$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4gamzOovKSYoODL8JaaaLQCTeRM.roa File: 4gamzOovKSYoODL8JaaaLQCTeRM.roa (raw, json) Hash identifier: lxNPhqC5qRJjb6R0BKq0IJx587eN3GVT5XPoj8TT7hQ= Subject key identifier: E2:06:A6:CC:EA:2F:29:26:28:38:32:FC:25:A6:9A:2D:00:93:79:13 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15F6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4gamzOovKSYoODL8JaaaLQCTeRM.roa Signing time: Tue 31 Mar 2026 08:00:47 +0000 ROA not before: Tue 31 Mar 2026 08:00:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5622 (0x15f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E206A6CCEA2F2926283832FC25A69A2D00937913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:19:9f:29:05:0f:1a:74:15:0c:b8:e9:87: 96:38:bb:6f:3c:55:fd:52:2b:10:72:37:4c:93:42: c5:58:26:76:5c:26:d7:50:4f:7c:eb:23:72:c5:68: 14:59:22:64:d2:cb:89:0e:25:08:65:97:f9:57:3c: 85:6f:a1:7b:3d:e4:da:66:ec:28:15:19:e8:56:c0: f0:41:60:d0:26:49:ac:75:e7:4c:20:7f:ad:79:f8: 00:e1:12:4d:2e:7f:8b:eb:5d:97:fc:c0:85:8f:13: 48:5f:3d:80:7a:93:88:4e:97:c5:39:dd:ca:41:3d: 01:b4:f4:45:d5:35:fa:9b:c3:1c:95:71:61:25:82: 87:77:7b:99:6d:a3:25:ee:3c:a4:4e:85:d6:79:00: bc:08:24:4a:50:65:47:cc:58:ce:e2:c6:a9:e3:1f: e8:0f:f7:29:bd:c1:96:d5:cc:6b:83:90:81:48:90: 40:9b:91:9d:11:a4:31:ca:60:40:7b:fb:53:3c:67: f5:e3:03:5c:da:ca:d9:63:a4:00:40:83:81:46:24: 04:e1:cd:c6:b6:5c:6a:fe:b3:a8:35:82:27:ac:72: 6e:b5:ac:b5:c4:06:fa:d7:dc:31:16:83:34:b3:da: 97:fa:d0:04:bd:ca:0f:46:2e:7d:93:a7:5e:0b:d5: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:A6:CC:EA:2F:29:26:28:38:32:FC:25:A6:9A:2D:00:93:79:13 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4gamzOovKSYoODL8JaaaLQCTeRM.roa sbgp-ipAddrBlock: critical IPv4: 49.97.88.0/22 Signature Algorithm: sha256WithRSAEncryption 96:6d:6c:64:10:f7:90:29:f5:86:28:b5:ab:c3:c6:43:4b:69: 5c:6d:f4:25:99:8e:ac:af:98:2a:0d:e3:1c:96:34:91:71:c5: 76:8b:9b:d8:f4:6e:42:d9:7a:4d:53:81:6a:21:9b:40:05:13: 60:a8:50:29:0c:7d:7c:63:7b:06:cb:b0:ba:74:56:4f:e2:41: a3:3e:3e:95:ba:3b:10:19:e5:bf:cf:e7:aa:c9:42:27:f2:da: b8:4b:ac:ca:a6:da:90:c9:38:ac:1e:e7:d9:7f:d6:c8:f8:38: 65:d9:ab:6a:0c:70:97:12:12:43:87:8f:87:e3:ee:b2:69:82: 57:33:41:b6:cb:9c:36:bf:df:22:bc:0d:11:dc:cd:c5:4f:47: 75:01:46:39:74:1d:a7:86:1e:ba:a3:5f:f4:2e:e1:ea:6c:53: 21:95:16:a0:6b:38:65:a7:db:7d:96:13:33:20:32:08:5a:8f: 7a:ed:20:c9:6f:e1:47:53:70:b7:f4:a6:1c:0b:fb:4f:71:a8: 52:61:c3:66:0f:96:68:cb:07:0b:24:f3:18:bb:63:1a:92:9d: d9:3e:c2:f4:2d:81:2d:be:26:0d:3d:9d:43:cc:b3:ee:8b:f2: d0:77:f9:90:03:be:f6:0f:0e:a1:e0:00:50:b8:47:74:08:ff: fd:56:2c:48 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyMDZBNkNDRUEyRjI5 MjYyODM4MzJGQzI1QTY5QTJEMDA5Mzc5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4OBmfKQUPGnQVDLjph5Y4u288Vf1SKxByN0yTQsVYJnZcJtdQ T3zrI3LFaBRZImTSy4kOJQhll/lXPIVvoXs95Npm7CgVGehWwPBBYNAmSax150wg f615+ADhEk0uf4vrXZf8wIWPE0hfPYB6k4hOl8U53cpBPQG09EXVNfqbwxyVcWEl god3e5ltoyXuPKROhdZ5ALwIJEpQZUfMWM7ixqnjH+gP9ym9wZbVzGuDkIFIkECb kZ0RpDHKYEB7+1M8Z/XjA1zaytljpABAg4FGJAThzca2XGr+s6g1giescm61rLXE BvrX3DEWgzSz2pf60AS9yg9GLn2Tp14L1XhdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4gamzOovKSYoODL8JaaaLQCTeRMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzRnYW16T292S1NZb09ETDhKYWFhTFFDVGVSTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYVgwDQYJKoZIhvcNAQELBQADggEB AJZtbGQQ95Ap9YYotavDxkNLaVxt9CWZjqyvmCoN4xyWNJFxxXaLm9j0bkLZek1T gWohm0AFE2CoUCkMfXxjewbLsLp0Vk/iQaM+PpW6OxAZ5b/P56rJQify2rhLrMqm 2pDJOKwe59l/1sj4OGXZq2oMcJcSEkOHj4fj7rJpglczQbbLnDa/3yK8DRHczcVP R3UBRjl0HaeGHrqjX/Qu4epsUyGVFqBrOGWn232WEzMgMghaj3rtIMlv4UdTcLf0 phwL+09xqFJhw2YPlmjLBwsk8xi7YxqSndk+wvQtgS2+Jg09nUPMs+6L8tB3+ZAD vvYPDqHgAFC4R3QI//1WLEg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:57 2026 by rpki-client