$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ayRSMWP52GnY17FAFMrfEPI1wI.roa File: 2ayRSMWP52GnY17FAFMrfEPI1wI.roa (raw, json) Hash identifier: hB8As26nQW7d055RnkEdRqwkh+DUm6kkL3Mpxwljc1A= Subject key identifier: D9:AC:91:48:C5:8F:E7:61:A7:63:5E:C5:00:53:2B:7C:43:C8:D7:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16A9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ayRSMWP52GnY17FAFMrfEPI1wI.roa Signing time: Tue 31 Mar 2026 08:02:14 +0000 ROA not before: Tue 31 Mar 2026 08:02:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 219.114.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5801 (0x16a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=D9AC9148C58FE761A7635EC500532B7C43C8D702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:d4:02:3f:f2:f4:3b:52:28:31:df:e8:f5: a0:10:9e:6f:f8:70:93:d4:96:aa:5d:fe:b0:f2:2a: 0e:5f:62:bb:d1:45:81:d6:d3:0f:a0:f4:84:3b:4a: 8e:ac:c1:dd:f4:d8:da:ad:23:4b:76:5e:04:ee:77: ff:4a:0b:15:52:d8:12:d6:e1:b5:05:97:8c:35:db: 78:f2:62:51:16:b2:57:3b:68:e8:75:61:c0:61:98: 5a:19:94:9c:ef:ce:57:52:32:e1:66:60:a0:88:63: 63:a8:2d:38:85:93:bb:bd:7e:25:bc:f4:2b:38:c6: 4d:5d:73:fb:ba:1f:ca:da:e6:17:1b:50:f6:13:28: 2d:30:6e:9e:93:88:43:fc:19:32:73:2a:86:d2:ce: f5:ba:c5:fa:77:7a:79:59:50:b0:97:47:2e:5c:91: 37:23:6f:5f:1e:53:6f:0e:19:4a:6d:01:44:4d:e2: bc:40:75:62:94:ea:72:ac:ec:14:a4:d1:15:05:15: a0:14:d0:3d:a4:33:83:9b:5b:88:01:df:0f:96:82: d3:90:d1:44:6a:ac:6e:f6:fe:1d:36:25:c4:73:b3: d9:32:fa:05:9f:66:03:73:de:8a:61:89:84:8b:a6: 81:87:28:2a:3b:ab:a2:f4:a0:a0:7e:34:72:a8:89: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:91:48:C5:8F:E7:61:A7:63:5E:C5:00:53:2B:7C:43:C8:D7:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ayRSMWP52GnY17FAFMrfEPI1wI.roa sbgp-ipAddrBlock: critical IPv4: 219.114.176.0/22 Signature Algorithm: sha256WithRSAEncryption 88:4d:f8:3e:d8:be:48:02:17:a9:52:c8:29:b6:b1:61:b4:90: 7b:17:ce:17:4f:50:11:72:60:d0:10:6e:3c:e0:69:45:8a:08: 0c:d1:47:b2:29:ed:64:a3:44:fd:84:20:29:1c:63:76:80:46: ca:c2:4c:b1:e5:fb:14:8e:73:5c:b2:47:b9:1c:2f:90:e7:e4: ad:95:aa:6c:59:3f:5d:7e:3b:24:28:a5:10:0a:fb:80:76:30: ba:f0:b5:6c:52:24:5e:6e:c0:25:a0:41:43:96:c3:df:bc:63: ab:c8:7b:aa:0f:20:7c:76:9d:4f:ac:15:1e:e4:2e:2e:cf:12: 74:20:61:31:59:be:59:55:84:01:4c:18:8c:bb:6e:14:b4:f4: d1:00:94:77:a9:34:7d:c2:2c:1f:45:fd:bd:d0:40:0b:6b:4f: 7d:24:c4:74:2d:1d:32:74:79:5f:e9:da:0a:3c:c0:d9:0c:d5: 49:94:84:c8:64:58:12:2a:b6:41:8b:3a:7c:94:bc:3c:c0:d2: f6:4f:d4:bd:2b:f3:2d:de:59:63:85:50:a5:3d:07:1c:63:16: b6:65:1c:54:52:4f:9f:3a:d1:c4:e6:f5:35:a3:f8:41:52:00: 59:ed:66:e9:54:cd:e2:67:b6:94:f3:a1:87:0b:42:55:6f:3c: 1f:ca:d7:b2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5QUM5MTQ4QzU4RkU3 NjFBNzYzNUVDNTAwNTMyQjdDNDNDOEQ3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMVtQCP/L0O1IoMd/o9aAQnm/4cJPUlqpd/rDyKg5fYrvRRYHW 0w+g9IQ7So6swd302NqtI0t2XgTud/9KCxVS2BLW4bUFl4w123jyYlEWslc7aOh1 YcBhmFoZlJzvzldSMuFmYKCIY2OoLTiFk7u9fiW89Cs4xk1dc/u6H8ra5hcbUPYT KC0wbp6TiEP8GTJzKobSzvW6xfp3enlZULCXRy5ckTcjb18eU28OGUptAURN4rxA dWKU6nKs7BSk0RUFFaAU0D2kM4ObW4gB3w+WgtOQ0URqrG72/h02JcRzs9ky+gWf ZgNz3ophiYSLpoGHKCo7q6L0oKB+NHKoiZPdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2ayRSMWP52GnY17FAFMrfEPI1wIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzJheVJTTVdQNTJHblkxN0ZBRk1yZkVQSTF3SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALbcrAwDQYJKoZIhvcNAQELBQADggEB AIhN+D7YvkgCF6lSyCm2sWG0kHsXzhdPUBFyYNAQbjzgaUWKCAzRR7Ip7WSjRP2E ICkcY3aARsrCTLHl+xSOc1yyR7kcL5Dn5K2VqmxZP11+OyQopRAK+4B2MLrwtWxS JF5uwCWgQUOWw9+8Y6vIe6oPIHx2nU+sFR7kLi7PEnQgYTFZvllVhAFMGIy7bhS0 9NEAlHepNH3CLB9F/b3QQAtrT30kxHQtHTJ0eV/p2go8wNkM1UmUhMhkWBIqtkGL OnyUvDzA0vZP1L0r8y3eWWOFUKU9BxxjFrZlHFRST5860cTm9TWj+EFSAFntZulU zeJntpTzoYcLQlVvPB/K17I= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:50 2026 by rpki-client