$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2VyFNaJY7qDH0ARCPHn85grnM5Q.roa File: 2VyFNaJY7qDH0ARCPHn85grnM5Q.roa (raw, json) Hash identifier: aJyPI5vW0ZXMNBtFIL0LggNpHxv49zt24I8V9m7MDzo= Subject key identifier: D9:5C:85:35:A2:58:EE:A0:C7:D0:04:42:3C:79:FC:E6:0A:E7:33:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 160B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2VyFNaJY7qDH0ARCPHn85grnM5Q.roa Signing time: Tue 31 Mar 2026 08:00:59 +0000 ROA not before: Tue 31 Mar 2026 08:00:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5643 (0x160b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D95C8535A258EEA0C7D004423C79FCE60AE73394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:06:b4:f1:d4:7f:2d:ca:93:54:38:7c:d8: 40:f4:a0:8e:3a:5b:14:82:b3:f6:30:26:21:32:47: c1:f2:70:e1:a6:64:21:35:a5:08:1c:88:e8:77:11: e4:b7:57:bd:f4:4e:d0:4f:5a:ff:b4:38:e7:2c:19: 87:54:1d:ac:aa:ed:d7:4c:a7:69:3f:1f:d5:d9:24: 27:b9:6c:f9:2c:f2:f7:ed:47:73:cf:48:cc:8e:6d: 74:78:fb:cf:1e:74:b6:6a:c2:c1:cd:1b:0b:1f:54: 60:33:1c:5b:7e:dc:e8:19:ef:ce:bf:2c:ec:e5:e7: 4e:ac:24:62:0c:bc:07:ae:3d:33:57:a1:5b:b6:e4: 96:33:99:4d:82:9e:4d:e4:52:d2:fc:ba:51:49:1b: 49:99:39:e2:8f:fb:35:78:76:1d:cb:6d:29:03:d1: eb:5e:d8:c4:db:93:ee:0e:72:04:1b:0a:81:9f:99: 76:64:9d:3b:e5:d7:90:16:16:58:b8:a1:2b:69:89: 9c:ed:f3:27:1b:47:36:23:e4:51:6c:e2:f1:89:00: ce:15:8f:0f:3f:f1:a6:c0:65:e3:aa:8e:ba:5a:37: d3:26:c7:fb:f6:bb:e2:4f:86:7c:70:e1:8a:72:27: c1:ea:2b:73:7e:78:d2:17:07:49:e8:e9:02:df:7b: c1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:85:35:A2:58:EE:A0:C7:D0:04:42:3C:79:FC:E6:0A:E7:33:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2VyFNaJY7qDH0ARCPHn85grnM5Q.roa sbgp-ipAddrBlock: critical IPv4: 49.98.54.0/23 Signature Algorithm: sha256WithRSAEncryption 98:7c:51:2b:00:c2:e2:c0:27:7b:92:f7:39:90:db:12:9b:6a: 96:86:ac:98:9c:9f:80:41:02:bf:57:5c:a6:ab:03:0b:ef:e6: 5e:06:b2:dc:89:36:e4:8e:4a:36:13:a0:a1:b3:fa:f6:94:20: 16:f1:86:d7:df:2f:93:da:a4:97:4b:90:8c:d0:2c:34:e1:3d: dc:ea:2e:c4:ba:7f:4f:2f:47:1c:92:2d:47:79:56:d3:82:76: 46:f4:a5:b4:1d:bb:5e:0a:f6:3a:c6:e1:d6:f3:d3:d1:ad:89: f1:3c:0c:18:e1:dc:35:de:99:22:1d:83:50:82:9a:cf:ac:a4: 19:d0:55:65:d8:77:b4:1e:15:cf:0b:56:f2:5e:09:4f:c9:1a: de:bd:f5:4d:b9:df:35:77:06:4e:f8:a2:56:62:36:9b:84:c7: 3b:af:be:7f:13:35:94:6e:ef:ee:61:25:d6:06:c2:6d:ca:38: 81:ea:2d:ca:b2:4c:52:cf:0e:59:2d:38:89:17:1e:40:ce:ff: 16:d0:91:d5:2e:35:74:da:51:a3:92:7d:69:11:86:3d:a1:6f: 8f:74:b0:05:e5:30:af:30:fe:57:a7:e8:00:c7:b2:7f:8d:35: e5:81:a9:13:66:75:00:7e:9a:10:b0:c2:0d:8c:9d:4d:e1:9d: 45:d6:29:07 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5NUM4NTM1QTI1OEVF QTBDN0QwMDQ0MjNDNzlGQ0U2MEFFNzMzOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPEwa08dR/LcqTVDh82ED0oI46WxSCs/YwJiEyR8HycOGmZCE1 pQgciOh3EeS3V730TtBPWv+0OOcsGYdUHayq7ddMp2k/H9XZJCe5bPks8vftR3PP SMyObXR4+88edLZqwsHNGwsfVGAzHFt+3OgZ786/LOzl506sJGIMvAeuPTNXoVu2 5JYzmU2Cnk3kUtL8ulFJG0mZOeKP+zV4dh3LbSkD0ete2MTbk+4OcgQbCoGfmXZk nTvl15AWFli4oStpiZzt8ycbRzYj5FFs4vGJAM4Vjw8/8abAZeOqjrpaN9Mmx/v2 u+JPhnxw4YpyJ8HqK3N+eNIXB0no6QLfe8GfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2VyFNaJY7qDH0ARCPHn85grnM5QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzJWeUZOYUpZN3FESDBBUkNQSG44NWdybk01US5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYjYwDQYJKoZIhvcNAQELBQADggEB AJh8USsAwuLAJ3uS9zmQ2xKbapaGrJicn4BBAr9XXKarAwvv5l4GstyJNuSOSjYT oKGz+vaUIBbxhtffL5PapJdLkIzQLDThPdzqLsS6f08vRxySLUd5VtOCdkb0pbQd u14K9jrG4dbz09GtifE8DBjh3DXemSIdg1CCms+spBnQVWXYd7QeFc8LVvJeCU/J Gt699U253zV3Bk74olZiNpuExzuvvn8TNZRu7+5hJdYGwm3KOIHqLcqyTFLPDlkt OIkXHkDO/xbQkdUuNXTaUaOSfWkRhj2hb490sAXlMK8w/len6ADHsn+NNeWBqRNm dQB+mhCwwg2MnU3hnUXWKQc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:08 2026 by rpki-client