$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAC-7mY3hkdPyWVYBCbs5OjxuY8.roa File: IAC-7mY3hkdPyWVYBCbs5OjxuY8.roa (raw, json) Hash identifier: TQjLDDPXJPTRFQGY6gDiCvMfai4GqfqT10KlArjI6OU= Subject key identifier: 20:00:BE:EE:66:37:86:47:4F:C9:65:58:04:26:EC:E4:E8:F1:B9:8F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 178E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAC-7mY3hkdPyWVYBCbs5OjxuY8.roa Signing time: Tue 31 Mar 2026 08:04:06 +0000 ROA not before: Tue 31 Mar 2026 08:04:06 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.110.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6030 (0x178e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:06 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2000BEEE663786474FC965580426ECE4E8F1B98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:85:c7:72:74:b7:89:9e:77:1a:14:fe:67: 51:83:65:bc:57:6d:85:37:ea:65:98:0a:94:6a:92: ed:af:a5:52:a3:97:73:9d:c0:a2:78:a6:6c:a4:50: ff:a9:e6:3d:02:37:d3:0b:38:56:c8:ca:6b:51:7d: dd:ad:6a:92:0d:d5:85:df:0c:35:a4:6d:af:97:ea: 7a:45:89:f0:7e:5e:18:f7:5e:58:06:56:90:3f:7b: 4d:e1:25:d2:27:df:c1:5f:b1:70:e1:16:53:fd:d3: e4:68:26:a7:59:d7:65:9c:3f:b9:09:9c:c2:87:57: 75:a3:7c:be:e5:29:c8:a9:db:11:11:c5:69:90:c1: 14:f5:6d:9b:31:60:af:4d:70:67:83:a5:a2:49:66: f9:93:1c:9f:44:cb:20:88:1e:34:28:c7:22:84:71: b9:72:fb:8a:e1:75:98:da:8a:f4:3f:39:ba:de:22: 60:0a:c1:28:73:b2:75:44:33:4b:0a:12:cb:d3:c4: a5:15:69:94:44:0b:ac:ef:c7:03:20:4e:e0:03:3d: 7e:f5:f2:c3:ed:b5:86:bf:0b:eb:42:2f:d7:bf:a1: b5:9c:30:bc:9c:1a:1c:ae:5d:2a:52:df:7a:2b:9c: 05:fd:a3:71:59:4d:b5:a6:28:c6:3c:95:5a:47:7f: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:BE:EE:66:37:86:47:4F:C9:65:58:04:26:EC:E4:E8:F1:B9:8F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAC-7mY3hkdPyWVYBCbs5OjxuY8.roa sbgp-ipAddrBlock: critical IPv4: 49.110.126.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:9b:71:41:d1:80:94:6e:65:c9:79:31:ed:fd:02:63:a9:af: 14:34:0e:39:d6:39:81:e0:09:88:3c:61:6f:2f:27:3d:3e:3d: f3:b2:af:29:be:16:7f:bd:bc:3c:4d:cb:22:d4:3d:28:20:5c: 76:d4:0b:d8:41:54:92:32:57:a1:7d:40:9f:37:cb:94:c5:d7: 58:02:8c:f1:bb:84:3a:49:7b:f5:d2:de:e5:25:86:07:de:91: 3d:31:50:7c:f9:6a:04:bc:77:f7:c2:91:6b:28:6d:4d:45:0f: 1c:d9:66:30:17:9a:8e:02:77:88:ab:50:bf:60:66:6c:75:53: 08:20:d9:77:ec:e0:fe:41:41:4d:b4:04:85:bd:90:85:5a:ef: 17:e3:03:5b:8d:12:b4:2d:f6:a1:ec:05:fc:3e:87:73:98:df: 03:cf:97:52:98:cb:fe:ae:a7:85:2f:86:ae:ea:fd:4c:f0:9a: 96:53:1b:ea:74:e2:07:a8:f5:79:c1:f5:a3:e0:de:9d:73:9e: ef:98:33:3b:85:f1:19:38:f4:9e:e8:27:19:ea:dd:0c:de:98: 1b:47:91:e6:0f:c0:7c:a3:c4:9c:7d:cd:c3:39:39:58:ce:8a: 89:74:67:82:e8:60:9e:d0:17:9e:01:90:2c:12:15:a8:42:d6: 04:d2:cb:fc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwMDBCRUVFNjYzNzg2 NDc0RkM5NjU1ODA0MjZFQ0U0RThGMUI5OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGooXHcnS3iZ53GhT+Z1GDZbxXbYU36mWYCpRqku2vpVKjl3Od wKJ4pmykUP+p5j0CN9MLOFbIymtRfd2tapIN1YXfDDWkba+X6npFifB+Xhj3XlgG VpA/e03hJdIn38FfsXDhFlP90+RoJqdZ12WcP7kJnMKHV3WjfL7lKcip2xERxWmQ wRT1bZsxYK9NcGeDpaJJZvmTHJ9EyyCIHjQoxyKEcbly+4rhdZjaivQ/ObreImAK wShzsnVEM0sKEsvTxKUVaZREC6zvxwMgTuADPX718sPttYa/C+tCL9e/obWcMLyc GhyuXSpS33ornAX9o3FZTbWmKMY8lVpHf/phAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIAC+7mY3hkdPyWVYBCbs5OjxuY8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0lBQy03bVkzaGtkUHlXVllCQ2JzNU9qeHVZOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExbn4wDQYJKoZIhvcNAQELBQADggEB AEqbcUHRgJRuZcl5Me39AmOprxQ0DjnWOYHgCYg8YW8vJz0+PfOyrym+Fn+9vDxN yyLUPSggXHbUC9hBVJIyV6F9QJ83y5TF11gCjPG7hDpJe/XS3uUlhgfekT0xUHz5 agS8d/fCkWsobU1FDxzZZjAXmo4Cd4irUL9gZmx1Uwgg2Xfs4P5BQU20BIW9kIVa 7xfjA1uNErQt9qHsBfw+h3OY3wPPl1KYy/6up4Uvhq7q/UzwmpZTG+p04geo9XnB 9aPg3p1znu+YMzuF8Rk49J7oJxnq3QzemBtHkeYPwHyjxJx9zcM5OVjOiol0Z4Lo YJ7QF54BkCwSFahC1gTSy/w= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:49 2026 by rpki-client