$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8GLmC57dqi3HRFvK6eNblkY22yI.roa File: 8GLmC57dqi3HRFvK6eNblkY22yI.roa (raw, json) Hash identifier: 42tcrX75bOZYQOTxP8ysjBWWl7/Tj5QBuRB/gUu4V5c= Subject key identifier: F0:62:E6:0B:9E:DD:AA:2D:C7:44:5B:CA:E9:E3:5B:96:46:36:DB:22 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13FE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8GLmC57dqi3HRFvK6eNblkY22yI.roa Signing time: Tue 31 Mar 2026 07:56:41 +0000 ROA not before: Tue 31 Mar 2026 07:56:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5118 (0x13fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F062E60B9EDDAA2DC7445BCAE9E35B964636DB22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:c2:2a:35:c0:08:38:d7:eb:d4:1c:f5:23: e4:81:23:73:38:43:78:3f:c0:19:3a:b5:df:a9:a9: 7a:c8:d8:92:9a:69:b8:59:cd:cd:25:67:8e:3a:ce: 49:af:00:3d:a8:46:08:a9:f5:64:0a:3d:94:73:b6: 76:88:8d:52:d8:bd:9f:4b:0b:02:1d:7d:b8:7e:22: 6c:d8:e8:2c:fe:1a:b5:e4:fb:cc:90:1c:a5:7f:b0: 8c:7f:44:a9:ac:d3:99:e8:6f:00:a2:a8:4a:73:9b: 36:de:fa:58:11:fa:5c:16:1c:60:79:75:35:6f:79: ef:7e:00:5d:d6:9f:09:40:09:12:7b:ae:cc:74:93: b1:07:1f:cd:b3:e9:cc:bf:48:db:e9:da:f0:db:7d: ff:64:e0:30:df:76:6e:3d:70:38:45:06:cd:bb:d8: 0a:c1:30:cf:2f:9a:17:39:b6:bb:97:6e:3e:03:2a: 7d:c3:10:f6:b8:f4:2d:2f:27:53:e4:35:a7:75:0a: e8:3c:91:c4:e2:45:6e:55:08:ed:03:75:f9:88:81: 6b:59:a8:03:70:e5:88:9a:7b:88:4b:45:b7:8f:b5: c6:5b:63:11:4f:9d:83:d5:20:2e:6d:00:07:52:2e: b5:e8:74:dd:7b:3c:9e:ef:6f:10:96:e6:86:3c:7a: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:62:E6:0B:9E:DD:AA:2D:C7:44:5B:CA:E9:E3:5B:96:46:36:DB:22 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8GLmC57dqi3HRFvK6eNblkY22yI.roa sbgp-ipAddrBlock: critical IPv4: 49.98.140.0/22 Signature Algorithm: sha256WithRSAEncryption 25:c4:86:dd:66:ea:c6:bb:cb:e6:41:c1:a9:0d:5a:60:70:ff: a4:a3:aa:06:69:0d:bd:10:da:a7:11:3c:8c:02:31:28:21:4a: 31:58:a5:ed:7b:3e:1a:a1:85:82:1c:84:8a:dd:a7:a2:f1:05: 19:ab:7d:11:2d:8e:30:62:b6:d9:b6:3b:7c:35:7f:e6:97:9b: 57:2c:04:42:45:e1:d9:88:09:70:21:23:7a:98:ce:18:b8:ea: f1:33:38:5b:0d:45:e4:6d:d4:a2:a9:ce:c1:74:46:97:1c:27: f6:c5:8c:e4:bf:da:38:87:58:a1:25:3c:b7:63:b1:e2:b3:79: 33:a4:f4:00:13:17:ae:ef:71:8c:1a:c1:13:9c:44:86:49:7f: c9:16:fd:7f:98:fc:91:da:a1:62:c4:69:41:e2:91:ff:cc:7a: 97:f9:50:aa:bc:1d:c8:e3:1a:f1:f7:6f:9d:42:93:2e:95:42: ed:9e:64:26:dc:40:d0:7e:37:db:7e:82:4a:c1:3b:bb:5b:6a: 0d:e3:b8:8d:68:d4:a4:dd:c7:79:09:75:14:db:16:3b:50:79: de:dd:b7:29:9f:54:7f:49:aa:1f:0a:0b:5e:75:b2:81:fa:5c: 49:38:a3:52:d4:fa:79:71:78:d4:78:bd:f1:07:7c:a8:25:2b: 2e:e7:dc:e9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwNjJFNjBCOUVEREFB MkRDNzQ0NUJDQUU5RTM1Qjk2NDYzNkRCMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC76cIqNcAIONfr1Bz1I+SBI3M4Q3g/wBk6td+pqXrI2JKaabhZ zc0lZ446zkmvAD2oRgip9WQKPZRztnaIjVLYvZ9LCwIdfbh+ImzY6Cz+GrXk+8yQ HKV/sIx/RKms05nobwCiqEpzmzbe+lgR+lwWHGB5dTVvee9+AF3WnwlACRJ7rsx0 k7EHH82z6cy/SNvp2vDbff9k4DDfdm49cDhFBs272ArBMM8vmhc5truXbj4DKn3D EPa49C0vJ1PkNad1Cug8kcTiRW5VCO0DdfmIgWtZqANw5Yiae4hLRbePtcZbYxFP nYPVIC5tAAdSLrXodN17PJ7vbxCW5oY8eqcLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU8GLmC57dqi3HRFvK6eNblkY22yIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzhHTG1DNTdkcWkzSFJGdks2ZU5ibGtZMjJ5SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYowwDQYJKoZIhvcNAQELBQADggEB ACXEht1m6sa7y+ZBwakNWmBw/6SjqgZpDb0Q2qcRPIwCMSghSjFYpe17PhqhhYIc hIrdp6LxBRmrfREtjjBittm2O3w1f+aXm1csBEJF4dmICXAhI3qYzhi46vEzOFsN ReRt1KKpzsF0RpccJ/bFjOS/2jiHWKElPLdjseKzeTOk9AATF67vcYwawROcRIZJ f8kW/X+Y/JHaoWLEaUHikf/Mepf5UKq8HcjjGvH3b51Cky6VQu2eZCbcQNB+N9t+ gkrBO7tbag3juI1o1KTdx3kJdRTbFjtQed7dtymfVH9Jqh8KC151soH6XEk4o1LU +nlxeNR4vfEHfKglKy7n3Ok= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:33 2026 by rpki-client