$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0aRZxtRgG8UY4xHxEqyqVoNd8Wo.roa File: 0aRZxtRgG8UY4xHxEqyqVoNd8Wo.roa (raw, json) Hash identifier: 1DxCAYvSVxn/CJ3Xj2zfbD8ZrNcY97nLV3DRHZBVldA= Subject key identifier: D1:A4:59:C6:D4:60:1B:C5:18:E3:11:F1:12:AC:AA:56:83:5D:F1:6A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1400 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0aRZxtRgG8UY4xHxEqyqVoNd8Wo.roa Signing time: Tue 31 Mar 2026 07:56:41 +0000 ROA not before: Tue 31 Mar 2026 07:56:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5120 (0x1400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D1A459C6D4601BC518E311F112ACAA56835DF16A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:a8:eb:ec:45:1f:f0:81:19:f3:6b:e1:ea: 90:67:09:45:f1:26:05:ff:a8:f6:ee:b7:0c:5c:02: 99:c4:8d:be:45:08:46:a7:e9:f8:ac:29:5f:2e:1f: 80:e8:6c:7b:8b:c2:49:96:db:67:0a:d4:e5:7d:8b: 2b:b4:78:c3:9d:7f:be:b8:16:53:f2:b5:45:58:80: bc:b3:e3:79:38:99:a1:9c:68:b2:d7:38:fb:f9:07: 40:f3:68:14:3e:b6:80:72:13:e1:72:a8:9f:80:ea: 86:46:49:cd:e2:18:e5:35:66:d3:6e:6f:ed:c4:8b: 5c:6e:68:15:36:94:7b:2b:15:f6:60:f0:59:cd:e8: b5:78:10:05:bb:2c:2f:c9:58:ac:f4:6d:2b:63:b9: c2:00:98:17:c3:28:f8:b2:8e:77:47:29:07:74:ad: 05:9e:a9:a1:a8:38:24:8f:73:19:c8:e1:65:16:ef: fd:db:13:a4:1b:a7:9a:9c:6a:5f:1b:12:91:18:45: 22:7a:d4:36:73:7e:01:38:da:bc:5b:a2:8a:39:9b: 08:e9:57:3a:7d:5f:bd:0b:ba:af:49:ce:ea:27:69: a4:b6:68:57:49:57:f4:cd:41:71:c4:b1:2e:32:0d: 75:96:a9:9a:a6:d6:38:fb:c4:99:73:59:2c:a9:10: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A4:59:C6:D4:60:1B:C5:18:E3:11:F1:12:AC:AA:56:83:5D:F1:6A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0aRZxtRgG8UY4xHxEqyqVoNd8Wo.roa sbgp-ipAddrBlock: critical IPv4: 49.98.136.0/22 Signature Algorithm: sha256WithRSAEncryption 81:c4:69:b1:f3:91:59:19:df:5d:ed:75:76:b6:ed:02:cb:e2: 44:2f:d2:7a:32:98:35:d0:23:13:cd:fd:b2:ba:21:7f:38:10: ba:64:2b:48:55:44:39:8e:c9:ee:bc:51:80:50:11:24:2c:a7: 89:6a:3c:3e:c6:ef:da:86:18:98:75:b5:3d:3d:e3:97:f2:3b: c5:11:73:3d:c7:79:21:c5:25:07:48:bb:b4:a7:f3:ae:69:4a: 97:9c:2a:c3:2d:e9:17:02:40:08:24:30:4a:59:8d:6d:7a:0d: 82:40:4a:68:61:5c:15:d4:fd:05:18:37:bc:3c:3e:c8:d3:ba: a7:20:32:8b:b4:2e:50:fc:55:d0:91:5c:e0:b7:c7:19:3a:09: 33:c5:14:3e:3e:4b:f3:19:46:80:b7:35:1a:18:c1:94:0c:39: 38:7d:28:ee:74:ed:91:64:55:05:1a:21:52:a2:bb:e5:0f:3b: a8:4f:e5:35:30:c2:e6:0e:85:3b:57:5d:ce:28:f3:3b:cb:7c: e9:37:4f:ad:8f:0b:6a:ea:d2:80:9b:7e:79:70:bd:d1:04:0d: cb:43:26:b2:cb:a6:e6:90:99:63:63:02:3b:f1:79:e4:cf:d3: 19:10:81:b1:c4:cc:83:5c:9f:da:5f:bf:2b:02:67:0a:88:c1: db:fd:c0:fc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxQTQ1OUM2RDQ2MDFC QzUxOEUzMTFGMTEyQUNBQTU2ODM1REYxNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFxqjr7EUf8IEZ82vh6pBnCUXxJgX/qPbutwxcApnEjb5FCEan 6fisKV8uH4DobHuLwkmW22cK1OV9iyu0eMOdf764FlPytUVYgLyz43k4maGcaLLX OPv5B0DzaBQ+toByE+FyqJ+A6oZGSc3iGOU1ZtNub+3Ei1xuaBU2lHsrFfZg8FnN 6LV4EAW7LC/JWKz0bStjucIAmBfDKPiyjndHKQd0rQWeqaGoOCSPcxnI4WUW7/3b E6Qbp5qcal8bEpEYRSJ61DZzfgE42rxbooo5mwjpVzp9X70Luq9JzuonaaS2aFdJ V/TNQXHEsS4yDXWWqZqm1jj7xJlzWSypEGOBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU0aRZxtRgG8UY4xHxEqyqVoNd8WowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzBhUlp4dFJnRzhVWTR4SHhFcXlxVm9OZDhXby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYogwDQYJKoZIhvcNAQELBQADggEB AIHEabHzkVkZ313tdXa27QLL4kQv0noymDXQIxPN/bK6IX84ELpkK0hVRDmOye68 UYBQESQsp4lqPD7G79qGGJh1tT0945fyO8URcz3HeSHFJQdIu7Sn865pSpecKsMt 6RcCQAgkMEpZjW16DYJASmhhXBXU/QUYN7w8PsjTuqcgMou0LlD8VdCRXOC3xxk6 CTPFFD4+S/MZRoC3NRoYwZQMOTh9KO507ZFkVQUaIVKiu+UPO6hP5TUwwuYOhTtX Xc4o8zvLfOk3T62PC2rq0oCbfnlwvdEEDctDJrLLpuaQmWNjAjvxeeTP0xkQgbHE zINcn9pfvysCZwqIwdv9wPw= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:27 2026 by rpki-client