$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xjSBjGWA99QbFab71su61OLV74s.roa File: xjSBjGWA99QbFab71su61OLV74s.roa (raw, json) Hash identifier: QJqZw5PmlaJ/TB7i2PD1s0i2tBxGjlc5ROrMvp77BgM= Subject key identifier: C6:34:81:8C:65:80:F7:D4:1B:15:A6:FB:D6:CB:BA:D4:E2:D5:EF:8B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 156A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xjSBjGWA99QbFab71su61OLV74s.roa Signing time: Tue 31 Mar 2026 07:59:36 +0000 ROA not before: Tue 31 Mar 2026 07:59:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5482 (0x156a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C634818C6580F7D41B15A6FBD6CBBAD4E2D5EF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:e0:3e:d2:d9:ab:c8:49:ac:c3:fa:76:f9: 6f:56:a1:b3:c3:c8:1b:e0:17:ae:1e:75:b0:1a:b7: 3e:fa:a0:be:24:ec:16:f4:82:2e:c7:3f:8c:51:9a: ff:db:59:59:0c:b1:3b:37:3c:42:68:31:39:ca:00: ce:ac:6c:3c:f3:c1:41:04:31:89:47:8c:fc:7b:b7: 06:8f:ae:d2:6f:18:ba:1f:23:c7:0d:8b:3c:66:99: 90:06:bb:bc:97:62:c1:9b:16:e3:99:97:bb:08:6f: e2:bd:43:c2:ce:e9:96:ae:fb:45:ec:f2:de:cc:12: 80:6d:4c:f0:c5:c3:85:e3:37:46:e8:e6:74:f5:ca: 80:d3:be:7d:96:37:83:a0:49:7a:b0:fa:2d:5a:3f: 4a:72:7b:4a:24:7f:13:86:05:a5:25:b2:2d:ac:18: 0b:ce:2f:45:5c:b1:f3:72:0a:58:00:39:b4:e3:99: 24:66:5b:e5:89:01:8d:4b:3a:cb:80:45:a1:ec:56: 8b:93:33:75:dd:7c:04:a3:8c:cd:d0:14:a4:19:8a: 18:d6:5c:aa:6c:4e:6f:ba:be:0e:a6:49:48:98:43: 08:3e:69:6e:cc:fb:a0:75:33:6b:0d:a2:e3:38:ce: 53:90:7b:dc:91:ca:31:ca:c8:24:eb:35:28:3a:6d: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:81:8C:65:80:F7:D4:1B:15:A6:FB:D6:CB:BA:D4:E2:D5:EF:8B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xjSBjGWA99QbFab71su61OLV74s.roa sbgp-ipAddrBlock: critical IPv4: 1.66.24.0/21 Signature Algorithm: sha256WithRSAEncryption 45:ed:79:e8:8e:69:8b:2d:68:1a:ec:00:1f:e0:6d:96:51:df: 17:bc:a2:26:c4:77:9d:ab:6a:14:18:bb:c6:b3:c9:d2:ef:1f: 17:39:22:ce:ba:03:8f:4a:2b:7a:26:7d:8e:32:f2:f0:12:a5: cb:05:77:81:28:b4:de:fc:5f:9b:94:96:d3:0e:59:aa:ff:a0: 18:2d:98:81:62:43:7d:43:99:64:91:50:6d:da:93:c8:15:f4: f3:d5:70:7e:f3:1b:cc:6f:51:e7:d0:00:bd:ea:e0:ee:27:eb: 90:ae:d4:d6:2d:88:43:b2:f2:4a:36:14:fb:8a:9d:cb:05:7f: ac:44:8a:e0:24:27:e4:45:0d:e3:21:3f:e3:ff:6d:68:67:88: a4:93:93:a5:d6:2c:44:1f:00:ec:d6:bc:58:47:be:75:0f:91: 30:11:b2:d0:d0:dd:97:fa:d7:d8:8f:69:ef:e9:8f:88:e3:53: bd:e0:73:7e:f9:9b:5a:23:99:21:5a:df:fd:a3:77:4f:63:d5: 53:7b:af:b6:d9:d1:65:e6:f3:32:2f:3d:9b:1e:60:f3:d4:16: db:3d:8b:30:01:a2:89:02:cf:b9:9e:47:d3:14:6d:b7:84:e1: c6:d0:f8:67:f9:20:f6:c5:15:f6:8c:66:50:f2:98:73:33:25: 74:90:98:4b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2MzQ4MThDNjU4MEY3 RDQxQjE1QTZGQkQ2Q0JCQUQ0RTJENUVGOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9uA+0tmryEmsw/p2+W9WobPDyBvgF64edbAatz76oL4k7Bb0 gi7HP4xRmv/bWVkMsTs3PEJoMTnKAM6sbDzzwUEEMYlHjPx7twaPrtJvGLofI8cN izxmmZAGu7yXYsGbFuOZl7sIb+K9Q8LO6Zau+0Xs8t7MEoBtTPDFw4XjN0bo5nT1 yoDTvn2WN4OgSXqw+i1aP0pye0okfxOGBaUlsi2sGAvOL0VcsfNyClgAObTjmSRm W+WJAY1LOsuARaHsVouTM3XdfASjjM3QFKQZihjWXKpsTm+6vg6mSUiYQwg+aW7M +6B1M2sNouM4zlOQe9yRyjHKyCTrNSg6banBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUxjSBjGWA99QbFab71su61OLV74swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3hqU0JqR1dBOTlRYkZhYjcxc3U2MU9MVjc0cy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBQhgwDQYJKoZIhvcNAQELBQADggEB AEXteeiOaYstaBrsAB/gbZZR3xe8oibEd52rahQYu8azydLvHxc5Is66A49KK3om fY4y8vASpcsFd4EotN78X5uUltMOWar/oBgtmIFiQ31DmWSRUG3ak8gV9PPVcH7z G8xvUefQAL3q4O4n65Cu1NYtiEOy8ko2FPuKncsFf6xEiuAkJ+RFDeMhP+P/bWhn iKSTk6XWLEQfAOzWvFhHvnUPkTARstDQ3Zf619iPae/pj4jjU73gc375m1ojmSFa 3/2jd09j1VN7r7bZ0WXm8zIvPZseYPPUFts9izABookCz7meR9MUbbeE4cbQ+Gf5 IPbFFfaMZlDymHMzJXSQmEs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:35 2026 by rpki-client