$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ymIeCHcqhnywyWWUKSFd5vI5lLk.roa File: ymIeCHcqhnywyWWUKSFd5vI5lLk.roa (raw, json) Hash identifier: YOHn/Ce8upzqBK5i0AbwFkeuLXOLi0ls3OjLIHOPdz0= Subject key identifier: CA:62:1E:08:77:2A:86:7C:B0:C9:65:94:29:21:5D:E6:F2:39:94:B9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 142A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ymIeCHcqhnywyWWUKSFd5vI5lLk.roa Signing time: Tue 31 Mar 2026 07:56:58 +0000 ROA not before: Tue 31 Mar 2026 07:56:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5162 (0x142a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CA621E08772A867CB0C9659429215DE6F23994B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:75:22:c4:8e:40:ce:6f:a3:b2:a0:7b:8e: cd:81:b0:19:23:06:ab:2c:fc:f7:c3:e5:b7:6d:85: ac:6e:f0:5d:16:f8:d8:ea:1b:14:57:92:f5:64:8a: 98:74:99:66:34:54:80:b4:45:92:c3:33:7d:a9:95: b5:9b:c0:c8:91:2f:19:05:64:ad:cc:58:5c:18:4b: 2c:41:eb:fd:1c:65:23:bc:a8:12:a3:3f:d2:90:3f: 9a:c6:17:b4:8a:25:fa:d7:e6:3b:c5:a8:19:8a:ec: 25:09:e5:a5:40:57:93:ff:19:f8:b3:b0:f6:03:bd: fa:f3:11:c9:10:3a:a7:d7:42:db:b4:a2:42:59:7f: b8:4a:29:10:24:54:e0:ec:55:0e:68:c9:75:da:95: 81:43:12:a1:3f:c5:34:fd:4a:40:73:6b:0b:8b:06: ac:0c:d8:77:2b:78:8f:62:92:a3:3a:90:6a:b5:fd: a7:fd:7f:9d:99:34:96:f4:d2:e5:d6:ee:bd:57:17: 87:c4:fe:46:33:d6:5b:61:4a:36:40:af:22:9d:cf: 69:8c:a1:ae:db:b7:eb:08:f3:5b:bb:c4:10:35:b5: be:06:34:39:91:52:98:34:66:43:2c:b0:ab:54:a1: 5b:4b:c4:cd:6d:de:c4:f0:4d:de:a7:2a:5c:a1:1e: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:62:1E:08:77:2A:86:7C:B0:C9:65:94:29:21:5D:E6:F2:39:94:B9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ymIeCHcqhnywyWWUKSFd5vI5lLk.roa sbgp-ipAddrBlock: critical IPv4: 110.163.217.0/24 Signature Algorithm: sha256WithRSAEncryption 42:7d:6b:59:21:30:1b:f5:86:b2:26:9b:d7:07:91:8c:01:09: fe:85:de:d8:b4:f5:01:2c:94:70:8f:f6:f2:76:94:af:0c:5f: 9c:9c:60:ea:3f:d3:51:1d:c0:34:b0:fc:d0:fe:a8:8a:be:48: 99:90:04:46:af:93:52:6e:09:86:41:9c:8a:1f:fa:56:29:e4: 3c:32:2d:a8:37:f6:57:ff:ad:8b:57:f7:6f:30:3e:02:83:fe: 88:e4:54:6b:54:82:4f:2a:4f:4d:2b:b3:cb:3a:59:61:31:41: 5a:94:76:cb:65:b1:16:2c:da:6f:0f:82:d4:86:43:52:c9:8c: 7d:96:a9:5a:17:e5:d8:5a:e4:49:13:b7:72:0a:8c:39:21:6a: 2e:20:a6:f4:fc:d9:c8:72:b4:22:46:25:b0:56:87:f4:0c:4c: 8a:ff:ae:f9:3f:b4:64:58:d5:90:da:5c:dc:d0:6f:74:8d:be: 91:9f:c9:eb:05:8a:25:2e:4c:2e:d1:5f:7f:ee:56:38:87:7a: ad:d4:5f:27:79:14:52:02:2d:6b:37:ad:8d:4b:a4:29:1c:9b: 42:ef:94:8c:b6:67:c0:90:cc:91:79:37:f1:50:37:61:c1:02: ae:c6:d9:a5:d3:f4:46:b5:f1:d7:73:93:95:52:17:8d:a9:31: c4:98:20:5f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBNjIxRTA4NzcyQTg2 N0NCMEM5NjU5NDI5MjE1REU2RjIzOTk0QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrSnUixI5Azm+jsqB7js2BsBkjBqss/PfD5bdthaxu8F0W+Njq GxRXkvVkiph0mWY0VIC0RZLDM32plbWbwMiRLxkFZK3MWFwYSyxB6/0cZSO8qBKj P9KQP5rGF7SKJfrX5jvFqBmK7CUJ5aVAV5P/GfizsPYDvfrzEckQOqfXQtu0okJZ f7hKKRAkVODsVQ5oyXXalYFDEqE/xTT9SkBzawuLBqwM2HcreI9ikqM6kGq1/af9 f52ZNJb00uXW7r1XF4fE/kYz1lthSjZAryKdz2mMoa7bt+sI81u7xBA1tb4GNDmR Upg0ZkMssKtUoVtLxM1t3sTwTd6nKlyhHtPZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUymIeCHcqhnywyWWUKSFd5vI5lLkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ltSWVDSGNxaG55d3lXV1VLU0ZkNXZJNWxMay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuo9kwDQYJKoZIhvcNAQELBQADggEB AEJ9a1khMBv1hrImm9cHkYwBCf6F3ti09QEslHCP9vJ2lK8MX5ycYOo/01EdwDSw /ND+qIq+SJmQBEavk1JuCYZBnIof+lYp5DwyLag39lf/rYtX928wPgKD/ojkVGtU gk8qT00rs8s6WWExQVqUdstlsRYs2m8PgtSGQ1LJjH2WqVoX5dha5EkTt3IKjDkh ai4gpvT82chytCJGJbBWh/QMTIr/rvk/tGRY1ZDaXNzQb3SNvpGfyesFiiUuTC7R X3/uVjiHeq3UXyd5FFICLWs3rY1LpCkcm0LvlIy2Z8CQzJF5N/FQN2HBAq7G2aXT 9Ea18ddzk5VSF42pMcSYIF8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:52 2026 by rpki-client