$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OYtORNpl62V39a2wfynbMcAbx9I.roa File: OYtORNpl62V39a2wfynbMcAbx9I.roa (raw, json) Hash identifier: 9/MsVZTXVzOk41Qtf+yAa7gj7ZuGdpg1BBlYzvDatRI= Subject key identifier: 39:8B:4E:44:DA:65:EB:65:77:F5:AD:B0:7F:29:DB:31:C0:1B:C7:D2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 165D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OYtORNpl62V39a2wfynbMcAbx9I.roa Signing time: Tue 31 Mar 2026 08:01:39 +0000 ROA not before: Tue 31 Mar 2026 08:01:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5725 (0x165d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=398B4E44DA65EB6577F5ADB07F29DB31C01BC7D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:26:23:2a:1f:be:09:f0:91:68:66:4b:64: db:18:3a:32:10:f1:8f:39:d7:d5:c2:13:88:a7:bd: f6:b3:47:bd:58:7e:6c:4f:d6:4c:92:b7:78:a2:e7: ad:a8:2e:1f:9d:87:f2:d7:e8:e8:50:67:50:86:96: 87:b1:19:c9:b7:dc:e7:15:f1:40:eb:14:30:dc:53: 8e:22:95:59:6f:bc:fa:96:b4:05:8f:c5:59:b2:83: e5:6b:1e:e5:b0:c8:3b:c8:64:fc:2c:88:e2:aa:b4: 54:a6:bd:4b:15:e8:93:aa:8e:e9:2e:b6:94:95:c0: 86:ed:f4:74:11:a1:bb:24:f9:41:fd:e9:44:1d:a0: 32:83:8f:28:ad:b7:25:53:70:2e:e1:00:04:b5:37: a7:ef:80:4f:e4:d7:5b:c5:34:bf:e0:cd:81:91:92: fb:bd:21:6b:f3:92:fe:cd:75:7c:32:21:7c:3e:d2: 69:84:ec:eb:c5:75:e5:b5:b0:8f:74:a5:ab:ec:08: bd:89:83:9a:16:e2:e4:fd:91:35:71:2e:d2:13:b8: cc:47:c6:16:39:ed:47:3c:34:e0:b8:c0:9f:d7:5c: a2:b5:a2:4b:92:66:d1:bf:8b:be:fc:2b:67:ce:99: f7:c4:92:e3:49:51:92:68:2f:9b:7a:c2:39:26:c6: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:4E:44:DA:65:EB:65:77:F5:AD:B0:7F:29:DB:31:C0:1B:C7:D2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OYtORNpl62V39a2wfynbMcAbx9I.roa sbgp-ipAddrBlock: critical IPv4: 49.104.34.0/24 Signature Algorithm: sha256WithRSAEncryption b9:ab:bc:9a:58:49:a0:63:8e:47:4b:52:00:05:36:d1:a9:7b: 4a:4d:0c:d6:82:1d:9d:5f:b0:23:d0:27:c7:6e:3b:80:27:6e: fb:23:25:b3:2a:98:ba:a0:b5:f6:2b:00:49:a9:fe:43:e2:72: e5:5e:d9:3b:70:c3:65:95:2d:d9:b3:bc:d5:9b:44:f1:39:44: 29:9c:5f:ee:fe:1d:f1:c8:cf:6d:19:5e:6f:92:04:17:bd:3b: 8b:f9:20:20:24:27:5c:f9:6f:a8:4d:c3:a7:74:71:57:e0:ab: 34:78:ce:1c:05:d2:fd:7b:8a:76:46:5d:41:2d:93:7f:e7:2e: 87:9b:ea:6e:1d:7a:da:71:77:f1:1f:5a:48:53:6e:4a:3b:4b: 19:cb:f3:46:9e:42:f4:c6:b4:63:e5:49:14:80:20:81:42:9d: 53:e4:c6:1d:d8:4a:73:79:be:d0:3d:24:b9:db:92:af:af:c1: 0f:00:44:17:2c:8d:bd:45:3f:61:8b:79:15:2d:3c:9f:ca:81: ce:a6:3d:59:0b:22:de:84:a9:15:31:bc:ba:30:30:51:f3:b1: c5:3a:77:68:6b:9a:5e:ed:96:64:9d:3f:fd:75:d6:0e:ba:52: e9:e8:65:c9:37:4d:71:c2:78:dd:36:bf:7a:66:bf:8a:55:3a: 61:1a:28:bc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5OEI0RTQ0REE2NUVC NjU3N0Y1QURCMDdGMjlEQjMxQzAxQkM3RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAWyYjKh++CfCRaGZLZNsYOjIQ8Y8519XCE4invfazR71YfmxP 1kySt3ii562oLh+dh/LX6OhQZ1CGloexGcm33OcV8UDrFDDcU44ilVlvvPqWtAWP xVmyg+VrHuWwyDvIZPwsiOKqtFSmvUsV6JOqjukutpSVwIbt9HQRobsk+UH96UQd oDKDjyittyVTcC7hAAS1N6fvgE/k11vFNL/gzYGRkvu9IWvzkv7NdXwyIXw+0mmE 7OvFdeW1sI90pavsCL2Jg5oW4uT9kTVxLtITuMxHxhY57Uc8NOC4wJ/XXKK1okuS ZtG/i778K2fOmffEkuNJUZJoL5t6wjkmxk8BAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOYtORNpl62V39a2wfynbMcAbx9IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L09ZdE9STnBsNjJWMzlhMndmeW5iTWNBYng5SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaCIwDQYJKoZIhvcNAQELBQADggEB ALmrvJpYSaBjjkdLUgAFNtGpe0pNDNaCHZ1fsCPQJ8duO4AnbvsjJbMqmLqgtfYr AEmp/kPicuVe2Ttww2WVLdmzvNWbRPE5RCmcX+7+HfHIz20ZXm+SBBe9O4v5ICAk J1z5b6hNw6d0cVfgqzR4zhwF0v17inZGXUEtk3/nLoeb6m4detpxd/EfWkhTbko7 SxnL80aeQvTGtGPlSRSAIIFCnVPkxh3YSnN5vtA9JLnbkq+vwQ8ARBcsjb1FP2GL eRUtPJ/Kgc6mPVkLIt6EqRUxvLowMFHzscU6d2hrml7tlmSdP/111g66UunoZck3 TXHCeN02v3pmv4pVOmEaKLw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:34 2026 by rpki-client