$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5729/haPVuQBr6fhUjOPBUeDFzqwRHM8.roa File: haPVuQBr6fhUjOPBUeDFzqwRHM8.roa (raw, json) Hash identifier: 5smX2rHt5XbWOVpAHxCNAqqmBHxOlxbsUJXEaH/UFE0= Subject key identifier: 85:A3:D5:B9:00:6B:E9:F8:54:8C:E3:C1:51:E0:C5:CE:AC:11:1C:CF Certificate issuer: /CN=0A007FEFD74356279C944B5F48CC036268C4962D Certificate serial: 09 Authority key identifier: 0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/haPVuQBr6fhUjOPBUeDFzqwRHM8.roa Signing time: Tue 31 Mar 2026 08:47:23 +0000 ROA not before: Tue 31 Mar 2026 08:47:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 152869 IP address blocks: 163.61.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A007FEFD74356279C944B5F48CC036268C4962D Validity Not Before: Mar 31 08:47:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=85A3D5B9006BE9F8548CE3C151E0C5CEAC111CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:42:9e:db:ac:cf:7b:a6:c2:df:41:fd:0c: 0c:82:b3:7a:7b:08:df:78:bf:2d:e4:da:c7:5d:12: 66:5d:3a:3c:60:b3:7e:d4:88:35:47:33:d2:bd:20: a1:c0:f2:b5:d1:78:30:4a:08:41:31:b6:4a:a7:10: a8:d0:6f:6e:b0:b9:29:a3:64:ac:16:2f:d6:13:5e: 8c:0e:c6:5c:1c:cb:d4:cc:75:07:5a:e9:81:e3:1c: fb:27:46:2c:4c:fe:06:a8:62:81:8b:2d:0d:12:ba: 01:1d:f7:20:f7:1d:79:24:86:5f:af:a4:1d:23:24: b1:28:73:f3:25:1d:ce:6c:ca:97:2f:75:dd:fd:bb: 2e:f9:04:22:3e:66:67:ce:8a:ca:f9:a1:f7:ea:f1: 5c:22:12:ce:d6:02:b1:7c:ea:53:45:86:c3:c4:40: c7:40:59:d5:b2:34:9e:c4:aa:6a:34:04:75:73:70: 22:69:81:5b:48:17:ba:e4:54:42:f2:04:f3:ef:be: 5c:27:5f:00:0f:68:e8:0c:ee:c5:3c:0e:5f:00:f8: e5:e8:6d:da:4c:03:cf:be:8f:e0:da:02:60:42:7a: 23:4f:d6:f6:d5:de:0f:23:40:3d:5a:8c:5a:b6:2a: 3e:50:4d:0e:29:d7:59:25:3b:a5:ef:c2:0f:86:9e: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:D5:B9:00:6B:E9:F8:54:8C:E3:C1:51:E0:C5:CE:AC:11:1C:CF X509v3 Authority Key Identifier: keyid:0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/haPVuQBr6fhUjOPBUeDFzqwRHM8.roa sbgp-ipAddrBlock: critical IPv4: 163.61.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e6:e0:18:77:c9:1c:fe:66:bf:f3:1f:ff:92:b9:93:05:93: df:92:8c:f7:6e:c6:4f:a0:77:ca:74:d1:b0:f5:c5:e0:60:31: 14:86:ea:2c:15:c1:61:fe:7c:37:40:10:05:fc:3c:ad:a8:b2: 59:8e:2d:fc:67:f5:b0:2b:cf:69:ee:83:13:be:02:99:63:2a: f2:48:15:f9:1e:0b:46:8d:9e:37:3b:be:90:0d:d3:b6:57:07: b6:d2:a5:d7:09:59:45:d2:91:31:dd:e7:bf:3c:42:bc:c0:6c: 3d:ba:c4:aa:6e:c1:10:df:95:68:8b:ff:4d:02:55:37:1b:1d: 7d:68:9f:32:9c:d2:86:60:3e:df:10:08:20:dd:73:be:b9:09: 49:0b:e8:ec:9b:dd:07:ff:e7:bd:19:17:69:82:10:69:ed:fc: 4f:76:eb:47:25:a3:4d:46:06:bc:7c:6c:6a:fb:0e:2b:7b:bd: 4a:30:9d:81:a9:05:6b:41:66:35:ce:f2:84:3f:56:6a:e0:7d: 4a:b0:30:51:84:9f:1c:79:0c:72:d1:0c:83:e3:35:ca:45:93: 19:cd:6f:5d:d0:a1:a3:ed:58:73:bf:58:85:e7:5b:ac:d4:b5: 66:79:0a:af:2c:7a:2f:1b:6d:60:8f:57:38:d9:25:53:b1:11: c9:1b:a0:96 -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTAw N0ZFRkQ3NDM1NjI3OUM5NDRCNUY0OENDMDM2MjY4QzQ5NjJEMB4XDTI2MDMzMTA4 NDcyM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODVBM0Q1QjkwMDZCRTlG ODU0OENFM0MxNTFFMEM1Q0VBQzExMUNDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKhFQp7brM97psLfQf0MDIKzensI33i/LeTax10SZl06PGCzftSI NUcz0r0gocDytdF4MEoIQTG2SqcQqNBvbrC5KaNkrBYv1hNejA7GXBzL1Mx1B1rp geMc+ydGLEz+BqhigYstDRK6AR33IPcdeSSGX6+kHSMksShz8yUdzmzKly913f27 LvkEIj5mZ86Kyvmh9+rxXCISztYCsXzqU0WGw8RAx0BZ1bI0nsSqajQEdXNwImmB W0gXuuRUQvIE8+++XCdfAA9o6AzuxTwOXwD45eht2kwDz76P4NoCYEJ6I0/W9tXe DyNAPVqMWrYqPlBNDinXWSU7pe/CD4aeQvUCAwEAAaOCAdswggHXMB0GA1UdDgQW BBSFo9W5AGvp+FSM48FR4MXOrBEczzAfBgNVHSMEGDAWgBQKAH/v10NWJ5yUS19I zANiaMSWLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTcyOS9DZ0JfNzlkRFZpZWNsRXRmU013RFltakVsaTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DZ0JfNzlkRFZpZWNsRXRmU013RFlt akVsaTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTcyOS9oYVBWdVFCcjZmaFVqT1BCVWVERnpxd1JITTgucm9hMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoz0uMA0GCSqGSIb3DQEBCwUAA4IB AQB85uAYd8kc/ma/8x//krmTBZPfkoz3bsZPoHfKdNGw9cXgYDEUhuosFcFh/nw3 QBAF/DytqLJZji38Z/WwK89p7oMTvgKZYyrySBX5HgtGjZ43O76QDdO2Vwe20qXX CVlF0pEx3ee/PEK8wGw9usSqbsEQ35Voi/9NAlU3Gx19aJ8ynNKGYD7fEAgg3XO+ uQlJC+jsm90H/+e9GRdpghBp7fxPdutHJaNNRga8fGxq+w4re71KMJ2BqQVrQWY1 zvKEP1Zq4H1KsDBRhJ8ceQxy0QyD4zXKRZMZzW9d0KGj7Vhzv1iF51us1LVmeQqv LHovG21gj1c42SVTsRHJG6CW -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:55 2026 by rpki-client