$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HXPnaGZmF-rejYeki33modrxI4c.roa File: HXPnaGZmF-rejYeki33modrxI4c.roa (raw, json) Hash identifier: qpAM+NrD0eBxB3run/ZGRhlDPOqj5GI+SNpA5HPz50Q= Subject key identifier: 1D:73:E7:68:66:66:17:EA:DE:8D:87:A4:8B:7D:E6:A1:DA:F1:23:87 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1677 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HXPnaGZmF-rejYeki33modrxI4c.roa Signing time: Tue 31 Mar 2026 08:01:52 +0000 ROA not before: Tue 31 Mar 2026 08:01:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5751 (0x1677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1D73E768666617EADE8D87A48B7DE6A1DAF12387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:ad:e0:41:d3:eb:37:f3:87:9e:90:62:a3: 56:4d:dc:46:e6:9b:af:19:8a:e2:3e:00:45:d1:d5: 83:e1:3a:d0:1a:9d:88:1e:a7:ff:56:86:3f:e3:66: e9:43:58:b2:ae:8f:6f:14:a2:fd:f7:74:f2:7b:96: fc:aa:4a:19:2d:f8:f6:e9:48:f9:6f:84:53:2f:5e: f6:a7:ce:51:f7:22:30:58:64:80:df:b0:a9:d5:e4: 3f:b7:41:49:5e:06:de:74:fe:8b:99:60:9a:d0:c9: 6c:ee:e0:bb:22:72:cb:4b:b4:d9:a1:60:1b:d4:c8: 9f:2e:79:39:19:22:be:1f:e9:5e:b7:f9:64:cd:f0: c4:58:da:91:44:61:b5:42:89:e9:e4:6f:d9:cd:e7: bf:3e:b5:a7:5d:d4:cd:39:37:3d:04:fc:8f:4d:d6: 93:f4:4c:86:61:66:3a:dd:b3:a5:2e:27:7d:e4:8d: fb:7e:29:4f:9b:1f:f0:8a:51:c4:09:93:df:5b:fd: 3e:fd:f6:62:a0:eb:4b:08:1f:e4:19:c1:61:8a:29: f8:68:c5:86:20:74:4e:e2:19:c8:94:e5:e9:8b:c4: a6:03:10:e8:c1:56:80:a9:b2:a3:2c:69:1b:d6:f0: 81:10:f5:11:62:ba:9c:50:89:3b:a1:1d:35:7d:8f: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:73:E7:68:66:66:17:EA:DE:8D:87:A4:8B:7D:E6:A1:DA:F1:23:87 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HXPnaGZmF-rejYeki33modrxI4c.roa sbgp-ipAddrBlock: critical IPv4: 49.104.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:e6:ef:21:f4:ac:7a:60:23:5c:31:7b:4a:69:3a:aa:f1:7c: c9:c7:9c:b2:93:fc:20:7b:05:34:ed:a4:74:84:9c:31:c8:24: a8:1e:1f:03:a4:a8:b4:59:7b:c4:7b:03:20:68:0b:f4:7b:99: 32:c3:88:3c:83:d2:a6:30:c1:c1:c2:39:45:9e:9b:04:e9:57: a4:4c:50:dd:12:95:4a:06:1c:4a:14:b1:c6:59:bf:52:88:40: d8:0c:16:75:70:44:f0:df:dc:85:01:da:8d:f4:6c:9e:05:54: 9c:3e:61:b5:b8:0e:67:2c:69:1b:9f:e7:7b:16:5b:8a:95:30: 3d:84:0d:76:92:bc:8e:95:03:7c:46:f5:61:97:99:df:fb:bc: 9e:41:03:08:5e:5c:4c:92:4b:ac:2b:b6:43:b4:3e:a6:d2:ba: 6b:e3:de:85:9b:80:f8:78:4c:a3:f4:81:6b:10:f9:89:71:b8: 81:ea:40:dc:3f:b6:70:59:dc:d1:3e:d1:00:d4:15:12:b2:d8: ee:0a:b6:1b:5b:bc:b9:06:7b:fe:51:45:84:b8:b9:3d:48:5d: be:70:57:39:32:40:87:dc:61:af:51:3c:09:36:24:34:af:b6: 2d:60:73:37:cc:ca:74:80:d1:c4:14:90:f0:bf:66:c2:a2:02: d1:0f:76:a7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFENzNFNzY4NjY2NjE3 RUFERThEODdBNDhCN0RFNkExREFGMTIzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtM63gQdPrN/OHnpBio1ZN3Ebmm68ZiuI+AEXR1YPhOtAanYge p/9Whj/jZulDWLKuj28Uov33dPJ7lvyqShkt+PbpSPlvhFMvXvanzlH3IjBYZIDf sKnV5D+3QUleBt50/ouZYJrQyWzu4LsicstLtNmhYBvUyJ8ueTkZIr4f6V63+WTN 8MRY2pFEYbVCienkb9nN578+tadd1M05Nz0E/I9N1pP0TIZhZjrds6UuJ33kjft+ KU+bH/CKUcQJk99b/T799mKg60sIH+QZwWGKKfhoxYYgdE7iGciU5emLxKYDEOjB VoCpsqMsaRvW8IEQ9RFiupxQiTuhHTV9j//dAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHXPnaGZmF+rejYeki33modrxI4cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hYUG5hR1ptRi1yZWpZZWtpMzNtb2RyeEk0Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaC0wDQYJKoZIhvcNAQELBQADggEB AH3m7yH0rHpgI1wxe0ppOqrxfMnHnLKT/CB7BTTtpHSEnDHIJKgeHwOkqLRZe8R7 AyBoC/R7mTLDiDyD0qYwwcHCOUWemwTpV6RMUN0SlUoGHEoUscZZv1KIQNgMFnVw RPDf3IUB2o30bJ4FVJw+YbW4DmcsaRuf53sWW4qVMD2EDXaSvI6VA3xG9WGXmd/7 vJ5BAwheXEySS6wrtkO0PqbSumvj3oWbgPh4TKP0gWsQ+YlxuIHqQNw/tnBZ3NE+ 0QDUFRKy2O4KthtbvLkGe/5RRYS4uT1IXb5wVzkyQIfcYa9RPAk2JDSvti1gczfM ynSA0cQUkPC/ZsKiAtEPdqc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:37 2026 by rpki-client