$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/itzHHszTbcJIZZvuKIUKTbf-csI.roa File: itzHHszTbcJIZZvuKIUKTbf-csI.roa (raw, json) Hash identifier: nBP6COwBiyE8WvUDij0kpTJqXGas1TT6z2lgxuI1nlI= Subject key identifier: 8A:DC:C7:1E:CC:D3:6D:C2:48:65:9B:EE:28:85:0A:4D:B7:FE:72:C2 Certificate issuer: /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467 Certificate serial: 21 Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/itzHHszTbcJIZZvuKIUKTbf-csI.roa Signing time: Tue 31 Mar 2026 08:43:46 +0000 ROA not before: Tue 31 Mar 2026 08:43:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18281 IP address blocks: 124.66.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467 Validity Not Before: Mar 31 08:43:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8ADCC71ECCD36DC248659BEE28850A4DB7FE72C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:72:0e:8e:c8:cf:a7:7b:a8:a0:ed:78:b4: dd:ba:30:b2:55:be:00:c6:45:92:47:e0:2f:e8:00: 89:c3:df:68:49:52:85:08:7f:23:d0:9a:51:2a:ea: 1a:c1:e1:44:36:ef:95:af:52:9f:20:f7:52:54:e6: a9:ac:4b:e7:37:9e:a5:be:9b:fe:45:06:e8:05:97: c0:c6:8c:cf:41:ef:f1:7b:d9:59:08:7a:80:81:3d: 9a:31:e7:f2:7b:b3:ef:b3:68:b2:d1:91:6d:38:c8: 09:f3:bd:0b:35:b5:62:bb:9f:d3:60:47:be:f1:ba: 87:34:5d:e7:35:6b:ec:65:d8:c5:0a:ae:39:4e:f1: 49:40:e0:aa:cb:40:7b:4f:26:05:6d:d1:f8:80:86: b4:8c:82:1b:a3:7b:59:8a:64:96:3f:0c:ea:45:5d: b6:2a:74:c7:60:dc:83:b7:53:ca:3e:39:39:c7:bc: b7:67:90:5d:50:66:65:9c:c7:58:aa:0f:5f:76:60: 3b:b5:b2:b9:a5:d8:fe:74:e7:49:aa:e5:ca:62:89: 07:1b:be:32:b2:7e:b9:99:24:cb:46:cd:fd:95:82: b9:db:01:4f:58:e4:e8:97:3b:ec:e5:8c:00:28:0a: 1f:61:4e:c7:94:87:b3:bb:c0:f0:3a:de:13:38:29: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DC:C7:1E:CC:D3:6D:C2:48:65:9B:EE:28:85:0A:4D:B7:FE:72:C2 X509v3 Authority Key Identifier: keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/itzHHszTbcJIZZvuKIUKTbf-csI.roa sbgp-ipAddrBlock: critical IPv4: 124.66.192.0/20 Signature Algorithm: sha256WithRSAEncryption 59:b0:2b:f1:bf:ed:d2:5c:8f:8e:1e:9d:38:5e:d3:87:46:26: 45:31:a5:31:32:8a:5d:35:9b:9e:e0:fd:6c:a9:d2:10:f7:bd: d0:a8:5f:24:dc:df:60:32:1c:c0:60:50:c4:b6:79:b2:73:58: 86:a4:3a:c6:13:c0:44:42:b0:1e:9f:7a:63:fe:c6:95:da:c6: 30:bc:1a:66:71:4b:58:ea:4a:4f:2d:9e:e6:44:ea:9c:7d:d2: bb:9c:e3:b5:ab:dd:d6:60:2f:74:13:37:90:5b:8c:87:05:3c: 5d:7e:5b:26:9b:23:73:1c:c4:d7:aa:c8:6c:b3:19:32:f5:8f: fe:09:f7:d5:d7:e0:40:af:83:28:74:db:69:94:d4:4f:fb:bc: ad:9b:b9:77:52:3b:e8:90:4a:29:3f:e6:5e:34:d7:ad:e2:7b: 80:2a:11:1d:0c:47:23:5d:b2:dc:e4:97:fd:d4:d8:ae:39:91: 6a:8a:85:ab:75:99:86:e4:88:12:80:2d:21:f9:9f:47:9e:d6: 72:20:c0:37:e6:6d:e9:0c:74:a1:5a:7e:93:2e:de:23:b5:a4: a5:c7:a7:b2:14:5d:53:e8:ad:b9:9f:5c:76:1b:1c:fd:f6:fd: 7f:d0:4e:33:8b:76:25:48:49:02:0e:8a:fc:8e:3a:c4:68:30: 37:1f:f4:82 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2REE2 M0EyQ0JBREM5MkRGREUwQTc0NEVEODBFOUQ1Nzc3MkUyNDY3MB4XDTI2MDMzMTA4 NDM0NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEFEQ0M3MUVDQ0QzNkRD MjQ4NjU5QkVFMjg4NTBBNERCN0ZFNzJDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANbgcg6OyM+ne6ig7Xi03bowslW+AMZFkkfgL+gAicPfaElShQh/ I9CaUSrqGsHhRDbvla9SnyD3UlTmqaxL5zeepb6b/kUG6AWXwMaMz0Hv8XvZWQh6 gIE9mjHn8nuz77NostGRbTjICfO9CzW1Yruf02BHvvG6hzRd5zVr7GXYxQquOU7x SUDgqstAe08mBW3R+ICGtIyCG6N7WYpklj8M6kVdtip0x2Dcg7dTyj45Oce8t2eQ XVBmZZzHWKoPX3ZgO7WyuaXY/nTnSarlymKJBxu+MrJ+uZkky0bN/ZWCudsBT1jk 6Jc77OWMACgKH2FOx5SHs7vA8DreEzgpuR8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSK3McezNNtwkhlm+4ohQpNt/5ywjAfBgNVHSMEGDAWgBRtpjosutyS394KdE7Y Dp1Xdy4kZzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAzL2JhWTZMTHJja3RfZUNuUk8yQTZkVjNjdUpHYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JhWTZMTHJja3RfZUNuUk8yQTZkVjNj dUpHYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDMvaXR6SEhzelRiY0pJWlp2dUtJVUtUYmYtY3NJLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHxCwDANBgkqhkiG9w0BAQsFAAOCAQEA WbAr8b/t0lyPjh6dOF7Th0YmRTGlMTKKXTWbnuD9bKnSEPe90KhfJNzfYDIcwGBQ xLZ5snNYhqQ6xhPAREKwHp96Y/7GldrGMLwaZnFLWOpKTy2e5kTqnH3Su5zjtavd 1mAvdBM3kFuMhwU8XX5bJpsjcxzE16rIbLMZMvWP/gn31dfgQK+DKHTbaZTUT/u8 rZu5d1I76JBKKT/mXjTXreJ7gCoRHQxHI12y3OSX/dTYrjmRaoqFq3WZhuSIEoAt IfmfR57WciDAN+Zt6Qx0oVp+ky7eI7WkpcenshRdU+ituZ9cdhsc/fb9f9BOM4t2 JUhJAg6K/I46xGgwNx/0gg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:29:29 2026 by rpki-client