$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4D3pmRPrz4IuwhDNjNhFK6d4QYo.roa File: 4D3pmRPrz4IuwhDNjNhFK6d4QYo.roa (raw, json) Hash identifier: P4zH/ZQoaCMWhR/7k48KWpr6lJ28hCr94CFfGcrqLcY= Subject key identifier: E0:3D:E9:99:13:EB:CF:82:2E:C2:10:CD:8C:D8:45:2B:A7:78:41:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17E4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4D3pmRPrz4IuwhDNjNhFK6d4QYo.roa Signing time: Tue 31 Mar 2026 08:04:44 +0000 ROA not before: Tue 31 Mar 2026 08:04:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.158.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6116 (0x17e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E03DE99913EBCF822EC210CD8CD8452BA778418A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:ba:bd:50:ed:8f:b0:c9:23:c0:39:e4:77: f1:45:17:62:1d:96:62:7b:2d:e5:37:a9:56:5d:07: a7:dc:cf:f0:d1:03:22:20:1c:29:b6:27:08:54:1e: ea:e3:a1:3a:38:d2:06:79:3e:1f:3f:5a:32:d6:cd: 75:ff:ab:f9:df:f1:9e:bc:2f:8e:60:1f:73:c9:46: fa:d3:5e:96:b3:92:80:f8:48:49:fa:d6:13:4b:19: c4:68:f3:ec:c6:ff:40:62:1e:44:c4:6f:50:9c:4f: 1c:46:56:36:33:24:0c:12:c3:5d:9b:07:24:34:4c: ea:8e:90:ff:64:2b:6f:f1:08:92:c2:53:b9:7b:a3: 0b:65:a3:15:94:a3:73:1a:fa:cb:d0:02:2d:43:ae: 23:0d:95:45:c5:cc:a0:9d:71:fe:05:36:37:fc:0d: 74:de:36:f2:86:ed:b1:3b:b8:46:ef:27:c8:56:7a: ee:e8:36:bc:b5:a0:a8:8e:5d:2b:93:7a:82:41:f9: 40:a8:16:eb:cc:24:7c:89:26:a4:cc:7b:50:0b:ad: 72:b4:4d:b4:0c:9b:ee:ca:0d:cc:0b:15:67:15:29: de:41:90:02:e8:78:0e:d6:12:f6:a6:16:b0:08:70: 3c:dc:d3:a2:94:d2:a0:4b:24:ea:27:9f:43:b7:9a: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3D:E9:99:13:EB:CF:82:2E:C2:10:CD:8C:D8:45:2B:A7:78:41:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4D3pmRPrz4IuwhDNjNhFK6d4QYo.roa sbgp-ipAddrBlock: critical IPv4: 110.158.152.0/21 Signature Algorithm: sha256WithRSAEncryption b6:51:0d:23:4b:40:2f:34:d5:33:75:2b:01:62:c3:4e:db:1e: 69:3e:53:58:d9:1a:60:50:19:f8:a8:31:bd:d1:68:e7:e9:2e: 00:0e:e6:dc:8c:19:7f:f9:02:eb:a6:4b:3b:09:b8:a3:f3:22: ed:ee:f0:db:a8:3a:f5:9b:c9:27:62:09:e8:4c:f0:95:f6:74: aa:6d:c4:5d:fa:dd:4a:de:0a:99:b9:86:b3:7d:2c:95:9f:bd: 3a:8b:39:63:ae:4b:01:6e:2d:8c:c9:82:15:8f:6b:44:37:c0: 8b:bb:35:ce:2e:f4:3c:d6:00:e0:ae:f6:f0:26:7e:49:5e:1a: 38:96:76:81:40:b5:1c:0d:83:8c:bb:8f:f2:e7:f1:1a:aa:a1: e4:f3:4f:e6:f6:44:f0:9a:73:f6:cb:e1:6b:d9:20:3a:44:75: e9:8e:7c:51:5f:6c:96:8f:69:8e:a3:75:de:e5:2c:29:df:e0: 9b:81:44:98:71:05:ee:b0:32:e3:43:0e:ee:b3:48:33:ce:cd: d2:1f:f5:8d:5f:c4:66:1c:e4:20:1b:57:2e:c2:ba:91:d1:45: e6:bb:57:19:d4:a6:b4:af:8c:98:91:35:c2:39:a5:75:42:de: 02:7f:88:12:bc:c8:4a:48:22:91:2e:ef:a3:8d:dd:c9:17:99: ab:ee:a9:c3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUwM0RFOTk5MTNFQkNG ODIyRUMyMTBDRDhDRDg0NTJCQTc3ODQxOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwvrq9UO2PsMkjwDnkd/FFF2IdlmJ7LeU3qVZdB6fcz/DRAyIg HCm2JwhUHurjoTo40gZ5Ph8/WjLWzXX/q/nf8Z68L45gH3PJRvrTXpazkoD4SEn6 1hNLGcRo8+zG/0BiHkTEb1CcTxxGVjYzJAwSw12bByQ0TOqOkP9kK2/xCJLCU7l7 owtloxWUo3Ma+svQAi1DriMNlUXFzKCdcf4FNjf8DXTeNvKG7bE7uEbvJ8hWeu7o Nry1oKiOXSuTeoJB+UCoFuvMJHyJJqTMe1ALrXK0TbQMm+7KDcwLFWcVKd5BkALo eA7WEvamFrAIcDzc06KU0qBLJOonn0O3mlm7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4D3pmRPrz4IuwhDNjNhFK6d4QYowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzREM3BtUlByejRJdXdoRE5qTmhGSzZkNFFZby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANunpgwDQYJKoZIhvcNAQELBQADggEB ALZRDSNLQC801TN1KwFiw07bHmk+U1jZGmBQGfioMb3RaOfpLgAO5tyMGX/5Auum SzsJuKPzIu3u8NuoOvWbySdiCehM8JX2dKptxF363UreCpm5hrN9LJWfvTqLOWOu SwFuLYzJghWPa0Q3wIu7Nc4u9DzWAOCu9vAmfkleGjiWdoFAtRwNg4y7j/Ln8Rqq oeTzT+b2RPCac/bL4WvZIDpEdemOfFFfbJaPaY6jdd7lLCnf4JuBRJhxBe6wMuND Du6zSDPOzdIf9Y1fxGYc5CAbVy7CupHRRea7VxnUprSvjJiRNcI5pXVC3gJ/iBK8 yEpIIpEu76ON3ckXmavuqcM= -----END CERTIFICATE-----Generated at Tue Apr 7 22:23:27 2026 by rpki-client