$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrbRaL4R8Qiu2mPZNbo3Go02MYw.roa File: wrbRaL4R8Qiu2mPZNbo3Go02MYw.roa (raw, json) Hash identifier: 80FdxA8q0NRxt0IsbaB7vrmVUfnhFSoRqqQTnYM6uxA= Subject key identifier: C2:B6:D1:68:BE:11:F1:08:AE:DA:63:D9:35:BA:37:1A:8D:36:31:8C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 172F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrbRaL4R8Qiu2mPZNbo3Go02MYw.roa Signing time: Tue 31 Mar 2026 08:03:19 +0000 ROA not before: Tue 31 Mar 2026 08:03:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5935 (0x172f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C2B6D168BE11F108AEDA63D935BA371A8D36318C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:a1:99:31:4b:12:c3:91:e6:ca:88:77:62: af:e8:3a:bb:65:be:19:3a:0d:82:87:2a:63:9f:00: 7d:8c:58:3c:f1:44:f7:f9:2c:7b:51:96:cf:c5:8d: b7:e9:16:7a:e7:98:21:70:22:cb:9c:fd:93:29:e1: 52:db:ae:55:3e:78:06:54:1f:df:22:85:79:50:bf: 0f:31:18:39:e4:ad:71:f4:dd:d7:37:10:09:2d:62: aa:a7:e8:4a:89:6d:19:33:86:93:48:a4:f8:35:e3: ee:4b:bf:26:05:2c:14:67:02:f8:95:52:91:7d:59: ae:ba:f3:dd:1d:49:33:bf:3b:43:1a:7a:66:bd:0c: b4:da:e5:3a:2a:f2:62:2f:e6:69:16:93:03:70:44: 91:cd:3b:e2:bd:68:b9:4b:18:aa:4d:da:93:bd:23: a4:8f:35:c7:dc:4e:b8:6a:74:0b:60:81:f1:c6:b7: 62:52:79:f0:ca:e6:2f:02:3a:f5:c3:c3:5d:9f:f8: af:8f:06:10:2e:4d:09:be:8a:c0:67:58:5e:2a:12: fc:65:e3:33:f5:a7:f4:4b:7b:9b:66:0f:08:29:e4: c9:b7:40:0a:fe:e5:66:4b:c4:2d:69:77:5e:c3:9c: c4:f7:83:c1:91:eb:05:81:06:f7:48:04:bd:2a:11: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B6:D1:68:BE:11:F1:08:AE:DA:63:D9:35:BA:37:1A:8D:36:31:8C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrbRaL4R8Qiu2mPZNbo3Go02MYw.roa sbgp-ipAddrBlock: critical IPv4: 220.210.32.0/21 Signature Algorithm: sha256WithRSAEncryption db:4e:e5:16:bb:62:c6:c5:2c:61:61:57:c5:0f:dc:b6:a2:9d: ee:07:d4:ff:fd:db:ca:55:5c:4a:4d:2e:39:fc:87:83:5b:f6: 72:de:fa:fa:07:f8:b2:93:35:d5:a7:40:28:4c:eb:7f:30:f3: 6e:c6:ff:10:46:f0:30:fc:3c:27:89:cd:51:e6:48:85:da:13: 5a:cb:f4:40:62:fb:05:29:d4:57:d8:a7:c7:cc:07:6a:ff:92: ed:e4:11:f7:98:44:02:54:73:c3:f1:2f:22:54:10:c5:58:55: b5:63:39:b9:36:b0:a2:f5:c3:fa:78:95:7e:1b:97:7c:98:14: 5a:92:0d:96:d9:68:15:3d:78:ca:4f:61:6a:ae:9d:e4:67:a2: a4:98:e4:6b:5e:90:0b:74:38:57:f8:e8:5c:3d:46:bc:c6:39: 43:14:be:7a:92:bd:14:b9:b1:1e:d0:0a:a9:f0:b8:d8:85:aa: 45:bc:7b:b9:cf:5b:26:e5:d8:28:14:c5:0c:17:f5:ab:f1:71: c8:ca:3c:9c:70:45:52:ec:59:f8:22:04:06:44:e7:98:8b:c5: ff:df:17:5e:9b:ba:48:10:50:91:db:ad:70:02:52:13:83:33: 52:21:a6:97:f8:d2:5e:1e:08:e9:2f:43:79:e7:85:6a:ab:d0: f0:d6:41:5e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMyQjZEMTY4QkUxMUYx MDhBRURBNjNEOTM1QkEzNzFBOEQzNjMxOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU0KGZMUsSw5Hmyoh3Yq/oOrtlvhk6DYKHKmOfAH2MWDzxRPf5 LHtRls/FjbfpFnrnmCFwIsuc/ZMp4VLbrlU+eAZUH98ihXlQvw8xGDnkrXH03dc3 EAktYqqn6EqJbRkzhpNIpPg14+5LvyYFLBRnAviVUpF9Wa66890dSTO/O0Maema9 DLTa5Toq8mIv5mkWkwNwRJHNO+K9aLlLGKpN2pO9I6SPNcfcTrhqdAtggfHGt2JS efDK5i8COvXDw12f+K+PBhAuTQm+isBnWF4qEvxl4zP1p/RLe5tmDwgp5Mm3QAr+ 5WZLxC1pd17DnMT3g8GR6wWBBvdIBL0qEcoNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUwrbRaL4R8Qiu2mPZNbo3Go02MYwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3dyYlJhTDRSOFFpdTJtUFpOYm8zR28wMk1Zdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPc0iAwDQYJKoZIhvcNAQELBQADggEB ANtO5Ra7YsbFLGFhV8UP3Laine4H1P/928pVXEpNLjn8h4Nb9nLe+voH+LKTNdWn QChM638w827G/xBG8DD8PCeJzVHmSIXaE1rL9EBi+wUp1FfYp8fMB2r/ku3kEfeY RAJUc8PxLyJUEMVYVbVjObk2sKL1w/p4lX4bl3yYFFqSDZbZaBU9eMpPYWquneRn oqSY5GtekAt0OFf46Fw9RrzGOUMUvnqSvRS5sR7QCqnwuNiFqkW8e7nPWybl2CgU xQwX9avxccjKPJxwRVLsWfgiBAZE55iLxf/fF16bukgQUJHbrXACUhODM1Ihppf4 0l4eCOkvQ3nnhWqr0PDWQV4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:01 2026 by rpki-client