$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CQ3kOdQW518h8LGc0o2yGBg5BR8.roa File: CQ3kOdQW518h8LGc0o2yGBg5BR8.roa (raw, json) Hash identifier: G9Ehkr1hQ5zfHO4qMteaBYRdE7LLbjfbhBKo2dN3lc8= Subject key identifier: 09:0D:E4:39:D4:16:E7:5F:21:F0:B1:9C:D2:8D:B2:18:18:39:05:1F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17D2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CQ3kOdQW518h8LGc0o2yGBg5BR8.roa Signing time: Tue 31 Mar 2026 08:04:37 +0000 ROA not before: Tue 31 Mar 2026 08:04:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.163.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6098 (0x17d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=090DE439D416E75F21F0B19CD28DB2181839051F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:9c:37:fd:16:f5:9f:20:a9:73:8a:c7:c5: d9:97:96:42:44:16:59:bd:aa:dc:b1:59:ad:97:2b: 90:f2:08:de:d6:9c:54:8e:eb:e9:bd:53:f7:80:b5: db:36:96:0e:d5:14:29:7d:63:1b:a1:0d:89:01:70: b8:5e:f7:79:e1:bf:52:32:b3:bf:cb:c7:71:7b:ee: a9:ef:38:14:65:6f:9d:18:f1:6c:17:21:18:37:4a: 12:39:64:d5:c7:35:a5:cd:23:81:41:80:7a:f1:6d: c0:b2:3a:bc:7e:55:4d:ce:3f:1e:7e:e5:03:76:bb: de:6a:be:48:2f:17:21:c6:1f:aa:2b:38:95:70:91: be:8a:45:75:ff:06:18:6c:d3:15:54:9f:d0:5e:f0: b1:e5:84:7e:a9:5a:3f:dd:eb:41:f5:b0:a6:c0:14: 39:d8:fe:2f:2d:4b:df:bf:07:08:f0:ae:c1:9d:52: b3:37:60:0f:c5:da:46:55:6b:ee:e7:c6:e9:ef:2c: 5e:30:7c:a5:ad:80:e0:1c:2e:df:aa:09:ea:3f:34: de:29:e8:ef:ad:85:bd:a6:f5:b8:4e:b0:2a:1d:e2: 19:3b:33:3a:3b:c6:28:8e:8f:66:be:61:6a:ff:c2: 66:c0:ce:4e:cc:01:a6:d2:ae:03:ba:07:16:9b:89: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:E4:39:D4:16:E7:5F:21:F0:B1:9C:D2:8D:B2:18:18:39:05:1F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CQ3kOdQW518h8LGc0o2yGBg5BR8.roa sbgp-ipAddrBlock: critical IPv4: 110.163.28.0/22 Signature Algorithm: sha256WithRSAEncryption 21:43:ca:ee:47:71:62:94:55:c5:cf:34:73:ce:cc:b4:63:ad: 84:df:ff:51:07:c8:6c:34:e8:b8:36:46:55:30:1c:2a:be:2b: f0:3b:6a:6c:36:6b:8e:e8:b1:65:2a:d0:32:94:24:c0:2c:47: 0c:ef:2a:ee:45:0c:44:9e:1d:a8:7c:89:73:6f:ea:a4:5c:09: 50:c1:46:3d:e1:c1:62:29:ea:fb:0a:e1:e3:ab:46:59:b4:54: 91:d6:ec:fe:eb:35:43:92:24:a4:f7:75:2d:c4:7f:b1:9d:5b: de:ed:f5:24:de:cf:0d:a0:e6:96:62:3f:56:21:db:da:a7:af: 5a:80:db:b5:5c:bd:44:0e:fc:50:12:06:da:1b:cb:0a:25:ec: ab:c0:5c:85:96:01:d1:8c:9c:be:3b:41:94:ae:64:cd:e9:3f: 9a:ed:ce:ea:19:72:a9:92:07:9a:97:80:59:d6:0c:26:11:10: 6b:5b:4a:92:3c:40:81:00:ef:55:45:45:cd:da:74:10:55:5d: bc:f9:e0:f4:15:77:e0:27:3e:5b:b3:95:9c:b7:2e:e5:02:6f: c8:ae:5b:ba:d7:10:26:97:38:f9:30:5a:6d:6b:c0:4a:7e:25: 6b:3c:8d:93:30:c0:79:f9:08:24:0c:b1:89:20:43:4c:23:60: 09:3d:3c:6c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5MERFNDM5RDQxNkU3 NUYyMUYwQjE5Q0QyOERCMjE4MTgzOTA1MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+Ppw3/Rb1nyCpc4rHxdmXlkJEFlm9qtyxWa2XK5DyCN7WnFSO 6+m9U/eAtds2lg7VFCl9YxuhDYkBcLhe93nhv1Iys7/Lx3F77qnvOBRlb50Y8WwX IRg3ShI5ZNXHNaXNI4FBgHrxbcCyOrx+VU3OPx5+5QN2u95qvkgvFyHGH6orOJVw kb6KRXX/Bhhs0xVUn9Be8LHlhH6pWj/d60H1sKbAFDnY/i8tS9+/BwjwrsGdUrM3 YA/F2kZVa+7nxunvLF4wfKWtgOAcLt+qCeo/NN4p6O+thb2m9bhOsCod4hk7Mzo7 xiiOj2a+YWr/wmbAzk7MAabSrgO6BxabiRFDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUCQ3kOdQW518h8LGc0o2yGBg5BR8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0NRM2tPZFFXNTE4aDhMR2MwbzJ5R0JnNUJSOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJuoxwwDQYJKoZIhvcNAQELBQADggEB ACFDyu5HcWKUVcXPNHPOzLRjrYTf/1EHyGw06Lg2RlUwHCq+K/A7amw2a47osWUq 0DKUJMAsRwzvKu5FDESeHah8iXNv6qRcCVDBRj3hwWIp6vsK4eOrRlm0VJHW7P7r NUOSJKT3dS3Ef7GdW97t9STezw2g5pZiP1Yh29qnr1qA27VcvUQO/FASBtobywol 7KvAXIWWAdGMnL47QZSuZM3pP5rtzuoZcqmSB5qXgFnWDCYREGtbSpI8QIEA71VF Rc3adBBVXbz54PQVd+AnPluzlZy3LuUCb8iuW7rXECaXOPkwWm1rwEp+JWs8jZMw wHn5CCQMsYkgQ0wjYAk9PGw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:12 2026 by rpki-client