$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IcihjzoF47I-yyvb8dkymUjx-Uw.roa File: IcihjzoF47I-yyvb8dkymUjx-Uw.roa (raw, json) Hash identifier: z48+een+8bXcUQ/BfjI4K6N84aKqPzwJKBkz7ScwXjA= Subject key identifier: 21:C8:A1:8F:3A:05:E3:B2:3E:CB:2B:DB:F1:D9:32:99:48:F1:F9:4C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 169B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IcihjzoF47I-yyvb8dkymUjx-Uw.roa Signing time: Tue 31 Mar 2026 08:02:07 +0000 ROA not before: Tue 31 Mar 2026 08:02:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5787 (0x169b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=21C8A18F3A05E3B23ECB2BDBF1D9329948F1F94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:c2:fc:5b:cb:ea:bf:22:9a:40:68:86:0d: f8:ba:3b:90:45:e0:3e:1a:f9:ae:c4:4e:e6:08:f6: 16:8d:b6:be:d2:32:c7:82:38:4e:b6:ab:97:c4:f0: 29:f2:25:0c:3e:cc:90:32:8b:f8:7c:0b:c9:20:89: 4e:1d:25:7a:e8:d9:06:a1:7e:7e:28:f0:f9:ac:8e: 7b:9b:98:63:55:4a:d7:2f:9d:a7:63:98:56:f8:47: 02:1a:f2:93:44:17:42:92:92:f6:f9:8a:8b:0d:cc: c5:03:4e:55:d4:ee:ff:b5:44:b6:53:1b:ef:70:97: 00:72:35:03:75:ee:db:32:87:48:9c:b4:de:ef:c4: 26:b4:0d:54:ba:19:a8:d7:f5:1c:06:c2:59:b1:46: dd:cd:15:f3:83:c6:7b:0c:9f:80:a6:db:53:0c:f1: 37:e8:b0:a2:54:f3:73:33:f8:06:84:ed:4c:91:aa: 4f:6f:48:4f:30:ce:cf:b4:80:22:77:83:42:f9:ca: 90:63:3a:fb:b8:91:8c:6e:1a:56:31:b6:55:b3:b3: e6:21:1b:d9:eb:0b:2b:37:91:2d:05:49:7c:60:32: 4b:66:ca:51:23:c4:6b:56:b5:9d:97:43:eb:1c:ec: 2d:c6:8d:98:b0:07:48:d4:39:eb:a0:b4:79:bc:33: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:A1:8F:3A:05:E3:B2:3E:CB:2B:DB:F1:D9:32:99:48:F1:F9:4C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IcihjzoF47I-yyvb8dkymUjx-Uw.roa sbgp-ipAddrBlock: critical IPv4: 49.106.204.0/23 Signature Algorithm: sha256WithRSAEncryption 72:95:c0:21:2d:96:b4:ed:6d:8a:b2:27:1a:eb:80:a7:18:aa: 0f:b5:e2:32:c5:48:2c:19:b5:82:c3:bc:10:1e:5a:7c:09:93: 60:8e:2f:8e:59:f7:d3:1c:bf:4b:83:c3:de:fb:f6:e6:2c:29: df:94:28:76:8a:62:e0:18:56:63:06:00:f2:d3:ca:13:e1:54: 42:32:40:53:9c:d7:b1:1f:cf:01:bb:e7:25:95:fd:4a:35:43: b3:c1:37:60:3a:41:5b:67:96:a6:ae:b6:b4:c2:80:68:59:6e: c8:70:cc:44:91:bc:be:e0:79:3e:d0:f3:26:10:5f:a1:df:ca: 5e:e2:1c:2e:85:8e:21:65:a3:89:50:0e:b8:0b:e7:39:3a:d3: 2e:f0:57:cd:f4:cf:4a:9d:27:e9:da:67:1a:69:04:34:1d:c4: 39:ba:5f:ff:e8:f6:e9:0a:5f:e1:e6:53:34:83:5b:81:9a:b3: 96:3f:f3:38:67:5a:bc:e3:59:45:a1:44:f6:68:01:75:13:21: af:ea:8b:e9:f9:82:d5:d4:4c:9e:6e:50:54:9e:e7:2d:8d:67: aa:47:4e:f4:01:77:82:19:67:6c:7c:58:60:1b:ac:da:45:61: 16:55:04:a0:87:8c:01:2a:5e:b8:f4:e1:02:3a:70:de:85:52: 0a:59:ea:14 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxQzhBMThGM0EwNUUz QjIzRUNCMkJEQkYxRDkzMjk5NDhGMUY5NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJwsL8W8vqvyKaQGiGDfi6O5BF4D4a+a7ETuYI9haNtr7SMseC OE62q5fE8CnyJQw+zJAyi/h8C8kgiU4dJXro2Qahfn4o8PmsjnubmGNVStcvnadj mFb4RwIa8pNEF0KSkvb5iosNzMUDTlXU7v+1RLZTG+9wlwByNQN17tsyh0ictN7v xCa0DVS6GajX9RwGwlmxRt3NFfODxnsMn4Cm21MM8TfosKJU83Mz+AaE7UyRqk9v SE8wzs+0gCJ3g0L5ypBjOvu4kYxuGlYxtlWzs+YhG9nrCys3kS0FSXxgMktmylEj xGtWtZ2XQ+sc7C3GjZiwB0jUOeugtHm8Mz5fAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIcihjzoF47I+yyvb8dkymUjx+UwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0ljaWhqem9GNDdJLXl5dmI4ZGt5bVVqeC1Vdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaswwDQYJKoZIhvcNAQELBQADggEB AHKVwCEtlrTtbYqyJxrrgKcYqg+14jLFSCwZtYLDvBAeWnwJk2COL45Z99Mcv0uD w9779uYsKd+UKHaKYuAYVmMGAPLTyhPhVEIyQFOc17EfzwG75yWV/Uo1Q7PBN2A6 QVtnlqautrTCgGhZbshwzESRvL7geT7Q8yYQX6Hfyl7iHC6FjiFlo4lQDrgL5zk6 0y7wV830z0qdJ+naZxppBDQdxDm6X//o9ukKX+HmUzSDW4Gas5Y/8zhnWrzjWUWh RPZoAXUTIa/qi+n5gtXUTJ5uUFSe5y2NZ6pHTvQBd4IZZ2x8WGAbrNpFYRZVBKCH jAEqXrj04QI6cN6FUgpZ6hQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:18 2026 by rpki-client