$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rOeahXIrTpkJSUQAcZUiUk2-ECw.roa File: rOeahXIrTpkJSUQAcZUiUk2-ECw.roa (raw, json) Hash identifier: 0z2xByiPimDCI5vmwP0DXnywe32NqueS1MevUwu7Fwk= Subject key identifier: AC:E7:9A:85:72:2B:4E:99:09:49:44:00:71:95:22:52:4D:BE:10:2C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1530 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rOeahXIrTpkJSUQAcZUiUk2-ECw.roa Signing time: Tue 31 Mar 2026 07:59:08 +0000 ROA not before: Tue 31 Mar 2026 07:59:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5424 (0x1530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=ACE79A85722B4E9909494400719522524DBE102C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:b4:a5:14:16:7d:e9:fb:90:ec:76:04:32: 0e:5b:62:15:f2:55:1a:00:7f:de:92:b0:17:b1:df: 93:b6:3d:ee:98:07:12:b6:10:11:bb:16:d1:b6:ac: bc:47:83:14:b6:65:ab:b8:85:6d:03:ff:c8:e3:d3: bb:5b:42:fe:d4:86:ec:08:29:74:02:6b:c2:67:a7: 00:72:25:8a:c6:7d:12:d6:3a:62:4a:b1:8f:48:f8: ef:25:86:c8:85:0c:96:e6:35:a3:44:dc:50:f5:51: eb:b2:b8:3b:a0:10:87:a6:41:6b:ea:37:15:3d:6c: 56:31:a4:57:47:64:ed:09:44:1f:93:2a:c9:6b:fc: ed:57:7a:c5:b5:1c:04:61:e2:43:33:1c:a9:08:63: 5a:7b:b8:02:ff:28:52:0e:47:fa:c6:bb:22:d7:34: 7f:96:56:15:47:97:66:b1:61:2a:99:6f:d4:77:93: d4:3b:12:3b:99:d2:12:f7:11:ff:57:c6:e0:61:ed: db:43:f5:e8:86:ba:c4:0f:45:07:4e:57:92:ca:2c: 6d:ba:8e:a0:1c:c0:86:34:ea:e0:50:ab:5f:bc:58: ed:65:27:32:67:7e:dd:a9:99:2b:e2:d9:bb:30:f2: 35:61:85:86:39:a6:9a:fd:10:b8:f6:4e:c2:25:ff: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:9A:85:72:2B:4E:99:09:49:44:00:71:95:22:52:4D:BE:10:2C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rOeahXIrTpkJSUQAcZUiUk2-ECw.roa sbgp-ipAddrBlock: critical IPv4: 220.210.32.0/20 Signature Algorithm: sha256WithRSAEncryption d0:88:26:ac:74:6f:67:41:b2:05:c6:b3:4c:e6:5f:71:d1:55: 3d:80:fa:28:32:0f:07:70:e4:f6:f7:01:f4:b0:37:35:dd:1e: 49:be:a6:76:fc:2f:e5:82:5d:54:dc:44:a7:f5:64:79:3e:78: 65:ab:2d:2d:3e:78:8a:b5:be:0d:9d:fe:3c:e1:04:58:56:95: b0:de:75:dd:dc:af:dd:f5:ef:b9:ff:ad:0d:3a:d7:56:4a:49: e7:f4:b5:ab:cf:11:18:87:0c:f5:aa:eb:00:f5:03:01:8f:74: fa:42:d4:49:61:8b:9a:33:c5:14:17:40:97:13:39:84:65:65: 27:d8:ca:53:04:71:da:b2:d6:9a:41:e8:c4:09:cb:9c:2e:36: 92:fb:90:7f:8a:d5:68:1a:fd:d2:7e:97:1d:99:31:6b:9b:f9: 69:d2:03:3a:30:2a:32:53:a3:1c:2c:bd:ac:32:84:4e:3c:f8: e5:21:75:1f:08:f9:f4:71:ae:1d:76:ba:d1:84:dd:ea:75:b3: 3b:5c:3c:7a:92:1e:50:f7:45:5a:c4:0c:67:e2:54:bf:01:32: da:da:f9:42:4e:9f:4c:9f:cc:9c:39:fc:c9:03:dd:c5:4f:79: e3:59:da:68:f0:17:d8:d0:34:40:46:e4:b1:95:f5:1b:1f:47: 94:c1:1d:1b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDRTc5QTg1NzIyQjRF OTkwOTQ5NDQwMDcxOTUyMjUyNERCRTEwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzAbSlFBZ96fuQ7HYEMg5bYhXyVRoAf96SsBex35O2Pe6YBxK2 EBG7FtG2rLxHgxS2Zau4hW0D/8jj07tbQv7UhuwIKXQCa8JnpwByJYrGfRLWOmJK sY9I+O8lhsiFDJbmNaNE3FD1UeuyuDugEIemQWvqNxU9bFYxpFdHZO0JRB+TKslr /O1XesW1HARh4kMzHKkIY1p7uAL/KFIOR/rGuyLXNH+WVhVHl2axYSqZb9R3k9Q7 EjuZ0hL3Ef9XxuBh7dtD9eiGusQPRQdOV5LKLG26jqAcwIY06uBQq1+8WO1lJzJn ft2pmSvi2bsw8jVhhYY5ppr9ELj2TsIl/7I3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUrOeahXIrTpkJSUQAcZUiUk2+ECwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3JPZWFoWElyVHBrSlNVUUFjWlVpVWsyLUVDdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATc0iAwDQYJKoZIhvcNAQELBQADggEB ANCIJqx0b2dBsgXGs0zmX3HRVT2A+igyDwdw5Pb3AfSwNzXdHkm+pnb8L+WCXVTc RKf1ZHk+eGWrLS0+eIq1vg2d/jzhBFhWlbDedd3cr93177n/rQ0611ZKSef0tavP ERiHDPWq6wD1AwGPdPpC1Elhi5ozxRQXQJcTOYRlZSfYylMEcdqy1ppB6MQJy5wu NpL7kH+K1Wga/dJ+lx2ZMWub+WnSAzowKjJToxwsvawyhE48+OUhdR8I+fRxrh12 utGE3ep1sztcPHqSHlD3RVrEDGfiVL8BMtra+UJOn0yfzJw5/MkD3cVPeeNZ2mjw F9jQNEBG5LGV9RsfR5TBHRs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:51 2026 by rpki-client