzcks9DqyplNPtKVsEl2LUDKNW0zxCmQXEYY5e/92xapp7AfSvswAgW qecOeGV/JRnXi8EaA5TSE5KsmU2MukI1p0Da4CIptDWYF0D/qDEMgcz3uJ4igu6s /Z16HmE9tnFPrQ9YgqWyHZhWX2f15c1U1723BHoKoFGbeBzwxcGxownDaUJMRa1d h4wHiA2pV03RHDC2LsU5Tl1SKweU102VjC/c5TGHHtrl+7xoAvU8VVyEl3LxKyR3 C/7SqKWe1CulurQ7T+37VMREvmM30DzeDyC7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkUYK7flae2cmjadDBNK0/+i4XXYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tVWUs3ZmxhZTJjbWphZERCTkswXy1pNFhYWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUBQ8AwDQYJKoZIhvcNAQELBQADggEB AMPjRH35Y5N5PtiCfZysBZAr+m+yuIsWBauZvvIrGpo/MaxCQnXdy+3iBgxhsRtW 4W3Aq9X4+YFj9eAFxOUz3vlp+89eZPOB16GacoEn51Wsq8cEa+RT122A8bQ4pcm9 mytOfyjJNhm10cPkcG9pdInP1Ar4TBQEx3V1Qjyd50fmELlmwiDQtb/JECwYbMIP /zc0unmv+o+QWdSyIgULH4uHWtKpXYO0CMDUZE3BtUCslaeeEBGFTnveDbXg4Xtz H++hWZSetCNeLlSfw3D8Dy8YJuhTny1StdU2DymQPW+v22cW1J9cRFK3UOkgol1P gcEPMc2GopXfJj+Glru36RU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:11 2026 by rpki-client