$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-NDPdju2QnJ_v9ldI-iUFPe5znc.roa File: -NDPdju2QnJ_v9ldI-iUFPe5znc.roa (raw, json) Hash identifier: 5AcLnQCGkQ3t6z3WxQodIInF0kliHlTtEcKp25Uugic= Subject key identifier: F8:D0:CF:76:3B:B6:42:72:7F:BF:D9:5D:23:E8:94:14:F7:B9:CE:77 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 161D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-NDPdju2QnJ_v9ldI-iUFPe5znc.roa Signing time: Tue 31 Mar 2026 08:01:10 +0000 ROA not before: Tue 31 Mar 2026 08:01:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5661 (0x161d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F8D0CF763BB642727FBFD95D23E89414F7B9CE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:e1:dd:7b:85:4c:83:96:e8:c8:2e:a5:d2: da:5e:97:7a:02:4e:e6:fe:d5:60:a4:9a:f5:05:7b: 1b:8e:05:59:d3:93:d0:26:16:93:65:59:c4:fa:bc: 7d:87:ab:85:ea:3e:48:44:d5:cb:e7:1a:c7:09:7d: b3:9c:6b:71:0e:86:36:b6:4c:f5:63:2d:0f:a5:4a: 89:62:65:5c:18:b7:c4:df:ec:75:dd:24:75:3c:82: 8a:b6:b4:7e:2a:59:d0:a3:74:7e:29:5d:08:09:03: a4:e7:1a:b7:5b:a4:bb:2d:26:3c:cb:fd:fe:72:b4: 1d:f3:ae:d6:2d:d4:c9:04:38:4a:ce:ec:5a:80:97: 0d:e9:d1:58:1a:93:93:0b:06:6e:94:bc:3c:2a:d8: bb:26:1e:30:c3:7d:93:90:f3:33:23:5c:92:43:04: 15:20:a6:55:2f:ef:19:c0:ba:4e:d8:9d:f9:f6:9f: 7b:ce:b2:1e:23:35:6b:95:5e:48:eb:e2:67:b6:6a: d1:40:57:66:bf:fa:6a:15:96:44:6b:1a:b5:0b:c5: 2e:98:19:60:b4:2b:2d:c1:fc:1a:2c:4a:69:43:4c: b9:ff:79:cb:06:40:2d:2c:1a:f3:31:48:f8:25:39: 6a:0a:2d:6f:49:0d:3d:34:ec:dd:ca:7d:c1:cd:b1: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D0:CF:76:3B:B6:42:72:7F:BF:D9:5D:23:E8:94:14:F7:B9:CE:77 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-NDPdju2QnJ_v9ldI-iUFPe5znc.roa sbgp-ipAddrBlock: critical IPv4: 49.97.76.0/22 Signature Algorithm: sha256WithRSAEncryption b8:73:b6:f8:96:14:db:53:7c:d6:40:7f:be:12:58:8f:f3:af: fe:4d:f1:97:62:ec:18:80:29:53:f0:06:d7:88:59:13:5e:1f: 23:65:19:66:f1:2b:a0:eb:b6:53:32:8f:8d:f3:97:d7:a4:3f: 1b:e7:1c:c5:09:05:e2:9f:40:68:44:81:74:7c:ea:45:71:f5: f0:9a:6f:14:57:d8:03:51:6e:a8:48:14:06:17:9c:d2:ca:74: 04:fd:f3:79:f6:55:55:0e:db:55:16:3b:bf:32:c8:ef:3f:b2: b9:5b:c5:ae:28:53:82:07:27:a7:69:62:20:8d:c0:65:24:7d: 5e:55:19:c1:db:30:91:be:8b:61:45:91:f9:8d:04:18:aa:02: 01:52:36:8a:0e:4b:21:c4:43:67:21:cc:10:74:e4:08:b4:e3: 4b:cb:99:79:2d:be:92:68:8f:93:a9:1b:5c:94:04:03:16:2a: a9:9f:5b:54:09:50:38:6c:00:5f:2a:b2:9f:15:13:f9:e4:ae: 9c:d9:7f:a9:35:99:aa:f8:7d:89:86:bf:58:0d:2b:fa:58:c2: 24:03:33:6d:d0:cc:64:ee:39:50:9d:9c:8c:d7:cf:87:ce:63: 8a:7d:72:e2:3a:d2:39:9d:01:5b:10:de:7f:0b:83:bf:22:80: b1:b8:38:56 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY4RDBDRjc2M0JCNjQy NzI3RkJGRDk1RDIzRTg5NDE0RjdCOUNFNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRDuHde4VMg5boyC6l0tpel3oCTub+1WCkmvUFexuOBVnTk9Am FpNlWcT6vH2Hq4XqPkhE1cvnGscJfbOca3EOhja2TPVjLQ+lSoliZVwYt8Tf7HXd JHU8goq2tH4qWdCjdH4pXQgJA6TnGrdbpLstJjzL/f5ytB3zrtYt1MkEOErO7FqA lw3p0Vgak5MLBm6UvDwq2LsmHjDDfZOQ8zMjXJJDBBUgplUv7xnAuk7Ynfn2n3vO sh4jNWuVXkjr4me2atFAV2a/+moVlkRrGrULxS6YGWC0Ky3B/BosSmlDTLn/ecsG QC0sGvMxSPglOWoKLW9JDT007N3KfcHNsQzfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU+NDPdju2QnJ/v9ldI+iUFPe5zncwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5Ly1ORFBkanUyUW5KX3Y5bGRJLWlVRlBlNXpuYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYUwwDQYJKoZIhvcNAQELBQADggEB ALhztviWFNtTfNZAf74SWI/zr/5N8Zdi7BiAKVPwBteIWRNeHyNlGWbxK6DrtlMy j43zl9ekPxvnHMUJBeKfQGhEgXR86kVx9fCabxRX2ANRbqhIFAYXnNLKdAT983n2 VVUO21UWO78yyO8/srlbxa4oU4IHJ6dpYiCNwGUkfV5VGcHbMJG+i2FFkfmNBBiq AgFSNooOSyHEQ2chzBB05Ai040vLmXktvpJoj5OpG1yUBAMWKqmfW1QJUDhsAF8q sp8VE/nkrpzZf6k1mar4fYmGv1gNK/pYwiQDM23QzGTuOVCdnIzXz4fOY4p9cuI6 0jmdAVsQ3n8Lg78igLG4OFY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:17 2026 by rpki-client