$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pFw-CbybGYDXfxVAciC5ujgNTzo.roa File: pFw-CbybGYDXfxVAciC5ujgNTzo.roa (raw, json) Hash identifier: pd2nxNZh5VOK1jSoP21UmeRjACM6fkhUpuja8T6slvU= Subject key identifier: A4:5C:3E:09:BC:9B:19:80:D7:7F:15:40:72:20:B9:BA:38:0D:4F:3A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13A9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pFw-CbybGYDXfxVAciC5ujgNTzo.roa Signing time: Tue 31 Mar 2026 07:56:02 +0000 ROA not before: Tue 31 Mar 2026 07:56:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5033 (0x13a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A45C3E09BC9B1980D77F15407220B9BA380D4F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:4a:66:a8:f0:f9:e3:01:6f:4e:56:ff:10: 26:07:6f:f6:02:98:2f:e7:38:00:5f:e1:4a:af:66: 5e:8d:86:5e:c5:2e:97:f3:94:dc:46:08:5e:d1:9a: 99:93:35:cd:68:f0:f6:aa:13:26:a5:35:dd:0e:b2: d9:b5:c4:45:68:ab:45:0e:2b:2e:d2:4b:ac:ee:5d: 60:49:3f:4b:6d:e7:f2:60:83:d2:8d:f4:fc:7e:5e: 29:5a:95:7c:af:4f:e5:eb:5b:dd:a4:93:cd:83:d0: 8b:0e:ac:62:ba:c9:32:71:28:f9:9d:10:1d:78:8c: de:c5:08:0a:94:a5:5a:c8:15:33:b9:06:7d:01:26: eb:1f:a7:88:c8:94:cf:5e:16:0f:71:30:d3:ec:1f: fe:33:5b:95:c4:4c:97:4e:a2:2b:bb:83:71:64:75: bf:f6:61:ba:78:4a:af:7d:31:a6:d9:4e:ef:67:62: 1c:d4:e9:f1:60:25:5f:57:8e:39:39:a6:f8:52:5e: a3:79:7d:6d:bc:9a:97:71:98:10:84:b0:a1:46:90: 76:69:02:0c:d8:ca:63:04:15:e0:af:b7:3b:7d:10: f8:3d:d0:42:6f:c9:f1:d8:75:88:e6:fc:a3:b7:d6: c4:f7:87:d0:8d:fe:70:70:82:be:7e:f7:18:69:ac: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5C:3E:09:BC:9B:19:80:D7:7F:15:40:72:20:B9:BA:38:0D:4F:3A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pFw-CbybGYDXfxVAciC5ujgNTzo.roa sbgp-ipAddrBlock: critical IPv4: 49.97.72.0/22 Signature Algorithm: sha256WithRSAEncryption ac:ed:fb:d0:b4:f6:0a:a7:9a:f5:09:25:bb:9d:22:31:7f:28: f8:05:f6:ad:43:76:7d:b4:08:6f:81:6d:a3:29:37:d6:26:a7: 1c:e0:ec:f2:57:fb:fe:2f:0f:7f:89:51:8e:18:20:b6:fc:6a: 99:d6:46:fc:1f:d0:7e:ea:0e:7e:62:f1:d4:13:dd:51:a5:c1: 0e:57:9c:3e:c1:ef:b8:1f:db:7e:61:8e:75:cb:e4:01:a9:5f: af:33:61:15:f2:64:1b:13:fa:0a:55:b1:08:5e:fa:51:48:7b: 12:27:6b:e4:5b:74:49:51:0b:15:14:92:21:fd:bb:2f:77:f5: 95:53:de:36:96:71:8b:5d:25:c4:a4:cb:2d:3b:0d:55:b2:2e: 0c:96:57:2e:29:85:c6:4f:e4:b2:bc:3b:20:c4:b1:b5:2d:00: 36:e7:ac:f7:ea:8e:e0:1d:d9:e6:20:06:d0:1f:74:e2:62:74: 7b:5c:8b:57:01:25:4f:fd:6a:1e:31:5c:9e:41:1b:03:a4:30: 40:b1:8c:39:3b:0b:cc:6d:82:e0:4b:9b:8a:f9:f1:3c:bc:40: 7b:eb:1e:0a:3e:be:8f:dc:17:6f:b2:53:54:5a:b9:d2:16:3b: ad:20:74:03:2b:d6:01:da:95:f5:46:ea:de:cc:46:ed:d5:a8: 5d:e9:de:82 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE0NUMzRTA5QkM5QjE5 ODBENzdGMTU0MDcyMjBCOUJBMzgwRDRGM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2BUpmqPD54wFvTlb/ECYHb/YCmC/nOABf4UqvZl6Nhl7FLpfz lNxGCF7RmpmTNc1o8PaqEyalNd0Ostm1xEVoq0UOKy7SS6zuXWBJP0tt5/Jgg9KN 9Px+XilalXyvT+XrW92kk82D0IsOrGK6yTJxKPmdEB14jN7FCAqUpVrIFTO5Bn0B Jusfp4jIlM9eFg9xMNPsH/4zW5XETJdOoiu7g3Fkdb/2Ybp4Sq99MabZTu9nYhzU 6fFgJV9Xjjk5pvhSXqN5fW28mpdxmBCEsKFGkHZpAgzYymMEFeCvtzt9EPg90EJv yfHYdYjm/KO31sT3h9CN/nBwgr5+9xhprEgrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUpFw+CbybGYDXfxVAciC5ujgNTzowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3BGdy1DYnliR1lEWGZ4VkFjaUM1dWpnTlR6by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYUgwDQYJKoZIhvcNAQELBQADggEB AKzt+9C09gqnmvUJJbudIjF/KPgF9q1Ddn20CG+BbaMpN9Ympxzg7PJX+/4vD3+J UY4YILb8apnWRvwf0H7qDn5i8dQT3VGlwQ5XnD7B77gf235hjnXL5AGpX68zYRXy ZBsT+gpVsQhe+lFIexIna+RbdElRCxUUkiH9uy939ZVT3jaWcYtdJcSkyy07DVWy LgyWVy4phcZP5LK8OyDEsbUtADbnrPfqjuAd2eYgBtAfdOJidHtci1cBJU/9ah4x XJ5BGwOkMECxjDk7C8xtguBLm4r58Ty8QHvrHgo+vo/cF2+yU1RaudIWO60gdAMr 1gHalfVG6t7MRu3VqF3p3oI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:01 2026 by rpki-client