$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yN4db5lLn5FAeC4-FfU7FwEmjOI.roa File: yN4db5lLn5FAeC4-FfU7FwEmjOI.roa (raw, json) Hash identifier: 9rDI4bhVMGGkG8kpF45ECKd/9yhqb/0RPnJ2o0KjaVY= Subject key identifier: C8:DE:1D:6F:99:4B:9F:91:40:78:2E:3E:15:F5:3B:17:01:26:8C:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13B7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yN4db5lLn5FAeC4-FfU7FwEmjOI.roa Signing time: Tue 31 Mar 2026 07:56:09 +0000 ROA not before: Tue 31 Mar 2026 07:56:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5047 (0x13b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C8DE1D6F994B9F9140782E3E15F53B1701268CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:d0:74:98:fc:1e:f3:18:2f:d9:1a:1b:96: 7f:13:91:01:6a:56:8c:64:e7:38:46:50:08:52:38: fe:61:6b:15:7f:78:84:bc:2e:b9:48:13:e0:7b:6a: e1:87:62:a4:4c:81:49:e8:8f:78:22:ee:0b:e4:57: 43:b7:da:85:af:d8:f6:b0:d0:6f:54:a1:01:ab:06: 20:de:f1:01:0d:9a:5b:63:8e:db:84:34:be:10:a3: 47:fc:d2:db:13:8c:8c:e0:87:98:95:41:cc:ad:33: a7:89:8b:8b:73:0a:50:3d:5d:c4:ba:92:92:a3:46: 9d:67:83:c9:41:5e:af:f7:2b:88:6e:52:76:d6:51: 69:20:6e:67:39:96:28:c1:d2:dd:66:76:6a:c2:eb: d3:ce:b6:1a:67:e3:aa:60:95:c1:e3:a6:c2:d0:93: 17:96:c8:6d:02:14:0f:d6:f6:94:0a:13:33:4a:10: b6:85:8d:41:d2:88:b9:39:b7:40:29:8b:d5:cc:bb: 16:eb:fa:07:88:18:78:87:79:10:15:4e:0f:ff:e9: 87:51:2c:d1:b9:b1:30:fa:5f:f6:4b:97:75:10:f3: 58:87:2a:3c:28:46:81:8b:ac:69:51:0c:ef:d6:8c: a0:ba:ae:22:bf:1c:44:ec:6d:1f:4d:34:cf:1b:59: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DE:1D:6F:99:4B:9F:91:40:78:2E:3E:15:F5:3B:17:01:26:8C:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yN4db5lLn5FAeC4-FfU7FwEmjOI.roa sbgp-ipAddrBlock: critical IPv4: 49.97.108.0/23 Signature Algorithm: sha256WithRSAEncryption 88:30:7e:21:a1:4b:b0:7d:ca:80:c4:c6:8d:34:07:52:5a:40: 24:88:f2:10:55:94:dc:d4:7d:47:d0:34:48:d7:0d:26:12:35: 73:ba:40:11:fd:f5:57:6b:99:3f:49:a0:7f:a8:7e:4c:cf:b3: 2c:a4:f9:6d:57:24:e8:03:d2:0a:c8:cf:cf:de:7a:78:4a:9c: c7:4f:85:c2:7f:78:3f:23:d9:a2:e9:fd:a8:4a:81:e4:e3:99: a4:1c:30:73:9b:d6:f7:57:1c:0c:60:42:e9:6e:bd:63:ec:95: 66:15:c4:29:0e:70:a6:97:55:58:61:7c:4f:0d:a0:6f:88:73: 69:1f:3c:62:44:d3:03:17:39:7b:a2:b5:49:fc:4d:41:c1:b2: ac:bf:7f:c0:aa:02:c3:12:34:09:f8:84:60:c9:77:fd:75:aa: 93:4e:9b:d3:ad:54:92:29:94:6d:d0:89:7c:50:f4:2f:22:be: cd:a6:5f:d1:e6:55:5e:11:7d:e0:f1:57:13:27:99:c4:2d:47: dd:e1:6b:58:98:fa:04:a6:a1:7e:46:b8:41:f4:22:41:ef:23: d7:eb:2c:b3:32:ab:6e:e7:ef:15:09:0b:5c:51:59:a5:6d:01: ab:08:48:14:31:f8:cb:f1:c0:76:2c:02:d5:96:2b:0b:3d:71: 5b:0b:2d:9a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4REUxRDZGOTk0QjlG OTE0MDc4MkUzRTE1RjUzQjE3MDEyNjhDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTuNB0mPwe8xgv2Robln8TkQFqVoxk5zhGUAhSOP5haxV/eIS8 LrlIE+B7auGHYqRMgUnoj3gi7gvkV0O32oWv2Paw0G9UoQGrBiDe8QENmltjjtuE NL4Qo0f80tsTjIzgh5iVQcytM6eJi4tzClA9XcS6kpKjRp1ng8lBXq/3K4huUnbW UWkgbmc5lijB0t1mdmrC69POthpn46pglcHjpsLQkxeWyG0CFA/W9pQKEzNKELaF jUHSiLk5t0Api9XMuxbr+geIGHiHeRAVTg//6YdRLNG5sTD6X/ZLl3UQ81iHKjwo RoGLrGlRDO/WjKC6riK/HETsbR9NNM8bWZ8nAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUyN4db5lLn5FAeC4+FfU7FwEmjOIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3lONGRiNWxMbjVGQWVDNC1GZlU3RndFbWpPSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYWwwDQYJKoZIhvcNAQELBQADggEB AIgwfiGhS7B9yoDExo00B1JaQCSI8hBVlNzUfUfQNEjXDSYSNXO6QBH99VdrmT9J oH+ofkzPsyyk+W1XJOgD0grIz8/eenhKnMdPhcJ/eD8j2aLp/ahKgeTjmaQcMHOb 1vdXHAxgQuluvWPslWYVxCkOcKaXVVhhfE8NoG+Ic2kfPGJE0wMXOXuitUn8TUHB sqy/f8CqAsMSNAn4hGDJd/11qpNOm9OtVJIplG3QiXxQ9C8ivs2mX9HmVV4RfeDx VxMnmcQtR93ha1iY+gSmoX5GuEH0IkHvI9frLLMyq27n7xUJC1xRWaVtAasISBQx +MvxwHYsAtWWKws9cVsLLZo= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:32 2026 by rpki-client