$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/O535VbIbeuEg8sCrH2J7r1Grj6s.roa File: O535VbIbeuEg8sCrH2J7r1Grj6s.roa (raw, json) Hash identifier: YjetJXCwADJVXbKCXKpqiIp/smBULVE+xrdrZE7ggGE= Subject key identifier: 3B:9D:F9:55:B2:1B:7A:E1:20:F2:C0:AB:1F:62:7B:AF:51:AB:8F:AB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1592 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O535VbIbeuEg8sCrH2J7r1Grj6s.roa Signing time: Tue 31 Mar 2026 07:59:53 +0000 ROA not before: Tue 31 Mar 2026 07:59:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5522 (0x1592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3B9DF955B21B7AE120F2C0AB1F627BAF51AB8FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:75:18:34:c6:c7:ea:45:95:98:8e:db:6d: b1:ce:2b:df:30:47:1e:66:95:e0:dc:d2:05:db:4e: 90:55:c0:19:ae:1f:cb:34:09:d7:60:41:b8:34:c2: 61:20:30:79:7b:f9:db:e6:78:49:02:5f:1a:f5:85: 4b:fa:2b:cf:76:9a:68:3e:31:da:a2:1b:c1:e0:23: 4c:63:53:cd:38:ba:d1:88:33:d3:e1:9a:1a:9d:67: b0:70:d0:b7:99:b3:5b:58:11:29:fc:79:e1:33:65: 88:90:b4:ac:4c:f1:20:e7:1a:e7:7c:df:43:88:f0: 1c:d7:57:e5:fa:de:9c:aa:e2:ae:7d:2e:26:33:af: d8:9f:15:4c:1c:36:90:0f:a1:4c:52:91:79:47:e3: 54:c8:a0:3b:bb:8d:e2:a0:f6:4d:85:87:53:85:de: a6:a4:75:7b:e5:7c:df:36:e1:b0:e3:1b:ff:d3:d3: 59:d3:8d:1b:f7:15:4a:1b:95:be:dd:ce:16:3e:0c: 7a:f3:f3:16:82:5d:d6:46:87:34:c2:c5:40:bf:a0: 59:83:f1:96:67:e6:57:6b:4b:ef:9d:d3:15:44:86: 98:ba:46:ea:cc:5d:d1:86:22:83:79:61:92:e8:8f: 67:cf:0b:47:0d:68:d6:7c:98:95:99:71:f4:12:a0: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9D:F9:55:B2:1B:7A:E1:20:F2:C0:AB:1F:62:7B:AF:51:AB:8F:AB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O535VbIbeuEg8sCrH2J7r1Grj6s.roa sbgp-ipAddrBlock: critical IPv4: 49.102.152.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:ad:1a:40:00:25:60:9c:90:08:91:b8:fe:30:89:d9:ea:3f: a2:3a:f8:09:8b:be:7f:cc:8b:bf:f3:23:52:16:f7:25:d7:49: 45:bf:45:ec:bc:47:38:b3:76:67:2e:66:60:ff:5e:72:8b:9e: 44:99:75:cd:2d:88:aa:e1:a4:c7:39:5c:5b:e4:58:9b:cd:38: 92:85:17:1f:80:31:4b:5a:f1:2b:98:52:4e:39:8d:60:45:ed: 6f:72:64:eb:6a:14:b6:ea:d3:e9:52:81:51:b1:81:b8:72:4f: 38:dd:2c:6b:a5:52:90:1a:9e:c9:d1:1f:f8:74:39:3a:1b:08: 72:fe:aa:97:bb:0f:a4:58:e1:cb:04:84:f7:45:fc:33:60:ed: 92:dd:b4:bb:c6:91:e0:4b:7c:ef:9a:b6:f4:3b:62:96:9b:c8: 3e:31:de:04:d5:67:01:fe:5c:ff:b9:e2:11:a8:fa:44:11:0f: 97:ee:46:72:5e:16:dc:76:9b:48:55:c4:b7:c6:4a:92:98:90: 04:cc:6b:4e:4b:f2:df:57:fe:82:72:59:33:99:ff:48:ab:bb: 71:8d:ee:c4:8b:68:4b:e1:83:74:c5:f7:03:31:7c:f2:b4:fe: 45:4b:97:22:9c:52:7f:24:5e:0c:a6:f6:a8:83:d9:ae:9b:ad: d2:83:0f:bf -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCOURGOTU1QjIxQjdB RTEyMEYyQzBBQjFGNjI3QkFGNTFBQjhGQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClYnUYNMbH6kWVmI7bbbHOK98wRx5mleDc0gXbTpBVwBmuH8s0 CddgQbg0wmEgMHl7+dvmeEkCXxr1hUv6K892mmg+MdqiG8HgI0xjU804utGIM9Ph mhqdZ7Bw0LeZs1tYESn8eeEzZYiQtKxM8SDnGud830OI8BzXV+X63pyq4q59LiYz r9ifFUwcNpAPoUxSkXlH41TIoDu7jeKg9k2Fh1OF3qakdXvlfN824bDjG//T01nT jRv3FUoblb7dzhY+DHrz8xaCXdZGhzTCxUC/oFmD8ZZn5ldrS++d0xVEhpi6RurM XdGGIoN5YZLoj2fPC0cNaNZ8mJWZcfQSoIexAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUO535VbIbeuEg8sCrH2J7r1Grj6swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L081MzVWYkliZXVFZzhzQ3JIMko3cjFHcmo2cy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExZpgwDQYJKoZIhvcNAQELBQADggEB AB6tGkAAJWCckAiRuP4widnqP6I6+AmLvn/Mi7/zI1IW9yXXSUW/Rey8Rzizdmcu ZmD/XnKLnkSZdc0tiKrhpMc5XFvkWJvNOJKFFx+AMUta8SuYUk45jWBF7W9yZOtq FLbq0+lSgVGxgbhyTzjdLGulUpAansnRH/h0OTobCHL+qpe7D6RY4csEhPdF/DNg 7ZLdtLvGkeBLfO+atvQ7YpabyD4x3gTVZwH+XP+54hGo+kQRD5fuRnJeFtx2m0hV xLfGSpKYkATMa05L8t9X/oJyWTOZ/0iru3GN7sSLaEvhg3TF9wMxfPK0/kVLlyKc Un8kXgym9qiD2a6brdKDD78= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:33 2026 by rpki-client