$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HcIF9-_9MUEZ6wJVGi6DNRg1j7c.roa File: HcIF9-_9MUEZ6wJVGi6DNRg1j7c.roa (raw, json) Hash identifier: gtsgZijQ9DWk6yEv34NvSwzwAKkZm9vVYpHDsGJue9Q= Subject key identifier: 1D:C2:05:F7:EF:FD:31:41:19:EB:02:55:1A:2E:83:35:18:35:8F:B7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1369 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HcIF9-_9MUEZ6wJVGi6DNRg1j7c.roa Signing time: Tue 31 Mar 2026 07:55:31 +0000 ROA not before: Tue 31 Mar 2026 07:55:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4969 (0x1369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1DC205F7EFFD314119EB02551A2E833518358FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:ee:43:ea:4c:da:c2:b7:45:36:55:d9:21: e1:f1:71:3f:aa:cd:85:dc:07:4a:89:95:04:5e:a1: 5d:41:5e:3b:a3:45:c2:1d:01:21:88:f7:b9:4b:c0: d5:9d:8c:98:94:81:e5:5d:7a:7d:90:49:3e:a8:94: f5:0d:43:27:25:da:a2:ae:8e:14:76:83:9a:ab:31: 9e:70:e1:16:c9:1f:ac:dd:12:b7:fa:49:a8:c7:06: 6f:8a:57:d3:cc:f0:2d:39:12:0f:69:ba:7a:b2:03: 3e:4b:7e:81:b1:fa:5a:68:78:6f:31:0a:90:a7:49: 61:81:db:df:f6:90:42:66:d1:da:37:4e:2c:52:13: f7:2f:35:93:b8:9b:5e:cf:a1:2e:e1:65:16:0d:8d: 9d:6c:0c:c3:34:1d:df:fc:35:1a:70:d8:5c:a2:b6: 7d:cb:eb:35:ee:ee:a9:3e:cc:ac:a4:42:8c:8e:e2: 9f:60:33:6f:00:bd:f8:3a:c7:85:0a:9f:48:09:2d: c1:77:e1:9a:27:cd:4b:9e:8d:33:6d:dd:3f:cd:a1: 42:3d:97:9a:ac:2f:89:c0:67:04:ef:82:38:fa:b8: 51:16:98:d6:1b:d4:7f:84:27:b7:65:5c:85:cc:f9: 10:03:de:de:93:80:cc:9e:84:24:4d:38:1e:62:3c: fc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:05:F7:EF:FD:31:41:19:EB:02:55:1A:2E:83:35:18:35:8F:B7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HcIF9-_9MUEZ6wJVGi6DNRg1j7c.roa sbgp-ipAddrBlock: critical IPv4: 49.97.103.0/24 Signature Algorithm: sha256WithRSAEncryption 03:b1:f0:09:a2:15:da:ff:44:b4:b6:43:73:1f:b3:6d:87:19: 45:5a:df:f5:a8:30:da:bc:67:ce:e6:7f:78:e1:2d:1a:b8:a3: 41:a6:71:15:55:fb:c7:21:fc:cb:e8:bc:ac:61:32:f6:cd:d7: d6:fc:c8:22:72:56:3b:84:85:5a:85:81:75:50:e0:58:b7:3e: 61:d7:ed:81:5d:45:97:8c:7b:05:fe:8c:d0:fe:40:30:7f:09: 43:13:16:10:5c:05:e1:07:7c:f6:a5:92:1a:79:83:3c:45:7d: 16:ba:88:a9:1c:87:c1:a5:e5:49:6e:00:20:c4:95:15:cf:90: 94:89:70:18:ae:b7:69:00:28:93:eb:53:8e:e0:33:cd:a7:19: 2e:09:34:91:14:79:1d:ee:b0:8d:08:cf:bf:ce:fc:fe:73:ad: 03:77:66:c2:5c:3c:dd:96:58:45:6c:b6:c0:68:5e:58:9f:49: c5:1e:fa:12:1c:7f:37:08:17:4b:0a:ab:00:f7:53:14:05:ea: 60:53:8b:36:48:84:86:32:57:d4:17:67:e6:cf:ee:f1:95:5d: d3:98:62:3d:71:ac:ab:87:0c:86:18:fc:8e:f2:13:3e:21:17: d4:a7:8a:d6:47:48:53:9a:0e:c7:ba:13:43:8f:56:b9:f2:d1: 04:94:f5:22 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE2kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFEQzIwNUY3RUZGRDMx NDExOUVCMDI1NTFBMkU4MzM1MTgzNThGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOAu5D6kzawrdFNlXZIeHxcT+qzYXcB0qJlQReoV1BXjujRcId ASGI97lLwNWdjJiUgeVden2QST6olPUNQycl2qKujhR2g5qrMZ5w4RbJH6zdErf6 SajHBm+KV9PM8C05Eg9punqyAz5LfoGx+lpoeG8xCpCnSWGB29/2kEJm0do3TixS E/cvNZO4m17PoS7hZRYNjZ1sDMM0Hd/8NRpw2Fyitn3L6zXu7qk+zKykQoyO4p9g M28Avfg6x4UKn0gJLcF34ZonzUuejTNt3T/NoUI9l5qsL4nAZwTvgjj6uFEWmNYb 1H+EJ7dlXIXM+RAD3t6TgMyehCRNOB5iPPzXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHcIF9+/9MUEZ6wJVGi6DNRg1j7cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hjSUY5LV85TVVFWjZ3SlZHaTZETlJnMWo3Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYWcwDQYJKoZIhvcNAQELBQADggEB AAOx8AmiFdr/RLS2Q3Mfs22HGUVa3/WoMNq8Z87mf3jhLRq4o0GmcRVV+8ch/Mvo vKxhMvbN19b8yCJyVjuEhVqFgXVQ4Fi3PmHX7YFdRZeMewX+jND+QDB/CUMTFhBc BeEHfPalkhp5gzxFfRa6iKkch8Gl5UluACDElRXPkJSJcBiut2kAKJPrU47gM82n GS4JNJEUeR3usI0Iz7/O/P5zrQN3ZsJcPN2WWEVstsBoXlifScUe+hIcfzcIF0sK qwD3UxQF6mBTizZIhIYyV9QXZ+bP7vGVXdOYYj1xrKuHDIYY/I7yEz4hF9SnitZH SFOaDse6E0OPVrny0QSU9SI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:13 2026 by rpki-client