$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Nk2qYlCp5ZgZ49O6to5oRZwjYY.roa File: -Nk2qYlCp5ZgZ49O6to5oRZwjYY.roa (raw, json) Hash identifier: +aaJQP+2JmoZdZcSE3x4cL2KxhtfbVrLRmI+OV0T0do= Subject key identifier: F8:D9:36:A9:89:42:A7:96:60:67:8F:4E:EA:DA:39:A1:16:70:8D:86 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 144D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Nk2qYlCp5ZgZ49O6to5oRZwjYY.roa Signing time: Tue 31 Mar 2026 07:57:18 +0000 ROA not before: Tue 31 Mar 2026 07:57:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5197 (0x144d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F8D936A98942A79660678F4EEADA39A116708D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:89:22:a5:b8:db:b8:e8:25:55:7c:88:14: f7:f8:53:12:2c:43:58:5b:84:e3:b3:e5:cc:1c:21: 42:fb:2b:e2:85:3b:10:5f:54:66:f0:ba:79:0e:12: e4:ab:ac:4d:a4:6c:9e:cc:ca:dc:3a:bb:c3:72:e6: 74:64:c8:13:6e:df:0b:07:1e:dc:31:cd:de:1f:13: 4f:dd:19:79:9b:c2:a5:c0:77:48:b6:41:6f:3f:88: a2:cd:ef:16:4b:bf:44:05:6f:cb:fa:d8:ad:e7:86: c5:49:13:38:76:a6:b6:9d:4e:d0:ee:ce:15:b2:ce: 4a:56:9f:0d:4e:5b:b8:a7:8b:21:ed:69:a2:3d:b5: 26:9f:c1:a4:7d:bf:28:95:98:12:6c:56:51:be:99: 57:30:44:75:3c:9e:25:8a:93:8b:80:b3:2f:62:28: b5:ad:3a:5b:24:0b:ab:7d:5b:1c:30:7f:c0:db:db: 9e:46:03:d4:67:79:8d:8a:79:b5:e9:c1:00:52:b2: af:27:7a:b4:8c:1c:d5:2c:f2:65:35:cd:e8:22:fe: 31:8c:21:92:64:cd:87:22:48:3f:1c:e9:7c:40:41: b4:03:b4:84:84:37:7a:93:65:ca:2b:a6:49:2f:bb: 1e:42:dd:e2:09:ca:0d:ae:e7:22:ba:f5:77:7f:7a: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D9:36:A9:89:42:A7:96:60:67:8F:4E:EA:DA:39:A1:16:70:8D:86 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Nk2qYlCp5ZgZ49O6to5oRZwjYY.roa sbgp-ipAddrBlock: critical IPv4: 49.106.90.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:78:6c:c8:1d:7e:cd:00:ba:fe:ba:10:c2:a5:0e:12:b0:bb: cb:a5:3a:b0:d1:77:ed:12:f6:96:aa:fb:9e:47:0a:d1:cc:4f: ce:e4:3e:6b:56:e8:4f:63:16:c3:08:f1:7d:09:1b:4d:e8:8b: 53:0e:2e:04:93:7d:92:da:83:c1:66:e3:a8:8a:8d:58:db:de: b5:55:01:99:bb:c2:27:d8:8e:91:5a:c5:c2:6f:f7:30:2e:e7: 66:18:92:95:c9:a4:61:45:c3:3f:96:16:23:5f:4b:ba:d8:8e: cc:e6:03:2c:41:c8:d6:52:01:27:39:6f:1a:f8:01:46:9f:d4: 84:58:e0:ab:06:19:fa:cb:be:f4:85:6e:2d:a8:47:5c:c6:89: 10:44:98:22:31:25:c2:2f:46:54:08:09:0e:ee:5e:d8:89:7c: d5:62:e6:98:8f:0d:4c:47:ba:2b:25:be:23:06:6a:41:87:00: d7:34:90:32:e0:61:90:79:57:36:b7:48:01:ff:0e:57:cb:ca: 76:7d:b6:9e:a7:6e:7d:80:03:3b:03:0f:e8:da:de:9c:c0:55: 20:c3:f1:64:45:70:6f:28:95:d3:4b:1e:c1:eb:d9:bd:be:80: a7:9a:b8:f5:70:e5:85:ba:02:03:41:63:b9:d0:69:dd:c2:3e: c6:32:b2:e5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY4RDkzNkE5ODk0MkE3 OTY2MDY3OEY0RUVBREEzOUExMTY3MDhEODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuNokipbjbuOglVXyIFPf4UxIsQ1hbhOOz5cwcIUL7K+KFOxBf VGbwunkOEuSrrE2kbJ7Mytw6u8Ny5nRkyBNu3wsHHtwxzd4fE0/dGXmbwqXAd0i2 QW8/iKLN7xZLv0QFb8v62K3nhsVJEzh2pradTtDuzhWyzkpWnw1OW7iniyHtaaI9 tSafwaR9vyiVmBJsVlG+mVcwRHU8niWKk4uAsy9iKLWtOlskC6t9Wxwwf8Db255G A9RneY2KebXpwQBSsq8nerSMHNUs8mU1zegi/jGMIZJkzYciSD8c6XxAQbQDtISE N3qTZcorpkkvux5C3eIJyg2u5yK69Xd/ejZNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU+Nk2qYlCp5ZgZ49O6to5oRZwjYYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5Ly1OazJxWWxDcDVaZ1o0OU82dG81b1Jad2pZWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxalowDQYJKoZIhvcNAQELBQADggEB ABx4bMgdfs0Auv66EMKlDhKwu8ulOrDRd+0S9paq+55HCtHMT87kPmtW6E9jFsMI 8X0JG03oi1MOLgSTfZLag8Fm46iKjVjb3rVVAZm7wifYjpFaxcJv9zAu52YYkpXJ pGFFwz+WFiNfS7rYjszmAyxByNZSASc5bxr4AUaf1IRY4KsGGfrLvvSFbi2oR1zG iRBEmCIxJcIvRlQICQ7uXtiJfNVi5piPDUxHuislviMGakGHANc0kDLgYZB5Vza3 SAH/DlfLynZ9tp6nbn2AAzsDD+ja3pzAVSDD8WRFcG8oldNLHsHr2b2+gKeauPVw 5YW6AgNBY7nQad3CPsYysuU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:08 2026 by rpki-client