$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/0YvzhOFFls_FMxQ7LK4_fmK-_fM.roa File: 0YvzhOFFls_FMxQ7LK4_fmK-_fM.roa (raw, json) Hash identifier: w4ilS4ddvfRaHkizLgPLeHsXb/WeBFCiG62NmERH5Ks= Subject key identifier: D1:8B:F3:84:E1:45:96:CF:C5:33:14:3B:2C:AE:3F:7E:62:BE:FD:F3 Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 41 Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/0YvzhOFFls_FMxQ7LK4_fmK-_fM.roa Signing time: Tue 31 Mar 2026 08:43:34 +0000 ROA not before: Tue 31 Mar 2026 08:43:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9354 IP address blocks: 210.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Mar 31 08:43:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D18BF384E14596CFC533143B2CAE3F7E62BEFDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:0e:21:92:6b:4c:03:15:f3:b3:0b:74:96: 5f:fb:54:ea:42:36:0a:6a:25:d1:c4:1d:33:c9:bd: 8e:38:58:6d:b8:90:6d:29:a3:9c:f3:05:ed:7b:e4: 43:3f:ea:ca:34:aa:b4:5e:9d:b6:a4:95:75:f1:4e: 5d:e9:d2:a6:0d:76:27:c8:27:6f:22:21:8d:df:22: 07:af:0a:7f:84:88:a1:54:b1:6f:6d:05:c7:08:24: d1:12:3d:f4:a7:e1:d7:96:15:9e:f2:7e:6d:dd:b8: ee:c8:36:b5:78:b8:ac:d8:24:32:9d:ef:6e:fb:2d: bb:b2:82:f5:4c:16:c7:7c:fa:b8:6b:26:40:36:b1: cd:be:57:4c:0f:dd:1f:5c:eb:2d:1a:42:7f:49:89: 21:69:15:0a:88:d7:67:be:57:c4:84:6c:c0:97:ff: 49:f7:24:18:93:a1:4c:b6:74:94:98:c2:bd:9a:79: 6d:08:b6:73:0d:89:ab:72:35:37:16:79:b5:a7:fa: 9a:7c:7d:61:da:b2:af:d3:8f:f1:6d:3f:22:b8:cf: ca:67:0e:01:b5:ac:3d:a6:14:fb:c7:1d:bb:af:64: 03:59:07:96:0d:ea:03:da:9e:60:a0:40:2c:9c:f4: a7:11:ec:a2:d6:bc:03:23:97:f7:76:e3:1a:f6:fd: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8B:F3:84:E1:45:96:CF:C5:33:14:3B:2C:AE:3F:7E:62:BE:FD:F3 X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/0YvzhOFFls_FMxQ7LK4_fmK-_fM.roa sbgp-ipAddrBlock: critical IPv4: 210.251.208.0/20 Signature Algorithm: sha256WithRSAEncryption 73:fd:8e:a8:8b:a0:74:af:52:ff:a7:ff:08:6a:e2:b5:9e:b3: 7d:34:f2:2e:c7:4c:05:23:78:21:8b:7f:aa:51:f7:e0:ab:d6: 72:ae:10:05:c4:dc:eb:ed:ee:bb:2a:46:bd:51:a7:cf:9b:96: f3:e5:c7:bb:26:e5:bc:5b:ae:5b:13:d9:95:fb:da:38:2f:6d: 6a:f8:5a:96:59:a1:a7:29:98:7b:29:30:73:35:9a:4c:8b:4d: 2c:77:5c:2f:86:2e:bc:8e:3a:13:87:26:d5:fb:58:28:01:58: c3:86:0b:b0:f8:82:6f:ec:36:87:1e:60:b0:40:05:65:b6:9a: 11:2e:75:dd:29:a6:58:8c:cb:29:e2:6c:44:0d:dd:95:71:03: 08:54:89:a6:2d:99:ab:90:5f:aa:41:b7:87:47:a9:65:b0:fc: 9c:97:e1:d8:2f:9b:6d:f0:38:ee:24:81:32:a3:1f:1f:85:fc: 98:39:8c:c3:f4:7d:a2:6b:a4:f2:b0:05:da:6b:9a:87:aa:73: ab:ea:08:3c:54:4b:60:cc:c3:2a:bc:fa:72:83:24:94:97:ee: 6b:7a:98:09:46:7a:e3:fa:0b:0f:47:09:8a:82:54:36:2a:c4: d3:26:ae:59:a7:ad:b3:19:58:cf:39:eb:2c:98:5a:18:a7:a2: 66:64:8f:a7 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI2MDMzMTA4 NDMzNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDE4QkYzODRFMTQ1OTZD RkM1MzMxNDNCMkNBRTNGN0U2MkJFRkRGMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM+iDiGSa0wDFfOzC3SWX/tU6kI2Cmol0cQdM8m9jjhYbbiQbSmj nPMF7XvkQz/qyjSqtF6dtqSVdfFOXenSpg12J8gnbyIhjd8iB68Kf4SIoVSxb20F xwgk0RI99Kfh15YVnvJ+bd247sg2tXi4rNgkMp3vbvstu7KC9UwWx3z6uGsmQDax zb5XTA/dH1zrLRpCf0mJIWkVCojXZ75XxIRswJf/SfckGJOhTLZ0lJjCvZp5bQi2 cw2Jq3I1NxZ5taf6mnx9Ydqyr9OP8W0/IrjPymcOAbWsPaYU+8cdu69kA1kHlg3q A9qeYKBALJz0pxHsota8AyOX93bjGvb944ECAwEAAaOCAdkwggHVMB0GA1UdDgQW BBTRi/OE4UWWz8UzFDssrj9+Yr798zAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80ODQvMFl2emhPRkZsc19GTXhRN0xLNF9mbUstX2ZNLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNL70DANBgkqhkiG9w0BAQsFAAOCAQEA c/2OqIugdK9S/6f/CGritZ6zfTTyLsdMBSN4IYt/qlH34KvWcq4QBcTc6+3uuypG vVGnz5uW8+XHuyblvFuuWxPZlfvaOC9tavhallmhpymYeykwczWaTItNLHdcL4Yu vI46E4cm1ftYKAFYw4YLsPiCb+w2hx5gsEAFZbaaES513SmmWIzLKeJsRA3dlXED CFSJpi2Zq5BfqkG3h0epZbD8nJfh2C+bbfA47iSBMqMfH4X8mDmMw/R9omuk8rAF 2muah6pzq+oIPFRLYMzDKrz6coMklJfua3qYCUZ64/oLD0cJioJUNirE0yauWaet sxlYzznrLJhaGKeiZmSPpw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:27:01 2026 by rpki-client