$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tsmQ33BLSCjXIU6IuFLRI38b3dA.roa File: tsmQ33BLSCjXIU6IuFLRI38b3dA.roa (raw, json) Hash identifier: kiPSR/fTu0J/QnYIgck8qvujMMj24H/7BR6pyedqYFY= Subject key identifier: B6:C9:90:DF:70:4B:48:28:D7:21:4E:88:B8:52:D1:23:7F:1B:DD:D0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17BA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tsmQ33BLSCjXIU6IuFLRI38b3dA.roa Signing time: Tue 31 Mar 2026 08:04:26 +0000 ROA not before: Tue 31 Mar 2026 08:04:26 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6074 (0x17ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:26 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B6C990DF704B4828D7214E88B852D1237F1BDDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:8f:5a:32:ce:eb:0d:86:21:3e:bc:1d:fc: ae:d4:f1:f8:cc:6c:4d:1c:3e:e4:d2:64:66:fd:34: 41:0e:8c:4b:85:92:5c:0f:9f:9a:8c:a3:7d:c2:1e: 1c:40:21:9d:7d:09:cc:83:08:bf:f6:7a:06:b2:94: 7c:fc:3b:0b:3f:ff:42:fd:14:00:ff:e8:96:29:59: 98:8d:d9:2d:a2:99:fe:bd:70:a2:2d:3d:b8:8a:26: 03:9d:2f:d7:2f:c9:44:f4:74:dc:bc:bd:e9:a7:f5: 38:76:92:3f:5d:52:d1:2c:8b:39:08:ec:e3:5c:bd: 7b:28:e1:a9:af:07:ea:03:03:38:c7:0f:5c:38:30: a4:d5:ce:9e:5f:73:bf:f6:90:57:75:c2:4d:7f:0f: 29:6d:c5:ab:f7:dc:d3:99:38:11:a2:2d:c2:0a:73: 3e:e5:21:62:5a:ef:00:ed:90:75:85:a8:b9:c8:db: 2e:9d:4e:32:12:cb:4b:e2:3c:49:0e:a6:10:e0:60: 10:37:fa:b8:6c:8f:d9:8e:75:53:4a:de:63:ef:72: 54:bd:73:a5:95:38:e3:79:21:be:60:55:2f:00:fa: 08:f6:06:97:dc:ce:18:7b:d6:e8:29:3a:8b:61:dd: b3:98:f8:8c:cf:62:39:c0:1f:e6:6f:11:b0:5e:63: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C9:90:DF:70:4B:48:28:D7:21:4E:88:B8:52:D1:23:7F:1B:DD:D0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tsmQ33BLSCjXIU6IuFLRI38b3dA.roa sbgp-ipAddrBlock: critical IPv4: 27.230.224.0/19 Signature Algorithm: sha256WithRSAEncryption 95:11:e9:51:14:8d:81:0e:33:56:17:38:ed:bc:07:86:55:65: af:bf:c0:93:90:35:c5:f7:4b:ce:aa:2a:69:f1:0a:c6:6e:d1: 83:89:40:8e:e8:09:43:75:13:4c:86:f9:01:8e:32:57:51:71: 30:7c:1d:b1:09:ff:21:99:6c:13:06:92:50:66:e4:c1:06:42: 55:e0:e3:55:af:5a:5d:df:97:7a:58:6c:6c:ba:0c:cd:67:5c: 58:25:c1:2e:20:1a:b6:d2:d0:6a:72:1f:ac:cf:a9:33:1e:e0: 0a:0a:a8:1d:0e:d2:52:1e:fc:49:a0:7d:a6:db:75:91:ff:32: 3d:43:dc:39:90:56:e0:a9:ba:6d:a0:9d:fe:98:db:f2:3b:12: c8:cd:0c:ae:2f:07:8e:19:22:f3:5d:fe:e5:ad:69:6a:ae:e6: 38:fe:a8:f2:74:1a:32:14:86:3c:28:53:6d:a7:a7:01:c8:0d: 05:9b:73:3b:36:1c:32:73:08:8c:c0:5d:00:10:af:75:1c:01: 1b:a4:8a:6b:25:61:ad:64:45:f7:77:3b:e5:9e:b3:9b:13:67: a0:76:15:1f:16:77:69:0b:54:f6:e5:aa:f5:e7:0a:e2:17:91: d4:0f:21:80:c6:ea:64:38:e4:eb:8b:c6:17:5d:84:83:4d:79: 1f:0e:af:b9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MjZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2Qzk5MERGNzA0QjQ4 MjhENzIxNEU4OEI4NTJEMTIzN0YxQkRERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC32o9aMs7rDYYhPrwd/K7U8fjMbE0cPuTSZGb9NEEOjEuFklwP n5qMo33CHhxAIZ19CcyDCL/2egaylHz8Ows//0L9FAD/6JYpWZiN2S2imf69cKIt PbiKJgOdL9cvyUT0dNy8vemn9Th2kj9dUtEsizkI7ONcvXso4amvB+oDAzjHD1w4 MKTVzp5fc7/2kFd1wk1/Dyltxav33NOZOBGiLcIKcz7lIWJa7wDtkHWFqLnI2y6d TjISy0viPEkOphDgYBA3+rhsj9mOdVNK3mPvclS9c6WVOON5Ib5gVS8A+gj2Bpfc zhh71ugpOoth3bOY+IzPYjnAH+ZvEbBeY+5JAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUtsmQ33BLSCjXIU6IuFLRI38b3dAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3RzbVEzM0JMU0NqWElVNkl1RkxSSTM4YjNkQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUb5uAwDQYJKoZIhvcNAQELBQADggEB AJUR6VEUjYEOM1YXOO28B4ZVZa+/wJOQNcX3S86qKmnxCsZu0YOJQI7oCUN1E0yG +QGOMldRcTB8HbEJ/yGZbBMGklBm5MEGQlXg41WvWl3fl3pYbGy6DM1nXFglwS4g GrbS0GpyH6zPqTMe4AoKqB0O0lIe/EmgfabbdZH/Mj1D3DmQVuCpum2gnf6Y2/I7 EsjNDK4vB44ZIvNd/uWtaWqu5jj+qPJ0GjIUhjwoU22npwHIDQWbczs2HDJzCIzA XQAQr3UcARukimslYa1kRfd3O+Wes5sTZ6B2FR8Wd2kLVPblqvXnCuIXkdQPIYDG 6mQ45OuLxhddhINNeR8Or7k= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:53 2026 by rpki-client