$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vCVGCIPQmY2R4EBgaIzSA6ABetU.roa File: vCVGCIPQmY2R4EBgaIzSA6ABetU.roa (raw, json) Hash identifier: eqjV5bRdorRGiGt1xAzs7uHhExmc4kfejzGe28iW/jQ= Subject key identifier: BC:25:46:08:83:D0:99:8D:91:E0:40:60:68:8C:D2:03:A0:01:7A:D5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1734 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vCVGCIPQmY2R4EBgaIzSA6ABetU.roa Signing time: Tue 31 Mar 2026 08:03:22 +0000 ROA not before: Tue 31 Mar 2026 08:03:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5940 (0x1734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BC25460883D0998D91E04060688CD203A0017AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:fd:c0:a6:f1:77:41:4e:90:bf:16:0a:d0: 5e:a8:63:5a:9c:c9:59:bb:32:96:c8:4d:33:02:54: f6:e0:ee:42:95:31:f6:24:d6:15:d4:c4:18:02:e8: 0c:23:3d:25:a0:0a:a4:e0:ff:9d:34:8a:61:b0:95: 39:3e:0d:c1:fe:0f:99:5f:82:16:65:5d:fc:8e:31: e3:fd:2a:88:3c:d3:e9:0e:73:22:04:a4:3b:d3:7a: 72:e1:86:6a:6e:53:c9:a5:dd:c2:92:51:35:e0:fc: 69:34:7a:e7:7a:67:ed:ad:41:a9:04:b8:d8:18:8f: ea:a8:6c:70:11:98:37:5a:bb:ee:d3:54:27:f1:57: 61:d2:b8:4e:00:7f:e7:46:75:d3:92:0a:a2:87:41: ce:ee:46:1f:4d:d5:50:c0:1e:a0:69:81:2d:75:18: ad:3d:11:81:ad:16:25:ca:07:69:51:53:ec:6a:77: 6c:58:a0:84:9d:90:23:fb:ea:ea:be:4d:9d:5c:f3: eb:e1:d5:f7:bd:b1:1a:98:1d:91:dc:0a:e5:81:9c: 9b:84:01:23:8c:36:cd:e0:8b:4c:f3:ad:c5:8a:c1: ac:75:ba:2c:14:25:e3:f5:92:7c:3d:a8:17:61:f8: 6a:a2:f2:b8:e0:8e:f6:e5:ff:99:3f:00:79:f3:d7: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:46:08:83:D0:99:8D:91:E0:40:60:68:8C:D2:03:A0:01:7A:D5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vCVGCIPQmY2R4EBgaIzSA6ABetU.roa sbgp-ipAddrBlock: critical IPv4: 220.210.64.0/23 Signature Algorithm: sha256WithRSAEncryption e0:c0:de:35:d6:b5:ad:14:a1:63:22:7a:86:d0:ac:3d:67:52: 15:81:d8:03:73:de:62:fd:90:25:d3:4b:2f:b8:18:0a:8c:fd: 0f:a1:9c:c4:4c:4e:a0:e4:da:77:2c:37:dd:51:ec:58:40:4e: 28:82:47:8c:db:b8:67:3c:2c:33:be:55:82:26:a3:0d:61:9a: 03:38:08:06:26:a9:72:69:47:a6:3a:60:78:e7:c6:6b:c2:15: e8:45:1b:5d:03:65:bb:99:8f:14:f7:4e:5e:28:1d:9e:aa:f2: 16:9b:cb:7c:ca:6b:13:0b:b4:ee:ca:98:a4:19:9b:e9:61:b2: c8:a1:b7:55:92:7a:f0:da:d9:07:58:c6:e4:f1:89:bc:39:cb: f0:33:44:9b:a3:5a:e9:ce:14:00:e2:0d:8d:2b:89:6e:59:10: 2c:ba:01:f1:c4:58:36:ff:e3:47:e2:16:f2:a7:e7:47:02:fa: c6:98:d6:b4:49:f5:1c:0d:2f:9e:81:02:e7:dd:3c:ef:48:1a: 42:86:5d:b7:80:e0:ae:7c:87:e5:e0:4a:19:98:88:50:98:a2: ab:0f:ef:fc:3b:7c:ec:6b:57:d5:c7:7f:fa:d9:93:11:5b:a3: b5:ad:50:1f:39:b1:b3:0f:68:ba:d2:e9:e6:9b:39:c2:38:64: 57:eb:50:6b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDMjU0NjA4ODNEMDk5 OEQ5MUUwNDA2MDY4OENEMjAzQTAwMTdBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpwf3ApvF3QU6QvxYK0F6oY1qcyVm7MpbITTMCVPbg7kKVMfYk 1hXUxBgC6AwjPSWgCqTg/500imGwlTk+DcH+D5lfghZlXfyOMeP9Kog80+kOcyIE pDvTenLhhmpuU8ml3cKSUTXg/Gk0eud6Z+2tQakEuNgYj+qobHARmDdau+7TVCfx V2HSuE4Af+dGddOSCqKHQc7uRh9N1VDAHqBpgS11GK09EYGtFiXKB2lRU+xqd2xY oISdkCP76uq+TZ1c8+vh1fe9sRqYHZHcCuWBnJuEASOMNs3gi0zzrcWKwax1uiwU JeP1knw9qBdh+Gqi8rjgjvbl/5k/AHnz1zePAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvCVGCIPQmY2R4EBgaIzSA6ABetUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ZDVkdDSVBRbVkyUjRFQmdhSXpTQTZBQmV0VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0kAwDQYJKoZIhvcNAQELBQADggEB AODA3jXWta0UoWMieobQrD1nUhWB2ANz3mL9kCXTSy+4GAqM/Q+hnMRMTqDk2ncs N91R7FhATiiCR4zbuGc8LDO+VYImow1hmgM4CAYmqXJpR6Y6YHjnxmvCFehFG10D ZbuZjxT3Tl4oHZ6q8haby3zKaxMLtO7KmKQZm+lhssiht1WSevDa2QdYxuTxibw5 y/AzRJujWunOFADiDY0riW5ZECy6AfHEWDb/40fiFvKn50cC+saY1rRJ9RwNL56B AufdPO9IGkKGXbeA4K58h+XgShmYiFCYoqsP7/w7fOxrV9XHf/rZkxFbo7WtUB85 sbMPaLrS6eabOcI4ZFfrUGs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:54 2026 by rpki-client