$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PdQFgldfykh-dNbR6nTtG997euI.roa File: PdQFgldfykh-dNbR6nTtG997euI.roa (raw, json) Hash identifier: nRNJr+MCqFqxb91ublIiu+OgwTEhU/rXt+aaowwpA0k= Subject key identifier: 3D:D4:05:82:57:5F:CA:48:7E:74:D6:D1:EA:74:ED:1B:DF:7B:7A:E2 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0471 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PdQFgldfykh-dNbR6nTtG997euI.roa Signing time: Tue 31 Mar 2026 08:12:32 +0000 ROA not before: Tue 31 Mar 2026 08:12:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9824 IP address blocks: 114.198.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 08:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Mar 31 08:12:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3DD40582575FCA487E74D6D1EA74ED1BDF7B7AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:73:b5:99:32:8e:7d:7c:7a:e7:31:cc:24: 04:34:4e:de:1d:98:39:36:7c:e5:ff:69:a0:39:51: a2:44:58:79:1f:e1:f5:0a:05:94:d9:2b:80:b0:4d: 6a:3f:36:f9:46:a2:85:3a:47:a0:6c:98:b9:a2:4b: 88:a1:9a:5d:69:ba:54:62:18:cd:8c:89:f8:23:9d: 03:cd:c4:04:37:63:26:6a:fb:72:86:a2:fb:b5:9e: 32:b0:c2:3e:eb:3a:fc:ba:4b:bb:d8:7c:ae:5b:5a: f4:18:a6:0e:07:96:4e:68:4b:ed:0a:1a:e3:ce:ac: 12:eb:2f:7c:9c:3f:a3:7f:75:f9:86:3d:7a:2a:5a: 3e:ab:78:39:ea:c3:93:90:41:98:11:b2:03:ce:eb: 39:8e:17:ef:75:f8:17:24:1a:ae:b3:06:1e:93:e0: 59:cc:89:92:91:6c:4d:6d:a4:92:ed:20:ce:37:aa: 03:62:99:66:ed:b0:5b:99:54:36:f9:c8:d7:b1:88: ec:e0:c5:94:d4:5e:32:7d:31:67:27:c5:92:27:aa: 18:fd:e6:51:f1:3c:e6:cd:a0:89:f5:09:da:91:26: b1:b6:9e:24:dc:dd:4c:4e:18:41:1c:02:67:79:c5: 68:7a:ec:cc:8f:7e:18:34:0f:a5:dd:25:18:71:98: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D4:05:82:57:5F:CA:48:7E:74:D6:D1:EA:74:ED:1B:DF:7B:7A:E2 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PdQFgldfykh-dNbR6nTtG997euI.roa sbgp-ipAddrBlock: critical IPv4: 114.198.224.0/21 Signature Algorithm: sha256WithRSAEncryption ca:81:8f:29:52:31:52:24:cd:3d:75:15:17:ca:e7:93:b1:ed: 91:5f:f8:5f:30:4e:23:33:ac:ba:e0:31:90:32:ac:65:73:e1: 4e:0e:1f:92:51:e7:a8:55:96:ca:5f:34:49:e6:bb:1b:bb:8a: 16:9c:1c:32:1f:2b:9f:0b:aa:f3:cf:6a:bd:29:e5:ba:02:83: 06:62:f6:ca:20:a5:4f:19:13:41:af:75:1d:2a:db:fa:0c:c3: ae:8d:e8:ed:23:f9:2c:51:aa:80:bc:fa:34:6a:b7:e6:df:52: fc:86:fe:b1:f7:fa:c8:78:51:df:73:4d:be:5f:5c:46:b2:64: 53:c3:aa:7f:b5:27:a3:ef:7d:da:33:09:7a:f2:73:af:07:13: 14:da:24:5c:1b:e7:ee:4f:25:a2:24:ec:16:e1:6d:4b:7d:82: 36:54:1b:5e:59:27:8b:8c:84:78:7e:1e:58:88:da:c3:e0:ea: 00:c0:88:77:e2:d9:8e:45:ee:dc:00:c3:c1:24:2b:5d:f9:1c: a8:42:fb:15:50:01:31:48:12:74:38:e5:99:e4:31:2f:81:6e: 66:b5:cd:ed:38:bd:9c:9b:e1:d3:5b:02:cb:71:27:57:1a:50: 53:ad:4e:26:54:97:4f:a7:68:7a:93:08:ab:4d:90:b7:a9:90: 61:6c:72:94 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw ODEyMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNERDQwNTgyNTc1RkNB NDg3RTc0RDZEMUVBNzRFRDFCREY3QjdBRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCisXO1mTKOfXx65zHMJAQ0Tt4dmDk2fOX/aaA5UaJEWHkf4fUK BZTZK4CwTWo/NvlGooU6R6BsmLmiS4ihml1pulRiGM2MifgjnQPNxAQ3YyZq+3KG ovu1njKwwj7rOvy6S7vYfK5bWvQYpg4Hlk5oS+0KGuPOrBLrL3ycP6N/dfmGPXoq Wj6reDnqw5OQQZgRsgPO6zmOF+91+BckGq6zBh6T4FnMiZKRbE1tpJLtIM43qgNi mWbtsFuZVDb5yNexiOzgxZTUXjJ9MWcnxZInqhj95lHxPObNoIn1CdqRJrG2niTc 3UxOGEEcAmd5xWh67MyPfhg0D6XdJRhxmPcrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUPdQFgldfykh+dNbR6nTtG997euIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNjcxL1BkUUZnbGRmeWtoLWROYlI2blR0Rzk5N2V1SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANyxuAwDQYJKoZIhvcNAQELBQADggEB AMqBjylSMVIkzT11FRfK55Ox7ZFf+F8wTiMzrLrgMZAyrGVz4U4OH5JR56hVlspf NEnmuxu7ihacHDIfK58LqvPPar0p5boCgwZi9sogpU8ZE0GvdR0q2/oMw66N6O0j +SxRqoC8+jRqt+bfUvyG/rH3+sh4Ud9zTb5fXEayZFPDqn+1J6PvfdozCXryc68H ExTaJFwb5+5PJaIk7BbhbUt9gjZUG15ZJ4uMhHh+HliI2sPg6gDAiHfi2Y5F7twA w8EkK135HKhC+xVQATFIEnQ45ZnkMS+Bbma1ze04vZyb4dNbAstxJ1caUFOtTiZU l0+naHqTCKtNkLepkGFscpQ= -----END CERTIFICATE-----Generated at Mon Apr 6 12:55:36 2026 by rpki-client