$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDvVzLZ5-n0QEDEjqZZ8_H5p5z8.roa File: KDvVzLZ5-n0QEDEjqZZ8_H5p5z8.roa (raw, json) Hash identifier: klpqTWdCEz1r5jqL6hHWuhxToYGanuustZQCiBi1XfU= Subject key identifier: 28:3B:D5:CC:B6:79:FA:7D:10:10:31:23:A9:96:7C:FC:7E:69:E7:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15FF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDvVzLZ5-n0QEDEjqZZ8_H5p5z8.roa Signing time: Tue 31 Mar 2026 08:00:52 +0000 ROA not before: Tue 31 Mar 2026 08:00:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5631 (0x15ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=283BD5CCB679FA7D10103123A9967CFC7E69E73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d4:18:28:1a:cb:56:aa:37:15:bf:c2:42:8e: ec:8a:02:80:8e:5c:24:63:06:1a:80:4a:ac:f1:10: 43:f4:23:2e:59:c6:a1:04:02:e7:9d:ec:33:69:2c: 95:6b:f2:c4:7d:54:eb:a6:c8:59:37:79:28:78:92: 57:70:3c:ce:6f:56:42:aa:fc:9b:08:84:6d:d3:a0: d4:5d:17:4e:90:a0:9b:26:26:ee:63:6a:72:32:f2: db:fc:f9:c1:ba:ee:3b:71:b2:3c:e7:90:71:bf:eb: 79:d5:58:5c:b5:fa:ee:b0:39:4a:19:c6:85:fa:cb: 1b:3d:66:15:30:9f:df:f2:bf:7d:d5:d2:2b:08:65: 9c:ee:4f:11:84:89:c6:39:03:63:71:a2:50:db:b3: 6a:a1:26:5d:00:34:6e:5e:19:15:b2:31:35:c2:d3: b6:a8:ff:04:bc:89:de:7c:2e:0a:ac:89:e2:c0:8f: 02:81:c0:da:0e:e9:f3:55:aa:56:57:2b:ac:0b:b5: 37:15:2c:91:48:73:07:ef:72:dc:cc:0b:c4:ba:2c: 03:d8:5f:b1:a4:f2:17:14:0d:99:6f:75:6a:26:c2: 3b:f3:1a:4b:c3:9b:98:60:a1:8d:05:94:ef:8c:3d: c5:d2:bc:e9:e2:84:7a:0f:ee:17:b1:57:5b:4e:ea: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:D5:CC:B6:79:FA:7D:10:10:31:23:A9:96:7C:FC:7E:69:E7:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDvVzLZ5-n0QEDEjqZZ8_H5p5z8.roa sbgp-ipAddrBlock: critical IPv4: 49.98.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:26:08:d3:f6:af:e6:8a:50:23:c6:db:8d:f5:5f:4f:04:9d: 8a:1e:76:3e:15:0a:f2:b7:59:7f:c0:30:48:74:19:49:cb:c0: ac:6d:37:04:22:8d:d7:90:86:41:93:c0:90:37:27:c5:49:53: ea:c9:77:2c:7c:58:8d:f7:e9:ee:bb:02:0b:a0:32:c3:85:38: ff:48:33:18:42:2d:f1:95:fa:45:27:49:a8:0d:1d:94:eb:3c: b2:23:60:99:bf:30:85:7e:d6:e9:a9:29:bd:f0:bd:8d:40:b7: fe:72:15:69:ec:83:62:e2:1d:68:be:05:ac:a1:bf:59:d8:63: 62:93:d7:a7:47:d5:96:10:e1:6b:10:da:b5:43:37:0b:4b:c0: a2:c4:f1:9a:4d:d9:c9:ad:12:99:7b:ca:87:10:38:3d:59:33: fe:42:9c:0b:a2:2b:d6:ad:b0:fc:b8:c8:71:e7:31:21:a2:8d: 58:78:d2:a6:73:ab:d7:f5:ef:2d:3b:4c:18:6d:1e:ae:3c:68: b0:92:a1:fc:44:a3:19:71:14:27:84:59:9e:51:1e:48:5b:39: b3:c2:b6:8c:d8:f6:00:74:85:5d:ea:5d:79:70:30:f2:89:3f: 08:0a:4d:65:31:b0:f5:83:fa:79:69:08:ff:3e:94:3c:20:b3: c9:c3:b4:12 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4M0JENUNDQjY3OUZB N0QxMDEwMzEyM0E5OTY3Q0ZDN0U2OUU3M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw1BgoGstWqjcVv8JCjuyKAoCOXCRjBhqASqzxEEP0Iy5ZxqEE Aued7DNpLJVr8sR9VOumyFk3eSh4kldwPM5vVkKq/JsIhG3ToNRdF06QoJsmJu5j anIy8tv8+cG67jtxsjznkHG/63nVWFy1+u6wOUoZxoX6yxs9ZhUwn9/yv33V0isI ZZzuTxGEicY5A2NxolDbs2qhJl0ANG5eGRWyMTXC07ao/wS8id58LgqsieLAjwKB wNoO6fNVqlZXK6wLtTcVLJFIcwfvctzMC8S6LAPYX7Gk8hcUDZlvdWomwjvzGkvD m5hgoY0FlO+MPcXSvOnihHoP7hexV1tO6p49AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUKDvVzLZ5+n0QEDEjqZZ8/H5p5z8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0tEdlZ6TFo1LW4wUUVERWpxWlo4X0g1cDV6OC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYgQwDQYJKoZIhvcNAQELBQADggEB AG4mCNP2r+aKUCPG2431X08EnYoedj4VCvK3WX/AMEh0GUnLwKxtNwQijdeQhkGT wJA3J8VJU+rJdyx8WI336e67AgugMsOFOP9IMxhCLfGV+kUnSagNHZTrPLIjYJm/ MIV+1umpKb3wvY1At/5yFWnsg2LiHWi+Bayhv1nYY2KT16dH1ZYQ4WsQ2rVDNwtL wKLE8ZpN2cmtEpl7yocQOD1ZM/5CnAuiK9atsPy4yHHnMSGijVh40qZzq9f17y07 TBhtHq48aLCSofxEoxlxFCeEWZ5RHkhbObPCtozY9gB0hV3qXXlwMPKJPwgKTWUx sPWD+nlpCP8+lDwgs8nDtBI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:20 2026 by rpki-client