$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AAQyAgAm8ZLh-5Bo7noRFoN0uSI.roa File: AAQyAgAm8ZLh-5Bo7noRFoN0uSI.roa (raw, json) Hash identifier: 8R2flgTbTul4S1NoTBGQbJmu3oHGPWQ9SCtLmkv6mDQ= Subject key identifier: 00:04:32:02:00:26:F1:92:E1:FB:90:68:EE:7A:11:16:83:74:B9:22 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 157C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AAQyAgAm8ZLh-5Bo7noRFoN0uSI.roa Signing time: Tue 31 Mar 2026 07:59:43 +0000 ROA not before: Tue 31 Mar 2026 07:59:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 219.114.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5500 (0x157c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=000432020026F192E1FB9068EE7A11168374B922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:89:da:38:c6:e0:ae:c0:d5:80:36:e3:b9: e1:9f:ce:c8:29:fe:22:d0:5f:ef:13:61:56:ce:14: d1:dd:2f:f6:44:d4:32:b8:95:59:4c:e6:dc:85:be: d9:49:37:9b:2f:fa:57:da:15:dd:df:2e:33:68:ff: 03:a7:05:dd:1a:c6:db:10:70:5e:c8:74:75:c1:d0: ea:0b:cc:25:f1:c9:be:4f:05:de:b0:c4:98:56:35: 60:f8:09:02:c9:ac:ac:7f:7d:83:0e:13:c3:a5:fb: ad:51:59:af:d4:c3:e3:df:36:b9:87:b5:e5:7b:d2: 7a:21:81:99:1b:7e:0f:b7:5a:f1:fe:01:64:b3:dd: 08:e7:05:39:a6:3c:b7:fe:94:5e:bc:ae:1c:90:08: 5d:29:5a:5b:dd:af:67:b7:08:79:94:11:c2:2d:07: 91:e5:cb:b8:b8:73:cb:a8:ca:27:7c:08:90:c6:28: 50:11:d9:02:10:99:53:b0:6c:76:f3:23:13:52:c4: 1c:b0:d8:3b:65:25:99:11:64:37:3f:7a:1a:c7:3c: bd:f5:9d:46:9e:5b:26:41:68:93:65:3d:83:a7:b9: 5a:79:0d:df:db:8c:a6:aa:09:5d:b1:cf:99:da:07: c6:03:7e:8b:bf:08:9f:de:7e:0d:59:4f:b0:74:d4: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:04:32:02:00:26:F1:92:E1:FB:90:68:EE:7A:11:16:83:74:B9:22 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AAQyAgAm8ZLh-5Bo7noRFoN0uSI.roa sbgp-ipAddrBlock: critical IPv4: 219.114.176.0/21 Signature Algorithm: sha256WithRSAEncryption a8:13:f6:30:9c:57:05:72:01:1e:f9:60:e1:b6:52:f7:b8:4d: 9e:a1:54:99:47:7c:22:0e:af:00:f4:5f:a2:d3:ff:74:e6:81: 32:70:a5:4f:2f:d7:b9:5a:d9:7d:73:ec:4d:ea:71:77:d0:62: ab:17:fb:45:8e:02:72:9c:70:3e:81:68:54:7a:60:e0:f3:6d: 4a:be:b8:09:ae:dc:b8:36:86:56:ed:eb:37:1b:88:6c:7d:c2: bd:fb:c8:1f:65:67:6f:ab:2b:6e:d9:e0:2c:d7:07:72:1f:7f: fd:c4:50:1d:67:76:18:c5:7a:04:07:58:9a:53:fa:1f:35:76: 60:19:0d:7b:d0:33:89:b7:5c:e7:6b:62:d1:0e:0c:bb:c9:24: 81:c4:56:29:96:a9:bf:2b:76:d2:e9:1a:ba:f0:25:67:c6:b9: 0f:b1:16:11:cc:a0:9c:ef:38:93:fe:f9:b4:e4:d7:ef:52:76: 65:5d:6c:68:71:19:94:07:1f:43:a9:af:b5:5a:db:52:42:a6: 14:d0:2f:31:a1:13:68:50:58:11:73:8b:4e:cf:de:4d:50:6b: 11:8e:90:cd:80:ae:76:78:bf:85:8b:ad:90:ef:11:88:e0:b9: 12:a2:8d:5c:05:7f:a9:d6:d1:64:23:33:3d:a6:dc:26:04:b1: d6:e9:6f:d2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwMDQzMjAyMDAyNkYx OTJFMUZCOTA2OEVFN0ExMTE2ODM3NEI5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMNYnaOMbgrsDVgDbjueGfzsgp/iLQX+8TYVbOFNHdL/ZE1DK4 lVlM5tyFvtlJN5sv+lfaFd3fLjNo/wOnBd0axtsQcF7IdHXB0OoLzCXxyb5PBd6w xJhWNWD4CQLJrKx/fYMOE8Ol+61RWa/Uw+PfNrmHteV70nohgZkbfg+3WvH+AWSz 3QjnBTmmPLf+lF68rhyQCF0pWlvdr2e3CHmUEcItB5Hly7i4c8uoyid8CJDGKFAR 2QIQmVOwbHbzIxNSxByw2DtlJZkRZDc/ehrHPL31nUaeWyZBaJNlPYOnuVp5Dd/b jKaqCV2xz5naB8YDfou/CJ/efg1ZT7B01LTZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAAQyAgAm8ZLh+5Bo7noRFoN0uSIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0FBUXlBZ0FtOFpMaC01Qm83bm9SRm9OMHVTSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPbcrAwDQYJKoZIhvcNAQELBQADggEB AKgT9jCcVwVyAR75YOG2Uve4TZ6hVJlHfCIOrwD0X6LT/3TmgTJwpU8v17la2X1z 7E3qcXfQYqsX+0WOAnKccD6BaFR6YODzbUq+uAmu3Lg2hlbt6zcbiGx9wr37yB9l Z2+rK27Z4CzXB3Iff/3EUB1ndhjFegQHWJpT+h81dmAZDXvQM4m3XOdrYtEODLvJ JIHEVimWqb8rdtLpGrrwJWfGuQ+xFhHMoJzvOJP++bTk1+9SdmVdbGhxGZQHH0Op r7Va21JCphTQLzGhE2hQWBFzi07P3k1QaxGOkM2ArnZ4v4WLrZDvEYjguRKijVwF f6nW0WQjMz2m3CYEsdbpb9I= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:32 2026 by rpki-client