$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vQsO0NbG8nMH2ZZWPpfh_ug-8Bg.roa File: vQsO0NbG8nMH2ZZWPpfh_ug-8Bg.roa (raw, json) Hash identifier: NgufoZwOEGRL+hrKmhPOuqotG5qrRivhxdDsVdc887k= Subject key identifier: BD:0B:0E:D0:D6:C6:F2:73:07:D9:96:56:3E:97:E1:FE:E8:3E:F0:18 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 158D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vQsO0NbG8nMH2ZZWPpfh_ug-8Bg.roa Signing time: Tue 31 Mar 2026 07:59:51 +0000 ROA not before: Tue 31 Mar 2026 07:59:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5517 (0x158d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BD0B0ED0D6C6F27307D996563E97E1FEE83EF018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:c8:26:d2:36:f9:ce:b5:e3:c6:2c:95:fb: 92:ea:1f:9b:04:20:98:55:33:a7:cb:f1:83:68:73: f9:34:23:de:ce:16:b9:db:70:98:71:b8:a0:f1:8c: e0:55:7f:00:ba:90:52:cb:c4:c0:74:63:50:c9:8e: d8:75:7e:5d:4a:f9:01:0f:59:3c:92:da:d5:a2:7d: af:db:94:c9:bb:67:e5:b8:4d:fe:be:ad:22:13:15: c4:f5:59:f3:17:15:87:79:b9:6e:b8:bc:52:c2:65: 10:c0:62:41:c9:fb:71:0a:c2:f3:23:96:92:bf:0f: bd:1b:0f:6b:53:6d:74:c0:ae:9f:ca:0b:d2:06:aa: 7f:72:01:57:f0:7c:10:a3:7c:27:dd:fe:08:48:ac: 09:2c:26:ea:a1:b5:12:a7:2c:51:a6:64:33:d2:44: a7:cc:f5:29:ce:27:5b:92:9a:fe:72:33:fc:ab:47: 52:fc:50:20:1c:87:c4:30:a9:9b:e1:f4:99:73:45: c5:8a:f9:94:63:1d:21:d7:ef:0c:77:8d:3d:19:98: d3:c9:11:6d:f4:e0:a5:e8:f9:73:14:02:72:0f:8b: be:60:21:6f:58:90:10:59:05:f1:0b:90:9e:ee:b8: 90:22:19:8b:c7:44:ce:3a:b0:7a:d3:28:b5:6d:8f: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0B:0E:D0:D6:C6:F2:73:07:D9:96:56:3E:97:E1:FE:E8:3E:F0:18 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vQsO0NbG8nMH2ZZWPpfh_ug-8Bg.roa sbgp-ipAddrBlock: critical IPv4: 220.210.64.0/22 Signature Algorithm: sha256WithRSAEncryption 39:25:c0:c6:14:e1:83:c6:b8:b3:17:9d:26:92:e5:54:0b:26: 29:d8:68:48:5d:43:83:44:50:61:45:d5:71:1f:ee:62:2e:87: be:24:c7:95:1d:e0:07:15:76:f9:f6:4e:29:c6:c4:0c:a0:72: 7e:64:44:5d:8e:53:41:d5:c3:b8:9b:95:be:1b:51:b1:d5:05: 94:b3:5c:72:17:1e:46:fc:e0:e0:85:84:51:a7:2a:ab:52:71: 10:82:95:82:32:b5:75:18:f6:e2:52:2a:88:ad:44:4e:2d:1e: bc:f3:78:a5:08:95:c6:73:e6:97:1b:61:98:2f:60:61:5e:ae: 14:27:7e:a4:62:42:a9:29:9a:30:81:26:f7:ba:51:e1:b0:72: 59:6a:8d:98:57:a9:fc:64:d8:6b:95:bb:16:be:13:81:55:2a: a6:2e:9a:00:8b:a8:e7:42:9b:de:9d:70:94:9c:90:34:fa:d7: 13:d7:28:20:a9:3f:7e:0e:84:a7:41:36:fe:9e:be:a9:b0:f7: 76:20:0c:a2:9d:ed:ea:2b:98:59:9a:39:da:20:10:00:e7:c8: 98:b9:8e:5a:8c:49:6d:db:56:36:87:e2:89:54:d9:d8:35:08: df:ce:17:f6:d5:eb:21:ee:c9:5a:73:32:21:9e:a2:09:53:76: 5b:66:e4:50 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJEMEIwRUQwRDZDNkYy NzMwN0Q5OTY1NjNFOTdFMUZFRTgzRUYwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRhcgm0jb5zrXjxiyV+5LqH5sEIJhVM6fL8YNoc/k0I97OFrnb cJhxuKDxjOBVfwC6kFLLxMB0Y1DJjth1fl1K+QEPWTyS2tWifa/blMm7Z+W4Tf6+ rSITFcT1WfMXFYd5uW64vFLCZRDAYkHJ+3EKwvMjlpK/D70bD2tTbXTArp/KC9IG qn9yAVfwfBCjfCfd/ghIrAksJuqhtRKnLFGmZDPSRKfM9SnOJ1uSmv5yM/yrR1L8 UCAch8QwqZvh9JlzRcWK+ZRjHSHX7wx3jT0ZmNPJEW304KXo+XMUAnIPi75gIW9Y kBBZBfELkJ7uuJAiGYvHRM46sHrTKLVtj7ChAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvQsO0NbG8nMH2ZZWPpfh/ug+8BgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ZRc08wTmJHOG5NSDJaWldQcGZoX3VnLThCZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc0kAwDQYJKoZIhvcNAQELBQADggEB ADklwMYU4YPGuLMXnSaS5VQLJinYaEhdQ4NEUGFF1XEf7mIuh74kx5Ud4AcVdvn2 TinGxAygcn5kRF2OU0HVw7iblb4bUbHVBZSzXHIXHkb84OCFhFGnKqtScRCClYIy tXUY9uJSKoitRE4tHrzzeKUIlcZz5pcbYZgvYGFerhQnfqRiQqkpmjCBJve6UeGw cllqjZhXqfxk2GuVuxa+E4FVKqYumgCLqOdCm96dcJSckDT61xPXKCCpP34OhKdB Nv6evqmw93YgDKKd7eormFmaOdogEADnyJi5jlqMSW3bVjaH4olU2dg1CN/OF/bV 6yHuyVpzMiGeoglTdltm5FA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:35 2026 by rpki-client