$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r4-AFoimmOUq5dryUqn3c3diB9k.roa File: r4-AFoimmOUq5dryUqn3c3diB9k.roa (raw, json) Hash identifier: 9PCFEtAqh6I0Dpl6cXTrYY5oD1aJzQ6GAis6fhAeE6Y= Subject key identifier: AF:8F:80:16:88:A6:98:E5:2A:E5:DA:F2:52:A9:F7:73:77:62:07:D9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 172C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r4-AFoimmOUq5dryUqn3c3diB9k.roa Signing time: Tue 31 Mar 2026 08:03:18 +0000 ROA not before: Tue 31 Mar 2026 08:03:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5932 (0x172c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AF8F801688A698E52AE5DAF252A9F773776207D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:46:68:73:eb:f7:1d:e5:4d:35:72:b0:91: 4f:cc:31:c0:a8:0c:f9:36:e0:0e:ef:06:47:09:fa: 31:34:cc:fe:2d:37:9e:f9:f7:08:01:8c:b1:d8:b0: b1:43:1d:ba:70:9f:1d:c8:19:0c:e6:28:ed:70:6d: d1:8f:3a:29:63:83:cc:63:40:c5:01:b8:fe:be:e6: de:fc:6d:76:8f:91:19:75:3d:37:39:0a:65:49:e3: 25:e0:df:65:72:88:e5:d4:28:3a:4a:1e:f3:e6:48: 8c:1a:e2:f5:21:5b:99:af:de:4d:33:91:aa:4e:98: 3e:0d:62:5e:bc:a4:4f:42:42:a6:66:40:e0:f2:27: 66:e6:d6:d4:ce:9b:ee:58:ee:36:23:95:8c:ca:8c: 7a:6d:8f:ad:6a:26:f3:81:44:c3:a4:f9:52:78:76: 7a:22:49:e1:68:42:4f:ac:39:01:f6:23:6c:39:de: 44:af:ca:cd:0b:db:9a:ba:83:37:a5:f9:3b:75:17: 45:2f:2d:17:fa:07:da:1a:ee:3d:7b:eb:83:40:84: e6:c7:ff:b2:1a:7c:7e:85:75:73:cd:a1:1b:97:d1: 04:86:c2:67:05:13:01:31:38:29:77:69:bf:8f:5e: cf:f6:9d:ee:62:fd:78:41:7c:a0:57:3c:fc:57:16: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8F:80:16:88:A6:98:E5:2A:E5:DA:F2:52:A9:F7:73:77:62:07:D9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r4-AFoimmOUq5dryUqn3c3diB9k.roa sbgp-ipAddrBlock: critical IPv4: 220.210.100.0/22 Signature Algorithm: sha256WithRSAEncryption d4:c1:74:26:ec:b1:06:b5:14:b5:3d:43:36:c6:99:40:b2:35: 26:b6:a5:46:6a:04:bf:e6:bb:cc:ea:90:35:10:4f:1b:00:08: ef:93:68:69:8b:4b:0c:6e:64:e9:56:53:80:b5:e5:9c:3a:2b: 95:a4:3d:b3:d1:7b:ad:37:c7:8c:64:7d:df:5a:fe:21:a5:c3: f6:d0:91:e7:ce:41:79:9f:62:0f:9a:b9:69:df:79:2e:92:c0: 92:68:41:3d:16:7f:f9:da:fc:47:5d:e4:34:cb:f5:07:c7:ac: 51:f3:3d:bf:0e:a2:b5:35:88:20:7b:29:5a:21:6e:58:29:6f: b0:3f:49:0d:61:f8:ae:e7:91:27:96:d9:71:8e:59:3c:b7:1d: fc:53:ac:ce:9a:de:e4:2e:2e:92:21:89:7a:f0:87:b7:b0:ea: 7e:9b:12:1b:9f:76:30:35:e4:4c:d0:46:95:ae:61:cb:78:2a: 32:63:59:f4:9c:79:85:f8:40:ea:05:0b:8a:b0:60:60:d4:79: 55:9a:ca:6b:1b:a6:1c:66:00:4a:f4:d2:87:d6:8d:8b:f5:0c: 37:a6:7e:74:a9:bd:57:b3:3a:d1:e1:bc:89:2e:12:56:9a:0b: be:cc:ae:36:7f:c1:ac:ab:ec:58:76:61:2f:fb:85:8d:95:e5: 54:9e:86:1b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGOEY4MDE2ODhBNjk4 RTUyQUU1REFGMjUyQTlGNzczNzc2MjA3RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8GkZoc+v3HeVNNXKwkU/MMcCoDPk24A7vBkcJ+jE0zP4tN575 9wgBjLHYsLFDHbpwnx3IGQzmKO1wbdGPOiljg8xjQMUBuP6+5t78bXaPkRl1PTc5 CmVJ4yXg32VyiOXUKDpKHvPmSIwa4vUhW5mv3k0zkapOmD4NYl68pE9CQqZmQODy J2bm1tTOm+5Y7jYjlYzKjHptj61qJvOBRMOk+VJ4dnoiSeFoQk+sOQH2I2w53kSv ys0L25q6gzel+Tt1F0UvLRf6B9oa7j1764NAhObH/7IafH6FdXPNoRuX0QSGwmcF EwExOCl3ab+PXs/2ne5i/XhBfKBXPPxXFntvAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUr4+AFoimmOUq5dryUqn3c3diB9kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3I0LUFGb2ltbU9VcTVkcnlVcW4zYzNkaUI5ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc0mQwDQYJKoZIhvcNAQELBQADggEB ANTBdCbssQa1FLU9QzbGmUCyNSa2pUZqBL/mu8zqkDUQTxsACO+TaGmLSwxuZOlW U4C15Zw6K5WkPbPRe603x4xkfd9a/iGlw/bQkefOQXmfYg+auWnfeS6SwJJoQT0W f/na/Edd5DTL9QfHrFHzPb8OorU1iCB7KVohblgpb7A/SQ1h+K7nkSeW2XGOWTy3 HfxTrM6a3uQuLpIhiXrwh7ew6n6bEhufdjA15EzQRpWuYct4KjJjWfSceYX4QOoF C4qwYGDUeVWaymsbphxmAEr00ofWjYv1DDemfnSpvVezOtHhvIkuElaaC77MrjZ/ wayr7Fh2YS/7hY2V5VSehhs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:07 2026 by rpki-client