$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4rUxAfphVAB5UwOBmYFe7CU_050.roa File: 4rUxAfphVAB5UwOBmYFe7CU_050.roa (raw, json) Hash identifier: dB7ueyflVU6zU8DgsYZdGU7dYzPNfXskgh4KPRMj+So= Subject key identifier: E2:B5:31:01:FA:61:54:00:79:53:03:81:99:81:5E:EC:25:3F:D3:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1604 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4rUxAfphVAB5UwOBmYFe7CU_050.roa Signing time: Tue 31 Mar 2026 08:00:56 +0000 ROA not before: Tue 31 Mar 2026 08:00:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5636 (0x1604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E2B53101FA6154007953038199815EEC253FD39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:96:4d:7f:00:84:5a:6c:d5:46:51:1c:fb: af:cc:38:88:3d:38:be:80:4e:e1:81:0b:6f:1d:8c: fc:60:20:c5:ce:bd:ba:7b:6c:de:c0:66:e8:cd:2a: 6b:49:95:4a:f7:7e:b3:a6:e2:ff:43:95:24:2c:e6: c3:8d:24:d6:9a:93:31:17:7d:7b:b8:4d:bd:53:3a: 4d:eb:1c:ea:44:bd:41:22:32:bb:cb:41:7d:ae:3c: fd:7c:82:1f:6d:4d:50:df:f6:a6:88:08:12:ac:63: b5:61:db:6b:b7:61:d5:00:24:d3:21:e9:76:2f:fa: ba:f5:b1:c7:0c:3d:fb:78:36:00:38:39:62:d8:d1: b0:fd:3f:96:89:e5:e2:61:e3:e5:52:e4:f4:65:b2: 9c:bb:44:97:ab:7e:7a:d6:9f:80:e6:da:c8:5a:0a: a8:dd:b1:0e:63:4e:17:b4:1a:5f:1c:df:b5:1f:2a: 95:a9:e6:fd:df:ac:a1:2c:5e:d5:21:83:9b:2a:0a: 8a:d1:2e:8d:a7:97:3e:98:2f:f9:8b:31:40:e9:84: 3d:b0:f7:53:08:4e:a2:4e:ed:26:27:3f:93:17:ed: 04:68:69:66:61:6c:4e:d2:ee:fd:9a:31:8c:a3:44: 2a:8a:98:24:1f:11:0c:07:64:cd:49:bf:6c:19:8f: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B5:31:01:FA:61:54:00:79:53:03:81:99:81:5E:EC:25:3F:D3:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4rUxAfphVAB5UwOBmYFe7CU_050.roa sbgp-ipAddrBlock: critical IPv4: 49.96.36.0/23 Signature Algorithm: sha256WithRSAEncryption 93:a8:d2:43:e0:c3:15:37:34:58:f1:b7:75:ff:2d:e3:0a:a8: b6:77:21:45:d3:e1:bd:19:d6:c4:28:8d:37:aa:59:34:81:93: 5f:5b:a1:4b:28:fb:c0:c7:32:7a:21:e1:5b:43:0e:d1:b4:4a: ef:64:a8:ac:7e:f1:ee:48:47:1d:47:ef:d9:31:da:00:52:8c: a2:78:d4:17:35:0a:d9:2c:b0:9c:ef:5d:78:30:78:f7:6e:2e: 21:af:82:73:09:0d:a2:55:89:6a:d7:dc:f3:61:bd:c0:e0:d0: 40:28:2a:fd:5d:84:0d:1c:cc:7f:ba:f2:94:86:ff:6d:e9:45: f7:20:7a:c0:a6:ec:85:15:3b:8e:d6:d8:8c:94:fb:2f:fc:21: 2e:f4:ce:4e:30:7e:09:4b:bf:7d:59:c3:d1:45:cf:ee:d3:56: 20:c9:e7:b5:06:6a:f1:28:a1:73:68:f2:2a:a9:bb:82:fe:26: 66:ab:54:2a:c9:01:bf:c2:b2:77:3b:e5:ba:fc:20:01:b0:a2: f7:16:f1:3c:41:91:ff:a3:44:21:83:cc:fe:a8:50:a4:71:32: 04:45:d4:0c:9c:09:55:58:4e:f5:7b:ed:da:53:e0:f6:02:9f: a3:5a:f0:f0:e5:08:d3:00:d3:98:95:41:fe:44:29:87:7a:82: e0:cc:49:63 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyQjUzMTAxRkE2MTU0 MDA3OTUzMDM4MTk5ODE1RUVDMjUzRkQzOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgE5ZNfwCEWmzVRlEc+6/MOIg9OL6ATuGBC28djPxgIMXOvbp7 bN7AZujNKmtJlUr3frOm4v9DlSQs5sONJNaakzEXfXu4Tb1TOk3rHOpEvUEiMrvL QX2uPP18gh9tTVDf9qaICBKsY7Vh22u3YdUAJNMh6XYv+rr1sccMPft4NgA4OWLY 0bD9P5aJ5eJh4+VS5PRlspy7RJerfnrWn4Dm2shaCqjdsQ5jThe0Gl8c37UfKpWp 5v3frKEsXtUhg5sqCorRLo2nlz6YL/mLMUDphD2w91MITqJO7SYnP5MX7QRoaWZh bE7S7v2aMYyjRCqKmCQfEQwHZM1Jv2wZj56TAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4rUxAfphVAB5UwOBmYFe7CU/050wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzRyVXhBZnBoVkFCNVV3T0JtWUZlN0NVXzA1MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYCQwDQYJKoZIhvcNAQELBQADggEB AJOo0kPgwxU3NFjxt3X/LeMKqLZ3IUXT4b0Z1sQojTeqWTSBk19boUso+8DHMnoh 4VtDDtG0Su9kqKx+8e5IRx1H79kx2gBSjKJ41Bc1CtkssJzvXXgwePduLiGvgnMJ DaJViWrX3PNhvcDg0EAoKv1dhA0czH+68pSG/23pRfcgesCm7IUVO47W2IyU+y/8 IS70zk4wfglLv31Zw9FFz+7TViDJ57UGavEooXNo8iqpu4L+JmarVCrJAb/Csnc7 5br8IAGwovcW8TxBkf+jRCGDzP6oUKRxMgRF1AycCVVYTvV77dpT4PYCn6Na8PDl CNMA05iVQf5EKYd6guDMSWM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:52 2026 by rpki-client