$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AFCgvaRRV7mIzoclshorluw9-L0.roa File: AFCgvaRRV7mIzoclshorluw9-L0.roa (raw, json) Hash identifier: QnOd1X8lbNKnzeilnErEu7TqjDN6lqhuUWhB/CTGv0w= Subject key identifier: 00:50:A0:BD:A4:51:57:B9:88:CE:87:25:B2:1A:2B:96:EC:3D:F8:BD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 139B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AFCgvaRRV7mIzoclshorluw9-L0.roa Signing time: Tue 31 Mar 2026 07:55:55 +0000 ROA not before: Tue 31 Mar 2026 07:55:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5019 (0x139b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0050A0BDA45157B988CE8725B21A2B96EC3DF8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:3f:71:16:42:70:76:b7:27:10:b0:e4:40: 82:1a:6a:39:ee:42:17:98:29:60:45:3f:49:55:d9: f5:59:df:c5:06:73:10:cb:e4:0a:8f:94:ad:15:13: 0c:72:1c:49:45:36:06:51:82:07:d5:62:7d:49:f1: d8:34:14:0d:16:b4:1a:6c:4e:5e:dc:17:51:af:d3: 75:5a:a2:4a:85:39:61:48:11:1e:b1:b7:d1:7f:c0: 9e:8b:3b:bc:1e:c2:53:3c:62:90:d6:7d:6d:4c:4a: 3e:5d:ce:54:fe:bc:cd:5c:b2:6a:cf:9d:2a:a8:27: 70:24:53:37:92:47:df:3d:1e:da:6c:2b:d0:7f:43: 4b:60:cc:ee:c3:12:0b:87:93:5b:d7:c7:6d:73:a0: 6c:22:dd:d8:67:a4:ea:5e:59:8c:d3:fb:d8:49:c5: 0b:82:cd:f0:bb:d4:49:71:f7:5b:77:c6:57:24:b1: 7e:31:76:9b:bb:5b:b1:75:1b:8d:e4:33:1d:79:03: 44:e9:1f:ca:b0:7f:a1:f8:e3:15:82:9f:74:ec:5d: 26:71:c9:11:fd:6f:45:c2:d5:ba:64:d2:1c:11:12: 72:2f:7e:45:32:d0:60:d4:f2:f1:c8:55:b3:e5:20: 75:71:61:a0:0b:eb:96:e3:a7:de:15:7f:09:af:3e: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:A0:BD:A4:51:57:B9:88:CE:87:25:B2:1A:2B:96:EC:3D:F8:BD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AFCgvaRRV7mIzoclshorluw9-L0.roa sbgp-ipAddrBlock: critical IPv4: 1.75.1.0/24 Signature Algorithm: sha256WithRSAEncryption 04:71:52:87:db:f5:99:f8:86:a5:86:4b:d7:87:dd:a4:3c:c4: bb:97:ac:f8:68:d6:5c:e5:01:dd:e7:e1:b6:e4:91:d0:a7:64: de:59:fd:7c:ba:60:82:d2:b1:52:83:fd:46:2a:ce:05:dd:df: 50:6c:b3:ab:5e:96:15:84:34:30:8f:9d:36:74:3a:e9:8a:52: f3:d7:22:65:1a:86:da:98:2e:85:d5:6b:60:65:0d:54:d3:f8: f7:c4:71:3d:0b:e2:d6:be:e3:4d:bd:73:b7:e2:57:49:7a:60: 20:db:3e:70:44:52:45:4c:4c:02:a8:60:eb:db:d1:af:7c:6b: 51:60:c0:39:98:e0:15:05:92:19:74:c9:d1:e9:9e:56:29:f4: 7d:e6:b4:02:8c:20:2c:bb:18:38:c4:19:76:cc:66:cf:15:8a: ec:2f:40:22:b0:27:53:81:ee:a1:a2:8c:af:d9:7e:0e:0a:d5: fe:b6:12:f1:2d:bb:48:2c:71:c3:2c:51:83:94:2b:1a:ca:07: 1e:d3:d4:4b:4d:b0:1c:93:32:a3:24:81:6b:46:69:3d:27:de: 0b:a9:4d:52:dc:7c:26:3e:9c:25:0a:e0:85:24:b3:d7:9c:1b: 67:15:b1:21:96:b8:42:80:d5:e9:29:ee:4f:35:df:3f:d7:94: 32:c0:62:b2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwNTBBMEJEQTQ1MTU3 Qjk4OENFODcyNUIyMUEyQjk2RUMzREY4QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtrz9xFkJwdrcnELDkQIIaajnuQheYKWBFP0lV2fVZ38UGcxDL 5AqPlK0VEwxyHElFNgZRggfVYn1J8dg0FA0WtBpsTl7cF1Gv03VaokqFOWFIER6x t9F/wJ6LO7wewlM8YpDWfW1MSj5dzlT+vM1csmrPnSqoJ3AkUzeSR989HtpsK9B/ Q0tgzO7DEguHk1vXx21zoGwi3dhnpOpeWYzT+9hJxQuCzfC71Elx91t3xlcksX4x dpu7W7F1G43kMx15A0TpH8qwf6H44xWCn3TsXSZxyRH9b0XC1bpk0hwREnIvfkUy 0GDU8vHIVbPlIHVxYaAL65bjp94VfwmvPs+bAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAFCgvaRRV7mIzoclshorluw9+L0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0FGQ2d2YVJSVjdtSXpvY2xzaG9ybHV3OS1MMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSwEwDQYJKoZIhvcNAQELBQADggEB AARxUofb9Zn4hqWGS9eH3aQ8xLuXrPho1lzlAd3n4bbkkdCnZN5Z/Xy6YILSsVKD /UYqzgXd31Bss6telhWENDCPnTZ0OumKUvPXImUahtqYLoXVa2BlDVTT+PfEcT0L 4ta+4029c7fiV0l6YCDbPnBEUkVMTAKoYOvb0a98a1FgwDmY4BUFkhl0ydHpnlYp 9H3mtAKMICy7GDjEGXbMZs8ViuwvQCKwJ1OB7qGijK/Zfg4K1f62EvEtu0gsccMs UYOUKxrKBx7T1EtNsByTMqMkgWtGaT0n3gupTVLcfCY+nCUK4IUks9ecG2cVsSGW uEKA1ekp7k813z/XlDLAYrI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:28 2026 by rpki-client