$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sco1CvH5YA_5kKY1EhFcp1TSoI0.roa File: sco1CvH5YA_5kKY1EhFcp1TSoI0.roa (raw, json) Hash identifier: ba2OdOtheUGYOtlKzq3x43WavnHSN4J3F5GgoKwSJtE= Subject key identifier: B1:CA:35:0A:F1:F9:60:0F:F9:90:A6:35:12:11:5C:A7:54:D2:A0:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1764 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sco1CvH5YA_5kKY1EhFcp1TSoI0.roa Signing time: Tue 31 Mar 2026 08:03:43 +0000 ROA not before: Tue 31 Mar 2026 08:03:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5988 (0x1764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B1CA350AF1F9600FF990A63512115CA754D2A08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:dd:7e:23:7c:74:73:d6:fb:13:36:f1:06: 87:52:ee:fa:5e:96:93:67:83:72:62:8b:07:0d:cc: a9:ce:bd:93:ff:77:87:0d:0c:37:d2:ee:db:06:ee: 79:be:fb:4f:46:6c:3f:48:56:45:bf:3f:50:d0:f7: 90:5d:0e:e3:86:21:4f:49:77:f2:48:78:b4:e9:d6: 43:44:11:f4:b3:fa:cc:5f:b5:06:4c:da:06:1a:85: 21:34:11:64:bd:b5:bf:cc:de:ec:19:f4:1c:e6:40: 18:9e:63:8e:27:13:ef:9a:5b:25:a4:24:98:5c:50: 32:0a:ed:cf:3c:27:74:8f:b9:59:4a:40:39:0f:67: e5:e5:33:3e:9a:19:9c:63:fe:17:36:be:09:6e:88: 92:08:dc:30:8e:3f:27:52:19:c5:82:1a:68:48:52: cd:58:f8:7f:52:cf:b6:0a:5e:31:39:54:e5:dd:44: 17:be:b9:9e:4d:d1:02:04:82:4e:fd:14:fc:3e:fd: de:d4:4e:8c:5d:3b:1a:73:50:b2:05:5b:8e:78:ff: 40:78:ec:96:9d:2f:bf:62:3d:88:90:1f:01:0a:29: 00:64:75:a7:18:66:0a:cc:9e:88:c0:2d:65:d3:76: 65:0c:22:25:89:c2:5f:44:f6:26:a6:a4:e2:a1:61: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CA:35:0A:F1:F9:60:0F:F9:90:A6:35:12:11:5C:A7:54:D2:A0:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sco1CvH5YA_5kKY1EhFcp1TSoI0.roa sbgp-ipAddrBlock: critical IPv4: 1.76.192.0/20 Signature Algorithm: sha256WithRSAEncryption 71:ca:7a:c5:6b:a8:f4:de:9e:22:c4:ad:5d:be:08:0e:66:2a: e5:c8:92:3a:00:98:74:15:e5:aa:a9:bb:d0:04:fd:40:6f:67: 5a:d6:12:70:0f:2a:d3:56:5f:68:44:c8:14:cf:ea:b1:e6:2b: 22:db:8c:a6:32:c8:69:15:96:7f:15:68:16:36:fa:c5:4b:01: 7c:ce:57:32:56:5f:e5:fe:83:a1:70:3e:ef:1d:26:c0:37:15: 67:38:a5:83:58:f3:cf:da:90:5b:96:4f:2c:11:dc:bb:5c:70: 11:97:85:ed:bd:6e:9e:0b:12:35:af:70:b3:62:6e:67:52:7c: 42:f8:fc:b4:e1:24:1c:45:c3:a8:16:41:21:fb:47:73:8a:50: 23:80:39:d8:53:c3:be:13:e3:67:c7:87:00:9e:0e:79:28:11: 43:fb:43:71:b4:7a:15:ec:07:27:d8:39:b7:9e:62:41:80:63: 23:ee:10:ac:17:34:b5:c3:96:43:6c:14:5c:c7:e3:a9:8c:39: cc:38:19:ad:b8:d0:cc:30:55:ed:c1:67:ac:5e:ee:47:91:29: f3:f4:c9:a4:ea:02:82:49:32:b0:6b:a2:6d:58:24:d3:84:30: 71:66:44:5e:25:8c:73:5b:e3:3a:06:a2:f1:a1:91:75:42:a9: ec:1b:fb:a4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxQ0EzNTBBRjFGOTYw MEZGOTkwQTYzNTEyMTE1Q0E3NTREMkEwOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4D91+I3x0c9b7EzbxBodS7vpelpNng3JiiwcNzKnOvZP/d4cN DDfS7tsG7nm++09GbD9IVkW/P1DQ95BdDuOGIU9Jd/JIeLTp1kNEEfSz+sxftQZM 2gYahSE0EWS9tb/M3uwZ9BzmQBieY44nE++aWyWkJJhcUDIK7c88J3SPuVlKQDkP Z+XlMz6aGZxj/hc2vgluiJII3DCOPydSGcWCGmhIUs1Y+H9Sz7YKXjE5VOXdRBe+ uZ5N0QIEgk79FPw+/d7UToxdOxpzULIFW454/0B47JadL79iPYiQHwEKKQBkdacY ZgrMnojALWXTdmUMIiWJwl9E9iampOKhYaqbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUsco1CvH5YA/5kKY1EhFcp1TSoI0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3NjbzFDdkg1WUFfNWtLWTFFaEZjcDFUU29JMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQBTMAwDQYJKoZIhvcNAQELBQADggEB AHHKesVrqPTeniLErV2+CA5mKuXIkjoAmHQV5aqpu9AE/UBvZ1rWEnAPKtNWX2hE yBTP6rHmKyLbjKYyyGkVln8VaBY2+sVLAXzOVzJWX+X+g6FwPu8dJsA3FWc4pYNY 88/akFuWTywR3LtccBGXhe29bp4LEjWvcLNibmdSfEL4/LThJBxFw6gWQSH7R3OK UCOAOdhTw74T42fHhwCeDnkoEUP7Q3G0ehXsByfYObeeYkGAYyPuEKwXNLXDlkNs FFzH46mMOcw4Ga240MwwVe3BZ6xe7keRKfP0yaTqAoJJMrBrom1YJNOEMHFmRF4l jHNb4zoGovGhkXVCqewb+6Q= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:40 2026 by rpki-client