$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pk-ORV_aO6o07NLKoEOdg13VpRI.roa File: pk-ORV_aO6o07NLKoEOdg13VpRI.roa (raw, json) Hash identifier: 5zI/ACBCWegrNXMw1N2Us+iAiEXuh8eTwBD7esIYpuY= Subject key identifier: A6:4F:8E:45:5F:DA:3B:AA:34:EC:D2:CA:A0:43:9D:83:5D:D5:A5:12 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16F3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pk-ORV_aO6o07NLKoEOdg13VpRI.roa Signing time: Tue 31 Mar 2026 08:02:50 +0000 ROA not before: Tue 31 Mar 2026 08:02:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5875 (0x16f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A64F8E455FDA3BAA34ECD2CAA0439D835DD5A512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:4d:5d:b1:ed:71:71:04:84:4c:1a:7c:1e: da:4d:27:80:ed:dc:53:31:45:51:06:74:e7:dc:0a: a4:91:de:dd:f3:17:fc:6f:2e:f5:58:ce:92:6a:ba: c8:46:8d:cf:cf:06:c4:b8:a9:f1:28:8e:94:19:09: 2c:c0:47:03:c6:58:c0:19:5f:64:a5:af:81:d3:01: 06:65:0a:4c:c1:9f:18:af:ba:33:f5:95:8e:f6:0d: 6b:e8:69:7e:cc:ea:81:5f:22:99:58:f2:99:fb:25: d1:af:62:13:13:07:5e:11:a3:f7:d2:66:a2:c6:1a: 79:9e:08:89:b1:a4:0c:e7:f6:49:ed:d7:7e:e4:ef: a6:c6:82:bc:07:f0:a2:5e:53:73:95:45:d4:c2:1c: e7:0a:84:e7:52:72:e9:b2:f8:fc:99:16:08:7c:4b: d6:a8:bd:12:0b:03:cb:d0:d7:7d:f3:c4:21:86:75: 3b:fe:08:f4:2f:b1:99:6a:11:21:0a:99:0e:de:47: d3:8a:7d:98:88:77:ce:b2:df:4b:44:27:e2:8c:64: c9:05:58:49:f5:72:ed:82:7f:ac:99:52:b4:3d:13: 72:88:a5:82:92:31:71:b3:95:67:2a:68:93:17:a1: ea:3a:65:ac:3d:7d:4c:14:56:2a:4b:50:eb:4b:a7: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4F:8E:45:5F:DA:3B:AA:34:EC:D2:CA:A0:43:9D:83:5D:D5:A5:12 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pk-ORV_aO6o07NLKoEOdg13VpRI.roa sbgp-ipAddrBlock: critical IPv4: 1.66.108.0/23 Signature Algorithm: sha256WithRSAEncryption 78:3d:3c:28:29:81:40:90:ec:21:73:11:a0:2c:22:28:06:d4: 2b:c6:39:12:39:36:0f:d9:44:c7:90:36:3b:0a:01:94:bb:75: 38:c9:9c:3d:f6:1e:50:d5:4b:99:a0:88:88:38:12:84:3f:43: 72:d4:fa:35:ab:d7:f3:c7:ce:b5:3c:3d:d2:96:f1:7c:c8:67: 4b:8b:98:12:a1:e5:49:9a:4e:eb:50:5e:a2:ea:58:40:da:53: 7f:47:02:25:fa:a2:d9:01:e2:df:4c:61:92:b6:0e:a3:5a:d0: 7b:15:ca:44:a1:cb:8c:94:f1:52:45:cf:a8:78:33:33:14:d5: 9e:03:06:c6:fb:cf:4e:9c:23:6c:c0:9d:4c:b2:e9:d6:de:a1: 26:b5:95:ae:86:4e:ad:28:9e:31:61:55:1f:52:98:45:6f:5d: 25:5d:49:6c:b4:1e:9b:62:32:e5:3b:75:d4:34:b6:c1:08:81: e2:d0:8d:47:ff:1e:32:80:6c:8a:54:40:05:8a:5b:ec:ea:9e: 4e:6a:67:dc:07:72:e9:f4:53:dc:c6:dd:38:43:4f:89:0e:6a: 04:cf:c6:ee:7d:b7:cb:ca:70:64:cb:30:f4:d8:fd:36:1a:35: e3:5f:e2:f3:e8:15:04:e7:7f:22:7b:5d:25:04:57:b7:28:2f: 59:5c:71:30 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2NEY4RTQ1NUZEQTNC QUEzNEVDRDJDQUEwNDM5RDgzNURENUE1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3E1dse1xcQSETBp8HtpNJ4Dt3FMxRVEGdOfcCqSR3t3zF/xv LvVYzpJqushGjc/PBsS4qfEojpQZCSzARwPGWMAZX2Slr4HTAQZlCkzBnxivujP1 lY72DWvoaX7M6oFfIplY8pn7JdGvYhMTB14Ro/fSZqLGGnmeCImxpAzn9knt137k 76bGgrwH8KJeU3OVRdTCHOcKhOdScumy+PyZFgh8S9aovRILA8vQ133zxCGGdTv+ CPQvsZlqESEKmQ7eR9OKfZiId86y30tEJ+KMZMkFWEn1cu2Cf6yZUrQ9E3KIpYKS MXGzlWcqaJMXoeo6Zaw9fUwUVipLUOtLp4FlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUpk+ORV/aO6o07NLKoEOdg13VpRIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3BrLU9SVl9hTzZvMDdOTEtvRU9kZzEzVnBSSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBQmwwDQYJKoZIhvcNAQELBQADggEB AHg9PCgpgUCQ7CFzEaAsIigG1CvGORI5Ng/ZRMeQNjsKAZS7dTjJnD32HlDVS5mg iIg4EoQ/Q3LU+jWr1/PHzrU8PdKW8XzIZ0uLmBKh5UmaTutQXqLqWEDaU39HAiX6 otkB4t9MYZK2DqNa0HsVykShy4yU8VJFz6h4MzMU1Z4DBsb7z06cI2zAnUyy6dbe oSa1la6GTq0onjFhVR9SmEVvXSVdSWy0HptiMuU7ddQ0tsEIgeLQjUf/HjKAbIpU QAWKW+zqnk5qZ9wHcun0U9zG3ThDT4kOagTPxu59t8vKcGTLMPTY/TYaNeNf4vPo FQTnfyJ7XSUEV7coL1lccTA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:54 2026 by rpki-client