$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/KT9h6xFlHluhPDJchORAsbOY3rM.roa File: KT9h6xFlHluhPDJchORAsbOY3rM.roa (raw, json) Hash identifier: xvx+5cLw/sptVIyOnQrzlzFsmbk4vgsmMmbSVYQLKaY= Subject key identifier: 29:3F:61:EB:11:65:1E:5B:A1:3C:32:5C:84:E4:40:B1:B3:98:DE:B3 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 0102 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/KT9h6xFlHluhPDJchORAsbOY3rM.roa Signing time: Tue 31 Mar 2026 08:17:12 +0000 ROA not before: Tue 31 Mar 2026 08:17:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:17:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=293F61EB11651E5BA13C325C84E440B1B398DEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:d3:88:c8:f6:0b:49:b9:3e:44:86:9a:c1: 56:5c:1c:dc:68:a0:a3:99:2b:b8:07:c6:3a:40:fe: 97:e3:0e:21:32:34:8a:51:88:d9:9f:b6:e0:40:26: 83:eb:bb:89:db:22:56:3a:ea:84:a2:d1:5c:d8:ac: 7f:0c:da:e8:65:26:91:a3:39:af:d8:91:1e:56:1f: aa:52:70:0a:b2:2b:60:83:7d:21:d1:63:ea:47:dc: 32:f2:e6:b9:dd:19:fe:68:81:07:98:21:65:6b:c5: 42:f2:02:9f:18:6d:4f:e0:96:fe:25:bf:5e:83:d5: 98:29:e4:7f:15:0d:d2:d6:d9:4f:7e:ca:0a:f0:5d: d3:d7:98:ff:ed:6c:b5:be:3f:e7:ff:6a:2d:08:fc: e1:ec:db:03:03:6c:f2:89:fc:2f:a5:bb:e7:9b:e5: dd:79:f8:37:86:94:66:5f:1e:e3:f1:30:15:9f:60: 89:52:a1:7b:87:b3:72:34:68:d5:e5:c5:9e:99:80: 40:44:08:06:ac:93:f9:3e:92:02:15:0a:a7:50:f1: c7:b5:2f:68:f1:4b:34:28:bc:b3:13:8d:9b:e6:e4: b7:84:0c:e3:16:b4:db:51:e9:8e:9d:e2:0d:b5:af: 70:3d:c4:39:f8:69:6d:25:15:e7:98:81:eb:65:9a: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3F:61:EB:11:65:1E:5B:A1:3C:32:5C:84:E4:40:B1:B3:98:DE:B3 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/KT9h6xFlHluhPDJchORAsbOY3rM.roa sbgp-ipAddrBlock: critical IPv4: 160.248.74.0/23 Signature Algorithm: sha256WithRSAEncryption 59:73:46:5a:fe:5f:47:54:7d:9c:33:81:71:2d:84:4c:99:af: b7:e9:12:97:6c:41:c5:33:d5:0c:dd:c6:f5:f2:5d:d2:55:f6: 93:7e:af:81:45:d5:4b:06:2b:c2:9f:ae:86:d3:f4:13:1f:51: dd:31:2c:66:7b:c9:21:ac:c0:98:2e:58:8a:34:eb:14:f4:16: 7e:fa:ce:7e:d9:2d:0d:34:f3:88:09:e4:45:01:84:bd:50:64: 38:c3:2a:c3:81:b5:2f:89:99:30:b9:56:e1:bf:29:36:0c:e4: cc:2c:b3:a0:a0:64:04:ab:d0:04:bc:99:f1:ad:2d:e3:55:9e: 87:22:91:52:4a:83:03:3a:36:b9:ec:ea:b0:2f:d8:17:ea:49: 5a:c6:da:ec:4b:0c:40:31:59:34:30:b4:aa:88:88:2d:f7:66: d9:b7:28:bb:a1:4e:ea:84:01:be:03:63:69:3c:4d:40:7f:af: 4d:74:f1:14:03:83:7f:c3:93:b7:ad:0e:e4:40:88:e8:69:b3: 73:de:d4:53:ed:65:7b:53:f4:57:80:d2:6a:c4:34:0a:f5:b1: 01:68:11:46:17:0f:9c:d8:19:c7:3e:38:9f:c8:ca:bd:90:de: 56:7f:03:03:e5:34:0a:b2:99:43:d0:36:30:ae:82:63:cb:e3: 50:3e:72:0f -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE3MTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI5M0Y2MUVCMTE2NTFF NUJBMTNDMzI1Qzg0RTQ0MEIxQjM5OERFQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSwdOIyPYLSbk+RIaawVZcHNxooKOZK7gHxjpA/pfjDiEyNIpR iNmftuBAJoPru4nbIlY66oSi0VzYrH8M2uhlJpGjOa/YkR5WH6pScAqyK2CDfSHR Y+pH3DLy5rndGf5ogQeYIWVrxULyAp8YbU/glv4lv16D1Zgp5H8VDdLW2U9+ygrw XdPXmP/tbLW+P+f/ai0I/OHs2wMDbPKJ/C+lu+eb5d15+DeGlGZfHuPxMBWfYIlS oXuHs3I0aNXlxZ6ZgEBECAask/k+kgIVCqdQ8ce1L2jxSzQovLMTjZvm5LeEDOMW tNtR6Y6d4g21r3A9xDn4aW0lFeeYgetlmohHAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUKT9h6xFlHluhPDJchORAsbOY3rMwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9LVDloNnhGbEhsdWhQREpjaE9SQXNiT1kzck0ucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoPhKMA0GCSqGSIb3DQEBCwUAA4IBAQBZ c0Za/l9HVH2cM4FxLYRMma+36RKXbEHFM9UM3cb18l3SVfaTfq+BRdVLBivCn66G 0/QTH1HdMSxme8khrMCYLliKNOsU9BZ++s5+2S0NNPOICeRFAYS9UGQ4wyrDgbUv iZkwuVbhvyk2DOTMLLOgoGQEq9AEvJnxrS3jVZ6HIpFSSoMDOja57OqwL9gX6kla xtrsSwxAMVk0MLSqiIgt92bZtyi7oU7qhAG+A2NpPE1Af69NdPEUA4N/w5O3rQ7k QIjoabNz3tRT7WV7U/RXgNJqxDQK9bEBaBFGFw+c2BnHPjifyMq9kN5WfwMD5TQK splD0DYwroJjy+NQPnIP -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:26 2026 by rpki-client