$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWZ9Uypc5fBNPI3WmyvV4dF5B_k.roa File: HWZ9Uypc5fBNPI3WmyvV4dF5B_k.roa (raw, json) Hash identifier: f08lpckWXc8Aw1DQbeAmFmYv2pkyOIpr3QqRI9NXFnE= Subject key identifier: 1D:66:7D:53:2A:5C:E5:F0:4D:3C:8D:D6:9B:2B:D5:E1:D1:79:07:F9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1658 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWZ9Uypc5fBNPI3WmyvV4dF5B_k.roa Signing time: Tue 31 Mar 2026 08:01:37 +0000 ROA not before: Tue 31 Mar 2026 08:01:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5720 (0x1658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1D667D532A5CE5F04D3C8DD69B2BD5E1D17907F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:eb:b9:80:5d:36:5f:df:e6:10:8d:8b:9c: 98:b6:37:30:0a:62:be:e2:1b:f1:5c:db:a3:2e:9f: e3:d8:9e:9f:cf:e6:45:b1:15:ff:8a:dd:82:e4:7d: 2c:1a:35:10:e3:4d:c9:36:27:8e:04:31:25:fa:6c: bf:95:00:77:ea:5e:61:02:09:50:12:db:f6:0a:f4: 80:85:f3:01:c0:c7:d6:2b:b6:a2:48:34:f4:76:4a: 7e:4b:d0:c2:82:02:45:b8:54:9a:15:83:8f:dc:e2: 60:a2:73:50:62:95:d6:83:74:37:02:d8:b6:2f:f5: c1:12:a2:a1:15:2d:01:2b:cc:9f:bd:cb:07:05:ec: a5:78:af:e0:ea:12:47:c2:96:69:7f:54:02:88:46: b8:c0:e8:2f:ed:23:37:a6:5f:c5:20:c8:5b:a8:ce: 9a:35:2d:42:e3:3f:97:b1:be:46:b1:98:a9:32:bd: 82:5f:7c:76:fb:d3:bc:e4:b2:52:fb:48:e6:ed:39: 82:51:b0:b8:37:1a:42:af:eb:f6:79:f1:e9:8a:8d: dc:7c:b5:e4:4e:72:ce:a0:a4:3d:6b:a1:a9:b7:40: 36:67:fd:ff:94:b9:8b:fb:85:8b:df:a4:69:3e:fc: 65:99:14:c8:8d:1f:1b:2e:1e:71:eb:f9:ac:af:ed: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:66:7D:53:2A:5C:E5:F0:4D:3C:8D:D6:9B:2B:D5:E1:D1:79:07:F9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWZ9Uypc5fBNPI3WmyvV4dF5B_k.roa sbgp-ipAddrBlock: critical IPv4: 49.106.222.0/23 Signature Algorithm: sha256WithRSAEncryption 43:c6:2f:64:23:ff:a0:e2:61:6d:e7:25:ad:2f:54:0d:ed:e0: c9:0a:2d:26:07:62:e4:22:39:54:59:2d:e1:b4:1f:55:37:c5: dd:5f:2e:16:07:dd:c5:74:9c:16:0e:f3:c8:c2:ef:ea:81:3a: 45:49:e8:ad:f6:ed:0f:a1:bf:85:cb:fa:7a:1c:32:fc:17:80: 6d:d8:be:44:c5:14:14:fb:6c:a4:23:85:14:09:74:57:b3:0b: 52:b8:63:99:d9:b3:d2:92:68:c3:24:f7:92:97:38:b1:6c:85: 67:a1:28:00:9e:e8:1d:36:bb:93:ce:0b:d2:5a:57:73:17:8a: 94:5b:d2:7b:5e:27:db:ca:58:04:fa:96:99:9a:08:c3:2a:4f: 46:8f:a1:3d:e3:71:48:4f:11:98:55:7d:d1:bf:6a:ea:0f:02: 9b:13:bd:af:31:d0:04:d2:e9:54:48:fc:b1:69:a9:46:a2:1a: 0d:26:fd:38:2d:dc:91:e9:8e:f4:f1:14:5b:d4:f7:48:53:8b: c3:75:1f:75:4a:00:d1:da:a3:f8:1a:8c:70:06:73:b9:6a:52: 1b:c0:ec:cb:46:8c:9f:2d:51:a7:17:bc:12:37:7c:e4:af:94: 5a:e0:96:9b:4b:5e:27:f2:6f:06:5a:79:36:02:50:a3:15:ca: af:db:17:52 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFENjY3RDUzMkE1Q0U1 RjA0RDNDOERENjlCMkJENUUxRDE3OTA3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpveu5gF02X9/mEI2LnJi2NzAKYr7iG/Fc26Mun+PYnp/P5kWx Ff+K3YLkfSwaNRDjTck2J44EMSX6bL+VAHfqXmECCVAS2/YK9ICF8wHAx9YrtqJI NPR2Sn5L0MKCAkW4VJoVg4/c4mCic1BildaDdDcC2LYv9cESoqEVLQErzJ+9ywcF 7KV4r+DqEkfClml/VAKIRrjA6C/tIzemX8UgyFuozpo1LULjP5exvkaxmKkyvYJf fHb707zkslL7SObtOYJRsLg3GkKv6/Z58emKjdx8teROcs6gpD1roam3QDZn/f+U uYv7hYvfpGk+/GWZFMiNHxsuHnHr+ayv7dvHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHWZ9Uypc5fBNPI3WmyvV4dF5B/kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hXWjlVeXBjNWZCTlBJM1dteXZWNGRGNUJfay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExat4wDQYJKoZIhvcNAQELBQADggEB AEPGL2Qj/6DiYW3nJa0vVA3t4MkKLSYHYuQiOVRZLeG0H1U3xd1fLhYH3cV0nBYO 88jC7+qBOkVJ6K327Q+hv4XL+nocMvwXgG3YvkTFFBT7bKQjhRQJdFezC1K4Y5nZ s9KSaMMk95KXOLFshWehKACe6B02u5POC9JaV3MXipRb0nteJ9vKWAT6lpmaCMMq T0aPoT3jcUhPEZhVfdG/auoPApsTva8x0ATS6VRI/LFpqUaiGg0m/Tgt3JHpjvTx FFvU90hTi8N1H3VKANHao/gajHAGc7lqUhvA7MtGjJ8tUacXvBI3fOSvlFrglptL XifybwZaeTYCUKMVyq/bF1I= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:03 2026 by rpki-client