$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IF_ZQh_h-TWuJYzTw9hq8QZPC6A.roa File: IF_ZQh_h-TWuJYzTw9hq8QZPC6A.roa (raw, json) Hash identifier: lVV4kklN9LZEobYGdOgdvUATOd4xmKIAVIHHfhyN5j8= Subject key identifier: 20:5F:D9:42:1F:E1:F9:35:AE:25:8C:D3:C3:D8:6A:F1:06:4F:0B:A0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15D3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IF_ZQh_h-TWuJYzTw9hq8QZPC6A.roa Signing time: Tue 31 Mar 2026 08:00:29 +0000 ROA not before: Tue 31 Mar 2026 08:00:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5587 (0x15d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=205FD9421FE1F935AE258CD3C3D86AF1064F0BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:98:ba:38:cc:54:e0:5c:ca:62:37:4a:bb: 51:ac:1f:0e:ce:25:9c:00:1c:0a:84:61:9d:2d:b0: b0:58:6f:ce:99:ba:c0:54:0e:fc:d7:23:94:3b:ee: fa:82:29:e4:29:1d:47:20:5e:cb:30:d5:a9:97:46: 6b:f1:3d:dc:83:a3:3b:b9:9b:73:cc:02:eb:7e:df: 6a:1d:ff:7e:f9:7b:6a:a5:35:d7:1f:15:a9:6b:5f: a0:61:f5:28:f0:91:b3:96:bc:c1:4f:d6:d0:79:6e: 7e:29:7d:cc:25:1a:20:de:5c:ad:de:3f:74:fb:ad: db:e2:63:40:bd:09:66:0a:f1:7c:d8:80:9a:60:ef: 2e:5f:60:a4:f9:b0:49:45:35:18:f6:3c:d6:b8:3b: e4:ab:e9:85:92:13:65:91:14:8c:5e:73:98:36:8b: 87:9d:9e:2e:0c:73:e2:38:43:9a:53:59:14:87:6e: 89:d9:d2:32:1b:9b:9f:e2:7e:68:4b:6e:80:b3:2c: 85:23:63:03:0d:ee:97:8e:d8:7d:19:22:b2:fa:12: 02:ca:a1:00:e1:16:dd:43:74:8c:16:13:6a:71:a0: 6e:6c:12:1a:e0:3b:79:df:ad:b7:2b:6e:10:cd:80: bb:9b:20:db:03:e1:d8:54:51:9e:e5:5c:2f:cd:14: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:D9:42:1F:E1:F9:35:AE:25:8C:D3:C3:D8:6A:F1:06:4F:0B:A0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IF_ZQh_h-TWuJYzTw9hq8QZPC6A.roa sbgp-ipAddrBlock: critical IPv4: 49.96.220.0/22 Signature Algorithm: sha256WithRSAEncryption 73:0f:cc:8f:be:8a:a5:3e:7e:d8:d1:5f:1f:cd:39:15:a2:d2: 9a:a4:d2:28:7d:6b:2d:27:45:de:1f:b3:78:22:05:18:7b:a9: bc:2a:3b:fe:29:e9:d2:8e:6d:8e:26:4c:8f:78:a1:c0:c9:45: c1:1d:92:5b:f6:e2:00:ec:e1:71:67:2f:41:fd:32:09:da:fd: f9:44:8a:b7:70:7d:bf:dd:a9:61:58:dd:59:a7:ff:2b:c0:0f: 8e:57:b5:f4:60:8f:ee:5f:4a:08:5e:15:b4:8a:72:e7:19:66: 22:21:87:b3:91:e3:dc:f7:ca:2f:ba:67:55:6d:d9:7e:5b:c9: 3b:7f:8b:9e:dc:7c:ff:e4:1d:a4:f0:30:7a:8f:a5:0e:44:1a: 12:64:1d:91:11:25:46:2d:c1:ef:56:b1:03:62:84:42:15:7a: a7:9f:52:7a:3e:ea:8c:d7:b7:af:d9:dd:8f:54:4f:2f:54:fa: 93:96:fe:10:94:c4:ff:88:22:1c:be:79:37:f9:56:54:a8:7a: 5b:99:54:7c:53:64:40:b2:e8:5b:15:a9:ab:cd:0d:f8:71:44: 12:60:d9:a7:00:6b:20:68:73:40:0d:5b:b2:8a:0b:30:5d:f5: ba:81:ef:28:71:46:0c:29:64:23:5e:79:8d:13:e8:5a:cf:31: 45:2f:1e:0c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwNUZEOTQyMUZFMUY5 MzVBRTI1OENEM0MzRDg2QUYxMDY0RjBCQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm25i6OMxU4FzKYjdKu1GsHw7OJZwAHAqEYZ0tsLBYb86ZusBU DvzXI5Q77vqCKeQpHUcgXssw1amXRmvxPdyDozu5m3PMAut+32od/375e2qlNdcf FalrX6Bh9SjwkbOWvMFP1tB5bn4pfcwlGiDeXK3eP3T7rdviY0C9CWYK8XzYgJpg 7y5fYKT5sElFNRj2PNa4O+Sr6YWSE2WRFIxec5g2i4edni4Mc+I4Q5pTWRSHbonZ 0jIbm5/ifmhLboCzLIUjYwMN7peO2H0ZIrL6EgLKoQDhFt1DdIwWE2pxoG5sEhrg O3nfrbcrbhDNgLubINsD4dhUUZ7lXC/NFOIrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIF/ZQh/h+TWuJYzTw9hq8QZPC6AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0lGX1pRaF9oLVRXdUpZelR3OWhxOFFaUEM2QS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYNwwDQYJKoZIhvcNAQELBQADggEB AHMPzI++iqU+ftjRXx/NORWi0pqk0ih9ay0nRd4fs3giBRh7qbwqO/4p6dKObY4m TI94ocDJRcEdklv24gDs4XFnL0H9Mgna/flEirdwfb/dqWFY3Vmn/yvAD45XtfRg j+5fSgheFbSKcucZZiIhh7OR49z3yi+6Z1Vt2X5byTt/i57cfP/kHaTwMHqPpQ5E GhJkHZERJUYtwe9WsQNihEIVeqefUno+6ozXt6/Z3Y9UTy9U+pOW/hCUxP+IIhy+ eTf5VlSoeluZVHxTZECy6FsVqavNDfhxRBJg2acAayBoc0ANW7KKCzBd9bqB7yhx RgwpZCNeeY0T6FrPMUUvHgw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:00 2026 by rpki-client