$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yvfN7DLNbCc8LY6xTD6166ySKvU.roa File: yvfN7DLNbCc8LY6xTD6166ySKvU.roa (raw, json) Hash identifier: kGBrpiFevCHdLUcnkrHOBFnDfENmUwysoFkkfXZhiWs= Subject key identifier: CA:F7:CD:EC:32:CD:6C:27:3C:2D:8E:B1:4C:3E:B5:EB:AC:92:2A:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14F5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yvfN7DLNbCc8LY6xTD6166ySKvU.roa Signing time: Tue 31 Mar 2026 07:58:38 +0000 ROA not before: Tue 31 Mar 2026 07:58:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5365 (0x14f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CAF7CDEC32CD6C273C2D8EB14C3EB5EBAC922AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:fe:9b:c4:e7:9f:07:fc:02:48:71:63:1e: 67:4d:e5:c0:d8:dd:28:3f:b0:c7:be:c3:b3:4c:e5: d0:5e:47:22:09:72:7b:58:67:6c:d5:b4:ad:41:e6: d9:77:a9:10:99:d4:16:17:06:34:3f:82:d2:04:39: 73:92:44:5e:6f:1b:3b:4e:fb:90:24:19:1b:79:9c: ee:ef:55:9e:e3:dd:ed:5d:43:26:6a:57:61:a5:f5: 23:8a:c2:3c:41:25:8c:4a:80:53:a0:58:93:0c:75: 6b:a0:82:f5:d8:f8:34:67:0a:3c:33:c4:bf:1f:e2: bb:f3:c3:7f:34:32:5e:cf:5a:b0:d5:23:52:b3:1e: 70:af:a6:9c:4d:82:c2:7c:b3:0c:0a:21:49:27:ce: e1:16:c2:8b:0e:f8:4b:eb:55:c8:a3:d6:0e:81:5f: 81:7a:98:b6:71:f4:64:29:5e:89:58:97:c1:e0:fa: 75:e6:2f:b7:f5:24:86:8b:d7:19:5d:69:ec:c4:53: 78:f4:76:2e:68:75:e0:c6:a8:55:20:47:d4:a7:89: 7f:98:20:d4:f0:d9:80:e7:77:a7:33:b1:c1:02:fc: 3f:5e:c6:4e:c4:02:18:ac:c0:6b:ef:6f:27:fb:e5: 4f:a3:4c:0d:38:03:c8:d5:e7:2d:39:81:30:2a:50: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F7:CD:EC:32:CD:6C:27:3C:2D:8E:B1:4C:3E:B5:EB:AC:92:2A:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yvfN7DLNbCc8LY6xTD6166ySKvU.roa sbgp-ipAddrBlock: critical IPv4: 220.210.72.0/22 Signature Algorithm: sha256WithRSAEncryption e6:f9:42:00:8f:86:f6:f1:c1:d6:be:de:5a:1c:3d:57:be:71: 8d:a5:eb:b5:e4:50:9c:1c:02:e7:6a:8a:93:b6:e0:90:98:fd: b0:20:fe:d0:4f:ba:a0:1b:30:ad:d8:c9:92:90:91:7f:23:4b: f2:ab:9b:12:52:a2:05:d1:2d:65:b7:b7:3c:c3:8b:bc:dc:6f: 01:99:cb:64:fe:ce:af:a9:94:7b:e9:56:83:a7:a3:38:ad:90: 83:75:f0:28:62:f6:fa:7d:3d:b9:bc:4e:11:77:a1:02:50:5b: 3e:89:3f:5c:71:ab:2a:b4:40:4d:0c:b1:70:c7:29:0a:c9:30: 4a:e5:51:a1:c1:ec:0d:af:2e:d3:12:ba:e6:12:6c:64:2e:5d: cb:18:02:52:d9:b1:1a:9c:0a:a9:3c:11:c2:e2:24:ee:c5:d7: ae:8e:5f:9a:f2:0b:49:93:be:65:30:c8:cc:77:1f:b3:94:65: b1:cb:cb:3a:f8:f6:c2:11:a2:02:d8:0a:b7:f7:69:3d:9a:22: 52:2d:bc:2b:0e:68:21:8a:e9:8f:02:09:32:cd:dd:9a:dc:1e: 3e:45:70:07:e2:1d:56:fb:5a:6f:10:26:7c:9e:10:42:a4:e2: dd:a9:d3:2c:c6:4e:81:71:90:f5:25:c8:4d:82:3f:fd:b4:3d: a0:b0:97:2b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBRjdDREVDMzJDRDZD MjczQzJEOEVCMTRDM0VCNUVCQUM5MjJBRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4g/6bxOefB/wCSHFjHmdN5cDY3Sg/sMe+w7NM5dBeRyIJcntY Z2zVtK1B5tl3qRCZ1BYXBjQ/gtIEOXOSRF5vGztO+5AkGRt5nO7vVZ7j3e1dQyZq V2Gl9SOKwjxBJYxKgFOgWJMMdWuggvXY+DRnCjwzxL8f4rvzw380Ml7PWrDVI1Kz HnCvppxNgsJ8swwKIUknzuEWwosO+EvrVcij1g6BX4F6mLZx9GQpXolYl8Hg+nXm L7f1JIaL1xldaezEU3j0di5odeDGqFUgR9SniX+YINTw2YDnd6czscEC/D9exk7E AhiswGvvbyf75U+jTA04A8jV5y05gTAqUDaVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUyvfN7DLNbCc8LY6xTD6166ySKvUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3l2Zk43RExOYkNjOExZNnhURDYxNjZ5U0t2VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALc0kgwDQYJKoZIhvcNAQELBQADggEB AOb5QgCPhvbxwda+3locPVe+cY2l67XkUJwcAudqipO24JCY/bAg/tBPuqAbMK3Y yZKQkX8jS/KrmxJSogXRLWW3tzzDi7zcbwGZy2T+zq+plHvpVoOnozitkIN18Chi 9vp9Pbm8ThF3oQJQWz6JP1xxqyq0QE0MsXDHKQrJMErlUaHB7A2vLtMSuuYSbGQu XcsYAlLZsRqcCqk8EcLiJO7F166OX5ryC0mTvmUwyMx3H7OUZbHLyzr49sIRogLY Crf3aT2aIlItvCsOaCGK6Y8CCTLN3ZrcHj5FcAfiHVb7Wm8QJnyeEEKk4t2p0yzG ToFxkPUlyE2CP/20PaCwlys= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:46 2026 by rpki-client