$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xucamSrgz_whrCVm3f13dXcWo_E.roa File: xucamSrgz_whrCVm3f13dXcWo_E.roa (raw, json) Hash identifier: aLLUcWarhngH3JtMMHG4WAsRd7YBCL7DnSST4nukz7A= Subject key identifier: C6:E7:1A:99:2A:E0:CF:FC:21:AC:25:66:DD:FD:77:75:77:16:A3:F1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15FA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xucamSrgz_whrCVm3f13dXcWo_E.roa Signing time: Tue 31 Mar 2026 08:00:50 +0000 ROA not before: Tue 31 Mar 2026 08:00:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5626 (0x15fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C6E71A992AE0CFFC21AC2566DDFD77757716A3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:4c:34:15:13:43:37:22:f3:03:af:9d:a0: f7:35:30:f0:eb:82:61:9c:2e:d8:58:a7:72:fd:46: 8d:58:7c:4c:04:5c:f3:8d:8f:c0:cf:5d:28:37:b6: 44:12:ae:53:47:43:bb:50:16:ac:6f:7d:ad:ec:a2: 2a:63:1a:ba:82:5f:b3:09:ec:2f:75:43:92:1d:56: 44:19:ac:ab:1c:81:2c:59:7b:02:d3:72:21:6a:f6: 9e:65:c0:31:c1:02:8f:31:50:d7:ca:27:b3:d5:49: 6f:20:8d:ef:30:fe:75:08:95:c9:75:f5:76:51:b1: ae:0e:8f:f3:f4:94:b5:67:6c:2a:dd:dc:30:7e:c5: 8e:f9:98:e1:93:de:9c:9d:bb:07:6a:9f:cb:ca:11: 05:35:55:a0:eb:d7:e1:09:0f:7a:68:c8:32:74:3a: 9a:5b:a3:1c:2f:4f:43:50:02:b3:7f:2b:27:f6:7d: 07:d9:fe:bd:11:5b:ed:35:42:4c:a2:26:69:bf:6b: 5c:95:f4:8c:73:ba:93:b2:dd:68:73:af:10:1a:77: 54:51:66:89:78:36:9a:05:da:9f:0a:11:12:39:d6: 2a:30:eb:4f:cf:e4:f6:8b:4e:5e:89:11:50:6f:16: 77:98:c4:42:02:18:63:52:d2:8e:6a:cb:b0:ce:f5: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:1A:99:2A:E0:CF:FC:21:AC:25:66:DD:FD:77:75:77:16:A3:F1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xucamSrgz_whrCVm3f13dXcWo_E.roa sbgp-ipAddrBlock: critical IPv4: 49.96.14.0/23 Signature Algorithm: sha256WithRSAEncryption bb:34:fb:50:0a:f3:66:37:4f:79:ab:31:cc:e3:0a:27:98:78: ab:31:42:03:c9:28:93:86:89:73:3e:eb:72:61:8e:9c:55:46: 30:2f:58:aa:4c:61:86:a3:c0:fa:3c:1d:08:97:21:52:8f:15: ad:a5:7e:b6:89:5c:8e:7b:cb:e6:64:d2:39:f5:ae:3e:be:d1: 8b:5a:18:a3:22:99:58:d1:a2:65:19:86:5e:2e:33:4c:d8:51: ff:7d:5a:9b:af:e8:68:8b:91:36:d9:df:47:41:3d:3f:6f:af: 8d:17:fc:42:89:04:1f:86:bd:91:97:4c:0c:e7:4f:88:7d:33: ee:d8:17:e3:93:f4:3c:a4:89:aa:17:a7:2f:4b:9b:92:50:f6: 64:45:e7:23:d3:c8:9b:fa:79:80:c0:ac:f6:bd:54:9f:3d:6f: bc:61:cd:77:1e:ee:bd:a3:03:d4:84:28:96:49:9e:34:93:6a: 71:5d:83:f1:fd:bb:e6:38:89:a9:22:64:91:70:d3:a0:ab:6f: 43:4b:42:52:1b:29:d2:38:b9:69:17:df:ae:ae:67:32:c9:8f: cd:f9:2c:ba:31:02:6d:a6:43:12:fb:31:b2:c0:0d:5c:8c:74: 6d:f9:c7:36:aa:c0:ed:23:31:a4:63:03:2c:f5:a6:19:fc:5c: 98:bd:b7:5d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2RTcxQTk5MkFFMENG RkMyMUFDMjU2NkRERkQ3Nzc1NzcxNkEzRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI7Ew0FRNDNyLzA6+doPc1MPDrgmGcLthYp3L9Ro1YfEwEXPON j8DPXSg3tkQSrlNHQ7tQFqxvfa3soipjGrqCX7MJ7C91Q5IdVkQZrKscgSxZewLT ciFq9p5lwDHBAo8xUNfKJ7PVSW8gje8w/nUIlcl19XZRsa4Oj/P0lLVnbCrd3DB+ xY75mOGT3pyduwdqn8vKEQU1VaDr1+EJD3poyDJ0OppboxwvT0NQArN/Kyf2fQfZ /r0RW+01QkyiJmm/a1yV9IxzupOy3WhzrxAad1RRZol4NpoF2p8KERI51iow60/P 5PaLTl6JEVBvFneYxEICGGNS0o5qy7DO9Xv7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUxucamSrgz/whrCVm3f13dXcWo/EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3h1Y2FtU3Jnel93aHJDVm0zZjEzZFhjV29fRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYA4wDQYJKoZIhvcNAQELBQADggEB ALs0+1AK82Y3T3mrMczjCieYeKsxQgPJKJOGiXM+63JhjpxVRjAvWKpMYYajwPo8 HQiXIVKPFa2lfraJXI57y+Zk0jn1rj6+0YtaGKMimVjRomUZhl4uM0zYUf99Wpuv 6GiLkTbZ30dBPT9vr40X/EKJBB+GvZGXTAznT4h9M+7YF+OT9DykiaoXpy9Lm5JQ 9mRF5yPTyJv6eYDArPa9VJ89b7xhzXce7r2jA9SEKJZJnjSTanFdg/H9u+Y4iaki ZJFw06Crb0NLQlIbKdI4uWkX366uZzLJj835LLoxAm2mQxL7MbLADVyMdG35xzaq wO0jMaRjAyz1phn8XJi9t10= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:43 2026 by rpki-client