$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3GZIyALbNa8m3CJ9ENPyOn_ErQg.roa File: 3GZIyALbNa8m3CJ9ENPyOn_ErQg.roa (raw, json) Hash identifier: 57oUw2KU/AQIOhImYpijsHpWAMbjdu00+yuyjN1s/Ow= Subject key identifier: DC:66:48:C8:02:DB:35:AF:26:DC:22:7D:10:D3:F2:3A:7F:C4:AD:08 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 156C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3GZIyALbNa8m3CJ9ENPyOn_ErQg.roa Signing time: Tue 31 Mar 2026 07:59:37 +0000 ROA not before: Tue 31 Mar 2026 07:59:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.231.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5484 (0x156c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DC6648C802DB35AF26DC227D10D3F23A7FC4AD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:f1:31:ee:50:c3:8d:5a:ba:91:87:ab:92: ed:0c:26:89:e3:bc:a0:18:84:30:46:27:24:b4:51: 14:a1:21:1f:ec:77:d1:63:4a:5c:a7:9b:a6:cb:59: 29:b3:54:f3:c2:15:7a:22:ac:4f:69:51:23:11:40: c0:d4:65:ef:af:b2:28:db:d2:53:6f:ea:b0:10:b7: 2b:ec:2f:de:e8:fd:09:0a:30:18:07:78:0b:2b:23: 1b:31:44:9d:03:b1:c6:0b:b5:03:ba:6d:39:03:1e: f9:39:72:fd:15:8c:f5:74:0e:db:84:dc:22:1a:4a: c4:cf:40:97:fb:8e:34:e9:39:35:d6:73:49:8e:99: c3:ba:51:f0:7c:3e:c4:70:e0:2f:82:80:a1:cf:70: 29:da:f4:c6:c8:67:4b:c1:d4:fb:99:96:52:ff:2b: fe:3a:2a:04:1f:10:70:bf:c7:df:52:4f:d4:57:83: 78:cf:99:d8:eb:de:27:3c:6b:42:76:68:c0:ef:6f: c9:4a:e4:7c:15:11:3d:11:61:57:d9:a9:ac:0e:43: 36:09:8c:f0:3d:f8:2e:29:da:11:75:30:f7:fb:c7: 35:07:93:50:0e:80:7b:65:b4:f8:24:ab:fc:35:ee: 74:ce:ce:5e:bb:48:c4:c6:ae:f2:2c:cb:b6:4e:cc: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:66:48:C8:02:DB:35:AF:26:DC:22:7D:10:D3:F2:3A:7F:C4:AD:08 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3GZIyALbNa8m3CJ9ENPyOn_ErQg.roa sbgp-ipAddrBlock: critical IPv4: 27.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:d8:b7:dc:1d:f0:54:fe:b4:32:62:c6:71:ab:6b:bf:43:15: 5e:cd:10:6c:52:f9:02:fb:ba:08:64:3b:15:ac:66:8c:7a:b3: dd:ca:3f:9c:6b:5c:26:7a:59:ee:2d:ce:02:34:0e:40:6a:c7: 8c:ba:62:3b:0c:85:40:4f:07:76:74:0a:d0:88:5a:ee:a3:5d: ca:d2:ff:d4:09:fb:78:f5:81:51:3d:e0:63:82:fa:7a:91:3a: 48:d5:d5:c8:da:5e:56:ac:63:70:88:4f:1c:e7:6f:83:5d:d9: 11:ce:94:f4:65:70:35:45:d5:68:30:a4:cf:3e:db:a9:66:be: c9:1e:05:ba:82:83:d6:42:7a:b3:31:d5:a5:75:63:3b:5f:01: ff:39:76:4d:5c:68:d0:da:91:8f:ad:42:55:a8:e9:4c:bd:9f: a1:5e:84:c2:82:7a:ed:de:84:37:0f:4f:24:d4:92:e7:d2:7b: f2:f9:ed:5a:24:f5:92:6e:76:1d:42:c9:ad:ee:2d:7d:30:1b: 97:ba:0b:85:78:12:ee:b3:8e:bd:50:05:06:a8:02:22:2b:71: b8:42:c0:cd:d6:c9:47:94:5e:34:a2:7c:38:4e:c7:5f:19:76: 76:26:42:96:06:7a:32:7b:cd:c4:d1:53:ce:f1:30:df:24:81: e9:57:0e:5f -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICFWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDNjY0OEM4MDJEQjM1 QUYyNkRDMjI3RDEwRDNGMjNBN0ZDNEFEMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7H/Ex7lDDjVq6kYerku0MJonjvKAYhDBGJyS0URShIR/sd9Fj Slynm6bLWSmzVPPCFXoirE9pUSMRQMDUZe+vsijb0lNv6rAQtyvsL97o/QkKMBgH eAsrIxsxRJ0DscYLtQO6bTkDHvk5cv0VjPV0DtuE3CIaSsTPQJf7jjTpOTXWc0mO mcO6UfB8PsRw4C+CgKHPcCna9MbIZ0vB1PuZllL/K/46KgQfEHC/x99ST9RXg3jP mdjr3ic8a0J2aMDvb8lK5HwVET0RYVfZqawOQzYJjPA9+C4p2hF1MPf7xzUHk1AO gHtltPgkq/w17nTOzl67SMTGrvIsy7ZOzMEBAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQU3GZIyALbNa8m3CJ9ENPyOn/ErQgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNHWkl5QUxiTmE4bTNDSjlFTlB5T25fRXJRZy5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAb5zANBgkqhkiG9w0BAQsFAAOCAQEA TNi33B3wVP60MmLGcatrv0MVXs0QbFL5Avu6CGQ7FaxmjHqz3co/nGtcJnpZ7i3O AjQOQGrHjLpiOwyFQE8HdnQK0Iha7qNdytL/1An7ePWBUT3gY4L6epE6SNXVyNpe VqxjcIhPHOdvg13ZEc6U9GVwNUXVaDCkzz7bqWa+yR4FuoKD1kJ6szHVpXVjO18B /zl2TVxo0NqRj61CVajpTL2foV6EwoJ67d6ENw9PJNSS59J78vntWiT1km52HULJ re4tfTAbl7oLhXgS7rOOvVAFBqgCIitxuELAzdbJR5ReNKJ8OE7HXxl2diZClgZ6 MnvNxNFTzvEw3ySB6VcOXw== -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:55 2026 by rpki-client