$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9D1RhnAxE6SEAoGpQA271Si3Ds4.roa File: 9D1RhnAxE6SEAoGpQA271Si3Ds4.roa (raw, json) Hash identifier: Q8ObuwPgephSpFn1oeLi60hNkQkn0a6LvV+yNaFYU88= Subject key identifier: F4:3D:51:86:70:31:13:A4:84:02:81:A9:40:0D:BB:D5:28:B7:0E:CE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1382 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9D1RhnAxE6SEAoGpQA271Si3Ds4.roa Signing time: Tue 31 Mar 2026 07:55:43 +0000 ROA not before: Tue 31 Mar 2026 07:55:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4994 (0x1382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F43D5186703113A4840281A9400DBBD528B70ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:73:a2:ac:64:db:cf:23:ff:18:e8:c9:31: d4:f2:7b:b4:9c:6c:ea:0c:4d:54:46:19:36:ec:b4: c1:46:47:ce:88:5b:af:46:7c:5e:81:aa:52:86:d3: e7:e6:4b:1a:09:00:80:9d:7a:fa:55:0d:d5:ad:2b: d8:c9:45:d6:09:06:9b:d3:7d:1d:f1:fc:98:01:b1: 8f:4d:9a:ce:3c:44:1e:9d:a6:6a:17:1f:20:5b:dd: 48:dc:d4:6a:d4:2a:46:d5:5e:79:16:68:5b:63:aa: e2:d8:53:f5:d0:40:20:9a:70:9d:01:18:d5:8c:2c: 29:7e:6a:27:0d:06:67:e4:2f:af:dc:d8:cd:3f:6e: 0c:5b:89:23:a5:07:ad:e8:d2:df:68:68:d3:f0:cd: 23:7f:fe:85:ef:da:3a:66:c6:d9:00:02:f4:4f:71: f9:2f:0d:8f:00:41:93:5c:f0:51:cf:be:a7:bc:24: 93:88:ff:cf:93:be:4d:79:36:ad:e6:62:78:7c:7f: f7:92:af:a7:d9:90:93:63:82:e1:b3:aa:b6:25:4d: e2:a7:32:1a:38:87:7e:62:4a:f4:74:de:af:4e:c9: 66:dc:c6:bd:c5:42:e5:d4:87:0c:83:68:9e:42:0d: c8:40:ab:f9:dd:81:e4:9f:f0:c9:ae:ae:aa:3b:fe: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:51:86:70:31:13:A4:84:02:81:A9:40:0D:BB:D5:28:B7:0E:CE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9D1RhnAxE6SEAoGpQA271Si3Ds4.roa sbgp-ipAddrBlock: critical IPv4: 49.97.6.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:b5:b3:b8:f0:ea:d8:ea:c9:5e:07:be:72:92:88:c1:3b:67: b0:ef:ef:f4:a5:4c:e0:a7:af:56:21:77:59:e5:6c:ce:3b:d6: c2:37:be:2d:b6:1a:18:3a:9a:22:73:d8:e5:4a:ac:27:0a:28: 19:07:11:d9:c8:ec:c9:70:2a:3b:36:9f:19:bb:64:ba:a8:1a: 64:89:80:b7:70:cb:dd:c8:71:6a:d5:84:84:86:a6:20:72:7b: 48:3b:c6:85:20:dd:4c:bb:36:50:dc:f5:96:63:b4:f0:e7:da: 6d:cf:ab:a3:91:4a:7f:75:60:97:3b:92:46:3c:1c:19:56:0a: 76:36:1a:08:fe:d0:ff:39:3c:68:19:54:2b:c1:6e:ce:37:47: 69:84:64:d5:49:c4:56:0c:63:67:f1:e0:f9:a6:7b:18:37:05: 45:b2:1a:c8:c3:1e:21:c5:60:61:b4:5d:8e:ba:32:03:99:5a: dc:3e:08:07:cc:c2:1e:a0:43:6d:15:ab:0c:cc:d3:c2:3a:e4: ce:50:8e:17:dd:36:ba:b5:1e:d1:a6:fc:0f:0d:7f:1f:c6:47: ed:fa:c5:a3:8e:56:2e:e0:a9:82:df:b3:c0:65:79:1d:69:98: 57:21:7f:98:0e:45:f8:c6:37:a5:9a:39:c7:a7:8e:83:f5:5b: ab:7a:aa:d4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0M0Q1MTg2NzAzMTEz QTQ4NDAyODFBOTQwMERCQkQ1MjhCNzBFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvS3OirGTbzyP/GOjJMdTye7ScbOoMTVRGGTbstMFGR86IW69G fF6BqlKG0+fmSxoJAICdevpVDdWtK9jJRdYJBpvTfR3x/JgBsY9Nms48RB6dpmoX HyBb3Ujc1GrUKkbVXnkWaFtjquLYU/XQQCCacJ0BGNWMLCl+aicNBmfkL6/c2M0/ bgxbiSOlB63o0t9oaNPwzSN//oXv2jpmxtkAAvRPcfkvDY8AQZNc8FHPvqe8JJOI /8+Tvk15Nq3mYnh8f/eSr6fZkJNjguGzqrYlTeKnMho4h35iSvR03q9OyWbcxr3F QuXUhwyDaJ5CDchAq/ndgeSf8Mmurqo7/oN9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU9D1RhnAxE6SEAoGpQA271Si3Ds4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzlEMVJobkF4RTZTRUFvR3BRQTI3MVNpM0RzNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYQYwDQYJKoZIhvcNAQELBQADggEB AEu1s7jw6tjqyV4HvnKSiME7Z7Dv7/SlTOCnr1Yhd1nlbM471sI3vi22Ghg6miJz 2OVKrCcKKBkHEdnI7MlwKjs2nxm7ZLqoGmSJgLdwy93IcWrVhISGpiBye0g7xoUg 3Uy7NlDc9ZZjtPDn2m3Pq6ORSn91YJc7kkY8HBlWCnY2Ggj+0P85PGgZVCvBbs43 R2mEZNVJxFYMY2fx4Pmmexg3BUWyGsjDHiHFYGG0XY66MgOZWtw+CAfMwh6gQ20V qwzM08I65M5QjhfdNrq1HtGm/A8Nfx/GR+36xaOOVi7gqYLfs8BleR1pmFchf5gO RfjGN6WaOcenjoP1W6t6qtQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:17 2026 by rpki-client