$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/By4rKPmuqJgTCQ71mFlI8Rlth4I.roa File: By4rKPmuqJgTCQ71mFlI8Rlth4I.roa (raw, json) Hash identifier: Tp7h8Q+phL0xmMfmqmg4BIwvgdX7ACBc+54itw+Wp/I= Subject key identifier: 07:2E:2B:28:F9:AE:A8:98:13:09:0E:F5:98:59:48:F1:19:6D:87:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 149C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/By4rKPmuqJgTCQ71mFlI8Rlth4I.roa Signing time: Tue 31 Mar 2026 07:57:53 +0000 ROA not before: Tue 31 Mar 2026 07:57:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5276 (0x149c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=072E2B28F9AEA89813090EF5985948F1196D8782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:06:12:2f:37:69:87:02:e0:1d:0e:f2:a4: fc:6d:90:d1:c3:7d:b8:d7:10:b5:73:f3:8b:94:8e: 26:45:5e:1a:33:f2:24:18:ee:c6:db:f3:56:7b:f6: 7f:4e:01:13:88:c2:01:0e:80:4f:7d:26:26:89:e7: 12:40:ab:ae:11:63:76:e5:b8:92:13:41:2b:ac:56: 67:14:d0:12:6e:89:79:ad:34:3b:4d:fb:b8:84:2c: 48:37:a0:cc:94:ff:5f:33:23:3e:ee:bc:2a:1b:57: a4:01:9f:d9:cb:6b:82:3e:6a:ab:e4:a9:f2:b8:44: 4c:61:b6:f9:9a:ea:02:3a:cb:fc:33:95:06:9f:b0: 57:08:77:fe:09:b7:33:06:05:e0:d5:9a:f9:0e:98: d2:b5:90:0a:24:7d:9a:48:9f:33:1c:6b:14:72:3e: 36:14:f3:4e:46:98:c7:02:ea:54:b5:fc:53:8c:9c: 8b:9d:09:8a:43:a6:57:e1:56:92:79:aa:1b:9d:b6: 27:56:81:45:37:32:bb:1b:b9:52:35:2d:a3:3d:a2: 10:db:10:07:2e:aa:b0:a8:da:6c:e7:6f:95:33:7c: fb:1f:4f:ae:aa:c3:65:dc:6e:5c:21:22:52:34:40: 35:84:67:e1:94:5f:87:0f:73:36:55:9c:1d:08:fc: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2E:2B:28:F9:AE:A8:98:13:09:0E:F5:98:59:48:F1:19:6D:87:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/By4rKPmuqJgTCQ71mFlI8Rlth4I.roa sbgp-ipAddrBlock: critical IPv4: 49.98.7.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f5:5c:90:08:ab:66:5b:6e:f1:53:c9:92:92:20:76:13:ef: 34:4c:fc:ca:9e:65:ef:1c:13:60:c6:75:6b:82:7a:c6:32:56: 80:84:82:1a:fe:ec:fb:2e:9a:0e:66:76:74:42:8c:57:6f:ad: ed:ab:59:a6:31:90:d6:e1:f9:42:d0:5d:9f:a4:d5:90:b5:90: 22:b8:71:84:38:d6:11:4b:ab:6f:86:29:f8:df:4f:da:83:d2: 06:c8:dd:2d:f3:46:c8:12:59:75:b2:1e:65:26:58:2f:8c:02: 07:c1:d2:d5:b1:77:82:20:b6:8d:fe:44:aa:ef:3c:28:60:40: 52:26:be:36:f9:be:48:c5:1e:ef:d4:b3:31:49:6a:ed:d5:2a: 1b:d1:28:c3:70:70:90:4b:87:c3:0f:21:24:e1:04:87:9f:7d: 6d:fa:65:13:a3:83:af:2a:fd:a9:88:8c:8b:5e:fb:0f:a0:57: c1:65:ca:ed:08:a4:09:b3:42:0d:d5:29:42:02:07:d3:cb:2b: d5:22:23:a4:66:44:98:3c:d3:a4:03:14:78:87:bc:b8:54:ec: 5f:1f:28:72:6c:eb:d0:d5:95:9d:eb:b0:8b:84:8c:95:b6:b7: 11:8f:f2:82:e2:cc:3c:3e:61:40:ac:05:06:7e:35:4a:9f:e6: f1:e2:72:4a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA3MkUyQjI4RjlBRUE4 OTgxMzA5MEVGNTk4NTk0OEYxMTk2RDg3ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC64AYSLzdphwLgHQ7ypPxtkNHDfbjXELVz84uUjiZFXhoz8iQY 7sbb81Z79n9OAROIwgEOgE99JiaJ5xJAq64RY3bluJITQSusVmcU0BJuiXmtNDtN +7iELEg3oMyU/18zIz7uvCobV6QBn9nLa4I+aqvkqfK4RExhtvma6gI6y/wzlQaf sFcId/4JtzMGBeDVmvkOmNK1kAokfZpInzMcaxRyPjYU805GmMcC6lS1/FOMnIud CYpDplfhVpJ5qhudtidWgUU3MrsbuVI1LaM9ohDbEAcuqrCo2mznb5UzfPsfT66q w2XcblwhIlI0QDWEZ+GUX4cPczZVnB0I/MIlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUBy4rKPmuqJgTCQ71mFlI8Rlth4IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0J5NHJLUG11cUpnVENRNzFtRmxJOFJsdGg0SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYgcwDQYJKoZIhvcNAQELBQADggEB AHD1XJAIq2ZbbvFTyZKSIHYT7zRM/MqeZe8cE2DGdWuCesYyVoCEghr+7Psumg5m dnRCjFdvre2rWaYxkNbh+ULQXZ+k1ZC1kCK4cYQ41hFLq2+GKfjfT9qD0gbI3S3z RsgSWXWyHmUmWC+MAgfB0tWxd4Igto3+RKrvPChgQFImvjb5vkjFHu/UszFJau3V KhvRKMNwcJBLh8MPISThBIeffW36ZROjg68q/amIjIte+w+gV8Flyu0IpAmzQg3V KUICB9PLK9UiI6RmRJg806QDFHiHvLhU7F8fKHJs69DVlZ3rsIuEjJW2txGP8oLi zDw+YUCsBQZ+NUqf5vHicko= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:14 2026 by rpki-client