$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hg-WwavRS9gq_E_VPLsNxNe1JHA.roa File: Hg-WwavRS9gq_E_VPLsNxNe1JHA.roa (raw, json) Hash identifier: RCNL38xthWX2SJiuPPqNQVhCJQjAUvakOC/eiuhjFgo= Subject key identifier: 1E:0F:96:C1:AB:D1:4B:D8:2A:FC:4F:D5:3C:BB:0D:C4:D7:B5:24:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 138F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hg-WwavRS9gq_E_VPLsNxNe1JHA.roa Signing time: Tue 31 Mar 2026 07:55:50 +0000 ROA not before: Tue 31 Mar 2026 07:55:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5007 (0x138f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1E0F96C1ABD14BD82AFC4FD53CBB0DC4D7B52470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:77:07:a4:c1:21:d6:26:d2:3f:2e:04:8c: 95:55:c2:4b:ac:2c:1a:19:a5:d6:32:a5:30:6c:c3: 60:33:46:b8:ac:b6:77:8b:4d:b4:1f:10:88:c8:c7: 0a:1f:69:f9:2a:03:36:3a:35:28:ad:50:e0:4b:42: 7c:56:52:4e:41:bd:d7:26:8d:3c:24:05:88:ac:31: d8:ba:24:d5:bf:c2:b6:b6:6d:79:9e:6d:9b:63:c9: 76:a8:d9:4b:b1:64:7b:66:6a:c7:61:6a:51:ed:7d: ab:54:57:2b:e4:fc:d7:e4:30:ee:6d:f5:5e:7b:0c: 9e:c3:f4:80:ca:48:98:24:b1:4e:c2:9c:a6:07:56: a4:5e:a2:5a:f4:d7:e1:36:8d:ca:bc:67:cf:80:e1: 60:85:07:9d:a9:20:6c:35:49:2d:b6:49:bf:f2:9c: d1:80:95:e0:91:ad:2e:19:58:b6:e3:ed:f7:f5:b1: c9:6b:45:7e:ee:0b:db:b9:2d:7a:bb:a7:4c:94:23: 83:a2:fd:27:7c:d3:b9:4a:bf:3d:4d:9d:39:6b:90: 49:ab:be:02:9a:53:8f:29:d5:9e:58:be:44:18:4a: 3e:4c:61:8d:d9:27:7d:ac:ca:7f:dc:32:b7:94:a4: 86:d4:e1:37:c8:a7:13:8c:dd:b3:6e:45:38:a4:9d: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0F:96:C1:AB:D1:4B:D8:2A:FC:4F:D5:3C:BB:0D:C4:D7:B5:24:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hg-WwavRS9gq_E_VPLsNxNe1JHA.roa sbgp-ipAddrBlock: critical IPv4: 49.97.101.0/24 Signature Algorithm: sha256WithRSAEncryption a4:98:71:c4:ce:9b:bd:c3:cb:10:37:12:6b:57:f7:c3:0f:9d: 2b:c5:62:fd:0f:d0:89:13:29:54:dc:cd:8e:d9:22:09:e9:c5: c7:20:80:ab:55:fa:6f:45:7c:bd:fb:f6:c4:f3:b3:6a:f8:b3: 66:d8:26:55:32:b5:a7:66:7c:3b:2d:5f:3e:16:cc:d6:71:eb: 5d:7e:86:ec:cd:58:dd:13:27:9d:9f:9c:43:ec:9d:7b:12:8a: 35:06:0d:30:49:0e:33:21:33:52:15:0e:07:9b:5f:92:5d:92: 3e:16:28:14:e5:0e:c3:fc:39:0e:0d:3f:c7:2b:dc:6f:ac:d6: 45:eb:eb:50:dd:ff:75:cd:41:a9:54:92:1f:40:c0:c6:99:82: 23:2e:dc:db:46:4c:0f:6b:d2:e5:48:c9:d1:cb:db:79:38:0c: 17:9f:5a:bc:e9:70:3f:5c:ba:39:f8:12:be:7f:cc:5f:c6:2e: db:c1:8b:5a:d6:f0:bb:65:61:91:93:36:98:7b:13:77:32:ac: 0f:bb:69:76:66:7e:18:b5:99:9e:3d:eb:1f:29:85:4d:52:91: a8:a9:da:0b:d2:95:ea:23:4d:b3:07:70:df:4f:7d:7a:b8:b2: 40:18:14:a1:75:3b:59:57:55:5f:95:23:c7:df:f1:9f:60:df: 6c:5b:49:75 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFMEY5NkMxQUJEMTRC RDgyQUZDNEZENTNDQkIwREM0RDdCNTI0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKsXcHpMEh1ibSPy4EjJVVwkusLBoZpdYypTBsw2AzRristneL TbQfEIjIxwofafkqAzY6NSitUOBLQnxWUk5BvdcmjTwkBYisMdi6JNW/wra2bXme bZtjyXao2UuxZHtmasdhalHtfatUVyvk/NfkMO5t9V57DJ7D9IDKSJgksU7CnKYH VqReolr01+E2jcq8Z8+A4WCFB52pIGw1SS22Sb/ynNGAleCRrS4ZWLbj7ff1sclr RX7uC9u5LXq7p0yUI4Oi/Sd807lKvz1NnTlrkEmrvgKaU48p1Z5YvkQYSj5MYY3Z J32syn/cMreUpIbU4TfIpxOM3bNuRTiknRfVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHg+WwavRS9gq/E/VPLsNxNe1JHAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hnLVd3YXZSUzlncV9FX1ZQTHNOeE5lMUpIQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYWUwDQYJKoZIhvcNAQELBQADggEB AKSYccTOm73DyxA3EmtX98MPnSvFYv0P0IkTKVTczY7ZIgnpxccggKtV+m9FfL37 9sTzs2r4s2bYJlUytadmfDstXz4WzNZx611+huzNWN0TJ52fnEPsnXsSijUGDTBJ DjMhM1IVDgebX5Jdkj4WKBTlDsP8OQ4NP8cr3G+s1kXr61Dd/3XNQalUkh9AwMaZ giMu3NtGTA9r0uVIydHL23k4DBefWrzpcD9cujn4Er5/zF/GLtvBi1rW8LtlYZGT Nph7E3cyrA+7aXZmfhi1mZ496x8phU1Skaip2gvSleojTbMHcN9PfXq4skAYFKF1 O1lXVV+VI8ff8Z9g32xbSXU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:46 2026 by rpki-client