$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xavCOoKprhWue4oLtcV2qIvaYJU.roa File: xavCOoKprhWue4oLtcV2qIvaYJU.roa (raw, json) Hash identifier: EZv1LtrizHrkAX1GKFYfFb12UUOIeBDUTql/ZQn9NOE= Subject key identifier: C5:AB:C2:3A:82:A9:AE:15:AE:7B:8A:0B:B5:C5:76:A8:8B:DA:60:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1379 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xavCOoKprhWue4oLtcV2qIvaYJU.roa Signing time: Tue 31 Mar 2026 07:55:38 +0000 ROA not before: Tue 31 Mar 2026 07:55:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4985 (0x1379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C5ABC23A82A9AE15AE7B8A0BB5C576A88BDA6095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:3a:c1:52:3c:a8:53:30:5d:44:fc:fc:04: 2c:29:53:16:c6:40:31:22:65:9d:33:42:44:65:43: 6b:d7:35:c9:80:bf:ae:2b:68:73:e1:98:fb:b0:46: be:b2:41:87:38:d7:e2:57:04:66:d5:9a:c9:57:4b: 6c:cb:54:8a:37:ff:10:ff:ec:ae:b8:a8:df:fe:b7: 5f:bf:e8:1a:a9:4b:4a:c2:1f:f1:6a:90:5e:65:4b: 2f:13:89:72:58:ac:01:db:17:d2:42:6e:d8:fb:1f: fa:7c:1a:02:9c:fc:e1:e3:16:d2:ef:df:70:7b:6a: 65:af:5d:d7:d6:d4:93:a4:26:5d:72:d4:33:a2:96: 89:27:10:e0:cc:2f:08:99:3b:01:3b:31:76:60:a5: 65:57:0e:32:80:01:eb:b7:74:5d:44:30:ea:65:f1: 2e:50:44:43:dd:02:17:ca:88:6a:6d:f4:40:e8:ea: 1c:54:bd:fb:85:b7:1c:f0:16:32:9e:b7:75:2c:8f: de:94:c6:7f:cc:a4:0f:c9:a8:d3:32:82:14:34:ae: c1:ba:ed:c4:e1:97:1c:f6:f8:7a:35:40:e7:af:02: d6:af:e2:ac:6a:12:02:0f:fc:3b:50:dc:79:9d:51: 4d:29:fd:88:26:8e:1e:42:c3:52:38:a5:e2:f8:b9: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AB:C2:3A:82:A9:AE:15:AE:7B:8A:0B:B5:C5:76:A8:8B:DA:60:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xavCOoKprhWue4oLtcV2qIvaYJU.roa sbgp-ipAddrBlock: critical IPv4: 49.97.24.0/22 Signature Algorithm: sha256WithRSAEncryption 48:0f:a7:28:eb:b1:ab:53:4f:9e:06:45:ad:52:e2:2f:45:eb: a4:de:e4:13:bc:e7:d1:87:f7:d7:fb:74:41:ad:f4:49:7e:a6: a8:1d:f5:82:63:ab:8e:c8:9a:d1:9b:55:56:9f:4c:e9:1c:9d: 1c:e4:57:75:8f:b1:fb:12:d0:c2:b8:89:ea:3f:57:5c:b1:40: bd:0e:c0:ce:90:8a:19:84:e3:84:ac:67:28:e8:40:f7:84:1b: 67:f3:20:64:a5:23:bb:b7:b6:02:ac:c9:22:12:af:e7:4f:a8: 89:f5:d2:c6:50:98:9e:bd:2c:f7:34:44:a3:55:43:ec:a9:25: 19:e4:3b:88:97:fc:ab:3d:67:f5:58:6b:c4:74:fa:c6:49:a2: 81:f8:af:94:7b:3b:60:1c:33:ea:27:df:86:6b:62:c2:00:e7: 1a:23:f0:98:f5:73:4f:71:b9:94:ff:bf:0c:99:84:d5:9b:a6: 6e:27:d3:4a:af:64:c8:a9:44:a4:eb:b8:23:ee:73:c1:e0:91: 2b:a0:d0:72:a6:49:f6:e1:45:ba:46:46:f2:ec:f2:10:a8:20: 4f:34:c8:8f:3b:3c:89:f1:bd:5f:f5:f0:4f:65:42:ac:ee:37: 73:83:f7:11:33:d0:e5:57:ef:b1:1d:a6:ff:ee:f4:96:1d:3f: d8:45:a9:20 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1QUJDMjNBODJBOUFF MTVBRTdCOEEwQkI1QzU3NkE4OEJEQTYwOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAmDrBUjyoUzBdRPz8BCwpUxbGQDEiZZ0zQkRlQ2vXNcmAv64r aHPhmPuwRr6yQYc41+JXBGbVmslXS2zLVIo3/xD/7K64qN/+t1+/6BqpS0rCH/Fq kF5lSy8TiXJYrAHbF9JCbtj7H/p8GgKc/OHjFtLv33B7amWvXdfW1JOkJl1y1DOi loknEODMLwiZOwE7MXZgpWVXDjKAAeu3dF1EMOpl8S5QREPdAhfKiGpt9EDo6hxU vfuFtxzwFjKet3Usj96Uxn/MpA/JqNMyghQ0rsG67cThlxz2+Ho1QOevAtav4qxq EgIP/DtQ3HmdUU0p/Ygmjh5Cw1I4peL4uSEtAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUxavCOoKprhWue4oLtcV2qIvaYJUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3hhdkNPb0twcmhXdWU0b0x0Y1YycUl2YVlKVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYRgwDQYJKoZIhvcNAQELBQADggEB AEgPpyjrsatTT54GRa1S4i9F66Te5BO859GH99f7dEGt9El+pqgd9YJjq47ImtGb VVafTOkcnRzkV3WPsfsS0MK4ieo/V1yxQL0OwM6QihmE44SsZyjoQPeEG2fzIGSl I7u3tgKsySISr+dPqIn10sZQmJ69LPc0RKNVQ+ypJRnkO4iX/Ks9Z/VYa8R0+sZJ ooH4r5R7O2AcM+on34ZrYsIA5xoj8Jj1c09xuZT/vwyZhNWbpm4n00qvZMipRKTr uCPuc8HgkSug0HKmSfbhRbpGRvLs8hCoIE80yI87PInxvV/18E9lQqzuN3OD9xEz 0OVX77Edpv/u9JYdP9hFqSA= -----END CERTIFICATE-----Generated at Tue Apr 7 22:27:11 2026 by rpki-client