$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QZsxy1MulTpv0qB6hwJLNnehtNQ.roa File: QZsxy1MulTpv0qB6hwJLNnehtNQ.roa (raw, json) Hash identifier: 0eBVlCbbYAKnccnGXAPQNiYyoZNi1Fc5Lrg7E8envHI= Subject key identifier: 41:9B:31:CB:53:2E:95:3A:6F:D2:A0:7A:87:02:4B:36:77:A1:B4:D4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13D6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QZsxy1MulTpv0qB6hwJLNnehtNQ.roa Signing time: Tue 31 Mar 2026 07:56:25 +0000 ROA not before: Tue 31 Mar 2026 07:56:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5078 (0x13d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=419B31CB532E953A6FD2A07A87024B3677A1B4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:ac:c1:de:00:08:3f:7a:5e:df:9c:c3:80: 35:bc:00:d9:6a:ef:7c:b0:e8:22:c9:cd:b5:97:b2: 4d:08:e6:ad:8c:45:9a:64:fc:93:5e:9a:48:e6:4f: ca:76:6c:79:87:e7:02:02:40:2f:0f:62:42:6c:da: b3:ff:2f:07:f2:27:9d:2b:98:e1:f6:02:45:0f:f9: 65:4e:b8:b8:34:ca:40:e4:b1:7b:f5:4a:f8:47:87: bd:a8:d8:c9:57:54:d5:41:21:71:12:c7:fd:06:6b: 6e:f5:84:a1:90:d2:40:85:e1:c2:eb:e5:ef:aa:22: e7:7f:c0:6d:5b:7f:e3:0e:4f:e3:9f:fa:4a:9c:a6: da:3b:97:3f:43:f7:57:be:ab:be:9f:74:e6:12:45: 53:6e:35:0a:de:cb:4c:87:1f:68:9d:3f:75:1b:68: aa:20:38:77:17:8a:0c:1e:27:51:24:ee:46:59:60: 0b:59:c3:28:72:c3:be:90:c2:cc:1a:ca:8f:e0:4d: 10:d7:03:ee:eb:b1:88:eb:17:30:4a:89:d1:88:31: 6a:59:38:c8:c7:5b:78:a1:5a:31:45:e8:1c:d8:e1: 10:39:dd:e2:fd:fd:c7:15:31:8d:b1:b8:5b:e2:0c: a0:21:96:f0:4c:0b:e7:23:4d:92:f1:04:9b:ca:33: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:31:CB:53:2E:95:3A:6F:D2:A0:7A:87:02:4B:36:77:A1:B4:D4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QZsxy1MulTpv0qB6hwJLNnehtNQ.roa sbgp-ipAddrBlock: critical IPv4: 49.98.174.0/23 Signature Algorithm: sha256WithRSAEncryption a7:32:c2:82:ba:3d:e8:33:a3:54:0c:89:a6:a0:fa:f3:6c:e1: cf:f7:9c:55:cb:7b:06:6f:ef:44:11:a7:09:6d:b1:32:20:de: 98:e1:07:3f:f6:ae:f7:85:b8:52:17:13:50:3c:64:ed:39:2d: f3:f2:18:52:83:9c:1b:48:f7:e2:af:91:c1:43:73:5a:7a:6b: 76:3d:b9:0b:e7:58:41:4a:cb:80:17:9d:df:6c:49:13:8e:7c: d7:58:d4:95:f8:17:ec:63:bc:9d:e2:5c:c1:c8:33:ba:ff:3e: ee:b4:e6:57:92:98:0f:33:96:89:13:3b:71:0a:6f:a2:76:e8: ed:ed:60:cf:a9:c0:32:ec:a4:a9:8b:63:2f:28:87:e8:57:42: d7:61:5a:d7:b2:ce:57:53:1e:0a:9b:27:de:33:5a:83:80:50: 59:e5:93:8c:95:f5:a8:06:f6:40:82:25:df:fc:81:78:82:d4: c7:a7:95:0c:72:31:fb:da:cb:c6:08:0e:c1:9d:ce:c3:45:64: c3:81:3a:af:f7:08:af:72:5e:2a:06:1c:b1:18:bd:93:52:53: c9:ba:85:ed:4c:90:1e:ec:4e:d8:7e:af:73:36:be:6f:c6:46: a3:22:1b:40:0f:12:d6:da:99:12:ec:86:43:ea:18:1e:d7:df: 93:e4:35:fa -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxOUIzMUNCNTMyRTk1 M0E2RkQyQTA3QTg3MDI0QjM2NzdBMUI0RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5tqzB3gAIP3pe35zDgDW8ANlq73yw6CLJzbWXsk0I5q2MRZpk /JNemkjmT8p2bHmH5wICQC8PYkJs2rP/LwfyJ50rmOH2AkUP+WVOuLg0ykDksXv1 SvhHh72o2MlXVNVBIXESx/0Ga271hKGQ0kCF4cLr5e+qIud/wG1bf+MOT+Of+kqc pto7lz9D91e+q76fdOYSRVNuNQrey0yHH2idP3UbaKogOHcXigweJ1Ek7kZZYAtZ wyhyw76Qwswayo/gTRDXA+7rsYjrFzBKidGIMWpZOMjHW3ihWjFF6BzY4RA53eL9 /ccVMY2xuFviDKAhlvBMC+cjTZLxBJvKMyE/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQZsxy1MulTpv0qB6hwJLNnehtNQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1Fac3h5MU11bFRwdjBxQjZod0pMTm5laHROUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYq4wDQYJKoZIhvcNAQELBQADggEB AKcywoK6Pegzo1QMiaag+vNs4c/3nFXLewZv70QRpwltsTIg3pjhBz/2rveFuFIX E1A8ZO05LfPyGFKDnBtI9+KvkcFDc1p6a3Y9uQvnWEFKy4AXnd9sSROOfNdY1JX4 F+xjvJ3iXMHIM7r/Pu605leSmA8zlokTO3EKb6J26O3tYM+pwDLspKmLYy8oh+hX QtdhWteyzldTHgqbJ94zWoOAUFnlk4yV9agG9kCCJd/8gXiC1MenlQxyMfvay8YI DsGdzsNFZMOBOq/3CK9yXioGHLEYvZNSU8m6he1MkB7sTth+r3M2vm/GRqMiG0AP EtbamRLshkPqGB7X35PkNfo= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:18 2026 by rpki-client