$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3mZyn3iC8DhJUOUalvrW66cJcMQ.roa File: 3mZyn3iC8DhJUOUalvrW66cJcMQ.roa (raw, json) Hash identifier: Gkhe3syz9NRfXgcLq8zy6aRIh4PVnXoNkKXQjqUnQPY= Subject key identifier: DE:66:72:9F:78:82:F0:38:49:50:E5:1A:96:FA:D6:EB:A7:09:70:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1695 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3mZyn3iC8DhJUOUalvrW66cJcMQ.roa Signing time: Tue 31 Mar 2026 08:02:05 +0000 ROA not before: Tue 31 Mar 2026 08:02:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5781 (0x1695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DE66729F7882F0384950E51A96FAD6EBA70970C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:e2:de:9e:b9:20:15:e3:e3:c0:27:09:d8: 5a:0b:ac:3d:0d:d4:a6:b7:33:d6:a7:06:cb:6c:b5: a3:41:ef:6a:f2:27:ed:2a:b0:25:c1:51:68:d5:b6: 68:f2:1d:e1:a0:27:3f:bb:54:83:c2:1d:65:3f:2b: 7c:8b:d1:85:c5:68:a5:89:f8:84:2f:05:81:d0:7c: c4:26:a7:0e:f0:48:a7:3e:47:cc:78:88:70:fe:b1: 5c:9f:e3:9b:97:e3:01:f1:76:73:36:44:20:97:8c: 2c:10:3d:84:91:5f:04:7e:84:91:70:02:92:24:d5: 13:65:d2:56:69:c7:03:bd:59:b9:fd:d1:f9:29:84: b2:d8:32:fa:77:67:12:76:63:d3:e9:62:c4:99:40: 20:b8:97:2d:82:cb:41:e6:ec:b4:f2:b0:4b:74:55: 4d:14:d9:7d:a4:12:29:36:15:09:b9:56:de:d9:75: e0:40:92:dd:8a:ac:13:89:b8:06:87:31:09:29:cc: 2e:e8:e1:4d:78:90:a1:b7:58:4e:97:ff:09:2b:fb: 62:d1:8d:10:14:90:9b:bf:d8:41:32:7b:29:37:97: 4e:ba:b9:11:4e:be:43:f6:72:db:b1:71:64:28:af: 72:be:df:08:90:4d:79:fe:90:c4:52:f2:86:7d:86: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:72:9F:78:82:F0:38:49:50:E5:1A:96:FA:D6:EB:A7:09:70:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3mZyn3iC8DhJUOUalvrW66cJcMQ.roa sbgp-ipAddrBlock: critical IPv4: 49.104.40.0/22 Signature Algorithm: sha256WithRSAEncryption 63:12:42:25:f9:ec:fb:71:8c:b6:fd:25:8e:84:25:35:95:73: 8a:2d:06:af:64:05:c9:5a:a6:f7:b8:61:f6:b2:b3:33:9c:0d: 6c:0b:f1:46:e9:de:45:2d:1f:cd:82:3d:2e:87:9d:0e:c9:59: 56:9b:17:6e:27:54:5b:04:2d:44:99:0f:50:c8:15:20:11:fe: 48:68:a2:c4:2d:0f:2c:79:7a:17:ee:4b:82:ce:45:92:9e:5b: 08:48:6a:2d:81:8c:38:f9:33:e8:26:74:35:b3:78:d4:86:e3: 2f:5a:cd:ef:85:8e:b6:91:b7:7b:4e:2a:77:bf:8b:6e:9f:06: f0:86:45:b7:1b:9c:4d:3e:1f:42:37:77:d3:38:1f:0e:de:59: b6:2b:52:e0:a4:58:20:60:18:90:b0:5a:07:44:22:be:58:6c: 64:26:cf:80:da:33:2d:c7:a3:2a:10:b6:6a:81:36:de:33:38: c2:53:79:6c:39:62:19:97:a0:68:01:69:48:3a:e2:fc:ae:51: 96:0e:f5:0c:34:1f:38:ca:3b:6d:2e:e4:cd:93:61:3a:94:e1: 9f:b2:24:13:f7:9a:a9:2c:45:29:7c:12:87:0c:7e:84:62:69: 1c:4d:1b:47:df:a7:6d:4f:8d:83:df:3e:f5:e9:dc:40:8f:8a: 60:83:b0:8d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFpUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFNjY3MjlGNzg4MkYw Mzg0OTUwRTUxQTk2RkFENkVCQTcwOTcwQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiGOLenrkgFePjwCcJ2FoLrD0N1Ka3M9anBststaNB72ryJ+0q sCXBUWjVtmjyHeGgJz+7VIPCHWU/K3yL0YXFaKWJ+IQvBYHQfMQmpw7wSKc+R8x4 iHD+sVyf45uX4wHxdnM2RCCXjCwQPYSRXwR+hJFwApIk1RNl0lZpxwO9Wbn90fkp hLLYMvp3ZxJ2Y9PpYsSZQCC4ly2Cy0Hm7LTysEt0VU0U2X2kEik2FQm5Vt7ZdeBA kt2KrBOJuAaHMQkpzC7o4U14kKG3WE6X/wkr+2LRjRAUkJu/2EEyeyk3l066uRFO vkP2ctuxcWQor3K+3wiQTXn+kMRS8oZ9hsxTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU3mZyn3iC8DhJUOUalvrW66cJcMQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzNtWnluM2lDOERoSlVPVWFsdnJXNjZjSmNNUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaCgwDQYJKoZIhvcNAQELBQADggEB AGMSQiX57PtxjLb9JY6EJTWVc4otBq9kBclapve4YfayszOcDWwL8Ubp3kUtH82C PS6HnQ7JWVabF24nVFsELUSZD1DIFSAR/khoosQtDyx5ehfuS4LORZKeWwhIai2B jDj5M+gmdDWzeNSG4y9aze+FjraRt3tOKne/i26fBvCGRbcbnE0+H0I3d9M4Hw7e WbYrUuCkWCBgGJCwWgdEIr5YbGQmz4DaMy3HoyoQtmqBNt4zOMJTeWw5YhmXoGgB aUg64vyuUZYO9Qw0HzjKO20u5M2TYTqU4Z+yJBP3mqksRSl8EocMfoRiaRxNG0ff p21PjYPfPvXp3ECPimCDsI0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:00 2026 by rpki-client