$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNfNvI4NTvzgLAhINR_k7eGjx_I.roa File: sNfNvI4NTvzgLAhINR_k7eGjx_I.roa (raw, json) Hash identifier: C5uy5/C4C0FxwQSXR8HzYUmXxSFoTWG4DNwweD/5H5g= Subject key identifier: B0:D7:CD:BC:8E:0D:4E:FC:E0:2C:08:48:35:1F:E4:ED:E1:A3:C7:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17FC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNfNvI4NTvzgLAhINR_k7eGjx_I.roa Signing time: Tue 31 Mar 2026 08:04:55 +0000 ROA not before: Tue 31 Mar 2026 08:04:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6140 (0x17fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B0D7CDBC8E0D4EFCE02C0848351FE4EDE1A3C7F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:b5:2d:68:91:37:0a:23:9e:25:72:ab:8d: 69:a9:17:f5:92:f2:5e:9e:84:af:e4:7a:e7:db:e6: 66:3d:7e:95:a2:31:1c:f4:fb:03:c8:ac:24:81:ab: 4b:5c:35:31:6f:e5:7d:c7:49:56:57:14:1d:86:67: 61:5c:e2:a2:e1:41:43:6f:5a:28:99:53:e9:d6:18: fc:b5:75:7c:3e:f7:ff:5b:23:98:9d:17:00:83:a5: fe:9d:cf:a1:c8:2b:dd:de:99:92:9b:01:09:77:51: 9c:37:62:d7:14:37:67:85:43:e1:26:d8:ad:25:d0: 1c:f6:db:2a:b5:af:02:f0:aa:28:08:dc:29:6b:36: e5:54:28:d1:3a:51:68:2a:21:dc:c1:29:85:20:4e: 32:48:f5:5d:96:24:67:8d:b5:40:ed:c5:c6:ef:45: 03:6a:a8:5c:3f:ae:b4:c3:00:2f:d4:b8:7e:ed:f8: 1b:dd:c3:b0:f1:48:5d:ed:74:bd:1d:ea:90:e9:6a: d7:1c:a8:2c:35:36:d4:03:63:27:04:c2:7e:9a:06: c7:6a:53:6a:3e:f4:c1:1f:de:d0:3f:a8:2c:36:42: e7:37:ef:2d:f3:db:90:8d:b3:1f:95:ca:42:30:d0: d4:f6:25:3b:bd:f4:ce:6f:02:44:f6:a8:63:3e:c8: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:CD:BC:8E:0D:4E:FC:E0:2C:08:48:35:1F:E4:ED:E1:A3:C7:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNfNvI4NTvzgLAhINR_k7eGjx_I.roa sbgp-ipAddrBlock: critical IPv4: 220.210.105.0/24 Signature Algorithm: sha256WithRSAEncryption 44:a6:9f:39:66:d0:5c:b0:d4:c5:90:ca:87:51:f3:af:85:41: a3:67:70:a9:aa:ee:d4:31:a0:48:44:b4:7c:c8:16:c8:af:89: a6:73:ee:95:1e:06:09:47:e0:5d:67:18:53:2d:bf:26:c3:0f: e2:a9:29:5a:1a:a3:c2:d3:f7:68:a4:3f:98:ec:ae:e7:f6:41: 77:e2:fb:7a:d5:9e:db:49:d7:f0:2d:ba:0d:38:2a:c6:49:98: 96:d1:89:d9:7f:59:08:44:39:f7:4a:a2:1f:7c:d9:7d:cc:74: 3e:81:fd:5f:62:81:25:a3:fc:ac:cf:0b:6a:68:e3:d3:c8:d1: 4a:2e:8c:bb:af:5b:38:dc:d4:33:81:d5:9a:d8:c0:34:f7:fa: 3f:48:ad:59:23:98:58:6c:e9:62:67:24:e0:64:71:60:78:e5: 51:83:d8:de:e7:f7:14:4e:1d:a0:9c:ef:19:01:49:ce:e0:15: 69:e7:e6:88:1c:6b:d3:9d:fe:57:26:ca:b1:5e:30:3d:d6:e1: d4:3c:c4:89:27:45:ff:1c:9f:3d:78:24:01:82:67:5f:51:46: bd:fa:dd:ac:b2:6c:52:f6:fc:d2:26:76:13:16:a3:dc:e6:e6: 74:95:92:14:14:eb:2c:f7:70:f4:d2:7a:72:cb:f5:c5:7b:8f: e3:05:f5:66 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0NTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIwRDdDREJDOEUwRDRF RkNFMDJDMDg0ODM1MUZFNEVERTFBM0M3RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTGrUtaJE3CiOeJXKrjWmpF/WS8l6ehK/keufb5mY9fpWiMRz0 +wPIrCSBq0tcNTFv5X3HSVZXFB2GZ2Fc4qLhQUNvWiiZU+nWGPy1dXw+9/9bI5id FwCDpf6dz6HIK93emZKbAQl3UZw3YtcUN2eFQ+Em2K0l0Bz22yq1rwLwqigI3Clr NuVUKNE6UWgqIdzBKYUgTjJI9V2WJGeNtUDtxcbvRQNqqFw/rrTDAC/UuH7t+Bvd w7DxSF3tdL0d6pDpatccqCw1NtQDYycEwn6aBsdqU2o+9MEf3tA/qCw2Quc37y3z 25CNsx+VykIw0NT2JTu99M5vAkT2qGM+yNb/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUsNfNvI4NTvzgLAhINR/k7eGjx/IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3NOZk52STROVHZ6Z0xBaElOUl9rN2VHanhfSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADc0mkwDQYJKoZIhvcNAQELBQADggEB AESmnzlm0Fyw1MWQyodR86+FQaNncKmq7tQxoEhEtHzIFsiviaZz7pUeBglH4F1n GFMtvybDD+KpKVoao8LT92ikP5jsruf2QXfi+3rVnttJ1/Atug04KsZJmJbRidl/ WQhEOfdKoh982X3MdD6B/V9igSWj/KzPC2po49PI0UoujLuvWzjc1DOB1ZrYwDT3 +j9IrVkjmFhs6WJnJOBkcWB45VGD2N7n9xROHaCc7xkBSc7gFWnn5ogca9Od/lcm yrFeMD3W4dQ8xIknRf8cnz14JAGCZ19RRr363ayybFL2/NImdhMWo9zm5nSVkhQU 6yz3cPTSenLL9cV7j+MF9WY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:19 2026 by rpki-client