$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMPYG38Q0zdDPR0Gq7WfD_Fq5xk.roa File: IMPYG38Q0zdDPR0Gq7WfD_Fq5xk.roa (raw, json) Hash identifier: 81RqMOR50xRPbl3lECFu7V7T35Esp0lG59pyNyVHnJY= Subject key identifier: 20:C3:D8:1B:7F:10:D3:37:43:3D:1D:06:AB:B5:9F:0F:F1:6A:E7:19 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 177A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMPYG38Q0zdDPR0Gq7WfD_Fq5xk.roa Signing time: Tue 31 Mar 2026 08:03:54 +0000 ROA not before: Tue 31 Mar 2026 08:03:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6010 (0x177a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=20C3D81B7F10D337433D1D06ABB59F0FF16AE719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:d8:1f:fd:c7:90:f6:92:aa:e0:e0:39:9d: b8:39:89:07:a3:94:2e:1d:8a:83:60:f5:36:2d:5d: 81:15:cb:5b:90:d2:52:01:f6:03:59:a7:d1:cb:bf: 67:f1:65:93:71:aa:27:af:9d:47:bd:aa:9f:a0:66: dc:b5:27:23:f2:84:84:b7:d8:c6:42:b2:0b:11:9e: 0d:12:3b:c5:44:95:dd:53:87:8f:03:c9:e5:91:26: ee:88:6e:55:27:2d:02:de:af:7a:cb:41:c9:bc:d2: b7:b3:08:f6:2f:49:4a:6c:95:75:97:42:15:1e:61: 0d:be:b7:4c:3a:fc:b7:29:ee:18:8b:e1:15:28:27: 7b:cd:36:c2:1e:e3:3f:10:b0:0a:5f:61:16:9e:a3: cd:3e:6d:76:f4:ac:45:ba:ea:55:f9:fc:c6:50:b5: fc:8b:a2:dd:f8:12:0e:b7:bf:a8:db:6f:53:4e:2f: 55:3c:62:57:8a:b3:1b:44:a8:90:21:e5:c0:df:35: c6:e5:35:00:74:64:2a:bb:e2:b2:3f:67:c7:8d:83: c5:d3:35:79:f3:c4:c3:e7:01:0c:82:85:e0:84:01: 33:c5:f1:f8:43:2d:cc:64:fb:b2:2b:0c:31:33:15: 38:7e:6c:98:a4:ce:7c:31:ae:4b:ed:21:a6:b0:90: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C3:D8:1B:7F:10:D3:37:43:3D:1D:06:AB:B5:9F:0F:F1:6A:E7:19 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMPYG38Q0zdDPR0Gq7WfD_Fq5xk.roa sbgp-ipAddrBlock: critical IPv4: 49.105.15.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:ac:1b:91:2b:af:7c:d5:78:9a:65:42:c9:04:ea:d2:88:f1: 74:9c:93:fd:9b:c6:00:14:51:cf:18:ac:1e:07:44:66:4d:8d: 9a:bd:f8:49:cf:1c:a5:c4:29:6f:a6:f5:dd:ef:bd:d6:fb:8b: c7:12:a6:76:7e:37:ad:a9:ff:7e:a9:d2:e6:d7:83:9b:02:cc: d5:ee:70:2d:0e:b3:be:84:dd:ca:eb:a5:bd:5e:c0:7e:e1:a3: ba:27:36:38:da:d8:2a:a5:54:eb:3d:b6:9f:4b:73:1b:54:c9: b9:af:50:1a:83:a6:c7:ac:dc:7f:fe:01:b4:c6:0c:37:af:0d: 60:18:37:49:91:e7:5e:19:33:dc:d3:f3:00:16:0c:41:b0:35: 13:31:ff:87:dc:69:3a:09:7b:17:8b:ae:8c:54:23:87:73:34: 0d:b6:76:70:d4:f8:61:9c:fc:3b:16:32:1a:04:a4:5d:66:85: 93:cb:99:1c:22:8a:f7:63:85:61:c5:a9:ca:92:e8:ea:60:31: e8:05:0b:68:30:7e:f3:34:d5:19:21:e8:6b:e9:2a:c6:4b:7a: 2e:ef:96:16:9d:23:ef:50:20:5f:ab:04:ab:31:76:65:e3:a1: a4:e2:0b:b8:b0:0a:28:d4:d2:5b:72:d4:a7:40:17:4a:4c:1a: 3b:1f:21:27 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwQzNEODFCN0YxMEQz Mzc0MzNEMUQwNkFCQjU5RjBGRjE2QUU3MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDARNgf/ceQ9pKq4OA5nbg5iQejlC4dioNg9TYtXYEVy1uQ0lIB 9gNZp9HLv2fxZZNxqievnUe9qp+gZty1JyPyhIS32MZCsgsRng0SO8VEld1Th48D yeWRJu6IblUnLQLer3rLQcm80rezCPYvSUpslXWXQhUeYQ2+t0w6/Lcp7hiL4RUo J3vNNsIe4z8QsApfYRaeo80+bXb0rEW66lX5/MZQtfyLot34Eg63v6jbb1NOL1U8 YleKsxtEqJAh5cDfNcblNQB0ZCq74rI/Z8eNg8XTNXnzxMPnAQyCheCEATPF8fhD Lcxk+7IrDDEzFTh+bJikznwxrkvtIaawkBPFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIMPYG38Q0zdDPR0Gq7WfD/Fq5xkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0lNUFlHMzhRMHpkRFBSMEdxN1dmRF9GcTV4ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaQ8wDQYJKoZIhvcNAQELBQADggEB AF6sG5Err3zVeJplQskE6tKI8XSck/2bxgAUUc8YrB4HRGZNjZq9+EnPHKXEKW+m 9d3vvdb7i8cSpnZ+N62p/36p0ubXg5sCzNXucC0Os76E3crrpb1ewH7ho7onNjja 2CqlVOs9tp9LcxtUybmvUBqDpses3H/+AbTGDDevDWAYN0mR514ZM9zT8wAWDEGw NRMx/4fcaToJexeLroxUI4dzNA22dnDU+GGc/DsWMhoEpF1mhZPLmRwiivdjhWHF qcqS6OpgMegFC2gwfvM01Rkh6GvpKsZLei7vlhadI+9QIF+rBKsxdmXjoaTiC7iw CijU0lty1KdAF0pMGjsfISc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:41 2026 by rpki-client