$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/07CsOjqyGVU7HsGipS8di04JWIs.roa File: 07CsOjqyGVU7HsGipS8di04JWIs.roa (raw, json) Hash identifier: 1LQpC481T0BJL7BUZcnM8iykIY+A7mmO55CXMIV2HjY= Subject key identifier: D3:B0:AC:3A:3A:B2:19:55:3B:1E:C1:A2:A5:2F:1D:8B:4E:09:58:8B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1631 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/07CsOjqyGVU7HsGipS8di04JWIs.roa Signing time: Tue 31 Mar 2026 08:01:20 +0000 ROA not before: Tue 31 Mar 2026 08:01:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5681 (0x1631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D3B0AC3A3AB219553B1EC1A2A52F1D8B4E09588B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:7e:94:12:e9:3d:b7:67:f5:6d:8e:e5:38: 39:99:64:ea:a9:e4:0d:1f:ac:3e:84:99:0f:b3:19: 8b:26:27:78:e3:01:3c:cb:d5:4f:12:67:6d:84:7e: cc:d8:08:9f:44:72:c8:9a:d6:6f:26:0f:90:87:ba: f8:ad:48:d3:c9:0f:8e:e9:88:52:f0:30:c0:e3:26: dc:60:27:40:19:4a:9f:ec:8a:e4:e9:11:5f:c1:f0: 75:e8:36:5f:79:84:24:c2:64:77:73:a7:18:93:b7: 8a:6b:32:76:60:e3:70:f1:ee:5c:37:a0:fc:6a:13: b0:c2:66:5c:2e:af:a3:d0:08:7b:08:1d:c5:a4:9b: 98:e0:b5:b9:d4:54:4b:62:66:2a:1d:3d:06:aa:78: 8c:f7:86:a6:21:bf:3a:83:29:b8:a7:32:7d:99:7b: 1c:62:98:de:a7:d5:f9:af:fc:a2:03:91:1e:64:c6: e8:16:0d:a7:0c:f7:ff:a0:48:cb:54:ac:bc:45:f7: 3e:d0:0c:3a:84:3b:29:0b:a0:52:12:3d:75:42:7c: 16:c2:2a:44:de:2a:cb:fa:fe:a6:d6:4d:bc:7e:dd: e6:2b:1f:ee:c6:b8:44:5a:ea:2a:1d:0b:c5:31:8d: c1:e5:f1:16:6b:97:92:49:00:82:d8:98:8a:1f:6f: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B0:AC:3A:3A:B2:19:55:3B:1E:C1:A2:A5:2F:1D:8B:4E:09:58:8B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/07CsOjqyGVU7HsGipS8di04JWIs.roa sbgp-ipAddrBlock: critical IPv4: 49.104.0.0/22 Signature Algorithm: sha256WithRSAEncryption 56:12:b3:92:a1:56:74:8b:bf:89:21:9a:a7:81:d8:c1:88:47: 94:b7:4c:5c:71:ec:5d:5e:6d:a0:a5:c6:7b:b6:fa:27:41:66: e4:15:aa:43:07:a2:4c:85:3c:ec:14:75:a9:18:dd:c9:fc:7c: 85:3c:b4:cd:3b:8a:7d:d5:06:15:ba:2c:e9:fa:9f:6c:ef:11: 63:27:b6:02:3d:15:bd:f9:e7:64:a6:1b:ad:75:17:ba:ac:41: 9e:60:d0:a3:ce:06:14:93:c0:53:5d:74:02:8c:e0:45:6f:d9: 89:01:bb:96:cd:93:ee:ed:7d:10:a1:43:a2:db:87:80:19:1d: 1b:df:41:43:d7:49:d8:fa:ed:4f:49:2a:30:6f:fb:cc:e4:ea: ce:4b:56:1c:c1:e2:71:35:3e:ce:4b:73:b7:80:30:ea:08:7f: 8d:26:d1:21:e4:5a:9f:df:38:b2:e9:e5:08:8f:dc:73:2a:79: 4b:c6:2e:bf:1c:65:8e:16:8f:fe:22:ac:10:0e:98:d3:47:3c: 49:b0:f9:37:ac:e4:8b:8d:1c:11:6d:9a:35:a4:c4:15:33:af: 21:95:09:79:41:f1:ba:cb:61:7f:8a:37:b7:42:54:4e:2e:85: 32:78:20:65:57:8f:ce:2a:2f:ae:70:39:d3:0b:d7:c3:e3:bc: f7:e1:c9:ba -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzQjBBQzNBM0FCMjE5 NTUzQjFFQzFBMkE1MkYxRDhCNEUwOTU4OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCC36UEuk9t2f1bY7lODmZZOqp5A0frD6EmQ+zGYsmJ3jjATzL 1U8SZ22EfszYCJ9Ecsia1m8mD5CHuvitSNPJD47piFLwMMDjJtxgJ0AZSp/siuTp EV/B8HXoNl95hCTCZHdzpxiTt4prMnZg43Dx7lw3oPxqE7DCZlwur6PQCHsIHcWk m5jgtbnUVEtiZiodPQaqeIz3hqYhvzqDKbinMn2ZexximN6n1fmv/KIDkR5kxugW DacM9/+gSMtUrLxF9z7QDDqEOykLoFISPXVCfBbCKkTeKsv6/qbWTbx+3eYrH+7G uERa6iodC8UxjcHl8RZrl5JJAILYmIofb9pvAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU07CsOjqyGVU7HsGipS8di04JWIswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzA3Q3NPanF5R1ZVN0hzR2lwUzhkaTA0SldJcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaAAwDQYJKoZIhvcNAQELBQADggEB AFYSs5KhVnSLv4khmqeB2MGIR5S3TFxx7F1ebaClxnu2+idBZuQVqkMHokyFPOwU dakY3cn8fIU8tM07in3VBhW6LOn6n2zvEWMntgI9Fb3552SmG611F7qsQZ5g0KPO BhSTwFNddAKM4EVv2YkBu5bNk+7tfRChQ6Lbh4AZHRvfQUPXSdj67U9JKjBv+8zk 6s5LVhzB4nE1Ps5Lc7eAMOoIf40m0SHkWp/fOLLp5QiP3HMqeUvGLr8cZY4Wj/4i rBAOmNNHPEmw+Tes5IuNHBFtmjWkxBUzryGVCXlB8brLYX+KN7dCVE4uhTJ4IGVX j84qL65wOdML18PjvPfhybo= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:02 2026 by rpki-client