$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4brxNtMIGi0aGkonPOjvEv5Xef8.roa File: 4brxNtMIGi0aGkonPOjvEv5Xef8.roa (raw, json) Hash identifier: ri0PnSuckQz0pAEad5ezwAu5zr8aiORWmeIwcMjTLJo= Subject key identifier: E1:BA:F1:36:D3:08:1A:2D:1A:1A:4A:27:3C:E8:EF:12:FE:57:79:FF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1609 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4brxNtMIGi0aGkonPOjvEv5Xef8.roa Signing time: Tue 31 Mar 2026 08:00:58 +0000 ROA not before: Tue 31 Mar 2026 08:00:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5641 (0x1609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E1BAF136D3081A2D1A1A4A273CE8EF12FE5779FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:65:b6:64:72:27:8e:42:0f:5f:61:40:98:06: 33:40:2b:ea:6c:7e:13:6e:bb:2b:fc:f9:17:9e:83: c0:1a:73:d9:16:bc:08:81:57:ff:ed:a8:bd:f1:a1: 60:43:57:c3:11:38:02:a3:f0:0d:d4:1b:c6:e9:58: 74:5d:04:11:83:e6:7d:33:0b:7a:56:53:45:9b:c3: 32:0c:60:3a:68:0f:30:b8:20:02:9b:b8:5f:d8:66: d0:f5:62:fb:d2:70:d1:68:93:da:ff:1f:f6:53:78: 14:de:15:b5:72:62:05:aa:b4:b1:36:98:7a:57:b7: 6d:04:d5:41:cc:59:41:e3:f2:b5:74:6d:c2:7e:a1: e4:7b:de:47:3c:25:28:69:0f:a9:2c:ac:f5:2c:ca: b1:67:10:41:e2:6a:36:b1:1f:fe:d3:34:e6:58:db: 8a:ad:a4:51:ce:58:c7:27:61:29:17:78:a5:f9:0e: c4:f8:8c:64:c9:21:33:72:11:c5:23:84:19:4a:82: d6:54:2e:10:0d:4d:1d:fb:02:ae:f1:fd:30:5f:3b: 78:6d:5a:4f:4a:7f:6b:e0:59:de:88:95:d7:f9:24: 1e:c9:f3:75:62:40:f0:c7:a9:6c:1b:ba:fd:e6:aa: 48:8d:d4:e3:4d:27:3b:5c:37:3a:3b:00:10:d9:53: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BA:F1:36:D3:08:1A:2D:1A:1A:4A:27:3C:E8:EF:12:FE:57:79:FF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4brxNtMIGi0aGkonPOjvEv5Xef8.roa sbgp-ipAddrBlock: critical IPv4: 49.98.100.0/22 Signature Algorithm: sha256WithRSAEncryption b9:72:2e:dc:f8:4a:65:5c:a3:9f:d8:60:8b:cc:22:94:fe:27: a1:82:18:23:07:3e:87:7e:ec:5e:2d:66:30:f2:87:27:ac:ab: a0:3c:85:75:96:69:ce:db:70:ce:e6:ea:54:0c:2e:b4:8b:4a: 1c:5c:42:9e:63:9d:b5:5e:8b:2d:e0:d3:2d:4e:84:bb:ad:ca: 51:80:5b:4e:3f:7a:b0:bb:1f:48:89:24:97:bb:1d:eb:a9:b3: 1e:87:54:cd:03:7e:bb:ec:a7:c4:5e:9a:0f:96:00:c6:73:bb: 10:a4:d2:00:8f:3c:cd:ec:67:1d:24:fa:ae:71:4f:eb:81:e5: 2a:1e:78:f3:ef:47:37:c7:f0:6a:ee:30:11:ad:fa:61:fa:fc: ce:4d:96:9d:c6:82:be:99:bc:5a:c8:b2:50:54:55:e6:8e:a0: 6a:6e:86:8e:75:91:ab:a0:2e:38:5c:75:3f:a4:d8:c6:5b:33: 8a:45:d7:d6:0c:c8:e9:dd:4c:ca:01:75:81:f3:75:1f:e0:3a: 4a:e2:e4:c5:a1:e1:35:0e:07:08:a0:36:2c:ca:0f:55:f5:eb: 96:9b:27:16:c0:94:28:fb:ed:ee:7c:b1:82:3d:88:83:27:1f: 84:19:a1:3c:40:2a:4b:23:71:4b:1b:42:b1:cc:aa:cc:86:57: 28:97:b1:1d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUxQkFGMTM2RDMwODFB MkQxQTFBNEEyNzNDRThFRjEyRkU1Nzc5RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7ZbZkcieOQg9fYUCYBjNAK+psfhNuuyv8+Reeg8Aac9kWvAiB V//tqL3xoWBDV8MROAKj8A3UG8bpWHRdBBGD5n0zC3pWU0WbwzIMYDpoDzC4IAKb uF/YZtD1YvvScNFok9r/H/ZTeBTeFbVyYgWqtLE2mHpXt20E1UHMWUHj8rV0bcJ+ oeR73kc8JShpD6ksrPUsyrFnEEHiajaxH/7TNOZY24qtpFHOWMcnYSkXeKX5DsT4 jGTJITNyEcUjhBlKgtZULhANTR37Aq7x/TBfO3htWk9Kf2vgWd6Ildf5JB7J83Vi QPDHqWwbuv3mqkiN1ONNJztcNzo7ABDZU8grAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4brxNtMIGi0aGkonPOjvEv5Xef8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzRicnhOdE1JR2kwYUdrb25QT2p2RXY1WGVmOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYmQwDQYJKoZIhvcNAQELBQADggEB ALlyLtz4SmVco5/YYIvMIpT+J6GCGCMHPod+7F4tZjDyhyesq6A8hXWWac7bcM7m 6lQMLrSLShxcQp5jnbVeiy3g0y1OhLutylGAW04/erC7H0iJJJe7Heupsx6HVM0D frvsp8Remg+WAMZzuxCk0gCPPM3sZx0k+q5xT+uB5SoeePPvRzfH8GruMBGt+mH6 /M5Nlp3Ggr6ZvFrIslBUVeaOoGpuho51kaugLjhcdT+k2MZbM4pF19YMyOndTMoB dYHzdR/gOkri5MWh4TUOBwigNizKD1X165abJxbAlCj77e58sYI9iIMnH4QZoTxA KksjcUsbQrHMqsyGVyiXsR0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:29 2026 by rpki-client