$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3MdEMSFdJyWvyWmT4acb4e8cIaA.roa File: 3MdEMSFdJyWvyWmT4acb4e8cIaA.roa (raw, json) Hash identifier: 3ShIhqJ3e9HRqGcO9LGUEmV2GD9uHNHQMPwL6EUkxjs= Subject key identifier: DC:C7:44:31:21:5D:27:25:AF:C9:69:93:E1:A7:1B:E1:EF:1C:21:A0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 137D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3MdEMSFdJyWvyWmT4acb4e8cIaA.roa Signing time: Tue 31 Mar 2026 07:55:40 +0000 ROA not before: Tue 31 Mar 2026 07:55:40 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4989 (0x137d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:40 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DCC74431215D2725AFC96993E1A71BE1EF1C21A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a8:ad:ec:c6:df:8f:1b:68:b2:20:fc:29:ca: 73:89:61:7f:df:1f:a2:42:e9:8c:5e:02:75:cb:5c: ff:b9:6d:a3:fe:6f:94:8c:27:ba:ce:fe:58:b2:16: 07:16:07:61:17:81:d1:e7:7c:01:0e:51:3a:82:d7: 9d:fe:7a:87:3f:08:20:a4:b9:50:88:b2:e8:6b:6f: 59:e4:ea:36:02:b1:77:e4:33:61:7a:52:64:de:c9: 1b:b2:36:dd:c3:59:fe:a6:e5:84:eb:39:4b:7e:7c: 2a:a8:e8:c0:18:01:19:c1:4f:be:e5:4b:ea:bd:79: 8a:f7:b9:cf:1b:1b:80:10:de:66:f5:58:0d:ab:49: d9:dc:a3:4f:42:83:1a:c7:5e:9e:2e:0c:6a:ff:9c: 6e:a9:3c:59:37:ca:4c:3d:9d:66:07:6b:cd:ab:a7: f2:e6:58:e5:69:13:d4:66:e4:2a:4d:b7:17:5d:a9: 0d:03:da:a0:ad:35:87:6d:8c:78:5e:42:74:e8:c0: 94:ae:4f:76:24:0a:03:78:b7:be:7e:71:e0:11:4f: 28:7a:db:63:bf:e6:7c:ef:a2:7d:e7:ee:72:7b:68: 79:98:df:e0:37:1c:9f:d6:7d:14:78:16:1c:f4:68: ce:e9:eb:42:14:d7:e0:4e:3e:fa:6f:a0:0b:0f:66: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C7:44:31:21:5D:27:25:AF:C9:69:93:E1:A7:1B:E1:EF:1C:21:A0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3MdEMSFdJyWvyWmT4acb4e8cIaA.roa sbgp-ipAddrBlock: critical IPv4: 49.96.232.0/21 Signature Algorithm: sha256WithRSAEncryption b0:c2:91:11:66:ef:82:bb:25:01:25:4b:22:32:a1:f6:df:c2: d6:5a:a4:ef:f5:f4:4d:47:2a:a2:d1:8f:df:d2:4b:17:da:e7: 5e:c4:c8:27:d5:8f:5a:10:7e:da:4d:75:4c:15:37:8e:33:b2: f9:32:47:bc:7b:e7:4f:1e:8c:8d:2d:ed:bd:66:81:52:66:5a: 29:36:c3:ec:2b:fe:62:22:18:4c:95:8a:23:c1:3f:e6:ab:73: 01:54:61:89:30:55:29:77:38:3e:3f:76:0a:33:23:77:fd:3d: 91:15:73:d3:21:97:8d:6c:38:e5:33:cf:7c:ab:b3:14:d7:88: 06:a2:dc:d9:df:19:6e:5a:34:91:4d:10:01:77:68:b1:08:ba: 46:e2:1e:16:8e:02:b7:3f:5b:cf:d3:36:8f:67:16:24:53:5a: 5a:72:35:df:d0:bb:5a:88:61:9f:cb:41:dd:b3:23:df:24:56: 09:89:0d:94:e6:6b:a6:98:80:04:e6:4d:27:36:74:1f:7c:c8: 83:96:a8:6d:10:b4:01:07:bc:34:60:7f:a2:ce:32:c2:18:50: 55:37:39:f7:03:d7:97:4b:e0:9e:b1:85:59:c4:a2:0f:07:63: 45:6f:c9:32:03:fa:45:67:31:fa:11:5a:f8:a2:d1:8f:fa:3c: aa:25:85:f7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDQzc0NDMxMjE1RDI3 MjVBRkM5Njk5M0UxQTcxQkUxRUYxQzIxQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsqK3sxt+PG2iyIPwpynOJYX/fH6JC6YxeAnXLXP+5baP+b5SM J7rO/liyFgcWB2EXgdHnfAEOUTqC153+eoc/CCCkuVCIsuhrb1nk6jYCsXfkM2F6 UmTeyRuyNt3DWf6m5YTrOUt+fCqo6MAYARnBT77lS+q9eYr3uc8bG4AQ3mb1WA2r Sdnco09CgxrHXp4uDGr/nG6pPFk3ykw9nWYHa82rp/LmWOVpE9Rm5CpNtxddqQ0D 2qCtNYdtjHheQnTowJSuT3YkCgN4t75+ceARTyh622O/5nzvon3n7nJ7aHmY3+A3 HJ/WfRR4Fhz0aM7p60IU1+BOPvpvoAsPZpEDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3MdEMSFdJyWvyWmT4acb4e8cIaAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNNZEVNU0ZkSnlXdnlXbVQ0YWNiNGU4Y0lhQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxYOgwDQYJKoZIhvcNAQELBQADggEB ALDCkRFm74K7JQElSyIyofbfwtZapO/19E1HKqLRj9/SSxfa517EyCfVj1oQftpN dUwVN44zsvkyR7x7508ejI0t7b1mgVJmWik2w+wr/mIiGEyViiPBP+arcwFUYYkw VSl3OD4/dgozI3f9PZEVc9Mhl41sOOUzz3yrsxTXiAai3NnfGW5aNJFNEAF3aLEI ukbiHhaOArc/W8/TNo9nFiRTWlpyNd/Qu1qIYZ/LQd2zI98kVgmJDZTma6aYgATm TSc2dB98yIOWqG0QtAEHvDRgf6LOMsIYUFU3OfcD15dL4J6xhVnEog8HY0VvyTID +kVnMfoRWvii0Y/6PKolhfc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:05 2026 by rpki-client