$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A5lDlFZXliwUeBc9_Kk-u-U57iA.roa File: A5lDlFZXliwUeBc9_Kk-u-U57iA.roa (raw, json) Hash identifier: sId7jF2RnZCdncv1eirYFf7EExh+n4t2eatmfaL4RAI= Subject key identifier: 03:99:43:94:56:57:96:2C:14:78:17:3D:FC:A9:3E:BB:E5:39:EE:20 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13B9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A5lDlFZXliwUeBc9_Kk-u-U57iA.roa Signing time: Tue 31 Mar 2026 07:56:10 +0000 ROA not before: Tue 31 Mar 2026 07:56:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5049 (0x13b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=039943945657962C1478173DFCA93EBBE539EE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:0f:3e:6f:c0:cc:ed:0f:14:ea:bc:08:74: 1c:82:87:c1:9f:61:83:6d:13:47:a1:1a:a6:c8:cd: 1c:f2:f4:b2:84:96:a0:4c:63:49:d4:0f:4a:d5:49: a3:19:2c:37:23:56:f4:0f:4a:87:cf:1c:b9:2a:df: 66:4b:bb:c8:45:24:03:34:19:9d:05:e8:bf:d6:6f: 84:d2:2d:96:b0:4f:cc:5b:2c:28:65:5a:a3:af:c9: 44:78:95:7b:3b:58:e9:fe:a2:56:6d:e9:99:d6:8c: f4:df:69:99:29:81:5d:c5:12:8f:e0:40:88:10:eb: ca:7b:25:ef:02:0c:4c:17:61:3b:df:3f:35:9b:6b: c5:70:11:ca:c3:79:d9:39:4e:63:ee:d0:60:50:f2: 84:7e:7d:48:94:66:ad:29:a8:7a:df:31:89:69:a5: 3a:70:40:61:54:3e:a1:a8:56:b4:db:13:29:15:5c: b5:da:81:8f:37:67:29:21:ea:d9:82:8a:e3:6d:2c: 89:27:eb:0e:3c:b3:5a:4f:d1:de:6d:7b:60:65:d5: 09:7c:22:84:0a:41:e8:9c:b2:1c:71:5b:96:64:d7: 80:bb:a4:42:04:3c:07:84:f6:c2:81:a1:15:46:d6: 12:94:7b:86:08:13:de:2d:6d:38:45:57:d7:fe:b6: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:43:94:56:57:96:2C:14:78:17:3D:FC:A9:3E:BB:E5:39:EE:20 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A5lDlFZXliwUeBc9_Kk-u-U57iA.roa sbgp-ipAddrBlock: critical IPv4: 1.75.8.0/23 Signature Algorithm: sha256WithRSAEncryption e3:7f:50:54:1b:55:3a:cf:11:17:12:a8:09:d4:be:0c:33:cb: 99:20:99:d6:af:83:46:dc:b9:b9:86:72:d2:e3:ea:a6:5f:cd: fa:f4:62:f4:3a:4a:a2:91:e6:df:63:88:ef:16:58:68:9b:b5: d4:e2:6d:cd:d6:1f:8d:68:51:03:d0:39:dd:40:cc:a0:7c:fb: 61:d5:0d:3f:2f:f1:39:d2:f3:15:66:6a:fd:65:8d:47:bf:c4: 6c:66:79:b0:5a:f3:49:6a:b9:8d:07:22:4a:c6:80:ce:bf:64: a6:bf:d2:b5:c6:14:60:2c:85:42:c6:ce:4a:45:e0:ca:a2:3a: c5:78:5d:bd:ef:e0:eb:76:c7:e1:00:64:4e:f2:3e:76:75:88: 54:08:f0:59:36:12:cf:a1:df:de:96:5a:52:6e:16:5e:4a:17: 8d:8d:9c:b6:8a:20:89:79:97:e5:1d:64:5b:ef:db:1d:91:dd: 78:ac:f5:28:4f:5b:9b:b8:da:52:b0:fb:82:df:d8:50:01:2f: 91:fe:be:d6:83:ff:25:3d:9d:e9:15:c4:97:0b:e9:29:d4:fc: 2b:20:d8:12:52:1a:42:b5:3c:41:45:64:1c:28:f0:0c:ee:fa: f9:a0:50:ff:27:47:63:84:f7:78:13:1a:73:af:c3:38:1f:19: 85:f6:cd:6f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAzOTk0Mzk0NTY1Nzk2 MkMxNDc4MTczREZDQTkzRUJCRTUzOUVFMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDITw8+b8DM7Q8U6rwIdByCh8GfYYNtE0ehGqbIzRzy9LKElqBM Y0nUD0rVSaMZLDcjVvQPSofPHLkq32ZLu8hFJAM0GZ0F6L/Wb4TSLZawT8xbLChl WqOvyUR4lXs7WOn+olZt6ZnWjPTfaZkpgV3FEo/gQIgQ68p7Je8CDEwXYTvfPzWb a8VwEcrDedk5TmPu0GBQ8oR+fUiUZq0pqHrfMYlppTpwQGFUPqGoVrTbEykVXLXa gY83Zykh6tmCiuNtLIkn6w48s1pP0d5te2Bl1Ql8IoQKQeicshxxW5Zk14C7pEIE PAeE9sKBoRVG1hKUe4YIE94tbThFV9f+toVtAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUA5lDlFZXliwUeBc9/Kk+u+U57iAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0E1bERsRlpYbGl3VWVCYzlfS2stdS1VNTdpQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBSwgwDQYJKoZIhvcNAQELBQADggEB AON/UFQbVTrPERcSqAnUvgwzy5kgmdavg0bcubmGctLj6qZfzfr0YvQ6SqKR5t9j iO8WWGibtdTibc3WH41oUQPQOd1AzKB8+2HVDT8v8TnS8xVmav1ljUe/xGxmebBa 80lquY0HIkrGgM6/ZKa/0rXGFGAshULGzkpF4MqiOsV4Xb3v4Ot2x+EAZE7yPnZ1 iFQI8Fk2Es+h396WWlJuFl5KF42NnLaKIIl5l+UdZFvv2x2R3Xis9ShPW5u42lKw +4Lf2FABL5H+vtaD/yU9nekVxJcL6SnU/Csg2BJSGkK1PEFFZBwo8Azu+vmgUP8n R2OE93gTGnOvwzgfGYX2zW8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:51 2026 by rpki-client