$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/IDYXHGM1fupgCtylYFlG_ZGyf74.roa File: IDYXHGM1fupgCtylYFlG_ZGyf74.roa (raw, json) Hash identifier: R/g1DMF1tocgVNKH6cn86liB+EqTHYVnYe0Gf2TEejc= Subject key identifier: 20:36:17:1C:63:35:7E:EA:60:0A:DC:A5:60:59:46:FD:91:B2:7F:BE Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 96 Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/IDYXHGM1fupgCtylYFlG_ZGyf74.roa Signing time: Tue 31 Mar 2026 08:25:00 +0000 ROA not before: Tue 31 Mar 2026 08:25:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9374 IP address blocks: 180.189.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Mar 31 08:25:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2036171C63357EEA600ADCA5605946FD91B27FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:b2:76:82:8a:93:5f:26:a5:26:29:49:84: 07:33:b6:8f:35:d5:0e:0b:5b:26:ce:3f:21:8f:3e: 17:c8:19:33:7d:94:82:a8:fe:91:eb:b8:ff:a3:94: 59:d3:a2:e7:84:a9:f0:4f:94:3a:cc:ea:68:f8:41: df:fb:fd:b2:72:e3:c0:f2:a5:85:af:ba:83:23:52: 09:6c:66:11:fa:6c:45:3a:61:38:f6:89:f3:e7:8b: f6:d0:5d:81:d3:8f:63:eb:75:57:73:99:c9:10:04: 52:81:d8:fa:4d:0f:ef:8a:06:c7:b4:54:08:c2:f4: d0:9b:ab:7f:a3:b1:6b:73:32:39:10:fe:ea:24:99: 04:04:3f:6e:ef:81:fc:50:e5:78:50:ad:00:47:36: 30:ad:b2:23:96:68:a5:e1:62:f9:88:42:08:9e:70: 30:91:e4:03:a6:b8:b2:0b:68:f9:37:3c:4e:e1:e7: 8f:4b:94:9d:0d:89:19:c4:e2:5f:20:de:59:22:a5: 93:98:1e:8e:67:79:ac:f0:53:8f:85:a3:2f:55:6c: a1:41:db:0b:5d:f3:88:e9:f0:4f:e6:f1:36:af:81: 0b:02:ab:66:74:e2:c3:35:b3:bd:51:18:ea:92:ae: 8a:60:27:b7:1d:d7:03:c2:04:d8:d6:16:86:14:20: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:17:1C:63:35:7E:EA:60:0A:DC:A5:60:59:46:FD:91:B2:7F:BE X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/IDYXHGM1fupgCtylYFlG_ZGyf74.roa sbgp-ipAddrBlock: critical IPv4: 180.189.128.0/21 Signature Algorithm: sha256WithRSAEncryption 85:aa:c9:15:0d:97:21:39:47:1f:9b:cc:76:5b:ce:eb:ef:68: ef:59:94:38:4a:7d:51:7b:0c:97:19:da:b7:dc:16:1e:35:5c: 01:c9:9e:1c:3a:dd:59:cf:f0:6b:be:4e:17:e2:8b:26:af:e4: 5a:6e:a3:ec:2d:c2:2a:ab:b0:92:df:b2:5c:08:85:d8:b1:8f: e7:5f:ea:6c:11:b4:55:91:26:54:95:16:f4:78:c5:1a:63:f8: 91:1a:64:c7:2a:60:f4:cc:54:28:94:b4:5f:37:0b:f3:8b:72: 20:59:92:e0:12:70:1c:10:34:47:28:40:1e:d3:13:88:c9:16: ea:66:df:7d:56:04:78:2f:31:16:1d:12:76:36:80:91:3d:8d: c1:9d:5d:02:63:b9:de:83:05:d4:3d:cb:f3:eb:0f:db:0e:f2: 9b:62:6d:bf:d1:2d:27:5e:14:27:5e:09:55:8e:3e:8f:93:c9: c4:72:3e:01:f3:f6:7c:78:b1:86:d7:50:a0:c1:03:71:fe:e2: a0:84:13:ba:ec:27:4a:54:b9:d8:ba:2c:14:96:26:bb:29:d5: 65:85:18:50:60:76:ef:95:85:d0:36:64:9a:d0:e6:75:da:3d: 9e:98:58:19:7f:74:da:a5:11:e8:91:87:ea:1e:f4:3f:13:dd: 75:42:bb:1a -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE RTUyRTY0QkU0M0UzMjhBQTY5RjNBQjJEMzQ3Rjg4MzNFQzYzNzAeFw0yNjAzMzEw ODI1MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwMzYxNzFDNjMzNTdF RUE2MDBBRENBNTYwNTk0NkZEOTFCMjdGQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH/LJ2goqTXyalJilJhAczto811Q4LWybOPyGPPhfIGTN9lIKo /pHruP+jlFnToueEqfBPlDrM6mj4Qd/7/bJy48DypYWvuoMjUglsZhH6bEU6YTj2 ifPni/bQXYHTj2PrdVdzmckQBFKB2PpND++KBse0VAjC9NCbq3+jsWtzMjkQ/uok mQQEP27vgfxQ5XhQrQBHNjCtsiOWaKXhYvmIQgiecDCR5AOmuLILaPk3PE7h549L lJ0NiRnE4l8g3lkipZOYHo5neazwU4+Foy9VbKFB2wtd84jp8E/m8TavgQsCq2Z0 4sM1s71RGOqSropgJ7cd1wPCBNjWFoYUIOX5AgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUIDYXHGM1fupgCtylYFlG/ZGyf74wHwYDVR0jBBgwFoAUZd5S5kvkPjKKpp86 stNH+IM+xjcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY4L1pkNVM1a3ZrUGpLS3BwODZzdE5ILUlNLXhqYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1pkNVM1a3ZrUGpLS3BwODZzdE5ILUlN LXhqYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC82OC9JRFlYSEdNMWZ1cGdDdHlsWUZsR19aR3lmNzQucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDtL2AMA0GCSqGSIb3DQEBCwUAA4IBAQCF qskVDZchOUcfm8x2W87r72jvWZQ4Sn1RewyXGdq33BYeNVwByZ4cOt1Zz/Brvk4X 4osmr+RabqPsLcIqq7CS37JcCIXYsY/nX+psEbRVkSZUlRb0eMUaY/iRGmTHKmD0 zFQolLRfNwvzi3IgWZLgEnAcEDRHKEAe0xOIyRbqZt99VgR4LzEWHRJ2NoCRPY3B nV0CY7negwXUPcvz6w/bDvKbYm2/0S0nXhQnXglVjj6Pk8nEcj4B8/Z8eLGG11Cg wQNx/uKghBO67CdKVLnYuiwUlia7KdVlhRhQYHbvlYXQNmSa0OZ12j2emFgZf3Ta pRHokYfqHvQ/E911Qrsa -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:52 2026 by rpki-client