$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/63FDzqrxUktvXU-NfM-Xst8gTHk.roa File: 63FDzqrxUktvXU-NfM-Xst8gTHk.roa (raw, json) Hash identifier: 3+f4EpVtLv3DUL93DAY2vGZJN1NDkRJJ2ub+FU2oMIM= Subject key identifier: EB:71:43:CE:AA:F1:52:4B:6F:5D:4F:8D:7C:CF:97:B2:DF:20:4C:79 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1387 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/63FDzqrxUktvXU-NfM-Xst8gTHk.roa Signing time: Tue 31 Mar 2026 07:55:46 +0000 ROA not before: Tue 31 Mar 2026 07:55:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4999 (0x1387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EB7143CEAAF1524B6F5D4F8D7CCF97B2DF204C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:32:5b:81:a6:dc:b7:89:82:0b:f1:a8:f1: 69:a1:3d:6b:f7:ea:2e:a9:8f:40:57:92:6c:6d:75: 96:79:6a:36:b6:70:50:3f:ae:c3:1d:d8:5d:4a:52: 8b:7b:79:9c:f4:97:03:c0:d7:31:a6:c0:f3:37:79: 0d:ef:6c:8e:a7:f6:51:72:75:32:ed:a3:a5:0b:c0: fc:cf:91:4a:81:03:d6:d4:fe:38:00:c9:11:15:a8: c9:f1:a7:eb:98:a2:3b:92:4e:b3:55:16:c4:09:df: 3d:fe:35:a2:2e:f7:48:7a:90:3e:ba:09:e6:e2:8d: 4f:36:45:ff:b8:d6:ab:f0:c7:3f:de:ab:5b:30:a4: 78:2c:fd:67:f0:da:b8:c6:30:b6:81:fa:2b:2c:e8: 82:d7:f9:23:ed:31:01:4c:21:71:00:6d:5f:f6:79: 1a:b8:34:77:55:b8:68:a6:d4:0b:d0:b5:30:6a:f2: b0:cb:3e:db:2d:34:42:a8:bf:5b:a7:37:26:31:20: 0a:45:88:f6:71:ba:91:c6:51:94:77:03:b3:27:de: 6e:f4:7b:87:21:ce:04:4d:61:4a:6a:ad:21:a7:08: 07:0b:f9:08:11:29:08:6d:c2:fe:52:75:5f:62:1c: 27:df:9e:4f:7f:cf:90:47:25:94:4c:5e:01:5f:71: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:71:43:CE:AA:F1:52:4B:6F:5D:4F:8D:7C:CF:97:B2:DF:20:4C:79 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/63FDzqrxUktvXU-NfM-Xst8gTHk.roa sbgp-ipAddrBlock: critical IPv4: 49.97.96.0/24 Signature Algorithm: sha256WithRSAEncryption 75:5e:05:7d:e1:e7:41:a9:db:c3:aa:14:b3:f7:4a:3c:ac:2d: 20:99:ab:44:04:5b:cb:ae:91:b6:d3:7a:7d:44:07:92:a2:82: c2:ba:55:1f:34:b4:a4:cf:97:87:6f:56:57:79:22:c3:96:c2: 0b:49:be:18:45:00:1a:e2:76:eb:16:7c:41:c8:b3:2e:20:e0: af:ca:0f:08:96:fd:8e:cc:94:0c:a0:d8:db:7b:ef:31:cd:ad: d2:5a:7d:74:a7:56:20:90:3e:e6:a1:3f:aa:e7:3d:da:d8:2e: 40:8e:bd:75:9c:bb:29:b9:7b:4c:58:4b:22:81:46:03:2a:37: 06:7e:db:9b:a9:60:ce:06:6e:6c:a1:6d:88:71:15:9d:cf:de: e7:ef:d2:1f:d2:58:6c:92:79:b7:de:c3:c0:df:a0:1e:94:14: f9:74:3e:84:3e:e1:71:e7:e4:71:d6:49:77:ea:14:c2:9d:e9: 1e:55:46:ab:a7:d4:ab:27:d6:85:77:e7:7b:13:ce:1d:70:7a: ec:93:24:e3:14:a3:2b:8d:c8:a1:96:fd:c1:21:49:42:e1:4b: 80:f9:d5:1f:b4:d7:6d:5e:39:90:46:36:74:7a:18:02:6e:ec: c2:0e:96:a2:32:bd:10:08:ac:30:45:f5:e7:f3:77:0d:62:fd: c8:3c:a3:98 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCNzE0M0NFQUFGMTUy NEI2RjVENEY4RDdDQ0Y5N0IyREYyMDRDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9/jJbgabct4mCC/Go8WmhPWv36i6pj0BXkmxtdZZ5aja2cFA/ rsMd2F1KUot7eZz0lwPA1zGmwPM3eQ3vbI6n9lFydTLto6ULwPzPkUqBA9bU/jgA yREVqMnxp+uYojuSTrNVFsQJ3z3+NaIu90h6kD66CebijU82Rf+41qvwxz/eq1sw pHgs/Wfw2rjGMLaB+iss6ILX+SPtMQFMIXEAbV/2eRq4NHdVuGim1AvQtTBq8rDL PtstNEKov1unNyYxIApFiPZxupHGUZR3A7Mn3m70e4chzgRNYUpqrSGnCAcL+QgR KQhtwv5SdV9iHCffnk9/z5BHJZRMXgFfccqpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU63FDzqrxUktvXU+NfM+Xst8gTHkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzYzRkR6cXJ4VWt0dlhVLU5mTS1Yc3Q4Z1RIay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYWAwDQYJKoZIhvcNAQELBQADggEB AHVeBX3h50Gp28OqFLP3SjysLSCZq0QEW8uukbbTen1EB5KigsK6VR80tKTPl4dv Vld5IsOWwgtJvhhFABridusWfEHIsy4g4K/KDwiW/Y7MlAyg2Nt77zHNrdJafXSn ViCQPuahP6rnPdrYLkCOvXWcuym5e0xYSyKBRgMqNwZ+25upYM4GbmyhbYhxFZ3P 3ufv0h/SWGySebfew8DfoB6UFPl0PoQ+4XHn5HHWSXfqFMKd6R5VRqun1Ksn1oV3 53sTzh1weuyTJOMUoyuNyKGW/cEhSULhS4D51R+0121eOZBGNnR6GAJu7MIOlqIy vRAIrDBF9efzdw1i/cg8o5g= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:11 2026 by rpki-client