$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kxCT5j7YyXvcVBi5QxezoigDt8k.roa File: kxCT5j7YyXvcVBi5QxezoigDt8k.roa (raw, json) Hash identifier: 7lnpFZboJPnCmPe0tu+kKXYyItaETMkfZixlxkNDKPE= Subject key identifier: 93:10:93:E6:3E:D8:C9:7B:DC:54:18:B9:43:17:B3:A2:28:03:B7:C9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1501 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kxCT5j7YyXvcVBi5QxezoigDt8k.roa Signing time: Tue 31 Mar 2026 07:58:44 +0000 ROA not before: Tue 31 Mar 2026 07:58:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5377 (0x1501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=931093E63ED8C97BDC5418B94317B3A22803B7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:2a:89:be:76:78:96:bd:52:09:e9:3a:9c: 50:53:0c:5e:a5:1f:6b:63:4a:c0:76:97:03:33:45: 65:0a:73:96:68:96:05:9f:68:a0:24:39:b8:41:d5: da:1a:5f:62:65:04:6d:e6:f0:8f:75:d3:53:21:6f: bf:d4:b6:ca:52:48:92:dd:f2:c7:44:59:d7:94:78: 05:02:75:d4:2b:65:41:f7:68:75:b7:ca:e3:e0:a0: 20:d4:a1:20:5c:ab:31:9f:16:c8:82:08:f4:b4:8e: 81:06:8e:27:f1:25:dd:44:43:26:29:26:61:29:b6: 12:db:38:f7:fe:12:b9:27:d1:02:ee:d3:45:08:b5: 4d:ea:5a:b2:56:fc:18:96:6f:68:bc:81:85:04:da: a4:30:09:ac:c1:29:c7:fe:06:9f:dd:2d:dd:6e:a5: 8f:61:23:44:4c:1b:b2:bb:04:55:ac:cb:25:07:9e: 0d:7f:a4:f6:19:93:49:97:87:bc:77:08:26:db:2c: 7c:c5:a2:5c:51:c3:5a:88:28:bc:19:8b:6c:ef:2e: 29:1e:db:f7:ba:9b:5b:b4:eb:9f:07:f5:3b:62:eb: d2:94:44:df:40:5e:a2:e0:e3:76:f9:62:bb:55:7b: 35:b9:10:5a:c1:05:f2:15:29:bd:ca:88:d9:69:3a: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:10:93:E6:3E:D8:C9:7B:DC:54:18:B9:43:17:B3:A2:28:03:B7:C9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kxCT5j7YyXvcVBi5QxezoigDt8k.roa sbgp-ipAddrBlock: critical IPv4: 220.210.22.0/24 Signature Algorithm: sha256WithRSAEncryption a3:1d:c9:64:a6:b8:3b:fc:e6:72:c3:00:c2:47:23:62:73:84: 7f:fb:d9:f2:c0:fe:0f:f2:3e:8b:8c:ef:ae:ab:91:b4:75:49: 91:d1:f6:d0:13:3b:a8:28:15:10:9a:55:1d:fc:50:50:dc:b5: dd:3e:c1:92:7c:f8:18:5b:7a:0a:78:f8:c2:1b:5d:24:5c:88: a1:8b:cb:5d:fa:c5:28:31:f4:b3:cf:5b:36:05:f2:92:c8:8f: 20:16:e5:b0:46:11:f5:0e:e7:c6:a3:6f:a6:5f:82:7c:31:ae: a4:3c:32:87:bd:af:43:96:05:03:e7:a4:fc:cb:f6:ce:fe:38: a3:73:02:44:8b:f2:1e:63:d5:39:63:d2:68:52:be:d2:9b:95: b2:25:c3:93:c2:31:b4:35:1e:82:74:95:8f:75:ab:ba:fe:76: ef:56:e6:55:c1:84:54:13:01:44:29:ec:5c:e1:b2:69:89:1b: 83:63:10:73:f3:8b:d4:89:32:97:a4:b6:b8:ca:74:73:f4:c1: 49:a7:af:fa:0d:a0:95:ac:41:27:6d:2c:c4:79:ad:29:2f:21: 57:f4:35:b7:fa:79:46:07:92:93:b6:25:25:c2:11:db:48:c2: 5d:c0:b7:99:df:ed:4a:3e:15:d4:fa:07:71:90:80:4e:af:9b: 4e:ac:10:3b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzMTA5M0U2M0VEOEM5 N0JEQzU0MThCOTQzMTdCM0EyMjgwM0I3QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0iSqJvnZ4lr1SCek6nFBTDF6lH2tjSsB2lwMzRWUKc5ZolgWf aKAkObhB1doaX2JlBG3m8I9101Mhb7/UtspSSJLd8sdEWdeUeAUCddQrZUH3aHW3 yuPgoCDUoSBcqzGfFsiCCPS0joEGjifxJd1EQyYpJmEpthLbOPf+Erkn0QLu00UI tU3qWrJW/BiWb2i8gYUE2qQwCazBKcf+Bp/dLd1upY9hI0RMG7K7BFWsyyUHng1/ pPYZk0mXh7x3CCbbLHzFolxRw1qIKLwZi2zvLike2/e6m1u0658H9Tti69KURN9A XqLg43b5YrtVezW5EFrBBfIVKb3KiNlpOo+ZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkxCT5j7YyXvcVBi5QxezoigDt8kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2t4Q1Q1ajdZeVh2Y1ZCaTVReGV6b2lnRHQ4ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADc0hYwDQYJKoZIhvcNAQELBQADggEB AKMdyWSmuDv85nLDAMJHI2JzhH/72fLA/g/yPouM766rkbR1SZHR9tATO6goFRCa VR38UFDctd0+wZJ8+Bhbegp4+MIbXSRciKGLy136xSgx9LPPWzYF8pLIjyAW5bBG EfUO58ajb6ZfgnwxrqQ8Moe9r0OWBQPnpPzL9s7+OKNzAkSL8h5j1Tlj0mhSvtKb lbIlw5PCMbQ1HoJ0lY91q7r+du9W5lXBhFQTAUQp7FzhsmmJG4NjEHPzi9SJMpek trjKdHP0wUmnr/oNoJWsQSdtLMR5rSkvIVf0Nbf6eUYHkpO2JSXCEdtIwl3At5nf 7Uo+FdT6B3GQgE6vm06sEDs= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:29 2026 by rpki-client