$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vbpSMwE5HHc05RhcrOTPUHBaYK8.roa File: vbpSMwE5HHc05RhcrOTPUHBaYK8.roa (raw, json) Hash identifier: I68AA+nHh/p8xeoiOlOzE3xDiHciVpRBLfy0J4ujahs= Subject key identifier: BD:BA:52:33:01:39:1C:77:34:E5:18:5C:AC:E4:CF:50:70:5A:60:AF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14DF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vbpSMwE5HHc05RhcrOTPUHBaYK8.roa Signing time: Tue 31 Mar 2026 07:58:27 +0000 ROA not before: Tue 31 Mar 2026 07:58:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5343 (0x14df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BDBA523301391C7734E5185CACE4CF50705A60AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:71:59:d4:88:30:d9:ca:aa:01:05:03:e8: 7d:da:29:dd:0b:c2:8f:bb:64:cd:1f:c1:19:ee:6b: e6:eb:b0:77:46:12:27:6b:de:8e:cd:6f:d2:24:77: 60:31:21:0a:96:98:84:49:e6:4b:5c:44:0f:c4:ed: b3:98:bb:8e:38:04:e2:f0:fb:74:b5:88:df:96:e4: 89:7b:8b:ea:54:61:58:c8:83:74:a0:dd:a3:45:d3: 78:89:e1:d7:62:90:6e:9d:31:6d:d4:c6:92:41:33: 77:a8:dc:ef:60:04:cc:a0:3b:a7:a3:ec:aa:cb:35: 33:80:5f:ac:0a:41:e3:dd:e8:1c:0d:15:86:60:e8: 14:2d:5b:a4:cb:f8:eb:d2:86:e8:26:48:36:93:16: c8:85:fa:77:d3:ca:d6:f6:c8:2c:8c:8b:50:ba:4a: 9f:65:c4:d3:3c:bb:95:46:2f:b2:85:af:a2:c1:81: 32:b6:74:ca:e2:86:cc:7e:2c:6a:18:2f:3e:58:7b: b7:68:9e:92:34:04:8c:5b:f5:50:40:56:4c:7c:a5: 64:59:f3:0b:cf:f5:d9:de:4c:d2:0f:b8:e3:ef:b5: da:c8:5c:0c:43:20:ba:54:b9:31:e2:9f:9e:6d:59: 12:0e:8c:b9:7c:e1:6e:5a:f2:5a:c2:a9:11:d7:c7: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BA:52:33:01:39:1C:77:34:E5:18:5C:AC:E4:CF:50:70:5A:60:AF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vbpSMwE5HHc05RhcrOTPUHBaYK8.roa sbgp-ipAddrBlock: critical IPv4: 1.76.64.0/21 Signature Algorithm: sha256WithRSAEncryption 00:94:33:76:03:1e:d3:b8:2f:fb:3a:5e:c9:80:24:37:b8:cc: 1c:c6:42:13:9f:c6:49:85:3f:ed:9d:fe:a6:bc:5b:05:92:06: 30:31:2c:a4:59:9b:6a:04:ab:90:e5:8a:4a:d0:17:08:76:a9: b9:af:95:09:b9:7c:30:15:52:2e:42:27:51:85:a1:fc:33:e4: 2e:99:68:c1:9e:a7:7b:87:e0:a8:1c:85:6e:60:72:ab:a1:a5: 85:b3:4c:22:a4:9c:39:70:59:9a:d2:61:85:c3:56:78:29:58: a1:ff:7d:61:e5:77:0b:0f:c1:6a:5e:49:45:2e:8e:41:da:8f: 6b:07:74:e4:65:9d:7f:c8:db:52:e4:dc:81:01:3e:e9:4c:d3: c6:86:44:a8:55:38:ea:ee:b4:cf:31:c0:f4:6d:4f:58:68:e0: 0f:51:39:b1:b3:f0:e9:68:ea:e8:96:88:72:52:46:f2:f6:09: 5a:e5:25:09:88:fd:0d:84:03:61:d7:51:56:86:ed:87:4c:4b: b6:d2:30:63:cc:72:98:86:00:b6:df:97:34:0e:b6:c8:2b:db: b5:96:cf:ce:c5:2b:9f:56:19:4c:77:f2:d9:ab:63:89:82:1b: c0:22:5f:cc:6b:99:4f:c9:86:1b:f8:51:d9:03:8b:2a:e2:0f: eb:9c:c4:8a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJEQkE1MjMzMDEzOTFD NzczNEU1MTg1Q0FDRTRDRjUwNzA1QTYwQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCToHFZ1Igw2cqqAQUD6H3aKd0Lwo+7ZM0fwRnua+brsHdGEidr 3o7Nb9Ikd2AxIQqWmIRJ5ktcRA/E7bOYu444BOLw+3S1iN+W5Il7i+pUYVjIg3Sg 3aNF03iJ4ddikG6dMW3UxpJBM3eo3O9gBMygO6ej7KrLNTOAX6wKQePd6BwNFYZg 6BQtW6TL+OvShugmSDaTFsiF+nfTytb2yCyMi1C6Sp9lxNM8u5VGL7KFr6LBgTK2 dMrihsx+LGoYLz5Ye7donpI0BIxb9VBAVkx8pWRZ8wvP9dneTNIPuOPvtdrIXAxD ILpUuTHin55tWRIOjLl84W5a8lrCqRHXx4SbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvbpSMwE5HHc05RhcrOTPUHBaYK8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ZicFNNd0U1SEhjMDVSaGNyT1RQVUhCYVlLOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBTEAwDQYJKoZIhvcNAQELBQADggEB AACUM3YDHtO4L/s6XsmAJDe4zBzGQhOfxkmFP+2d/qa8WwWSBjAxLKRZm2oEq5Dl ikrQFwh2qbmvlQm5fDAVUi5CJ1GFofwz5C6ZaMGep3uH4KgchW5gcquhpYWzTCKk nDlwWZrSYYXDVngpWKH/fWHldwsPwWpeSUUujkHaj2sHdORlnX/I21Lk3IEBPulM 08aGRKhVOOrutM8xwPRtT1ho4A9RObGz8Olo6uiWiHJSRvL2CVrlJQmI/Q2EA2HX UVaG7YdMS7bSMGPMcpiGALbflzQOtsgr27WWz87FK59WGUx38tmrY4mCG8AiX8xr mU/Jhhv4UdkDiyriD+ucxIo= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:42 2026 by rpki-client