$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rzT4WYUA_qbnBKv8jgpQPoCG9pI.roa File: rzT4WYUA_qbnBKv8jgpQPoCG9pI.roa (raw, json) Hash identifier: F1JDXsp5Ko9hd7AJLAYslSjjrL6owwszE1PuVtsn1uY= Subject key identifier: AF:34:F8:59:85:00:FE:A6:E7:04:AB:FC:8E:0A:50:3E:80:86:F6:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1682 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rzT4WYUA_qbnBKv8jgpQPoCG9pI.roa Signing time: Tue 31 Mar 2026 08:01:56 +0000 ROA not before: Tue 31 Mar 2026 08:01:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5762 (0x1682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AF34F8598500FEA6E704ABFC8E0A503E8086F692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:6c:f2:d0:06:f1:5c:5e:6e:9a:2b:6c:22: 4d:60:1b:02:05:ef:f1:ab:a3:d4:87:53:e6:12:fa: 9e:20:94:62:86:02:61:ac:b6:ef:40:6d:c1:c1:9a: d5:dd:bc:6a:00:75:94:ee:02:5a:95:d8:aa:09:78: bd:d3:7b:79:97:62:a6:35:e1:a3:cc:16:73:9f:6f: 3e:4d:16:24:cd:ed:3e:dc:bd:1c:73:00:e6:2f:87: 60:69:05:f0:b3:a7:9d:02:f2:2e:2c:75:68:ed:c1: 1c:ba:11:0d:57:30:98:7f:25:f6:af:b5:b3:09:e9: c6:92:9c:10:63:67:9e:b2:21:4d:ac:06:f5:b6:e1: aa:cc:33:a8:66:7b:fe:a1:2d:be:16:6e:e2:0b:f7: 49:43:f5:64:c4:96:36:8b:ed:a6:12:e9:30:87:30: 3c:f5:9d:0e:1b:57:26:c8:ee:03:99:15:98:2c:7c: 3c:8b:6e:27:9b:f0:02:c9:c8:40:c4:0c:46:8f:1d: a3:db:80:44:d8:ef:3a:a4:8d:7c:2a:62:65:d3:0e: 6f:3d:48:09:bd:e9:16:8f:05:fa:2e:94:2d:10:79: 31:a8:c5:4d:72:8c:44:d3:b4:13:d0:ef:64:2c:8c: 3f:a0:f0:d1:ad:c8:3d:24:3c:45:29:84:14:b9:ba: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:F8:59:85:00:FE:A6:E7:04:AB:FC:8E:0A:50:3E:80:86:F6:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rzT4WYUA_qbnBKv8jgpQPoCG9pI.roa sbgp-ipAddrBlock: critical IPv4: 49.104.14.0/23 Signature Algorithm: sha256WithRSAEncryption 52:a5:bd:08:06:0f:3a:4d:94:ac:a8:21:1e:5e:b4:08:0e:46: 70:c2:cc:76:14:02:1b:08:0b:85:71:29:9c:58:6e:5a:50:e3: f5:1c:c1:47:86:8f:99:c6:1d:7d:fb:66:06:aa:77:a5:57:1c: 43:96:90:77:75:53:ce:db:be:59:61:d5:eb:27:12:a0:86:cc: ab:de:70:7e:9f:b2:71:15:0f:5f:d3:7e:b8:c2:eb:f1:cf:d0: 1a:da:fd:67:13:af:52:58:6f:ca:bd:6c:00:45:68:79:bf:49: 22:d9:4a:14:02:43:aa:17:c5:df:8c:a6:df:12:57:29:99:44: 1e:bf:ce:26:46:a6:48:42:63:16:97:ca:8f:59:a5:7a:b8:22: d8:8e:44:75:34:6b:8b:d7:f7:93:0c:db:e6:b6:fc:ba:ac:ce: 87:26:0b:92:12:56:31:e6:70:2f:a6:be:d9:e8:87:0f:6b:9f: 05:41:74:a3:6a:f6:47:a4:c4:e7:8c:c3:ae:51:24:f2:e9:19: c6:9f:98:f2:3f:ac:16:22:eb:ec:88:56:56:b4:35:1a:67:f9: cd:2a:36:0c:a0:48:43:99:01:55:49:a4:e5:99:9b:f3:92:04: 80:2d:e4:b1:8d:f8:28:9e:a4:ed:37:a7:1a:7b:c7:4b:5a:26: c0:f8:c0:a0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGMzRGODU5ODUwMEZF QTZFNzA0QUJGQzhFMEE1MDNFODA4NkY2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE5Wzy0AbxXF5umitsIk1gGwIF7/Gro9SHU+YS+p4glGKGAmGs tu9AbcHBmtXdvGoAdZTuAlqV2KoJeL3Te3mXYqY14aPMFnOfbz5NFiTN7T7cvRxz AOYvh2BpBfCzp50C8i4sdWjtwRy6EQ1XMJh/JfavtbMJ6caSnBBjZ56yIU2sBvW2 4arMM6hme/6hLb4WbuIL90lD9WTEljaL7aYS6TCHMDz1nQ4bVybI7gOZFZgsfDyL bieb8ALJyEDEDEaPHaPbgETY7zqkjXwqYmXTDm89SAm96RaPBfoulC0QeTGoxU1y jETTtBPQ72QsjD+g8NGtyD0kPEUphBS5us5nAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUrzT4WYUA/qbnBKv8jgpQPoCG9pIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3J6VDRXWVVBX3FibkJLdjhqZ3BRUG9DRzlwSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaA4wDQYJKoZIhvcNAQELBQADggEB AFKlvQgGDzpNlKyoIR5etAgORnDCzHYUAhsIC4VxKZxYblpQ4/UcwUeGj5nGHX37 Zgaqd6VXHEOWkHd1U87bvllh1esnEqCGzKvecH6fsnEVD1/TfrjC6/HP0Bra/WcT r1JYb8q9bABFaHm/SSLZShQCQ6oXxd+Mpt8SVymZRB6/ziZGpkhCYxaXyo9ZpXq4 ItiORHU0a4vX95MM2+a2/LqszocmC5ISVjHmcC+mvtnohw9rnwVBdKNq9kekxOeM w65RJPLpGcafmPI/rBYi6+yIVla0NRpn+c0qNgygSEOZAVVJpOWZm/OSBIAt5LGN +CiepO03pxp7x0taJsD4wKA= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:33 2026 by rpki-client