$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OT82Cl-wf1RSzzfV1AS3b1fw_zM.roa File: OT82Cl-wf1RSzzfV1AS3b1fw_zM.roa (raw, json) Hash identifier: pyRoaT/1oDU8ZeR8KFTcZKTmSYQ7UIozwd5EPohRsco= Subject key identifier: 39:3F:36:0A:5F:B0:7F:54:52:CF:37:D5:D4:04:B7:6F:57:F0:FF:33 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1603 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OT82Cl-wf1RSzzfV1AS3b1fw_zM.roa Signing time: Tue 31 Mar 2026 08:00:55 +0000 ROA not before: Tue 31 Mar 2026 08:00:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5635 (0x1603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=393F360A5FB07F5452CF37D5D404B76F57F0FF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:c9:6e:3b:2a:52:ef:37:6a:6c:9b:df:a2: e7:52:8b:0b:e0:3f:a6:df:f0:3d:62:ab:c9:ca:67: 02:28:b0:f8:e6:94:dc:0c:dd:5e:6c:f9:ce:a4:d5: f6:03:e5:75:44:10:69:d5:06:e7:0e:75:60:bd:7c: 12:51:5b:6b:03:f7:71:95:64:e7:3a:c3:7e:1a:f5: 3c:94:98:f0:a6:7c:cd:8a:57:2e:5f:41:db:f9:54: 20:63:85:a7:4d:c5:4f:a0:4f:be:73:b4:1d:2b:0d: a4:a3:b6:28:2e:fc:4b:9d:16:59:39:55:85:86:19: 2f:da:66:dd:7e:26:7e:ec:89:5a:79:f7:fe:16:12: 4f:7a:2f:78:d4:57:40:61:89:6b:32:48:34:6f:f5: bf:82:1e:bf:6b:6e:c3:48:f1:26:30:38:8f:eb:fd: 79:dd:3d:a0:56:07:96:67:aa:13:cf:09:02:ce:1d: a9:d4:b5:91:eb:18:28:8c:ea:53:a9:db:73:2c:88: 1e:08:21:b4:d9:db:1a:1f:5e:bf:77:f9:a1:15:62: fa:d4:66:a6:73:f2:f8:7a:5f:69:76:52:1f:50:d0: a7:39:57:6b:e6:5d:ef:86:0a:ed:1d:de:ba:d0:de: 3a:af:ba:6f:15:e6:c6:e0:c5:e1:17:ac:be:7e:2c: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3F:36:0A:5F:B0:7F:54:52:CF:37:D5:D4:04:B7:6F:57:F0:FF:33 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OT82Cl-wf1RSzzfV1AS3b1fw_zM.roa sbgp-ipAddrBlock: critical IPv4: 49.97.28.0/23 Signature Algorithm: sha256WithRSAEncryption 50:82:d0:34:16:37:5c:04:58:fb:5e:5d:5c:40:40:f6:ac:a6: 67:06:9b:ff:5a:76:fa:4f:5f:8c:e3:c8:5e:e3:90:f9:5d:bb: b6:c6:8b:19:a5:69:98:8a:a7:88:3d:04:da:14:f1:80:ce:27: 38:af:fb:0c:30:2b:06:03:52:1b:e0:7f:42:c4:11:55:7c:45: ae:6d:83:4e:32:5a:32:0c:23:0d:78:2f:dc:c3:ad:06:7d:45: 30:f0:0c:89:2a:44:a3:03:79:6f:e4:af:9c:07:21:a3:a9:d4: c5:f1:5a:34:ec:9a:3e:43:ee:d7:e8:52:b8:7c:70:56:34:99: 12:af:dc:b4:2a:cb:af:de:7a:8e:1a:e9:ee:e8:4d:87:c7:55: 24:50:10:6b:12:f6:d6:04:08:6c:4b:ec:2e:11:b4:99:a6:eb: e8:8b:6a:d5:f7:d1:77:27:49:6f:82:16:90:b8:a4:44:66:83: 38:66:26:6f:15:3d:89:1e:bb:7f:93:17:c7:1d:a2:8a:64:e2: 91:ef:2b:56:06:bb:e2:af:4d:53:47:cf:3a:53:e2:ba:40:26: 3d:d9:8d:d6:a0:5d:91:81:c5:d3:ec:6c:b6:02:02:21:f7:1a: 31:9d:c2:d9:18:ad:29:e9:03:c3:7a:ba:89:ec:d8:d2:47:fb: ab:5b:b8:87 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5M0YzNjBBNUZCMDdG NTQ1MkNGMzdENUQ0MDRCNzZGNTdGMEZGMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5isluOypS7zdqbJvfoudSiwvgP6bf8D1iq8nKZwIosPjmlNwM 3V5s+c6k1fYD5XVEEGnVBucOdWC9fBJRW2sD93GVZOc6w34a9TyUmPCmfM2KVy5f Qdv5VCBjhadNxU+gT75ztB0rDaSjtigu/EudFlk5VYWGGS/aZt1+Jn7siVp59/4W Ek96L3jUV0BhiWsySDRv9b+CHr9rbsNI8SYwOI/r/XndPaBWB5ZnqhPPCQLOHanU tZHrGCiM6lOp23MsiB4IIbTZ2xofXr93+aEVYvrUZqZz8vh6X2l2Uh9Q0Kc5V2vm Xe+GCu0d3rrQ3jqvum8V5sbgxeEXrL5+LM3TAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOT82Cl+wf1RSzzfV1AS3b1fw/zMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L09UODJDbC13ZjFSU3p6ZlYxQVMzYjFmd196TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYRwwDQYJKoZIhvcNAQELBQADggEB AFCC0DQWN1wEWPteXVxAQPaspmcGm/9advpPX4zjyF7jkPldu7bGixmlaZiKp4g9 BNoU8YDOJziv+wwwKwYDUhvgf0LEEVV8Ra5tg04yWjIMIw14L9zDrQZ9RTDwDIkq RKMDeW/kr5wHIaOp1MXxWjTsmj5D7tfoUrh8cFY0mRKv3LQqy6/eeo4a6e7oTYfH VSRQEGsS9tYECGxL7C4RtJmm6+iLatX30XcnSW+CFpC4pERmgzhmJm8VPYkeu3+T F8cdoopk4pHvK1YGu+KvTVNHzzpT4rpAJj3ZjdagXZGBxdPsbLYCAiH3GjGdwtkY rSnpA8N6uons2NJH+6tbuIc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:40 2026 by rpki-client