$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HsBmk_4UZ4GCo8NfvHo4UAkCkVo.roa File: HsBmk_4UZ4GCo8NfvHo4UAkCkVo.roa (raw, json) Hash identifier: Xt1EfZVkh0CApY2AMKZhXvzcNaAr6HTTfxFaiu3gPhg= Subject key identifier: 1E:C0:66:93:FE:14:67:81:82:A3:C3:5F:BC:7A:38:50:09:02:91:5A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1705 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HsBmk_4UZ4GCo8NfvHo4UAkCkVo.roa Signing time: Tue 31 Mar 2026 08:02:58 +0000 ROA not before: Tue 31 Mar 2026 08:02:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5893 (0x1705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1EC06693FE14678182A3C35FBC7A38500902915A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:eb:c6:7c:4b:29:ca:1f:27:04:9f:df:4f: a5:59:a8:28:72:e4:31:3d:73:d6:ae:6a:59:1e:9e: 1f:e9:d9:ee:42:56:79:2b:d8:0f:6e:fb:98:ff:be: e2:b0:de:67:cb:4d:a0:b8:5b:20:d6:11:24:a3:d6: 20:18:1a:41:0e:78:7b:c3:98:74:6b:6c:6f:b4:95: 23:95:a4:4a:30:54:88:ba:28:f4:3a:70:59:70:91: a4:62:a0:66:1d:ba:ab:6d:9b:e2:94:d4:a0:ea:84: f5:b7:d4:7b:b3:de:58:0a:20:c6:a6:5a:63:69:9f: 78:22:f3:6d:e6:44:c2:c8:60:f8:47:14:76:a4:74: 0d:c2:a4:7e:1b:c9:4c:92:5a:f8:63:45:0e:d7:23: 04:ca:1b:06:45:47:65:cc:f1:44:d2:64:91:4d:fa: 09:19:0d:3f:8e:b2:1c:1c:da:b0:ef:83:af:4f:29: 8b:1d:95:22:ff:7c:3c:e1:b9:27:f0:c4:e0:6a:ae: 44:72:81:1e:6c:d0:18:41:95:aa:b3:af:31:be:5c: 36:52:96:4e:4f:f5:48:11:30:75:f2:23:b3:a7:77: 26:9b:9c:dc:f2:a0:a4:76:a1:6f:ed:ad:34:9b:50: a9:9c:fb:0c:bd:e4:95:96:23:e4:cc:18:64:dd:c1: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C0:66:93:FE:14:67:81:82:A3:C3:5F:BC:7A:38:50:09:02:91:5A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HsBmk_4UZ4GCo8NfvHo4UAkCkVo.roa sbgp-ipAddrBlock: critical IPv4: 211.14.90.0/23 Signature Algorithm: sha256WithRSAEncryption ca:d1:14:87:58:c7:6e:10:b5:90:9b:1d:84:5d:36:ca:f1:67: e7:3e:4b:c1:b8:f0:a9:df:e3:7d:7b:c2:da:97:0f:d5:fc:e6: 7e:36:90:23:ad:9c:e0:39:0b:9b:a3:1e:9f:b9:93:ca:c4:e7: dc:4a:f7:91:1a:21:84:94:97:be:5a:b5:b9:58:63:3f:8c:43: 2a:55:09:8e:6a:4e:56:8c:5b:50:90:9f:78:2e:ce:78:f4:50: 52:e6:0a:65:42:a1:71:7e:4d:33:6f:55:c2:80:94:d5:9d:66: 54:41:1d:18:9f:02:22:48:6f:74:df:00:b5:35:c6:bd:e3:ee: 0f:84:b2:bb:ae:5d:6e:16:a7:ef:8d:a0:1d:6d:01:a1:15:ba: 10:21:d9:d9:8d:69:c8:6e:2d:92:56:1c:08:e2:04:12:da:9f: 47:64:9f:f0:54:39:d5:a4:30:ee:b8:63:7c:67:00:d6:2d:92: a7:a5:d0:ec:4d:da:0b:ea:ae:96:3c:19:04:3e:cf:53:b4:80: a4:48:d9:d7:50:8a:fb:fe:78:6b:33:fd:ce:f4:9e:02:5b:f2: e1:52:6c:4b:64:cb:36:91:58:f1:55:3a:2a:7b:8b:25:4f:82: fc:41:b4:e0:79:9d:eb:aa:cf:82:23:0e:90:5e:81:25:22:5c: 69:2c:04:1e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFQzA2NjkzRkUxNDY3 ODE4MkEzQzM1RkJDN0EzODUwMDkwMjkxNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKe+vGfEspyh8nBJ/fT6VZqChy5DE9c9aualkenh/p2e5CVnkr 2A9u+5j/vuKw3mfLTaC4WyDWESSj1iAYGkEOeHvDmHRrbG+0lSOVpEowVIi6KPQ6 cFlwkaRioGYduqttm+KU1KDqhPW31Huz3lgKIMamWmNpn3gi823mRMLIYPhHFHak dA3CpH4byUySWvhjRQ7XIwTKGwZFR2XM8UTSZJFN+gkZDT+Oshwc2rDvg69PKYsd lSL/fDzhuSfwxOBqrkRygR5s0BhBlaqzrzG+XDZSlk5P9UgRMHXyI7OndyabnNzy oKR2oW/trTSbUKmc+wy95JWWI+TMGGTdwSFNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHsBmk/4UZ4GCo8NfvHo4UAkCkVowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hzQm1rXzRVWjRHQ284TmZ2SG80VUFrQ2tWby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTDlowDQYJKoZIhvcNAQELBQADggEB AMrRFIdYx24QtZCbHYRdNsrxZ+c+S8G48Knf4317wtqXD9X85n42kCOtnOA5C5uj Hp+5k8rE59xK95EaIYSUl75atblYYz+MQypVCY5qTlaMW1CQn3guznj0UFLmCmVC oXF+TTNvVcKAlNWdZlRBHRifAiJIb3TfALU1xr3j7g+EsruuXW4Wp++NoB1tAaEV uhAh2dmNachuLZJWHAjiBBLan0dkn/BUOdWkMO64Y3xnANYtkqel0OxN2gvqrpY8 GQQ+z1O0gKRI2ddQivv+eGsz/c70ngJb8uFSbEtkyzaRWPFVOip7iyVPgvxBtOB5 neuqz4IjDpBegSUiXGksBB4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:01 2026 by rpki-client