$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oRs9nZmEHNJT4XqgNFTtHepkp7Y.roa File: oRs9nZmEHNJT4XqgNFTtHepkp7Y.roa (raw, json) Hash identifier: 3CUupag/Fe5O6CVZN4hP8fGHRmZ4bryEd8Hw+kdHHh8= Subject key identifier: A1:1B:3D:9D:99:84:1C:D2:53:E1:7A:A0:34:54:ED:1D:EA:64:A7:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 176A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oRs9nZmEHNJT4XqgNFTtHepkp7Y.roa Signing time: Tue 31 Mar 2026 08:03:45 +0000 ROA not before: Tue 31 Mar 2026 08:03:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5994 (0x176a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A11B3D9D99841CD253E17AA03454ED1DEA64A7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:98:a1:92:1f:d8:d8:0e:03:2c:61:f0:a7: 0c:50:a9:d7:38:87:42:42:38:fe:63:50:4a:e4:8d: 0c:81:c5:d6:ce:93:42:50:2f:f4:a6:33:25:95:8d: 37:9c:ea:e9:d4:50:c1:bf:7f:81:e0:f0:dd:1d:dd: 19:ae:b8:62:f8:d3:c4:f7:3e:22:fe:cc:6d:b6:0c: dd:aa:b4:02:5d:d5:e6:1e:39:28:71:60:1d:2d:e1: f9:d3:d3:cf:83:e1:82:99:0e:30:bd:97:90:3d:1b: bf:a0:8c:cb:b5:ba:9a:07:26:c8:80:20:92:84:ee: ee:17:e8:da:19:6a:05:33:82:af:40:c4:b6:02:3c: e4:d9:7c:73:22:0e:1d:06:90:fd:d6:f3:88:95:f2: c0:58:09:be:95:bb:2c:46:e9:37:e4:3b:aa:05:f5: 7b:c4:5e:d3:56:44:1c:7a:6c:2b:16:7e:57:04:bd: af:c4:aa:95:cf:38:e8:b1:52:44:2a:74:65:f4:97: 15:fc:2a:bc:a4:7d:64:14:a7:52:ce:6f:45:32:7f: 21:e8:32:b9:99:0a:68:8e:ca:19:37:2b:a8:5c:8c: 23:e7:df:8b:91:44:8c:2b:7a:7f:ab:c1:c7:38:62: e1:eb:5c:b5:34:a0:c6:e2:1c:7c:e5:f5:c9:d2:70: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1B:3D:9D:99:84:1C:D2:53:E1:7A:A0:34:54:ED:1D:EA:64:A7:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oRs9nZmEHNJT4XqgNFTtHepkp7Y.roa sbgp-ipAddrBlock: critical IPv4: 220.210.112.0/21 Signature Algorithm: sha256WithRSAEncryption 69:ac:03:92:7b:24:0c:ca:ed:07:88:b0:0e:4c:45:92:86:af: ac:ad:df:22:b7:15:78:c7:aa:8f:be:fb:4e:01:92:62:3a:22: c8:51:b9:ad:88:70:58:54:5b:b5:bc:33:28:b7:bc:20:59:52: de:76:cb:0a:99:d0:bc:13:22:98:b3:77:51:c8:e9:42:e7:14: 2f:40:ed:1d:64:18:c9:a9:08:3f:71:46:66:72:93:9e:c5:e5: b3:31:2f:00:09:8f:2a:5e:de:35:70:3e:32:b6:a0:e7:ed:59: b6:aa:78:36:3e:5e:b2:e4:a0:fa:2d:db:b5:dd:c0:3e:64:3a: 80:de:50:f2:03:14:f8:b3:d6:a0:72:02:bb:c7:08:d1:8b:11: b7:23:a5:04:62:ce:3e:d7:a7:40:94:8d:61:36:6a:a3:65:cd: 16:29:56:3a:a9:d6:bc:86:4f:14:f2:ab:2e:e1:01:90:d2:ab: c4:61:cd:2d:29:30:26:24:21:9d:14:4d:85:4c:0d:96:e3:17: 88:e8:66:4c:4b:68:35:a8:cf:fd:4f:7e:e9:6f:b4:41:42:f3: 80:11:38:81:0e:d4:58:6b:3e:53:27:ca:e5:46:00:7c:e9:42: f7:f2:60:bf:88:84:c6:c4:cd:12:6f:99:6d:7d:7a:b6:6c:5f: 55:5e:06:c7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEExMUIzRDlEOTk4NDFD RDI1M0UxN0FBMDM0NTRFRDFERUE2NEE3QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2tJihkh/Y2A4DLGHwpwxQqdc4h0JCOP5jUErkjQyBxdbOk0JQ L/SmMyWVjTec6unUUMG/f4Hg8N0d3RmuuGL408T3PiL+zG22DN2qtAJd1eYeOShx YB0t4fnT08+D4YKZDjC9l5A9G7+gjMu1upoHJsiAIJKE7u4X6NoZagUzgq9AxLYC POTZfHMiDh0GkP3W84iV8sBYCb6VuyxG6TfkO6oF9XvEXtNWRBx6bCsWflcEva/E qpXPOOixUkQqdGX0lxX8KrykfWQUp1LOb0UyfyHoMrmZCmiOyhk3K6hcjCPn34uR RIwren+rwcc4YuHrXLU0oMbiHHzl9cnScLnFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUoRs9nZmEHNJT4XqgNFTtHepkp7YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L29SczluWm1FSE5KVDRYcWdORlR0SGVwa3A3WS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPc0nAwDQYJKoZIhvcNAQELBQADggEB AGmsA5J7JAzK7QeIsA5MRZKGr6yt3yK3FXjHqo+++04BkmI6IshRua2IcFhUW7W8 Myi3vCBZUt52ywqZ0LwTIpizd1HI6ULnFC9A7R1kGMmpCD9xRmZyk57F5bMxLwAJ jype3jVwPjK2oOftWbaqeDY+XrLkoPot27XdwD5kOoDeUPIDFPiz1qByArvHCNGL EbcjpQRizj7Xp0CUjWE2aqNlzRYpVjqp1ryGTxTyqy7hAZDSq8RhzS0pMCYkIZ0U TYVMDZbjF4joZkxLaDWoz/1PfulvtEFC84AROIEO1FhrPlMnyuVGAHzpQvfyYL+I hMbEzRJvmW19erZsX1VeBsc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:58 2026 by rpki-client