$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3L3HOboQcJUlCaoNXPHO0y7XHoI.roa File: 3L3HOboQcJUlCaoNXPHO0y7XHoI.roa (raw, json) Hash identifier: zl8IB9M++slY1XBgQLP/9CrbEfYJtnwOScpnWZd7dCc= Subject key identifier: DC:BD:C7:39:BA:10:70:95:25:09:AA:0D:5C:F1:CE:D3:2E:D7:1E:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1693 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3L3HOboQcJUlCaoNXPHO0y7XHoI.roa Signing time: Tue 31 Mar 2026 08:02:04 +0000 ROA not before: Tue 31 Mar 2026 08:02:04 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5779 (0x1693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:04 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DCBDC739BA1070952509AA0D5CF1CED32ED71E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:fb:d1:0d:d9:4e:ae:24:6d:67:2d:00:54: a1:8d:8b:0f:2a:aa:b5:55:d0:8d:cf:c6:8f:f0:b5: 91:13:cf:5c:5b:bc:d7:d3:e4:a7:73:10:ee:94:f8: 85:f7:af:3f:9a:33:b7:6f:09:b9:39:82:0a:66:e0: 34:60:7e:11:58:6b:01:90:08:a9:4a:ae:db:a4:3b: fa:b9:8c:a4:e7:01:ae:21:a4:59:ed:b3:3b:14:88: 38:97:99:d0:74:bd:24:de:66:c0:c3:58:49:1b:df: fa:51:09:80:ff:a1:07:14:54:d5:94:a6:38:28:d5: 77:73:05:cd:0d:8c:03:07:64:ea:be:83:50:97:38: a8:17:02:06:9d:d7:75:c6:08:46:b8:5b:d4:8f:88: 56:b9:62:c1:ee:7b:99:de:b5:91:d9:ac:c8:2f:36: 1e:1d:c3:1d:72:fb:7b:4d:ab:fb:39:3f:4f:fc:30: 8d:78:b5:99:80:45:81:9c:c9:ba:f7:4c:a3:98:c4: 73:b8:e8:5c:87:d1:93:ad:3f:22:82:f9:8c:5c:ed: 8c:84:db:90:fd:43:da:ed:35:bc:83:8e:3d:0e:5e: d6:7c:17:c0:fd:83:59:47:97:fb:ff:a6:42:0a:cc: b4:b8:bf:66:dd:1c:93:05:83:1b:eb:d1:67:97:ab: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BD:C7:39:BA:10:70:95:25:09:AA:0D:5C:F1:CE:D3:2E:D7:1E:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3L3HOboQcJUlCaoNXPHO0y7XHoI.roa sbgp-ipAddrBlock: critical IPv4: 49.104.32.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:24:54:fe:27:7d:e8:eb:b7:21:a6:42:44:29:9d:7f:5b:f0: 2c:0b:b2:f3:51:61:f4:60:9f:a2:72:dc:ef:2e:82:86:65:32: e9:3a:05:44:62:5e:3d:e4:5e:fb:98:de:c8:a1:b7:f1:89:f4: 67:85:77:21:ac:9a:54:20:af:2f:03:7c:32:91:0b:ae:25:53: 34:a5:29:15:47:48:9c:22:c8:a8:fe:c9:ce:48:ce:04:c6:65: 86:a8:65:76:83:62:dc:86:81:ee:b9:fe:64:e5:76:23:95:53: 6c:1f:d3:40:09:bb:94:94:a7:89:77:c5:59:1f:05:19:06:3a: 0b:65:59:ac:b9:71:41:f8:74:36:49:76:0b:ef:87:a2:3a:c5: 7f:b9:23:e9:ee:b9:dc:2c:1e:e0:0b:ae:c0:80:49:be:f8:9b: c7:e3:5b:36:5a:95:4c:cf:82:9c:2f:5f:b2:65:6d:d4:c3:6b: 87:55:93:ab:46:10:19:98:cd:6d:f2:76:33:a4:21:35:69:79: 78:8e:aa:91:3d:67:7a:85:e7:f9:37:c5:50:75:cf:39:22:29: db:27:8f:61:d6:64:5e:52:26:78:55:54:d5:27:69:4e:f3:6d: e8:64:08:ce:63:55:aa:46:fa:d9:37:f8:9b:e8:df:56:d6:f4: 3d:4a:90:57 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDQkRDNzM5QkExMDcw OTUyNTA5QUEwRDVDRjFDRUQzMkVENzFFODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtXfvRDdlOriRtZy0AVKGNiw8qqrVV0I3Pxo/wtZETz1xbvNfT 5KdzEO6U+IX3rz+aM7dvCbk5ggpm4DRgfhFYawGQCKlKrtukO/q5jKTnAa4hpFnt szsUiDiXmdB0vSTeZsDDWEkb3/pRCYD/oQcUVNWUpjgo1XdzBc0NjAMHZOq+g1CX OKgXAgad13XGCEa4W9SPiFa5YsHue5netZHZrMgvNh4dwx1y+3tNq/s5P0/8MI14 tZmARYGcybr3TKOYxHO46FyH0ZOtPyKC+Yxc7YyE25D9Q9rtNbyDjj0OXtZ8F8D9 g1lHl/v/pkIKzLS4v2bdHJMFgxvr0WeXqyMfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3L3HOboQcJUlCaoNXPHO0y7XHoIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNMM0hPYm9RY0pVbENhb05YUEhPMHk3WEhvSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaCAwDQYJKoZIhvcNAQELBQADggEB ACwkVP4nfejrtyGmQkQpnX9b8CwLsvNRYfRgn6Jy3O8ugoZlMuk6BURiXj3kXvuY 3siht/GJ9GeFdyGsmlQgry8DfDKRC64lUzSlKRVHSJwiyKj+yc5IzgTGZYaoZXaD YtyGge65/mTldiOVU2wf00AJu5SUp4l3xVkfBRkGOgtlWay5cUH4dDZJdgvvh6I6 xX+5I+nuudwsHuALrsCASb74m8fjWzZalUzPgpwvX7JlbdTDa4dVk6tGEBmYzW3y djOkITVpeXiOqpE9Z3qF5/k3xVB1zzkiKdsnj2HWZF5SJnhVVNUnaU7zbehkCM5j VapG+tk3+Jvo31bW9D1KkFc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:31 2026 by rpki-client