$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/32IwGdXSLvTKvtotO1311pTnet4.roa File: 32IwGdXSLvTKvtotO1311pTnet4.roa (raw, json) Hash identifier: 6mc1ekRrk5VY+MgSODwU+EfVtI1lhye7IEDWUDSIn0o= Subject key identifier: DF:62:30:19:D5:D2:2E:F4:CA:BE:DA:2D:3B:5D:F5:D6:94:E7:7A:DE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13B8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/32IwGdXSLvTKvtotO1311pTnet4.roa Signing time: Tue 31 Mar 2026 07:56:10 +0000 ROA not before: Tue 31 Mar 2026 07:56:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5048 (0x13b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DF623019D5D22EF4CABEDA2D3B5DF5D694E77ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:86:10:32:b7:6a:41:ee:59:95:69:cd:7d: d4:f6:e2:be:ff:02:6e:02:f5:5c:cd:09:2b:b2:25: 3b:f5:1e:04:08:97:86:51:6d:c1:f2:8a:d6:c6:7b: 7a:e8:ff:76:fa:19:63:b0:ca:8e:50:9b:97:08:0e: 10:f8:2e:e9:44:4e:04:2f:2f:82:df:bd:77:3a:00: 64:e8:72:2f:8f:db:a0:0d:76:f7:a1:a7:39:15:74: 50:4d:8f:2d:d6:ae:a8:05:64:91:4f:f7:c0:d8:a8: aa:47:d3:ee:5b:9b:c4:4e:4b:e1:e1:be:0f:e1:01: c1:a0:6b:16:28:dc:41:28:9b:19:7f:ac:50:23:db: dd:73:19:c2:8e:c6:99:a9:9b:72:94:7e:86:e7:e5: 7e:ad:d5:e9:42:7a:a3:75:02:e5:1a:f8:9f:df:50: 1c:c7:b1:58:22:66:f5:10:fd:22:6d:d9:2c:46:3c: c4:46:7d:87:a6:b5:0b:dc:c2:e8:a1:e1:52:18:65: 85:2f:09:5d:c7:e1:84:5e:02:94:49:35:77:bf:d3: 25:38:80:13:53:c7:31:d3:cf:8d:e0:1d:91:fd:aa: 76:e1:f1:72:a1:39:19:c6:7b:f6:58:6c:95:f0:c0: 6e:64:53:c1:c4:2d:6b:6b:e4:bc:cb:9b:ce:cf:d8: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:62:30:19:D5:D2:2E:F4:CA:BE:DA:2D:3B:5D:F5:D6:94:E7:7A:DE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/32IwGdXSLvTKvtotO1311pTnet4.roa sbgp-ipAddrBlock: critical IPv4: 49.97.98.0/23 Signature Algorithm: sha256WithRSAEncryption 25:9e:7b:e1:a1:9b:5c:8d:87:70:22:88:e2:71:48:bd:c0:6d: 0a:a2:04:8f:79:20:c3:57:a6:51:8d:88:ea:d9:30:fa:aa:60: 6f:2d:b0:1b:84:20:7d:5d:09:0e:cc:ef:a1:05:80:21:95:c0: 7d:c4:e1:89:2d:e7:4f:e6:30:84:f6:ee:ca:45:a0:68:76:a1: 69:bc:1e:29:3b:dc:ec:2d:a4:9c:33:53:94:8c:22:67:73:32: 8b:e6:31:b3:25:c4:96:77:d9:67:68:39:14:f0:5d:cf:27:fd: 1b:a0:e6:e4:3b:31:20:a2:dd:a6:eb:86:7a:6a:36:12:0f:5f: 24:85:2e:58:f2:0e:5f:ef:6a:c2:27:09:20:2e:8e:0d:41:59: 10:37:2f:e2:50:8a:10:d6:8a:53:d2:f7:28:d1:e0:2a:ca:fa: 6f:0e:9c:80:1a:55:77:b8:65:e6:32:06:9c:20:0a:e0:98:31: 17:6a:48:24:7d:1c:58:f5:64:b3:87:0a:93:49:40:7b:86:f3: 67:2a:91:11:52:06:a8:65:d3:6a:c4:61:dd:88:2d:cb:ab:e4: 53:66:10:e6:ec:a5:e8:25:0b:16:8b:a3:c4:d8:f2:da:2d:f6: 07:ae:f5:90:e9:66:35:5c:4a:e4:a4:8c:e7:eb:67:c6:be:d4: 89:fa:77:34 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGNjIzMDE5RDVEMjJF RjRDQUJFREEyRDNCNURGNUQ2OTRFNzdBREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoEoYQMrdqQe5ZlWnNfdT24r7/Am4C9VzNCSuyJTv1HgQIl4ZR bcHyitbGe3ro/3b6GWOwyo5Qm5cIDhD4LulETgQvL4LfvXc6AGToci+P26ANdveh pzkVdFBNjy3WrqgFZJFP98DYqKpH0+5bm8ROS+Hhvg/hAcGgaxYo3EEomxl/rFAj 291zGcKOxpmpm3KUfobn5X6t1elCeqN1AuUa+J/fUBzHsVgiZvUQ/SJt2SxGPMRG fYemtQvcwuih4VIYZYUvCV3H4YReApRJNXe/0yU4gBNTxzHTz43gHZH9qnbh8XKh ORnGe/ZYbJXwwG5kU8HELWtr5LzLm87P2DxnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU32IwGdXSLvTKvtotO1311pTnet4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzMySXdHZFhTTHZUS3Z0b3RPMTMxMXBUbmV0NC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYWIwDQYJKoZIhvcNAQELBQADggEB ACWee+Ghm1yNh3AiiOJxSL3AbQqiBI95IMNXplGNiOrZMPqqYG8tsBuEIH1dCQ7M 76EFgCGVwH3E4Ykt50/mMIT27spFoGh2oWm8Hik73OwtpJwzU5SMImdzMovmMbMl xJZ32WdoORTwXc8n/Rug5uQ7MSCi3abrhnpqNhIPXySFLljyDl/vasInCSAujg1B WRA3L+JQihDWilPS9yjR4CrK+m8OnIAaVXe4ZeYyBpwgCuCYMRdqSCR9HFj1ZLOH CpNJQHuG82cqkRFSBqhl02rEYd2ILcur5FNmEObspeglCxaLo8TY8tot9geu9ZDp ZjVcSuSkjOfrZ8a+1In6dzQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:55 2026 by rpki-client