$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D6rTFnRda3Dh2XEZcQekpvAQj4M.roa File: D6rTFnRda3Dh2XEZcQekpvAQj4M.roa (raw, json) Hash identifier: ExryDs4gN5UCbi/kAv+jPzk4/WVkNJ7K6aXnafgbSbY= Subject key identifier: 0F:AA:D3:16:74:5D:6B:70:E1:D9:71:19:71:07:A4:A6:F0:10:8F:83 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 140A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D6rTFnRda3Dh2XEZcQekpvAQj4M.roa Signing time: Tue 31 Mar 2026 07:56:45 +0000 ROA not before: Tue 31 Mar 2026 07:56:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5130 (0x140a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0FAAD316745D6B70E1D971197107A4A6F0108F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:46:fe:46:e2:26:9f:0c:39:88:89:fa:7d: 06:a4:84:d1:a4:50:5b:5d:54:fe:66:33:18:dd:19: 18:0e:39:7f:3a:ee:75:dc:99:95:72:f6:ae:2b:cd: 10:83:f0:49:9a:8d:f0:85:4e:3b:a9:9f:5d:df:a4: 45:77:05:a0:9f:db:0b:44:f4:30:f2:b5:37:ce:fa: c4:62:2b:08:90:38:9b:89:66:8a:19:7b:b5:e8:87: 65:89:b2:ad:9d:2a:c5:24:4a:c1:14:f1:f7:90:a4: 56:aa:b7:94:24:50:1d:ab:f5:0e:b5:00:01:31:da: b5:6a:5e:f2:88:89:0b:cd:93:aa:ef:2f:65:0e:d7: 24:b4:40:06:e4:96:9c:82:ee:da:18:33:e2:e3:a5: f6:c5:86:ca:4a:a3:42:89:9f:56:3d:e1:55:df:49: b4:e9:f0:5f:ac:b2:8a:79:76:ff:a9:8c:f4:ca:f3: 64:fc:57:5e:eb:4e:53:96:5a:c6:44:1a:56:8f:d6: cb:4e:23:a2:2d:e4:cb:e4:5c:6c:8f:8c:db:cb:4e: 9b:7a:63:a5:43:f0:8f:07:87:46:d2:bd:1b:3f:28: c7:41:0b:ab:c8:ae:48:e8:ce:e5:30:3e:ae:a9:c2: f5:95:37:da:ef:ea:46:6c:83:74:8b:56:22:5a:c3: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AA:D3:16:74:5D:6B:70:E1:D9:71:19:71:07:A4:A6:F0:10:8F:83 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D6rTFnRda3Dh2XEZcQekpvAQj4M.roa sbgp-ipAddrBlock: critical IPv4: 49.98.12.0/22 Signature Algorithm: sha256WithRSAEncryption 73:3d:e8:02:3d:70:24:bc:ef:09:ed:9e:8e:cf:ee:d5:24:34: 06:f7:06:4c:19:56:49:c4:37:cd:27:3d:07:62:99:48:d0:b1: 31:1c:a6:7b:0c:5d:bc:11:61:8a:ee:43:d0:c4:5f:a7:c9:b0: 25:46:81:82:1e:89:b3:fb:e0:38:b5:62:15:c3:3c:bf:92:75: 4c:1b:85:98:94:1f:80:04:59:02:c0:53:34:31:d8:0c:5b:e6: fb:6e:d2:4c:83:06:d9:d5:a4:35:60:9f:f8:71:93:8f:1a:57: 87:78:ab:ae:9f:2f:89:15:f7:b3:de:e1:bd:b5:83:fc:e5:34: 73:da:f1:aa:53:ca:e8:1d:f2:cb:4d:46:c2:b1:4c:d9:97:42: 3c:db:1b:f7:97:f3:44:a4:1d:6a:e6:15:75:5f:28:1f:3c:27: 33:a7:84:ff:c9:67:dc:03:b7:d9:58:68:7d:09:89:ea:fc:a1: 99:28:32:56:3f:0b:7f:95:a6:ec:b7:f0:08:aa:c3:93:d0:63: d8:22:d3:91:e4:29:79:99:b6:f5:29:d4:31:40:98:da:76:eb: 0b:48:b2:7b:31:a5:6d:f8:82:c2:be:74:8f:e8:5a:ce:ef:d9: 6d:e5:5a:aa:52:3a:f5:71:15:64:dd:e4:66:9a:a5:5b:b2:4b: 38:8c:6d:e1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGQUFEMzE2NzQ1RDZC NzBFMUQ5NzExOTcxMDdBNEE2RjAxMDhGODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJjEb+RuImnww5iIn6fQakhNGkUFtdVP5mMxjdGRgOOX867nXc mZVy9q4rzRCD8EmajfCFTjupn13fpEV3BaCf2wtE9DDytTfO+sRiKwiQOJuJZooZ e7Xoh2WJsq2dKsUkSsEU8feQpFaqt5QkUB2r9Q61AAEx2rVqXvKIiQvNk6rvL2UO 1yS0QAbklpyC7toYM+LjpfbFhspKo0KJn1Y94VXfSbTp8F+ssop5dv+pjPTK82T8 V17rTlOWWsZEGlaP1stOI6It5MvkXGyPjNvLTpt6Y6VD8I8Hh0bSvRs/KMdBC6vI rkjozuUwPq6pwvWVN9rv6kZsg3SLViJaw379AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUD6rTFnRda3Dh2XEZcQekpvAQj4MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0Q2clRGblJkYTNEaDJYRVpjUWVrcHZBUWo0TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYgwwDQYJKoZIhvcNAQELBQADggEB AHM96AI9cCS87wntno7P7tUkNAb3BkwZVknEN80nPQdimUjQsTEcpnsMXbwRYYru Q9DEX6fJsCVGgYIeibP74Di1YhXDPL+SdUwbhZiUH4AEWQLAUzQx2Axb5vtu0kyD BtnVpDVgn/hxk48aV4d4q66fL4kV97Pe4b21g/zlNHPa8apTyugd8stNRsKxTNmX QjzbG/eX80SkHWrmFXVfKB88JzOnhP/JZ9wDt9lYaH0Jier8oZkoMlY/C3+Vpuy3 8Aiqw5PQY9gi05HkKXmZtvUp1DFAmNp26wtIsnsxpW34gsK+dI/oWs7v2W3lWqpS OvVxFWTd5GaapVuySziMbeE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:17 2026 by rpki-client