$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GBhpwtcVnsFYPec79YaCVdhxE0o.roa File: GBhpwtcVnsFYPec79YaCVdhxE0o.roa (raw, json) Hash identifier: ltW8cwDE+04Pp/TUq4NSIVjTQgMyZ8+PYX+ZVt+nwnA= Subject key identifier: 18:18:69:C2:D7:15:9E:C1:58:3D:E7:3B:F5:86:82:55:D8:71:13:4A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13C2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GBhpwtcVnsFYPec79YaCVdhxE0o.roa Signing time: Tue 31 Mar 2026 07:56:14 +0000 ROA not before: Tue 31 Mar 2026 07:56:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5058 (0x13c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=181869C2D7159EC1583DE73BF5868255D871134A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:1a:6f:08:58:06:e5:7c:0d:e2:bd:d3:08: 85:60:fa:df:0e:46:58:f2:a2:51:28:e0:e8:a3:2b: eb:3a:91:ed:7d:a3:8d:b9:33:73:e6:a4:75:b4:af: d3:51:2e:58:96:6f:f2:27:e3:e6:7d:35:b7:1e:8b: ee:8d:56:57:88:1d:cf:8e:0d:58:5e:da:1b:30:39: cf:0a:31:d9:c2:df:f1:f5:3d:ec:02:6d:d6:e8:90: 97:54:bc:33:42:50:7c:83:ff:62:a1:f8:06:f3:5c: 02:0d:96:f6:47:4d:3a:42:ba:12:13:83:75:8c:75: e8:44:48:cb:0b:13:94:5c:d8:c8:cf:4e:f1:5f:55: 5d:9d:39:90:e5:f3:d0:35:96:17:d0:3b:f5:a1:67: 78:3f:88:b9:3d:2d:c0:76:08:d0:b2:18:76:dc:b3: 09:7a:41:b3:2b:97:b3:dc:0f:42:4c:42:0e:10:0c: ac:5b:88:2e:cb:5b:94:f3:22:e6:6d:2f:55:f2:d4: aa:76:24:c0:6e:85:8e:25:50:70:f2:c8:41:71:ec: 13:2a:3e:c2:d4:b2:ea:ce:4e:e0:1e:82:8e:eb:6d: da:de:92:51:0a:1c:28:fa:37:92:13:6a:a0:66:f2: ab:cf:35:ee:04:a0:55:1b:05:fc:a9:3c:70:c4:bc: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:18:69:C2:D7:15:9E:C1:58:3D:E7:3B:F5:86:82:55:D8:71:13:4A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GBhpwtcVnsFYPec79YaCVdhxE0o.roa sbgp-ipAddrBlock: critical IPv4: 49.98.200.0/22 Signature Algorithm: sha256WithRSAEncryption 78:9d:d1:23:28:b4:3f:8c:87:d1:b4:4b:8c:99:cc:8f:45:61: d9:71:08:fb:94:61:d7:86:d4:74:ce:de:81:ef:d7:fe:5d:4c: ed:f4:91:09:84:c5:ab:e8:67:ca:97:a1:ad:53:1d:3a:43:63: c4:d6:9b:a3:58:7d:6f:b6:39:33:34:87:7f:d6:c2:3c:ea:37: c8:4e:90:ce:39:9b:0b:aa:f6:c4:06:59:63:00:84:d3:6a:e0: 99:95:74:bd:e9:6a:77:d2:26:f1:d1:b8:d1:22:7d:63:db:2f: 81:5e:61:e1:3d:df:0e:8e:12:ff:b7:68:a7:53:f0:7d:1a:81: 08:53:f5:35:61:68:c9:3a:c6:ec:6b:b7:e9:6d:32:be:04:8b: 89:41:7c:9f:05:a3:8f:9e:4a:11:f0:5d:69:87:ac:e9:09:ad: 67:ca:19:31:ee:d3:07:95:aa:1c:d7:20:93:f0:db:75:82:06: 71:5d:e6:9e:d9:5d:ee:a0:2c:10:49:0f:40:17:20:5d:b7:e4: 13:58:49:60:30:41:0a:10:e4:76:4f:6b:43:cc:6c:71:d6:36: ec:fa:12:35:a4:57:1e:75:98:c2:b7:56:f5:73:35:df:e8:68: c8:e3:9d:8c:e4:1e:65:db:58:dd:19:a6:be:8d:67:55:2b:ed: 52:76:34:1a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4MTg2OUMyRDcxNTlF QzE1ODNERTczQkY1ODY4MjU1RDg3MTEzNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC0xpvCFgG5XwN4r3TCIVg+t8ORljyolEo4OijK+s6ke19o425 M3PmpHW0r9NRLliWb/In4+Z9Nbcei+6NVleIHc+ODVhe2hswOc8KMdnC3/H1PewC bdbokJdUvDNCUHyD/2Kh+AbzXAINlvZHTTpCuhITg3WMdehESMsLE5Rc2MjPTvFf VV2dOZDl89A1lhfQO/WhZ3g/iLk9LcB2CNCyGHbcswl6QbMrl7PcD0JMQg4QDKxb iC7LW5TzIuZtL1Xy1Kp2JMBuhY4lUHDyyEFx7BMqPsLUsurOTuAego7rbdreklEK HCj6N5ITaqBm8qvPNe4EoFUbBfypPHDEvHKFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUGBhpwtcVnsFYPec79YaCVdhxE0owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0dCaHB3dGNWbnNGWVBlYzc5WWFDVmRoeEUwby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYsgwDQYJKoZIhvcNAQELBQADggEB AHid0SMotD+Mh9G0S4yZzI9FYdlxCPuUYdeG1HTO3oHv1/5dTO30kQmExavoZ8qX oa1THTpDY8TWm6NYfW+2OTM0h3/WwjzqN8hOkM45mwuq9sQGWWMAhNNq4JmVdL3p anfSJvHRuNEifWPbL4FeYeE93w6OEv+3aKdT8H0agQhT9TVhaMk6xuxrt+ltMr4E i4lBfJ8Fo4+eShHwXWmHrOkJrWfKGTHu0weVqhzXIJPw23WCBnFd5p7ZXe6gLBBJ D0AXIF235BNYSWAwQQoQ5HZPa0PMbHHWNuz6EjWkVx51mMK3VvVzNd/oaMjjnYzk HmXbWN0Zpr6NZ1Ur7VJ2NBo= -----END CERTIFICATE-----Generated at Tue Apr 7 22:25:15 2026 by rpki-client