$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yCVdnVHMG-3HLBrW2toON-xZN0w.roa File: yCVdnVHMG-3HLBrW2toON-xZN0w.roa (raw, json) Hash identifier: nQ1IoF4+15ushk8GhCpTJmWKFnmDnU3NHSDK9O8n2hM= Subject key identifier: C8:25:5D:9D:51:CC:1B:ED:C7:2C:1A:D6:DA:DA:0E:37:EC:59:37:4C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1733 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yCVdnVHMG-3HLBrW2toON-xZN0w.roa Signing time: Tue 31 Mar 2026 08:03:21 +0000 ROA not before: Tue 31 Mar 2026 08:03:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.74.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5939 (0x1733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C8255D9D51CC1BEDC72C1AD6DADA0E37EC59374C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:dc:da:fb:89:a2:a0:82:d9:40:f0:5e:a3: ba:88:08:1b:27:6d:73:da:92:7b:7d:80:77:71:7c: 05:35:a6:d3:a3:9f:65:d9:39:7b:0c:56:96:0c:ea: c2:9a:f6:f0:dc:8c:60:35:f4:20:e4:c5:91:67:28: 57:69:ec:71:ec:4c:58:00:1b:cf:8d:49:24:7a:c2: 2d:f4:b1:5e:7e:b6:02:cf:58:47:fa:9c:e2:b8:f8: 0c:04:c2:98:33:f3:4e:48:27:ab:f2:86:5c:4a:c2: 89:e3:ca:6b:8a:6a:06:b8:25:5a:e4:a0:47:95:85: 56:ce:79:e5:e8:ab:90:f4:0f:52:3f:fe:b2:f4:89: 90:3f:68:94:50:7d:fb:c2:6a:8f:c9:7e:eb:3e:07: ba:7f:9b:96:eb:e4:b3:00:95:f6:11:c2:bb:0b:84: b7:cd:2f:90:24:14:df:93:22:7f:ea:c8:07:e7:f0: 36:6f:87:49:4f:1b:e0:cb:b0:2d:8a:0c:23:1e:b2: f4:37:c3:2d:3d:14:4f:7b:1c:4a:c9:58:31:20:ef: 26:b3:91:ca:ed:23:3b:b6:22:9e:65:85:b4:70:80: 7d:35:9f:5a:ae:d5:dc:8d:f6:77:72:37:b6:1c:8f: 8d:78:88:b9:51:05:fa:ba:26:92:82:7a:90:c5:e8: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:5D:9D:51:CC:1B:ED:C7:2C:1A:D6:DA:DA:0E:37:EC:59:37:4C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yCVdnVHMG-3HLBrW2toON-xZN0w.roa sbgp-ipAddrBlock: critical IPv4: 1.74.208.0/21 Signature Algorithm: sha256WithRSAEncryption a6:d8:9c:8b:a9:a1:00:f9:f4:ac:ed:cd:52:f1:5d:7e:92:ec: bb:76:b8:8d:17:e8:f3:cd:43:03:df:6c:b0:5e:35:01:54:22: ee:81:fd:fb:b6:54:4a:37:c2:d5:bd:7e:f7:54:37:37:7e:86: f1:e7:88:75:51:e5:a5:58:4a:c2:63:48:64:35:75:15:18:23: 07:18:95:ac:77:ae:12:c1:43:15:59:93:6f:56:e2:8b:2d:6e: cc:2e:48:ea:75:c7:29:20:c4:0c:82:b5:a7:74:c0:87:8f:5e: 48:36:18:7f:90:a5:58:7d:74:33:bb:c8:33:32:91:da:f8:95: 62:b0:3b:11:3d:92:87:0f:e0:fa:d8:fb:7a:84:5d:3d:c7:4c: 4a:14:f5:ab:23:89:63:7d:cb:c9:87:ae:37:0a:97:63:8a:a5: 8f:ec:b6:37:02:9a:2e:04:72:bd:c0:1c:0c:ef:14:3b:9f:7b: 88:a3:ce:07:33:b5:16:f3:f0:75:25:42:19:c0:aa:a6:ac:29: 19:be:74:e5:1d:d0:7b:e1:36:bc:83:77:b5:ec:b8:2f:d5:16: b9:df:73:4d:8b:0e:a6:52:08:c8:57:fc:bd:05:67:2e:de:f3: 3c:01:5a:4c:b5:eb:1c:84:d6:2c:07:e5:7e:00:42:04:2f:59: 72:a7:d9:4f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4MjU1RDlENTFDQzFC RURDNzJDMUFENkRBREEwRTM3RUM1OTM3NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzd9za+4mioILZQPBeo7qICBsnbXPaknt9gHdxfAU1ptOjn2XZ OXsMVpYM6sKa9vDcjGA19CDkxZFnKFdp7HHsTFgAG8+NSSR6wi30sV5+tgLPWEf6 nOK4+AwEwpgz805IJ6vyhlxKwonjymuKaga4JVrkoEeVhVbOeeXoq5D0D1I//rL0 iZA/aJRQffvCao/Jfus+B7p/m5br5LMAlfYRwrsLhLfNL5AkFN+TIn/qyAfn8DZv h0lPG+DLsC2KDCMesvQ3wy09FE97HErJWDEg7yazkcrtIzu2Ip5lhbRwgH01n1qu 1dyN9ndyN7Ycj414iLlRBfq6JpKCepDF6FtlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUyCVdnVHMG+3HLBrW2toON+xZN0wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3lDVmRuVkhNRy0zSExCclcydG9PTi14Wk4wdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBStAwDQYJKoZIhvcNAQELBQADggEB AKbYnIupoQD59KztzVLxXX6S7Lt2uI0X6PPNQwPfbLBeNQFUIu6B/fu2VEo3wtW9 fvdUNzd+hvHniHVR5aVYSsJjSGQ1dRUYIwcYlax3rhLBQxVZk29W4ostbswuSOp1 xykgxAyCtad0wIePXkg2GH+QpVh9dDO7yDMykdr4lWKwOxE9kocP4PrY+3qEXT3H TEoU9asjiWN9y8mHrjcKl2OKpY/stjcCmi4Ecr3AHAzvFDufe4ijzgcztRbz8HUl QhnAqqasKRm+dOUd0HvhNryDd7XsuC/VFrnfc02LDqZSCMhX/L0FZy7e8zwBWky1 6xyE1iwH5X4AQgQvWXKn2U8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:36 2026 by rpki-client