$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9p0G6moRHOZhflTphcD105BWu14.roa File: 9p0G6moRHOZhflTphcD105BWu14.roa (raw, json) Hash identifier: 60uN4Z++3ObW/5tAuuhSt/tgx5WVkjt2PMBXr4Jl+D0= Subject key identifier: F6:9D:06:EA:6A:11:1C:E6:61:7E:54:E9:85:C0:F5:D3:90:56:BB:5E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1470 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9p0G6moRHOZhflTphcD105BWu14.roa Signing time: Tue 31 Mar 2026 07:57:32 +0000 ROA not before: Tue 31 Mar 2026 07:57:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5232 (0x1470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F69D06EA6A111CE6617E54E985C0F5D39056BB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:5d:38:54:1b:88:68:cd:1a:a7:34:63:0f: 71:5f:00:50:25:8a:f2:0a:4e:96:8e:b1:38:cb:6e: 79:8a:8d:42:b1:22:14:24:8d:d0:48:42:81:4f:12: 6f:ba:ba:69:19:e8:20:ed:7f:56:f7:fb:c4:fb:7b: fe:da:f3:80:6d:4d:af:e3:68:ac:7a:95:12:d4:9b: 1f:d7:9d:f2:b2:2b:d4:0d:b8:55:58:33:e6:03:94: 7b:4d:43:7a:0e:4e:87:69:b1:2e:28:78:ae:ac:61: cf:f7:5d:da:3c:4f:cf:7a:5c:45:5a:6c:ed:5a:cd: 3c:28:95:c1:52:76:a2:7a:59:8e:e6:5f:cf:a9:87: 06:84:bb:3b:88:c9:32:80:d0:04:c3:df:b7:5d:93: 5b:fb:9d:c6:61:30:b1:9b:00:ca:95:a8:ce:17:46: 9d:c0:2d:8a:7d:fb:bd:75:74:04:7b:86:74:75:a4: 89:78:03:bb:87:35:3b:59:bd:36:98:d3:c6:49:53: d2:89:2d:d4:fb:29:9c:2c:30:64:b7:bc:e5:0e:52: a2:f8:d0:89:ee:96:8e:7e:c1:1b:b1:6f:de:b0:79: 4a:c0:cf:57:15:d6:99:5c:de:25:f7:e4:c9:87:95: 12:94:b0:e8:d6:56:bd:db:20:98:0c:95:db:eb:7b: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9D:06:EA:6A:11:1C:E6:61:7E:54:E9:85:C0:F5:D3:90:56:BB:5E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9p0G6moRHOZhflTphcD105BWu14.roa sbgp-ipAddrBlock: critical IPv4: 27.230.95.0/24 Signature Algorithm: sha256WithRSAEncryption c4:aa:ae:9c:42:42:e2:37:cf:19:d0:ee:95:f8:ae:2e:07:17: 38:f1:43:03:19:c8:da:05:12:eb:5f:38:7a:c0:c8:f0:8b:27: 54:40:1e:27:33:72:32:62:dd:48:8e:30:fb:31:80:60:cb:cd: c2:10:87:d6:56:b5:ab:bf:e1:a2:1c:8b:96:7d:6f:7e:6d:dd: d0:04:5d:be:65:a0:ef:73:5f:1d:e6:24:6a:16:59:13:e7:8f: 43:3f:72:5a:6d:62:c1:ed:63:22:5e:26:b8:8e:9a:36:5b:0d: 04:02:ef:b6:d5:4d:5d:6d:c7:e1:c9:7d:ef:d6:ee:b4:f5:5a: 8e:46:23:25:31:52:dc:a9:ae:f6:77:ff:b2:f1:2b:12:fb:4f: 45:2e:84:9e:fc:0a:f8:63:dc:e7:88:dc:0b:22:9d:e5:7b:7b: af:11:5b:28:8b:18:5d:4a:8f:d1:88:4e:c5:5d:c6:4c:9d:7e: 76:9f:ff:6d:b9:87:fe:fb:ac:5e:41:e7:b6:f9:b2:7e:a3:30: 3a:ee:48:ed:1e:34:75:49:24:ad:7b:53:fa:b2:c4:c6:29:36: 02:aa:32:32:be:6f:c5:eb:f0:16:da:13:44:40:fc:c1:8f:40: a7:24:aa:c1:f7:16:a5:82:3c:bb:cb:e3:81:6c:d3:ba:03:18: 03:43:29:4c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2OUQwNkVBNkExMTFD RTY2MTdFNTRFOTg1QzBGNUQzOTA1NkJCNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNMF04VBuIaM0apzRjD3FfAFAlivIKTpaOsTjLbnmKjUKxIhQk jdBIQoFPEm+6umkZ6CDtf1b3+8T7e/7a84BtTa/jaKx6lRLUmx/XnfKyK9QNuFVY M+YDlHtNQ3oOTodpsS4oeK6sYc/3Xdo8T896XEVabO1azTwolcFSdqJ6WY7mX8+p hwaEuzuIyTKA0ATD37ddk1v7ncZhMLGbAMqVqM4XRp3ALYp9+711dAR7hnR1pIl4 A7uHNTtZvTaY08ZJU9KJLdT7KZwsMGS3vOUOUqL40Inulo5+wRuxb96weUrAz1cV 1plc3iX35MmHlRKUsOjWVr3bIJgMldvre0wBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU9p0G6moRHOZhflTphcD105BWu14wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzlwMEc2bW9SSE9aaGZsVHBoY0QxMDVCV3UxNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAb5l8wDQYJKoZIhvcNAQELBQADggEB AMSqrpxCQuI3zxnQ7pX4ri4HFzjxQwMZyNoFEutfOHrAyPCLJ1RAHiczcjJi3UiO MPsxgGDLzcIQh9ZWtau/4aIci5Z9b35t3dAEXb5loO9zXx3mJGoWWRPnj0M/clpt YsHtYyJeJriOmjZbDQQC77bVTV1tx+HJfe/W7rT1Wo5GIyUxUtyprvZ3/7LxKxL7 T0UuhJ78Cvhj3OeI3AsineV7e68RWyiLGF1Kj9GITsVdxkydfnaf/225h/77rF5B 57b5sn6jMDruSO0eNHVJJK17U/qyxMYpNgKqMjK+b8Xr8BbaE0RA/MGPQKckqsH3 FqWCPLvL44Fs07oDGANDKUw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:57 2026 by rpki-client