$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m7Y2sYpR6njiQXQTr9kMu0uMN2E.roa File: m7Y2sYpR6njiQXQTr9kMu0uMN2E.roa (raw, json) Hash identifier: LaWmyJD+EnM3X35szuRjBtFjMyps/4/rFUu6fHpB93c= Subject key identifier: 9B:B6:36:B1:8A:51:EA:78:E2:41:74:13:AF:D9:0C:BB:4B:8C:37:61 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1473 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m7Y2sYpR6njiQXQTr9kMu0uMN2E.roa Signing time: Tue 31 Mar 2026 07:57:34 +0000 ROA not before: Tue 31 Mar 2026 07:57:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5235 (0x1473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9BB636B18A51EA78E2417413AFD90CBB4B8C3761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:5a:b3:30:02:db:56:e4:15:8f:9b:db:00: 23:07:4e:93:76:b3:61:1a:9f:c2:92:82:75:09:65: a3:8a:96:52:6b:29:e2:da:67:65:6c:15:a9:d7:51: b7:e2:17:3c:f6:ee:b4:cf:df:90:b4:d7:0f:af:f5: e5:16:36:54:b7:5b:8f:4a:19:f1:bf:c6:6f:84:97: 5f:41:37:31:f6:3e:8a:56:50:1e:ad:bf:63:f5:4e: 02:02:5e:cb:c2:30:2d:41:58:54:c3:e0:5a:86:0e: 06:1a:4c:ea:09:46:f3:75:89:06:04:0d:18:e6:d5: 8a:fa:a2:05:93:1a:dc:ef:26:0f:62:b7:a4:6e:b5: 0f:cf:ff:59:82:f6:05:1c:e4:41:b0:55:ea:1c:5a: 34:cc:ca:43:c7:05:30:fc:b9:85:b2:69:2d:25:cc: 73:57:a1:20:15:48:62:ea:2e:db:c9:ab:cb:ae:6f: 4d:32:e9:b3:77:7f:64:2c:30:19:ae:56:41:e9:12: 2f:0c:b9:30:20:c9:83:9a:65:59:57:e8:97:18:53: bf:e3:6e:92:6e:33:99:50:2b:95:6e:98:31:88:85: c5:a9:f3:ed:ad:25:0f:1a:05:b9:d0:c8:4c:85:6b: d7:7d:b9:25:5a:ad:b6:be:1f:73:52:42:e9:4f:a9: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B6:36:B1:8A:51:EA:78:E2:41:74:13:AF:D9:0C:BB:4B:8C:37:61 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m7Y2sYpR6njiQXQTr9kMu0uMN2E.roa sbgp-ipAddrBlock: critical IPv4: 1.78.20.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:5a:a3:ed:a0:fa:a3:11:74:65:cb:81:d0:17:e0:bd:b7:31: 63:a9:6c:f2:b7:77:9e:9c:6a:8e:30:b1:ca:b7:f7:8a:ea:7f: 36:ba:7c:35:03:f7:a3:70:2c:1d:ee:cd:4e:30:70:47:63:1a: 79:98:45:83:76:41:40:71:73:17:6b:b4:2b:85:2b:57:ed:e3: 3a:d7:63:c3:bd:c4:e9:5b:c7:02:75:94:80:e8:f0:d7:ec:cb: 33:f8:b7:d9:48:12:8f:d3:88:6e:83:97:18:42:92:b5:0d:e5: b2:79:56:82:71:2e:ad:28:b1:e1:1d:97:8b:12:62:98:82:8c: a1:ef:11:41:8a:5d:24:2c:7b:8d:15:87:9c:23:b0:45:45:23: 99:26:67:46:80:89:81:3c:be:69:e5:e5:9d:0d:4a:64:38:64: 3f:54:6f:de:4c:0a:78:1d:79:e1:1d:01:79:8b:40:c6:39:cc: 88:95:f7:12:c3:fa:80:95:42:38:10:8d:b6:41:22:8a:c7:a0: 01:73:71:ab:88:3b:a7:26:37:e2:50:93:5c:8b:b1:e2:c8:2b: 64:8f:44:a5:79:61:8d:8d:13:a3:08:0e:8c:30:45:c1:61:f7: 5f:ef:de:1c:48:67:71:d8:33:04:51:5f:e5:ee:95:9a:53:8c: b7:5f:36:23 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlCQjYzNkIxOEE1MUVB NzhFMjQxNzQxM0FGRDkwQ0JCNEI4QzM3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyv1qzMALbVuQVj5vbACMHTpN2s2Ean8KSgnUJZaOKllJrKeLa Z2VsFanXUbfiFzz27rTP35C01w+v9eUWNlS3W49KGfG/xm+El19BNzH2PopWUB6t v2P1TgICXsvCMC1BWFTD4FqGDgYaTOoJRvN1iQYEDRjm1Yr6ogWTGtzvJg9it6Ru tQ/P/1mC9gUc5EGwVeocWjTMykPHBTD8uYWyaS0lzHNXoSAVSGLqLtvJq8uub00y 6bN3f2QsMBmuVkHpEi8MuTAgyYOaZVlX6JcYU7/jbpJuM5lQK5VumDGIhcWp8+2t JQ8aBbnQyEyFa9d9uSVarba+H3NSQulPqdGlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUm7Y2sYpR6njiQXQTr9kMu0uMN2EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L203WTJzWXBSNm5qaVFYUVRyOWtNdTB1TU4yRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBThQwDQYJKoZIhvcNAQELBQADggEB AC1ao+2g+qMRdGXLgdAX4L23MWOpbPK3d56cao4wscq394rqfza6fDUD96NwLB3u zU4wcEdjGnmYRYN2QUBxcxdrtCuFK1ft4zrXY8O9xOlbxwJ1lIDo8NfsyzP4t9lI Eo/TiG6DlxhCkrUN5bJ5VoJxLq0oseEdl4sSYpiCjKHvEUGKXSQse40Vh5wjsEVF I5kmZ0aAiYE8vmnl5Z0NSmQ4ZD9Ub95MCngdeeEdAXmLQMY5zIiV9xLD+oCVQjgQ jbZBIorHoAFzcauIO6cmN+JQk1yLseLIK2SPRKV5YY2NE6MIDowwRcFh91/v3hxI Z3HYMwRRX+XulZpTjLdfNiM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:59 2026 by rpki-client