$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NQAFePoO6O72tWT6tey2z2ZQcUk.roa File: NQAFePoO6O72tWT6tey2z2ZQcUk.roa (raw, json) Hash identifier: PrjLb21HbF8ChKZTbEFTMPTBl56/CPFvw5a47o0clhI= Subject key identifier: 35:00:05:78:FA:0E:E8:EE:F6:B5:64:FA:B5:EC:B6:CF:66:50:71:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16DE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NQAFePoO6O72tWT6tey2z2ZQcUk.roa Signing time: Tue 31 Mar 2026 08:02:39 +0000 ROA not before: Tue 31 Mar 2026 08:02:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5854 (0x16de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=35000578FA0EE8EEF6B564FAB5ECB6CF66507149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:fc:eb:32:e9:7f:57:0b:2c:c5:d4:d9:ce: 79:c5:58:29:52:f6:98:cc:46:16:76:12:8f:47:68: f5:80:80:02:c2:17:32:f4:f8:85:1a:48:cf:7f:b5: e8:17:08:61:53:7a:6f:f6:67:03:7a:44:a2:12:73: cf:6a:96:7e:72:de:55:44:38:bc:29:6a:da:e4:70: 66:23:35:7d:5c:f0:de:d5:7e:6c:e8:51:81:40:a6: 24:c5:5a:37:89:c0:06:4e:64:9a:aa:94:e5:f6:dd: 86:97:bd:50:6f:c1:ad:e3:25:db:d1:90:d3:19:fd: d4:88:f9:ab:8d:1b:a3:de:af:bf:bf:33:f0:a7:ee: 66:83:e2:2f:79:f9:ac:fd:03:ac:ba:ac:26:65:c3: ab:a6:4f:18:d3:09:06:d9:b4:11:0e:32:3e:99:89: ef:29:6a:d5:bc:c5:aa:a5:34:00:ed:1f:d3:bc:d5: df:cb:1f:03:fb:b2:47:73:d7:90:93:d4:45:76:4d: 36:21:a4:c4:89:75:67:59:72:10:fc:5b:a2:4d:57: 12:9a:86:35:e2:a3:97:1f:64:f0:43:75:93:fe:07: d1:52:a1:79:87:cb:42:60:af:ec:2b:82:74:57:af: 95:37:cb:e5:11:d7:82:ad:6a:3d:fb:2f:3b:da:86: d3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:05:78:FA:0E:E8:EE:F6:B5:64:FA:B5:EC:B6:CF:66:50:71:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NQAFePoO6O72tWT6tey2z2ZQcUk.roa sbgp-ipAddrBlock: critical IPv4: 49.102.157.0/24 Signature Algorithm: sha256WithRSAEncryption ab:b9:97:fe:b4:59:61:e2:a5:1f:97:d9:39:e5:d7:8d:f6:a2: e8:6d:a0:e0:36:81:8f:d6:39:24:04:80:0e:5e:e2:d3:04:f2: 96:b8:37:b2:d4:6d:7b:dd:76:e7:cd:2a:e5:51:4c:30:27:c9: ea:bc:be:9a:7b:b8:62:9d:39:70:49:43:09:04:35:55:a5:e5: 33:80:e2:66:e0:51:b1:3c:b3:ae:4a:73:f6:ee:c7:67:48:83: 1f:72:11:00:6f:36:c4:78:6d:74:0f:05:9e:b4:19:63:db:3e: 11:cb:28:83:ac:1a:b3:b9:f7:70:94:80:3b:22:03:c7:16:97: 4e:01:1f:00:99:0b:24:d3:7c:37:1c:20:87:e9:73:c8:55:35: 51:b6:22:e3:6b:89:b7:7e:d5:92:b2:b7:87:d1:b6:f0:0d:59: 9e:64:a7:20:a5:4a:cf:49:3f:dc:da:1e:72:11:08:be:50:6d: 06:6d:cb:cb:b9:2f:e3:3b:2c:fd:dd:17:8b:f1:54:d9:77:24: 79:43:93:15:b2:95:43:b6:e6:9a:02:6d:41:93:48:92:50:b1: 38:e4:3b:e1:fd:03:d0:55:c7:18:aa:7e:fd:38:79:53:a3:48: 7f:da:8f:8b:53:eb:1c:39:28:d6:d6:28:90:ce:53:af:8c:4f: f5:97:98:ec -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM1MDAwNTc4RkEwRUU4 RUVGNkI1NjRGQUI1RUNCNkNGNjY1MDcxNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+LPzrMul/VwssxdTZznnFWClS9pjMRhZ2Eo9HaPWAgALCFzL0 +IUaSM9/tegXCGFTem/2ZwN6RKISc89qln5y3lVEOLwpatrkcGYjNX1c8N7Vfmzo UYFApiTFWjeJwAZOZJqqlOX23YaXvVBvwa3jJdvRkNMZ/dSI+auNG6Per7+/M/Cn 7maD4i95+az9A6y6rCZlw6umTxjTCQbZtBEOMj6Zie8patW8xaqlNADtH9O81d/L HwP7skdz15CT1EV2TTYhpMSJdWdZchD8W6JNVxKahjXio5cfZPBDdZP+B9FSoXmH y0Jgr+wrgnRXr5U3y+UR14Ktaj37LzvahtPDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUNQAFePoO6O72tWT6tey2z2ZQcUkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L05RQUZlUG9PNk83MnRXVDZ0ZXkyejJaUWNVay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxZp0wDQYJKoZIhvcNAQELBQADggEB AKu5l/60WWHipR+X2Tnl1432ouhtoOA2gY/WOSQEgA5e4tME8pa4N7LUbXvddufN KuVRTDAnyeq8vpp7uGKdOXBJQwkENVWl5TOA4mbgUbE8s65Kc/bux2dIgx9yEQBv NsR4bXQPBZ60GWPbPhHLKIOsGrO593CUgDsiA8cWl04BHwCZCyTTfDccIIfpc8hV NVG2IuNribd+1ZKyt4fRtvANWZ5kpyClSs9JP9zaHnIRCL5QbQZty8u5L+M7LP3d F4vxVNl3JHlDkxWylUO25poCbUGTSJJQsTjkO+H9A9BVxxiqfv04eVOjSH/aj4tT 6xw5KNbWKJDOU6+MT/WXmOw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:18 2026 by rpki-client