$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vnXTbGTvLuOTAMvVpMtBDbKTiSE.roa File: vnXTbGTvLuOTAMvVpMtBDbKTiSE.roa (raw, json) Hash identifier: VwH/7Y0gmarAeibDUJInpq9dzk0jV2lDTCxwASYMW0c= Subject key identifier: BE:75:D3:6C:64:EF:2E:E3:93:00:CB:D5:A4:CB:41:0D:B2:93:89:21 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16FD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vnXTbGTvLuOTAMvVpMtBDbKTiSE.roa Signing time: Tue 31 Mar 2026 08:02:53 +0000 ROA not before: Tue 31 Mar 2026 08:02:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5885 (0x16fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BE75D36C64EF2EE39300CBD5A4CB410DB2938921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:10:9d:d4:3c:05:f4:30:56:1e:5c:93:6c: 4d:da:80:3c:55:54:a7:d1:a7:ba:64:1a:29:cd:d4: 1b:8a:4d:0e:9d:01:52:5a:3c:8b:01:cf:eb:bd:bf: f1:45:57:4c:44:52:4d:92:92:d1:7b:1e:cf:dd:a4: a3:3d:2b:3a:87:58:75:07:d9:65:31:70:16:be:ff: d6:e7:85:72:5a:0a:00:1d:aa:44:6c:bf:29:69:58: 94:fe:90:5d:81:20:69:d1:11:2a:14:aa:d3:ca:91: ad:29:8f:ec:45:3f:f5:92:c0:75:be:13:b2:79:a7: 07:de:59:de:ff:3c:fc:f1:8d:04:36:96:61:20:87: 19:7a:f0:54:ce:2f:38:a7:db:44:65:84:ab:ee:17: 72:7b:c9:81:5f:f1:fc:8d:91:87:2d:82:73:66:ba: bf:49:6f:a6:fe:9d:18:13:05:fc:89:33:a5:19:95: 60:9b:b8:e1:a0:97:d1:0f:89:52:32:60:b2:48:46: 03:f4:08:d9:22:52:56:64:ea:82:2e:80:eb:76:17: 7f:bd:7a:2a:47:18:7e:73:b0:28:43:70:75:ef:c9: f4:5e:bc:8c:81:07:6d:28:c3:86:13:87:d0:bf:a6: b7:3e:5c:13:52:14:2e:f5:4e:69:94:00:7f:c5:4d: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:D3:6C:64:EF:2E:E3:93:00:CB:D5:A4:CB:41:0D:B2:93:89:21 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vnXTbGTvLuOTAMvVpMtBDbKTiSE.roa sbgp-ipAddrBlock: critical IPv4: 211.14.116.0/24 Signature Algorithm: sha256WithRSAEncryption a2:f7:ff:ca:57:16:7c:78:85:07:33:59:1f:4d:ff:0c:b5:71: 25:7b:bc:10:d8:6b:02:7c:95:af:22:69:05:c4:75:c1:62:ed: 9c:43:2c:87:a8:7a:f4:fc:31:13:6f:8c:89:20:bf:ae:b8:bd: 12:4e:dc:3a:0d:e9:3b:e4:19:fa:5e:02:f7:f8:bf:85:cf:52: 79:05:b2:8c:9b:2f:09:79:ff:34:51:f5:2f:81:1c:2e:34:3e: 4f:54:81:7a:62:6e:02:1c:5e:fb:1a:6d:db:7f:42:73:b6:b4: e3:a0:87:3f:28:a4:de:c6:23:e5:cb:36:ce:d8:44:2f:12:62: 9e:7d:c8:b9:06:ab:7e:d9:14:4c:df:66:47:e5:20:ff:46:5e: b8:39:a3:0f:4d:53:90:dd:61:05:c7:2f:6c:41:ea:75:ae:da: 46:98:8f:f8:f1:91:62:dc:9e:b2:30:18:8a:59:6f:4b:88:e6: 44:fa:5e:05:63:cd:67:5c:a5:60:f9:40:d0:75:dd:17:c7:96: d3:ba:f2:b9:ab:5b:e2:70:f2:5a:06:6d:ce:d4:9d:00:b5:15: 2c:17:75:7c:85:1e:cd:d8:83:b6:0a:dc:e0:57:c7:dc:f8:ba: 83:c1:2d:05:c3:01:44:fd:5a:cb:e4:3d:27:03:25:f6:e6:50: db:6d:d3:31 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFNzVEMzZDNjRFRjJF RTM5MzAwQ0JENUE0Q0I0MTBEQjI5Mzg5MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM4xCd1DwF9DBWHlyTbE3agDxVVKfRp7pkGinN1BuKTQ6dAVJa PIsBz+u9v/FFV0xEUk2SktF7Hs/dpKM9KzqHWHUH2WUxcBa+/9bnhXJaCgAdqkRs vylpWJT+kF2BIGnRESoUqtPKka0pj+xFP/WSwHW+E7J5pwfeWd7/PPzxjQQ2lmEg hxl68FTOLzin20RlhKvuF3J7yYFf8fyNkYctgnNmur9Jb6b+nRgTBfyJM6UZlWCb uOGgl9EPiVIyYLJIRgP0CNkiUlZk6oIugOt2F3+9eipHGH5zsChDcHXvyfRevIyB B20ow4YTh9C/prc+XBNSFC71TmmUAH/FTcofAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvnXTbGTvLuOTAMvVpMtBDbKTiSEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ZuWFRiR1R2THVPVEFNdlZwTXRCRGJLVGlTRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTDnQwDQYJKoZIhvcNAQELBQADggEB AKL3/8pXFnx4hQczWR9N/wy1cSV7vBDYawJ8la8iaQXEdcFi7ZxDLIeoevT8MRNv jIkgv664vRJO3DoN6TvkGfpeAvf4v4XPUnkFsoybLwl5/zRR9S+BHC40Pk9UgXpi bgIcXvsabdt/QnO2tOOghz8opN7GI+XLNs7YRC8SYp59yLkGq37ZFEzfZkflIP9G Xrg5ow9NU5DdYQXHL2xB6nWu2kaYj/jxkWLcnrIwGIpZb0uI5kT6XgVjzWdcpWD5 QNB13RfHltO68rmrW+Jw8loGbc7UnQC1FSwXdXyFHs3Yg7YK3OBXx9z4uoPBLQXD AUT9WsvkPScDJfbmUNtt0zE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:53 2026 by rpki-client