$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FmvIGH-1_qmSTK-S4pWbd_oAoQU.roa File: FmvIGH-1_qmSTK-S4pWbd_oAoQU.roa (raw, json) Hash identifier: HQCDC1BcqmYPOlt9Itk/K8zUO7E/rwjqQud+uhhQD6M= Subject key identifier: 16:6B:C8:18:7F:B5:FE:A9:92:4C:AF:92:E2:95:9B:77:FA:00:A1:05 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1680 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FmvIGH-1_qmSTK-S4pWbd_oAoQU.roa Signing time: Tue 31 Mar 2026 08:01:55 +0000 ROA not before: Tue 31 Mar 2026 08:01:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5760 (0x1680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=166BC8187FB5FEA9924CAF92E2959B77FA00A105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e5:33:9f:60:d0:74:c1:c9:3d:b9:83:e0:60: 83:60:cf:16:39:2f:9d:07:d5:b0:79:84:8a:95:de: 8a:72:be:ad:02:4a:be:c8:66:df:21:7e:63:f2:34: 45:ff:ca:42:85:6b:cf:76:df:a8:fd:30:30:e8:68: 00:91:ef:9d:42:2f:f5:32:b7:cb:3c:20:94:5c:ed: 44:ca:fd:aa:36:d7:e8:27:48:7f:dd:85:6c:f6:99: fc:3e:eb:6b:26:28:6c:f8:03:25:85:00:57:3e:48: 67:22:91:cf:e4:8f:79:56:ae:b4:c4:a3:f7:47:63: 96:d4:db:49:d9:51:9a:c2:61:0d:96:33:51:d0:27: d0:86:aa:81:19:e1:de:8f:45:45:7f:01:d4:9d:91: a7:8e:9e:fd:74:56:8e:5f:56:c5:30:eb:9d:33:8f: fa:a2:26:1f:52:31:43:4c:1e:e5:fa:37:b6:ef:e1: f0:95:83:56:d8:0b:b2:39:12:58:9d:62:c5:27:e7: f0:ed:b1:50:3a:88:52:0b:e2:4a:21:7e:bd:31:38: 3b:3b:9c:80:ad:7d:97:b7:ac:d0:22:18:0c:a8:35: 61:27:51:34:ed:a7:01:71:92:78:74:cd:e9:67:a9: 77:a7:a8:df:98:df:43:91:20:3b:b4:b4:01:d1:ed: 8b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6B:C8:18:7F:B5:FE:A9:92:4C:AF:92:E2:95:9B:77:FA:00:A1:05 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FmvIGH-1_qmSTK-S4pWbd_oAoQU.roa sbgp-ipAddrBlock: critical IPv4: 49.104.224.0/20 Signature Algorithm: sha256WithRSAEncryption e3:cd:13:e1:be:73:58:bd:fd:f5:1a:66:86:4c:9c:34:79:40: b4:4f:3a:9f:b3:ed:6e:74:74:54:76:22:ac:40:de:02:4c:e0: 94:c0:92:92:01:bd:a9:fa:19:89:73:52:7b:9f:1f:94:6b:6f: 2d:7f:cc:28:aa:ea:d5:8f:b6:b3:dc:cd:3c:ca:80:f4:ac:5c: 7a:a2:79:20:88:da:56:4a:fa:2d:c0:94:63:2f:00:8d:29:6b: 71:8d:cb:e7:15:74:87:83:0b:b6:a6:e9:91:27:ec:b3:0c:98: 0a:42:2b:05:75:14:82:02:96:75:ea:ea:9d:92:ca:0c:e1:ac: 72:16:ef:13:50:af:b3:2f:38:55:d4:cc:c0:b6:d4:93:70:c5: 32:69:32:78:e3:90:ba:60:05:db:73:df:ab:15:43:37:4b:2b: 88:7b:85:46:db:b8:2e:94:de:b1:89:7e:77:48:6e:f3:76:0b: 83:d8:40:62:9f:7a:18:9b:74:3d:3d:6d:31:0b:a2:90:89:bb: 8b:5a:d8:1e:19:07:96:db:38:8e:ef:a7:32:ec:0b:14:22:e1: 58:f7:be:7d:19:a3:9f:d4:3d:64:e2:62:c1:7e:71:cc:63:1f: 98:13:ef:db:e6:12:95:f9:8f:92:e4:56:99:2d:6f:ae:f0:0e: 35:a5:12:f7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE2NkJDODE4N0ZCNUZF QTk5MjRDQUY5MkUyOTU5Qjc3RkEwMEExMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDz5TOfYNB0wck9uYPgYINgzxY5L50H1bB5hIqV3opyvq0CSr7I Zt8hfmPyNEX/ykKFa89236j9MDDoaACR751CL/Uyt8s8IJRc7UTK/ao21+gnSH/d hWz2mfw+62smKGz4AyWFAFc+SGcikc/kj3lWrrTEo/dHY5bU20nZUZrCYQ2WM1HQ J9CGqoEZ4d6PRUV/AdSdkaeOnv10Vo5fVsUw650zj/qiJh9SMUNMHuX6N7bv4fCV g1bYC7I5ElidYsUn5/DtsVA6iFIL4kohfr0xODs7nICtfZe3rNAiGAyoNWEnUTTt pwFxknh0zelnqXenqN+Y30ORIDu0tAHR7YsrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUFmvIGH+1/qmSTK+S4pWbd/oAoQUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0ZtdklHSC0xX3FtU1RLLVM0cFdiZF9vQW9RVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxaOAwDQYJKoZIhvcNAQELBQADggEB AOPNE+G+c1i9/fUaZoZMnDR5QLRPOp+z7W50dFR2IqxA3gJM4JTAkpIBvan6GYlz UnufH5Rrby1/zCiq6tWPtrPczTzKgPSsXHqieSCI2lZK+i3AlGMvAI0pa3GNy+cV dIeDC7am6ZEn7LMMmApCKwV1FIIClnXq6p2SygzhrHIW7xNQr7MvOFXUzMC21JNw xTJpMnjjkLpgBdtz36sVQzdLK4h7hUbbuC6U3rGJfndIbvN2C4PYQGKfehibdD09 bTELopCJu4ta2B4ZB5bbOI7vpzLsCxQi4Vj3vn0Zo5/UPWTiYsF+ccxjH5gT79vm EpX5j5LkVpktb67wDjWlEvc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:32 2026 by rpki-client