$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/orccVf4kFZh-s0YTgx6PGdrrFWM.roa File: orccVf4kFZh-s0YTgx6PGdrrFWM.roa (raw, json) Hash identifier: zh/HXHIUMBwhxMeRFfvdLLRPOtlXvoT1IouP8QLUrO4= Subject key identifier: A2:B7:1C:55:FE:24:15:98:7E:B3:46:13:83:1E:8F:19:DA:EB:15:63 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1503 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/orccVf4kFZh-s0YTgx6PGdrrFWM.roa Signing time: Tue 31 Mar 2026 07:58:45 +0000 ROA not before: Tue 31 Mar 2026 07:58:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5379 (0x1503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A2B71C55FE2415987EB34613831E8F19DAEB1563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:e3:c5:01:1d:15:71:35:11:da:42:ba:95: f0:81:d7:c2:1b:e0:f2:9b:f8:62:1b:91:09:4f:16: 58:cc:a9:4c:c8:16:55:2b:13:86:4b:6f:39:17:e5: 92:1e:3e:bb:1e:47:1b:a9:76:2a:36:7d:26:d7:c2: 67:2c:9e:e5:97:22:57:b7:00:1c:3a:55:24:0c:ad: 9f:ce:48:7f:ee:48:26:70:c5:7e:d6:3d:e6:41:40: fd:bd:15:ef:5e:1e:b5:f6:77:74:c2:40:2a:3b:06: 6a:2a:5d:4c:4e:fe:dc:08:e2:2f:99:47:7d:be:99: 6d:b5:9c:50:3a:29:f8:51:ef:3a:3f:32:24:02:f8: c4:7d:87:09:13:62:2b:84:f7:2a:e7:e5:5a:25:ba: 37:03:da:70:d2:ce:a8:0c:35:59:39:7c:4c:37:e7: 41:ba:9d:a4:5f:ff:23:58:2d:e8:2c:bb:5c:2f:33: c4:2b:8b:33:1a:a0:d2:99:70:5e:d4:63:25:33:c1: 17:86:ba:32:f1:9c:ad:a2:20:bf:2a:29:8a:7c:55: d4:dc:6b:5e:5e:ef:b5:e6:b0:63:94:02:90:b9:bb: 4a:8d:af:1a:61:52:c5:1d:35:9b:46:85:f7:d0:bc: a8:6f:21:54:ba:93:72:01:f3:59:9a:39:84:d9:1a: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B7:1C:55:FE:24:15:98:7E:B3:46:13:83:1E:8F:19:DA:EB:15:63 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/orccVf4kFZh-s0YTgx6PGdrrFWM.roa sbgp-ipAddrBlock: critical IPv4: 1.67.240.0/20 Signature Algorithm: sha256WithRSAEncryption 37:87:61:52:9e:5e:24:e7:e7:98:6d:75:05:60:13:ae:54:fa: 4a:36:ed:93:a2:f7:7c:73:d1:39:d3:50:93:53:f5:a6:d4:a4: 2e:89:24:bd:28:ed:6a:42:f1:2f:ed:db:63:5a:9f:02:d0:24: f5:ff:2f:1c:f5:d4:ff:e7:22:41:48:cb:b6:2f:9b:fe:84:01: 34:5f:bd:b6:f8:ae:ca:ba:ce:68:df:23:09:8b:4b:3d:6b:29: 11:9c:75:05:ac:59:30:6b:44:cf:b7:d6:f3:52:63:58:05:35: 55:04:0f:c7:1e:74:89:36:6f:3a:a8:db:9c:25:0b:4f:b7:b6: d9:b5:68:2f:8b:24:e8:1a:7c:f3:74:f4:77:e0:32:ab:fe:92: b5:fa:38:85:49:d8:c4:bb:7c:73:95:c1:ba:31:76:08:78:b2: 50:6e:f7:81:fd:2f:b1:c6:08:56:8c:c5:83:0a:87:b3:2f:fa: ef:88:a5:ca:4a:60:3c:0a:d2:01:31:e9:88:fa:ee:42:cc:71: d2:0a:54:bc:84:47:40:dd:08:39:88:39:85:c0:cd:c4:af:01: b6:34:91:49:51:31:8a:26:02:cc:97:74:13:3f:a1:95:c9:ea: ba:14:4e:21:78:cb:cd:26:b0:12:23:6f:12:2c:ff:4e:32:40: b8:79:be:bb -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyQjcxQzU1RkUyNDE1 OTg3RUIzNDYxMzgzMUU4RjE5REFFQjE1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYuOPFAR0VcTUR2kK6lfCB18Ib4PKb+GIbkQlPFljMqUzIFlUr E4ZLbzkX5ZIePrseRxupdio2fSbXwmcsnuWXIle3ABw6VSQMrZ/OSH/uSCZwxX7W PeZBQP29Fe9eHrX2d3TCQCo7BmoqXUxO/twI4i+ZR32+mW21nFA6KfhR7zo/MiQC +MR9hwkTYiuE9yrn5VolujcD2nDSzqgMNVk5fEw350G6naRf/yNYLegsu1wvM8Qr izMaoNKZcF7UYyUzwReGujLxnK2iIL8qKYp8VdTca15e77XmsGOUApC5u0qNrxph UsUdNZtGhffQvKhvIVS6k3IB81maOYTZGt5xAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUorccVf4kFZh+s0YTgx6PGdrrFWMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L29yY2NWZjRrRlpoLXMwWVRneDZQR2RyckZXTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQBQ/AwDQYJKoZIhvcNAQELBQADggEB ADeHYVKeXiTn55htdQVgE65U+ko27ZOi93xz0TnTUJNT9abUpC6JJL0o7WpC8S/t 22NanwLQJPX/Lxz11P/nIkFIy7Yvm/6EATRfvbb4rsq6zmjfIwmLSz1rKRGcdQWs WTBrRM+31vNSY1gFNVUED8cedIk2bzqo25wlC0+3ttm1aC+LJOgafPN09HfgMqv+ krX6OIVJ2MS7fHOVwboxdgh4slBu94H9L7HGCFaMxYMKh7Mv+u+IpcpKYDwK0gEx 6Yj67kLMcdIKVLyER0DdCDmIOYXAzcSvAbY0kUlRMYomAsyXdBM/oZXJ6roUTiF4 y80msBIjbxIs/04yQLh5vrs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:57 2026 by rpki-client