$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KMCwcpZE-qtsJ_LYdnPoyh1jF9U.roa File: KMCwcpZE-qtsJ_LYdnPoyh1jF9U.roa (raw, json) Hash identifier: Em/hdurqGyyUoHpAdwM05D85HlK8gxOEnRKE7RlCgcI= Subject key identifier: 28:C0:B0:72:96:44:FA:AB:6C:27:F2:D8:76:73:E8:CA:1D:63:17:D5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1696 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KMCwcpZE-qtsJ_LYdnPoyh1jF9U.roa Signing time: Tue 31 Mar 2026 08:02:05 +0000 ROA not before: Tue 31 Mar 2026 08:02:05 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5782 (0x1696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:05 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=28C0B0729644FAAB6C27F2D87673E8CA1D6317D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:17:09:b6:d6:f3:ca:b0:d4:55:08:2c:ed: ac:9b:63:7a:ee:be:a7:0f:19:dd:39:9f:24:b9:76: cb:b3:41:77:27:28:51:00:ba:a2:26:4a:fe:46:7b: dd:92:cd:4a:84:58:4e:6d:a6:72:f4:43:e1:3e:ac: ff:82:36:da:e2:51:15:d7:53:0c:6b:e3:ec:98:aa: 4c:09:02:7a:e0:10:3e:8b:97:ef:f3:49:92:3f:bd: 32:a4:7d:a0:db:79:37:5a:1d:0e:e9:05:bb:46:ec: f5:04:a7:3b:73:ab:50:ff:d5:49:b1:f9:a2:00:14: a0:f7:2b:bb:de:d6:d9:fd:6a:05:19:1d:8f:80:07: ad:1d:d4:e8:d7:3e:3d:7f:3d:83:a6:f2:4d:1e:a3: 4d:6f:ed:bc:4a:1b:8d:0c:c4:74:42:6e:bf:9c:2e: e4:e1:eb:42:ed:fa:5a:9c:57:9d:7c:c4:76:de:e7: 6e:3e:cc:88:df:fb:4d:4a:0c:8d:e9:b1:65:a5:f7: 9b:48:18:97:da:b9:3b:ae:bc:d0:37:f6:7d:23:82: c7:59:f5:9d:da:2b:b4:9b:9b:19:ab:c1:da:95:0d: e5:db:dc:58:55:df:64:9f:b5:c8:a4:38:b0:2f:71: 1a:12:36:99:c8:b4:bb:b2:bf:db:e1:2d:ea:b2:aa: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C0:B0:72:96:44:FA:AB:6C:27:F2:D8:76:73:E8:CA:1D:63:17:D5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KMCwcpZE-qtsJ_LYdnPoyh1jF9U.roa sbgp-ipAddrBlock: critical IPv4: 49.104.10.0/23 Signature Algorithm: sha256WithRSAEncryption b4:0e:d7:c1:01:6f:35:94:8a:a3:45:16:48:db:0b:8f:7c:5b: db:a1:51:88:4f:a8:38:1a:d9:8e:57:8c:b9:32:bc:7e:0e:95: 8b:55:e0:7d:4f:b3:f0:46:4a:2d:53:47:53:70:0c:ac:4b:80: f7:50:81:02:07:57:a2:85:74:da:95:06:44:18:34:21:8d:f4: 1e:0e:2b:59:a4:51:50:d0:51:c3:6a:cf:cf:4a:ea:25:d6:fe: 73:59:9e:f3:ed:b0:75:96:d6:33:4a:a6:de:45:2d:e2:84:2a: 53:ca:78:02:93:ee:ae:72:0e:1c:f4:d2:9c:d6:56:51:c6:fd: c1:0a:3b:b0:b6:8c:42:2d:24:71:2d:25:4d:d5:09:12:fa:5f: 23:72:16:93:af:c8:c1:ba:10:36:47:fc:7d:57:58:b3:a5:6d: 69:36:f7:5f:60:c1:1d:62:71:71:84:25:2e:a0:05:aa:41:27: 34:a1:57:6f:79:7a:97:56:2c:42:02:dc:88:85:ee:f4:32:5b: 07:b7:b9:98:d1:ce:1a:c8:8c:42:4e:ba:06:3e:0d:5f:3f:24: ce:2d:a5:b7:de:9d:69:1b:df:4a:45:9f:dd:da:2c:a7:0f:89: cd:68:ec:b1:77:db:24:2c:a3:5d:01:e0:aa:f6:74:2f:fa:2c: ff:6b:db:6e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4QzBCMDcyOTY0NEZB QUI2QzI3RjJEODc2NzNFOENBMUQ2MzE3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsIhcJttbzyrDUVQgs7aybY3ruvqcPGd05nyS5dsuzQXcnKFEA uqImSv5Ge92SzUqEWE5tpnL0Q+E+rP+CNtriURXXUwxr4+yYqkwJAnrgED6Ll+/z SZI/vTKkfaDbeTdaHQ7pBbtG7PUEpztzq1D/1Umx+aIAFKD3K7ve1tn9agUZHY+A B60d1OjXPj1/PYOm8k0eo01v7bxKG40MxHRCbr+cLuTh60Lt+lqcV518xHbe524+ zIjf+01KDI3psWWl95tIGJfauTuuvNA39n0jgsdZ9Z3aK7SbmxmrwdqVDeXb3FhV 32SftcikOLAvcRoSNpnItLuyv9vhLeqyqq/lAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUKMCwcpZE+qtsJ/LYdnPoyh1jF9UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0tNQ3djcFpFLXF0c0pfTFlkblBveWgxakY5VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaAowDQYJKoZIhvcNAQELBQADggEB ALQO18EBbzWUiqNFFkjbC498W9uhUYhPqDga2Y5XjLkyvH4OlYtV4H1Ps/BGSi1T R1NwDKxLgPdQgQIHV6KFdNqVBkQYNCGN9B4OK1mkUVDQUcNqz89K6iXW/nNZnvPt sHWW1jNKpt5FLeKEKlPKeAKT7q5yDhz00pzWVlHG/cEKO7C2jEItJHEtJU3VCRL6 XyNyFpOvyMG6EDZH/H1XWLOlbWk2919gwR1icXGEJS6gBapBJzShV295epdWLEIC 3IiF7vQyWwe3uZjRzhrIjEJOugY+DV8/JM4tpbfenWkb30pFn93aLKcPic1o7LF3 2yQso10B4Kr2dC/6LP9r224= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:50 2026 by rpki-client