$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4rRo-8drvGUJnm47ag0ckX6cWaI.roa File: 4rRo-8drvGUJnm47ag0ckX6cWaI.roa (raw, json) Hash identifier: YLyWe5eqUcqRTQzxRKeIoGGsqBA1Oh6Apij/b5m0k04= Subject key identifier: E2:B4:68:FB:C7:6B:BC:65:09:9E:6E:3B:6A:0D:1C:91:7E:9C:59:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13E6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4rRo-8drvGUJnm47ag0ckX6cWaI.roa Signing time: Tue 31 Mar 2026 07:56:31 +0000 ROA not before: Tue 31 Mar 2026 07:56:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E2B468FBC76BBC65099E6E3B6A0D1C917E9C59A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:db:34:9e:2c:27:47:69:ff:aa:70:23:5b: 4d:de:7c:4e:79:4a:ab:e6:36:22:9b:e9:f3:f9:9a: 23:4f:e8:65:ae:98:1a:a0:04:e1:d7:ec:60:5d:f5: 39:d4:3a:5f:62:bc:e2:7b:4b:63:64:9d:31:bc:5d: d2:75:23:a0:ed:4f:37:31:25:ba:fe:55:5a:df:9e: 4e:d0:a2:e3:38:a6:f7:0c:86:0b:0b:28:2d:30:5a: 0a:de:57:7f:e2:1f:c5:b8:0a:08:16:69:f4:2e:80: e4:83:15:84:1b:ef:9a:27:a1:85:d4:e8:46:1e:b5: ea:32:d1:29:f1:a4:60:8d:b3:2c:00:07:a4:d4:2d: 30:23:da:b9:34:58:14:de:7f:86:ec:8c:0a:97:14: 5c:a3:66:77:ff:43:8d:1a:e2:ad:66:31:dc:fd:cb: 5a:09:ea:5c:5d:02:c2:37:d1:ef:a3:9c:b1:a2:6a: 02:49:36:b0:0c:8d:76:7b:78:60:91:8a:66:6d:c4: c3:00:08:38:1f:b4:fb:13:6e:94:bc:72:43:34:b0: 43:7a:24:e8:d8:f4:86:1c:82:43:93:09:95:34:51: 30:d7:16:2b:02:ef:f8:b7:4b:9a:5e:9d:59:9b:36: 95:4c:5a:e9:a1:f8:29:78:36:2b:46:c8:c0:60:b9: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B4:68:FB:C7:6B:BC:65:09:9E:6E:3B:6A:0D:1C:91:7E:9C:59:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4rRo-8drvGUJnm47ag0ckX6cWaI.roa sbgp-ipAddrBlock: critical IPv4: 49.96.26.0/23 Signature Algorithm: sha256WithRSAEncryption 79:d1:28:45:f8:24:a2:47:1c:7f:b6:ed:89:db:42:ef:e6:76: 8d:b8:2d:1b:ad:96:7b:a0:68:a5:31:4b:3c:4f:00:f6:fc:74: 3f:61:c0:51:00:53:a1:dd:e5:48:63:9b:0a:14:11:f6:85:5c: 63:52:c0:ee:66:00:3c:83:3a:b5:a0:6f:7c:28:74:a7:e8:7d: 0f:c9:12:5d:37:66:f5:b5:9f:86:06:2f:a5:c5:f9:a1:72:0e: 1f:9d:35:8e:48:ae:d5:75:94:50:e2:1d:0d:36:41:a5:db:21: c8:e2:c3:0a:47:30:5f:1d:6f:5d:a3:37:cb:4e:e5:6a:61:8d: e6:b4:23:11:85:46:34:fa:6f:3c:1e:a7:8c:1e:d8:f4:0e:60: a8:1f:01:0e:3d:81:f3:ef:d8:77:6f:f3:6f:91:59:c9:18:49: 2b:84:3a:5c:03:3d:ec:c5:ea:6c:13:2c:87:56:32:df:ba:4f: ae:80:4c:0e:b8:11:cf:93:39:4d:da:c0:68:65:18:9b:f1:1b: 3b:04:37:9d:b9:96:e1:19:17:fc:d3:6d:5a:79:7c:f3:fb:77: 89:8a:b9:06:e7:c1:99:95:4c:2c:63:6f:59:d9:31:0c:4f:b7: d5:c2:d0:2e:2d:27:b4:b8:22:9f:94:93:65:88:c2:6f:d0:8d: 53:4f:34:85 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyQjQ2OEZCQzc2QkJD NjUwOTlFNkUzQjZBMEQxQzkxN0U5QzU5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVr9s0niwnR2n/qnAjW03efE55SqvmNiKb6fP5miNP6GWumBqg BOHX7GBd9TnUOl9ivOJ7S2NknTG8XdJ1I6DtTzcxJbr+VVrfnk7QouM4pvcMhgsL KC0wWgreV3/iH8W4CggWafQugOSDFYQb75onoYXU6EYeteoy0SnxpGCNsywAB6TU LTAj2rk0WBTef4bsjAqXFFyjZnf/Q40a4q1mMdz9y1oJ6lxdAsI30e+jnLGiagJJ NrAMjXZ7eGCRimZtxMMACDgftPsTbpS8ckM0sEN6JOjY9IYcgkOTCZU0UTDXFisC 7/i3S5penVmbNpVMWumh+Cl4NitGyMBguZwLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4rRo+8drvGUJnm47ag0ckX6cWaIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzRyUm8tOGRydkdVSm5tNDdhZzBja1g2Y1dhSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYBowDQYJKoZIhvcNAQELBQADggEB AHnRKEX4JKJHHH+27YnbQu/mdo24LRutlnugaKUxSzxPAPb8dD9hwFEAU6Hd5Uhj mwoUEfaFXGNSwO5mADyDOrWgb3wodKfofQ/JEl03ZvW1n4YGL6XF+aFyDh+dNY5I rtV1lFDiHQ02QaXbIcjiwwpHMF8db12jN8tO5Wphjea0IxGFRjT6bzwep4we2PQO YKgfAQ49gfPv2Hdv82+RWckYSSuEOlwDPezF6mwTLIdWMt+6T66ATA64Ec+TOU3a wGhlGJvxGzsEN525luEZF/zTbVp5fPP7d4mKuQbnwZmVTCxjb1nZMQxPt9XC0C4t J7S4Ip+Uk2WIwm/QjVNPNIU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:37 2026 by rpki-client