$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LGzgHmkEYXsvWsyZUthYH02VtgQ.roa File: LGzgHmkEYXsvWsyZUthYH02VtgQ.roa (raw, json) Hash identifier: 3PnF6FFzjoXS07g1sL5xcSjqivt0tQ4a0qJ8gWSfwUI= Subject key identifier: 2C:6C:E0:1E:69:04:61:7B:2F:5A:CC:99:52:D8:58:1F:4D:95:B6:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13E2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LGzgHmkEYXsvWsyZUthYH02VtgQ.roa Signing time: Tue 31 Mar 2026 07:56:29 +0000 ROA not before: Tue 31 Mar 2026 07:56:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5090 (0x13e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2C6CE01E6904617B2F5ACC9952D8581F4D95B604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:15:2b:53:f5:a2:5f:64:58:ad:e5:f3:6a: 51:b2:96:3e:01:36:75:42:2a:19:a6:d5:66:69:6f: 8d:29:7f:47:30:10:36:ce:65:e0:4f:53:cd:92:24: bc:99:6a:ef:6a:fa:35:b5:2e:27:bf:08:ed:db:b3: 0f:44:94:69:4a:62:50:91:34:a8:ed:f1:71:3f:8e: 76:54:e4:5e:32:c4:40:44:13:5f:1f:9a:01:7b:3c: cb:d2:6f:42:9f:13:52:50:54:d0:f7:d2:c3:8b:49: 13:38:fb:d4:b7:dd:b7:4f:ae:3e:c2:3c:b7:31:42: 2c:32:69:68:b8:75:f4:b3:3f:fb:52:83:38:80:10: f6:ca:86:3e:34:44:f9:fc:46:6c:3f:bf:96:d1:1a: 12:28:a0:7e:9b:e6:56:38:0d:c6:ec:67:bb:ec:a3: 1d:6c:7f:22:b7:f4:90:e7:b1:d5:f3:26:b3:c1:96: dd:dd:ff:d2:c0:63:f5:9b:f3:00:bb:e9:4e:11:41: 52:07:86:02:c4:ab:d4:ba:44:d0:a8:8b:ad:09:22: 48:eb:86:db:88:ce:f7:d4:fb:eb:63:f6:88:23:f8: 94:74:41:cd:86:3e:20:b5:12:3b:94:6e:44:38:c8: c6:d6:79:be:11:0e:0e:52:eb:6a:7f:8d:15:bc:c0: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6C:E0:1E:69:04:61:7B:2F:5A:CC:99:52:D8:58:1F:4D:95:B6:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LGzgHmkEYXsvWsyZUthYH02VtgQ.roa sbgp-ipAddrBlock: critical IPv4: 49.98.164.0/23 Signature Algorithm: sha256WithRSAEncryption 23:9a:c2:16:b4:a9:74:10:83:26:3a:71:87:4a:72:83:97:9a: fd:79:16:75:cb:2e:b8:ee:8b:4d:33:74:91:09:0d:7b:b3:22: a2:54:3c:31:59:b4:88:b2:4b:bc:ee:c0:7a:0c:33:22:bb:fb: e9:27:ed:02:df:21:46:37:a7:85:c5:58:3a:51:7c:66:c0:77: 10:1b:5d:5b:78:a4:eb:8c:01:0b:33:8c:62:75:cc:18:16:32: a8:d3:a3:d2:fd:94:98:ce:3d:4c:72:87:42:83:3c:b7:43:b4: fd:28:bb:6b:13:12:db:ad:7f:0b:cf:59:b5:a2:4f:05:59:8e: 21:08:75:0f:07:c9:17:b0:9b:e7:91:62:c0:ed:bc:89:1e:75: c6:d2:de:e9:c6:6a:01:ec:73:58:c4:99:0d:d6:da:f5:88:d4: 70:bf:a0:3e:3c:d6:61:24:fd:2b:44:21:df:f6:32:d2:aa:35: 38:67:09:89:5f:ec:97:8f:60:03:b7:77:13:cd:fa:bf:2b:f2: 45:33:08:a8:f0:4d:77:76:66:ba:61:18:0a:71:5f:67:4e:72: 3f:17:3a:ed:56:f5:15:5f:37:7c:db:3e:6f:67:2e:63:d8:b6: 6f:dd:b8:29:cb:11:72:4d:e3:98:28:df:39:92:fa:5d:e7:aa: 2c:fe:26:c6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDNkNFMDFFNjkwNDYx N0IyRjVBQ0M5OTUyRDg1ODFGNEQ5NUI2MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsLxUrU/WiX2RYreXzalGylj4BNnVCKhmm1WZpb40pf0cwEDbO ZeBPU82SJLyZau9q+jW1Lie/CO3bsw9ElGlKYlCRNKjt8XE/jnZU5F4yxEBEE18f mgF7PMvSb0KfE1JQVND30sOLSRM4+9S33bdPrj7CPLcxQiwyaWi4dfSzP/tSgziA EPbKhj40RPn8Rmw/v5bRGhIooH6b5lY4DcbsZ7vsox1sfyK39JDnsdXzJrPBlt3d /9LAY/Wb8wC76U4RQVIHhgLEq9S6RNCoi60JIkjrhtuIzvfU++tj9ogj+JR0Qc2G PiC1EjuUbkQ4yMbWeb4RDg5S62p/jRW8wEfLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQULGzgHmkEYXsvWsyZUthYH02VtgQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0xHemdIbWtFWVhzdldzeVpVdGhZSDAyVnRnUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYqQwDQYJKoZIhvcNAQELBQADggEB ACOawha0qXQQgyY6cYdKcoOXmv15FnXLLrjui00zdJEJDXuzIqJUPDFZtIiyS7zu wHoMMyK7++kn7QLfIUY3p4XFWDpRfGbAdxAbXVt4pOuMAQszjGJ1zBgWMqjTo9L9 lJjOPUxyh0KDPLdDtP0ou2sTEtutfwvPWbWiTwVZjiEIdQ8HyRewm+eRYsDtvIke dcbS3unGagHsc1jEmQ3W2vWI1HC/oD481mEk/StEId/2MtKqNThnCYlf7JePYAO3 dxPN+r8r8kUzCKjwTXd2ZrphGApxX2dOcj8XOu1W9RVfN3zbPm9nLmPYtm/duCnL EXJN45go3zmS+l3nqiz+JsY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:29 2026 by rpki-client