$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/T3l3YZC0awv79li8uW8cepNjfkA.roa File: T3l3YZC0awv79li8uW8cepNjfkA.roa (raw, json) Hash identifier: oPoxYMUfH9QVFB4YieHsLwSEbW08xR5zMxhSpamx2pg= Subject key identifier: 4F:79:77:61:90:B4:6B:0B:FB:F6:58:BC:B9:6F:1C:7A:93:63:7E:40 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 04F4 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T3l3YZC0awv79li8uW8cepNjfkA.roa Signing time: Tue 31 Mar 2026 08:19:10 +0000 ROA not before: Tue 31 Mar 2026 08:19:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10013 IP address blocks: 36.52.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 31 08:19:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4F79776190B46B0BFBF658BCB96F1C7A93637E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:e9:63:8a:c8:23:df:06:8e:60:9e:6e:1c: 28:ec:8f:bb:53:39:ba:65:4c:f7:cb:6b:39:55:68: 53:d4:37:83:a5:96:dc:e7:12:61:59:ec:b6:31:22: 31:5b:d7:ce:cb:59:41:62:93:5b:69:a9:5e:a9:64: 2d:3b:d2:93:03:00:23:25:ba:63:95:0b:63:f5:b0: df:3e:31:dd:c6:57:af:e3:48:64:9b:99:9f:d4:0a: 3f:89:9d:f6:f1:f4:16:55:d8:f2:35:6a:b2:7b:2f: d1:ff:d5:54:97:e4:5b:76:c6:a9:c7:ae:a9:7f:84: 38:a6:5e:67:16:90:1d:f2:36:64:2d:5b:32:5e:5d: 5c:93:2c:b8:21:a5:c1:c8:80:5c:e1:02:8d:81:9d: 5f:ba:a8:f1:66:84:5a:bc:e7:5b:2a:de:3a:06:41: 3b:0c:2f:5a:64:63:f6:36:c9:18:c0:24:5c:a0:d8: c6:dd:5f:d6:a8:a2:c2:02:fc:09:47:66:e2:a6:2b: 18:72:ec:58:f8:ff:ad:1d:56:70:49:18:da:c1:71: 0c:2d:11:02:54:7d:66:42:a9:16:d4:87:6e:14:fa: 2b:8e:6d:c9:8e:48:8b:68:79:09:bb:8b:1a:68:d1: 68:55:68:60:f2:0b:e8:e4:59:a1:6a:62:30:51:85: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:77:61:90:B4:6B:0B:FB:F6:58:BC:B9:6F:1C:7A:93:63:7E:40 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T3l3YZC0awv79li8uW8cepNjfkA.roa sbgp-ipAddrBlock: critical IPv4: 36.52.238.0/23 Signature Algorithm: sha256WithRSAEncryption 20:f7:1e:e5:8b:b1:20:fd:ba:63:07:3b:c9:09:db:1c:2f:64: 4b:da:9f:eb:d5:2e:f5:1b:96:df:03:e2:b4:cc:f1:7f:37:df: c9:0d:2a:99:77:8c:b8:dd:55:e2:ed:e4:8a:bd:f8:af:56:f8: 63:5e:80:04:1d:33:e8:e7:be:4a:87:8e:36:df:3d:1e:88:91: 11:6a:08:26:d6:4c:1b:a1:5c:42:68:1c:fb:a2:e1:74:f8:17: a3:5c:d4:2c:c0:a7:40:15:f4:17:bf:41:54:09:d3:2d:a6:22: 2d:8b:c2:7d:c8:ca:d2:7c:a7:1b:d6:f8:a4:c5:ae:76:b3:35: 99:e1:a6:5e:86:f0:ce:32:60:fd:80:1b:42:47:f9:75:3b:0a: b2:79:25:27:73:67:c7:80:12:3d:b6:e4:fa:95:ff:1c:fa:2c: c2:c8:02:43:bd:d2:b1:6b:22:28:0c:cd:0c:83:fc:40:fe:34: 9e:a2:5c:1e:0f:99:1e:48:88:e3:7f:38:76:29:cb:4f:52:f0: 73:4f:d1:d4:84:fe:df:c4:7e:ac:46:6e:62:41:ef:c2:3a:27: ee:24:d5:3c:a0:41:a7:3f:7a:62:3b:ed:60:66:08:f9:f3:0b: dd:5f:b8:7a:a3:cb:52:7a:21:7a:1d:57:12:30:3e:f3:90:1d: a9:2e:3d:3b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw ODE5MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRGNzk3NzYxOTBCNDZC MEJGQkY2NThCQ0I5NkYxQzdBOTM2MzdFNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKTOljisgj3waOYJ5uHCjsj7tTObplTPfLazlVaFPUN4Olltzn EmFZ7LYxIjFb187LWUFik1tpqV6pZC070pMDACMlumOVC2P1sN8+Md3GV6/jSGSb mZ/UCj+Jnfbx9BZV2PI1arJ7L9H/1VSX5Ft2xqnHrql/hDimXmcWkB3yNmQtWzJe XVyTLLghpcHIgFzhAo2BnV+6qPFmhFq851sq3joGQTsML1pkY/Y2yRjAJFyg2Mbd X9aoosIC/AlHZuKmKxhy7Fj4/60dVnBJGNrBcQwtEQJUfWZCqRbUh24U+iuObcmO SItoeQm7ixpo0WhVaGDyC+jkWaFqYjBRhcOfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUT3l3YZC0awv79li8uW8cepNjfkAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzk0L1QzbDNZWkMwYXd2NzlsaTh1VzhjZXBOamZrQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEkNO4wDQYJKoZIhvcNAQELBQADggEB ACD3HuWLsSD9umMHO8kJ2xwvZEvan+vVLvUblt8D4rTM8X8338kNKpl3jLjdVeLt 5Iq9+K9W+GNegAQdM+jnvkqHjjbfPR6IkRFqCCbWTBuhXEJoHPui4XT4F6Nc1CzA p0AV9Be/QVQJ0y2mIi2Lwn3IytJ8pxvW+KTFrnazNZnhpl6G8M4yYP2AG0JH+XU7 CrJ5JSdzZ8eAEj225PqV/xz6LMLIAkO90rFrIigMzQyD/ED+NJ6iXB4PmR5IiON/ OHYpy09S8HNP0dSE/t/EfqxGbmJB78I6J+4k1TygQac/emI77WBmCPnzC91fuHqj y1J6IXodVxIwPvOQHakuPTs= -----END CERTIFICATE-----Generated at Fri Apr 17 01:21:29 2026 by rpki-client