$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/nSoOHz-b3e0g0lxVwpgDK4pJtVc.roa File: nSoOHz-b3e0g0lxVwpgDK4pJtVc.roa (raw, json) Hash identifier: xOnWa0Usk+yPd285vTCGUTlwv7FDCHleN9zBydKy9uQ= Subject key identifier: 9D:2A:0E:1F:3F:9B:DD:ED:20:D2:5C:55:C2:98:03:2B:8A:49:B5:57 Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D Certificate serial: 6C Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nSoOHz-b3e0g0lxVwpgDK4pJtVc.roa Signing time: Tue 31 Mar 2026 08:34:13 +0000 ROA not before: Tue 31 Mar 2026 08:34:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9597 IP address blocks: 219.100.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D Validity Not Before: Mar 31 08:34:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9D2A0E1F3F9BDDED20D25C55C298032B8A49B557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:7b:3f:61:1a:e5:f7:a7:7a:2a:f5:fe:ad: 2b:46:a4:fc:8c:d9:23:5b:16:59:62:88:95:80:b8: 75:d6:f3:e4:cd:e6:1e:fb:42:52:ec:69:05:7b:57: fa:84:f1:92:0a:6e:b6:ae:96:3a:37:99:f6:b9:b4: 95:9f:bd:22:99:1a:16:90:51:a0:74:32:95:de:74: 1b:0a:95:80:b4:8e:42:be:b1:a7:83:10:f0:c3:22: c3:e5:a0:ad:5d:53:52:a5:b1:d4:e4:0a:10:a8:1d: cf:bb:a9:94:2c:7f:d2:43:72:64:01:6f:af:3a:69: e4:ec:b5:38:7a:0a:e3:a0:12:56:fc:19:af:8b:ba: 71:43:5e:f3:af:c7:33:a0:2f:5b:ca:04:04:24:0f: 3f:95:fb:f5:f6:0e:8d:7f:92:2c:cd:db:96:3c:07: 0b:29:ed:eb:3c:09:2d:6a:1f:20:11:a0:27:56:0d: 17:36:5e:28:1d:28:3f:26:6f:5f:20:59:2e:06:a0: 2e:d0:17:2d:2b:56:58:60:7c:bf:d9:16:6e:3d:18: 3b:e2:04:2a:4a:fb:5e:2f:1e:93:ab:a0:15:37:4f: a0:97:19:b9:1c:8a:ab:d2:ec:f4:5f:16:74:f3:e3: 06:dc:00:78:a0:9e:44:34:db:75:be:39:0b:c3:a0: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:0E:1F:3F:9B:DD:ED:20:D2:5C:55:C2:98:03:2B:8A:49:B5:57 X509v3 Authority Key Identifier: keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nSoOHz-b3e0g0lxVwpgDK4pJtVc.roa sbgp-ipAddrBlock: critical IPv4: 219.100.168.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:b2:07:cd:bd:2f:da:03:d5:e6:c2:7e:58:91:2a:ba:cd:78: 7a:ef:90:16:4c:de:de:82:8e:d6:ee:9f:7f:3a:29:08:c0:c5: 86:bb:7f:ff:15:57:74:19:b9:e6:30:fa:2f:29:66:d2:57:ff: da:b0:96:33:ac:b6:3d:19:f5:ab:1f:52:c9:6c:1e:fc:f2:6a: c0:c2:84:08:55:d2:3c:4a:48:6b:5c:15:96:05:92:c2:6f:72: 8d:fb:dc:9b:e1:f4:a3:22:3a:65:95:55:99:ee:2a:24:86:29: 74:03:2c:f2:93:42:41:2f:a7:36:25:c3:70:22:20:70:0d:ff: 64:e1:58:a0:a3:2b:1a:40:90:2c:3e:cc:71:20:21:ac:4d:97: 4a:54:73:47:38:5e:5b:18:2d:ce:f1:fa:34:5e:9f:76:14:24: 8b:90:83:ac:d6:42:03:31:78:b2:a3:28:e0:0f:d3:99:54:33: 67:f6:46:00:3b:46:da:4e:bf:1e:02:a6:a9:16:52:1d:d9:34: 87:da:75:4c:23:69:96:5f:4e:8a:56:62:2d:82:db:e4:64:5c: 54:f3:58:e5:ad:ba:a7:69:a9:0e:a0:40:a1:d0:94:d2:cf:5e: 7f:38:55:f1:28:f9:1b:10:cf:dc:cb:4e:3d:0e:e9:50:18:4e: 80:5d:ed:35 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5 NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI2MDMzMTA4 MzQxM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOUQyQTBFMUYzRjlCRERF RDIwRDI1QzU1QzI5ODAzMkI4QTQ5QjU1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALkIez9hGuX3p3oq9f6tK0ak/IzZI1sWWWKIlYC4ddbz5M3mHvtC UuxpBXtX+oTxkgputq6WOjeZ9rm0lZ+9IpkaFpBRoHQyld50GwqVgLSOQr6xp4MQ 8MMiw+WgrV1TUqWx1OQKEKgdz7uplCx/0kNyZAFvrzpp5Oy1OHoK46ASVvwZr4u6 cUNe86/HM6AvW8oEBCQPP5X79fYOjX+SLM3bljwHCynt6zwJLWofIBGgJ1YNFzZe KB0oPyZvXyBZLgagLtAXLStWWGB8v9kWbj0YO+IEKkr7Xi8ek6ugFTdPoJcZuRyK q9Ls9F8WdPPjBtwAeKCeRDTbdb45C8OgCQcCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSdKg4fP5vd7SDSXFXCmAMrikm1VzAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9 eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2 a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yNDAvblNvT0h6LWIzZTBnMGx4VndwZ0RLNHBKdFZjLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAttkqDANBgkqhkiG9w0BAQsFAAOCAQEA jbIHzb0v2gPV5sJ+WJEqus14eu+QFkze3oKO1u6ffzopCMDFhrt//xVXdBm55jD6 Lylm0lf/2rCWM6y2PRn1qx9SyWwe/PJqwMKECFXSPEpIa1wVlgWSwm9yjfvcm+H0 oyI6ZZVVme4qJIYpdAMs8pNCQS+nNiXDcCIgcA3/ZOFYoKMrGkCQLD7McSAhrE2X SlRzRzheWxgtzvH6NF6fdhQki5CDrNZCAzF4sqMo4A/TmVQzZ/ZGADtG2k6/HgKm qRZSHdk0h9p1TCNpll9OilZiLYLb5GRcVPNY5a26p2mpDqBAodCU0s9efzhV8Sj5 GxDP3MtOPQ7pUBhOgF3tNQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:35:00 2026 by rpki-client