$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ALWb9QVPpr5LsxG4nEz2x7IldAg.roa File: ALWb9QVPpr5LsxG4nEz2x7IldAg.roa (raw, json) Hash identifier: Pp9iqxlEQhmPO63ABeWjUsp0SHrPSeIQbswJE1iJJ8s= Subject key identifier: 00:B5:9B:F5:05:4F:A6:BE:4B:B3:11:B8:9C:4C:F6:C7:B2:25:74:08 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15D8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ALWb9QVPpr5LsxG4nEz2x7IldAg.roa Signing time: Tue 31 Mar 2026 08:00:31 +0000 ROA not before: Tue 31 Mar 2026 08:00:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5592 (0x15d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=00B59BF5054FA6BE4BB311B89C4CF6C7B2257408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:5e:db:ea:2b:0b:2e:dd:c4:93:60:eb:5a: 7d:9b:b8:a4:b9:ed:8a:0d:ce:d4:79:3d:46:14:7d: bd:ce:2f:51:9c:ad:f5:9e:93:48:5b:93:bc:1d:e8: cf:97:af:68:4c:e7:4c:bc:e9:2c:95:1f:0f:36:f5: bc:14:2e:b8:c4:a1:c0:bd:4a:eb:3b:ab:a9:4d:74: ab:66:9b:d5:9f:cd:a2:7c:dd:7c:f1:b5:95:69:4c: e7:ab:91:7c:a4:fa:f2:2a:ee:d4:4d:52:28:86:da: 94:f9:01:60:78:52:2a:45:2a:81:fd:4b:38:ab:cb: fe:3d:5a:a7:7e:6c:55:79:4c:af:b4:f0:74:51:54: ef:ba:68:96:87:7a:8b:6b:a1:3d:c1:73:a7:a7:0f: 70:bc:f1:52:c4:d5:fd:a6:33:52:28:af:91:78:19: 44:f3:cd:7f:79:f0:18:99:79:44:01:80:85:76:ac: 06:41:8d:cd:14:30:1b:be:23:3d:d0:63:d0:69:32: f5:06:80:4d:73:25:f0:9e:fe:08:09:90:1e:c8:50: d5:59:4c:98:e1:d2:cf:43:e5:2c:f7:17:0e:e4:34: c9:d1:39:97:92:b2:cc:b5:e0:74:b3:c7:4c:fd:2e: 91:03:e8:cc:e4:de:14:bf:15:41:da:6c:75:ec:07: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:9B:F5:05:4F:A6:BE:4B:B3:11:B8:9C:4C:F6:C7:B2:25:74:08 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ALWb9QVPpr5LsxG4nEz2x7IldAg.roa sbgp-ipAddrBlock: critical IPv4: 49.96.12.0/23 Signature Algorithm: sha256WithRSAEncryption 08:3f:71:b9:84:aa:b3:2e:2d:c3:cc:21:00:71:6d:18:30:e5: 57:10:9e:3d:f3:8d:2d:e8:38:a4:30:36:6d:5f:5b:aa:90:58: c4:16:e4:c5:aa:a9:d2:82:a4:60:99:54:f4:f5:c7:b4:10:17: ae:33:c9:29:dc:d7:be:ee:2e:70:e1:81:89:5d:7d:24:db:af: ff:74:c8:f3:fd:ba:18:f2:3a:0d:89:c0:96:17:0b:63:48:25: 9f:1e:8b:dd:15:01:ac:ed:67:71:d4:b6:e7:d7:f6:23:38:b3: 4e:3d:d6:16:1e:8a:89:26:73:ac:a9:17:5d:a8:c9:bd:56:09: a2:22:3f:74:f0:7e:d8:c7:08:49:ac:a6:48:de:93:7e:e6:bf: 25:84:6c:e4:a0:82:e9:99:1c:99:c1:24:87:23:46:c4:87:7c: bd:96:f1:a6:a9:ff:a5:c2:75:4b:eb:64:30:30:04:dc:2e:e0: 30:4b:21:50:c5:f1:b0:5b:cb:e9:0e:2e:e4:d3:e5:b1:9c:06: e5:de:ea:b3:19:1a:8e:1b:d7:93:31:1c:63:48:5b:6d:8a:e3: 94:f2:9a:3d:ee:da:f6:0e:0a:96:b9:ca:13:24:d4:f4:9e:21: 9c:6d:c9:e3:2c:60:0c:30:b4:d7:b3:58:cd:bc:3e:1b:89:ac: 04:e4:8c:c3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwQjU5QkY1MDU0RkE2 QkU0QkIzMTFCODlDNENGNkM3QjIyNTc0MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiYV7b6isLLt3Ek2DrWn2buKS57YoNztR5PUYUfb3OL1GcrfWe k0hbk7wd6M+Xr2hM50y86SyVHw829bwULrjEocC9Sus7q6lNdKtmm9WfzaJ83Xzx tZVpTOerkXyk+vIq7tRNUiiG2pT5AWB4UipFKoH9Sziry/49Wqd+bFV5TK+08HRR VO+6aJaHeotroT3Bc6enD3C88VLE1f2mM1Ior5F4GUTzzX958BiZeUQBgIV2rAZB jc0UMBu+Iz3QY9BpMvUGgE1zJfCe/ggJkB7IUNVZTJjh0s9D5Sz3Fw7kNMnROZeS ssy14HSzx0z9LpED6Mzk3hS/FUHabHXsB1nbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUALWb9QVPpr5LsxG4nEz2x7IldAgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0FMV2I5UVZQcHI1THN4RzRuRXoyeDdJbGRBZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYAwwDQYJKoZIhvcNAQELBQADggEB AAg/cbmEqrMuLcPMIQBxbRgw5VcQnj3zjS3oOKQwNm1fW6qQWMQW5MWqqdKCpGCZ VPT1x7QQF64zySnc177uLnDhgYldfSTbr/90yPP9uhjyOg2JwJYXC2NIJZ8ei90V AaztZ3HUtufX9iM4s0491hYeiokmc6ypF12oyb1WCaIiP3TwftjHCEmspkjek37m vyWEbOSggumZHJnBJIcjRsSHfL2W8aap/6XCdUvrZDAwBNwu4DBLIVDF8bBby+kO LuTT5bGcBuXe6rMZGo4b15MxHGNIW22K45Tymj3u2vYOCpa5yhMk1PSeIZxtyeMs YAwwtNezWM28PhuJrATkjMM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:50 2026 by rpki-client