$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFa2uEEFtHnOuz5OKqiV7tItpKY.roa File: CFa2uEEFtHnOuz5OKqiV7tItpKY.roa (raw, json) Hash identifier: jIYIE/MZSGq0wqpIMMEn4V1UId1WAK45lRwHT1KyLjE= Subject key identifier: 08:56:B6:B8:41:05:B4:79:CE:BB:3E:4E:2A:A8:95:EE:D2:2D:A4:A6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 147F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFa2uEEFtHnOuz5OKqiV7tItpKY.roa Signing time: Tue 31 Mar 2026 07:57:39 +0000 ROA not before: Tue 31 Mar 2026 07:57:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5247 (0x147f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0856B6B84105B479CEBB3E4E2AA895EED22DA4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:88:f3:bf:d4:8a:0c:8f:b5:c9:08:36:ca: fa:5f:cb:7f:92:c5:72:dc:3c:97:4f:69:71:0c:4c: 2c:4c:9e:88:8b:f8:03:e7:23:af:ca:a9:99:56:a2: e0:31:e6:f1:9d:92:94:cc:08:a7:de:93:67:3f:bf: 5d:c6:24:1c:3e:41:e5:15:1c:2e:9b:2f:4c:19:87: 6b:c4:8c:83:a0:7a:d0:6f:d5:6b:6a:7e:ec:1b:af: 66:3f:97:55:b5:94:b9:a4:b6:6a:58:c7:86:f3:48: 1e:a1:94:54:f8:07:27:72:e8:3f:2b:cc:c6:8e:42: f1:15:50:c8:2b:80:8f:88:bb:70:61:2d:9e:7a:56: 1b:04:e9:7b:43:fe:af:00:5f:6c:91:30:c3:7a:84: e0:28:02:3e:07:28:e4:72:21:56:d8:c3:36:a4:94: fc:de:70:1a:a3:92:ff:b3:b8:a2:48:03:a1:47:46: 15:5b:c9:8a:b7:0d:ac:7b:a4:40:21:ba:95:11:b5: 35:8c:de:32:2d:82:16:64:c1:38:8b:0a:9e:e7:ca: 8d:d3:53:fa:1c:3d:c2:85:5c:ea:dd:42:17:51:2d: ed:1d:d5:2e:f8:12:00:fd:9c:13:e5:17:74:92:88: 18:2b:22:2f:1e:84:56:5b:39:eb:a2:de:e8:9b:3a: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:56:B6:B8:41:05:B4:79:CE:BB:3E:4E:2A:A8:95:EE:D2:2D:A4:A6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFa2uEEFtHnOuz5OKqiV7tItpKY.roa sbgp-ipAddrBlock: critical IPv4: 49.106.184.0/23 Signature Algorithm: sha256WithRSAEncryption 14:fc:87:11:8d:37:33:1e:e9:a9:ed:d5:73:0e:0a:10:6e:fd: cb:f9:fc:44:5d:cb:9e:8f:1c:cb:70:17:f1:51:ae:ff:ff:9c: e1:b0:e3:c1:02:4d:e1:d6:ec:5f:35:6d:e3:f0:80:85:9f:0a: 40:01:86:f9:eb:4b:05:da:95:1a:e6:45:13:2f:25:03:99:19: 36:38:b2:c8:90:38:38:d8:48:0a:67:63:ac:31:5f:91:0c:fb: 4e:ea:32:8b:d5:3f:3a:30:fa:8f:b9:bc:25:17:c1:40:33:7e: 4d:f9:15:bb:fd:b0:f0:b3:de:8a:4f:86:6b:82:f7:44:a7:8d: 99:06:25:27:16:23:ce:0c:46:1d:29:82:3f:c2:2e:59:10:12: 4a:19:91:71:2f:bb:70:16:ae:35:db:21:52:42:fb:d7:3c:d6: 94:f2:41:27:8f:aa:88:bb:29:9b:9e:e7:1e:b4:38:04:81:ab: 4a:d5:30:08:ad:23:78:16:52:ba:39:16:93:16:80:02:77:67: 23:c5:bd:c3:71:fd:c9:f7:57:2c:ab:e0:e1:27:b9:6e:15:92: 9d:e9:0b:21:03:51:df:e1:26:04:52:4c:d0:08:45:73:b2:c8: 3d:29:f1:79:d7:05:2a:ce:ef:83:5e:58:27:00:40:2c:f7:d0: 49:76:53:45 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4NTZCNkI4NDEwNUI0 NzlDRUJCM0U0RTJBQTg5NUVFRDIyREE0QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcRojzv9SKDI+1yQg2yvpfy3+SxXLcPJdPaXEMTCxMnoiL+APn I6/KqZlWouAx5vGdkpTMCKfek2c/v13GJBw+QeUVHC6bL0wZh2vEjIOgetBv1Wtq fuwbr2Y/l1W1lLmktmpYx4bzSB6hlFT4Bydy6D8rzMaOQvEVUMgrgI+Iu3BhLZ56 VhsE6XtD/q8AX2yRMMN6hOAoAj4HKORyIVbYwzaklPzecBqjkv+zuKJIA6FHRhVb yYq3Dax7pEAhupURtTWM3jItghZkwTiLCp7nyo3TU/ocPcKFXOrdQhdRLe0d1S74 EgD9nBPlF3SSiBgrIi8ehFZbOeui3uibOitNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUCFa2uEEFtHnOuz5OKqiV7tItpKYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0NGYTJ1RUVGdEhuT3V6NU9LcWlWN3RJdHBLWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExargwDQYJKoZIhvcNAQELBQADggEB ABT8hxGNNzMe6ant1XMOChBu/cv5/ERdy56PHMtwF/FRrv//nOGw48ECTeHW7F81 bePwgIWfCkABhvnrSwXalRrmRRMvJQOZGTY4ssiQODjYSApnY6wxX5EM+07qMovV Pzow+o+5vCUXwUAzfk35Fbv9sPCz3opPhmuC90SnjZkGJScWI84MRh0pgj/CLlkQ EkoZkXEvu3AWrjXbIVJC+9c81pTyQSePqoi7KZue5x60OASBq0rVMAitI3gWUro5 FpMWgAJ3ZyPFvcNx/cn3Vyyr4OEnuW4Vkp3pCyEDUd/hJgRSTNAIRXOyyD0p8XnX BSrO74NeWCcAQCz30El2U0U= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:49 2026 by rpki-client