$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQU-5MrSH95hjsCJXH1In_vDU9M.roa File: RQU-5MrSH95hjsCJXH1In_vDU9M.roa (raw, json) Hash identifier: H6uXT2rXDoJd3nqMDvkDvh0Klw8lj9TPwGRC2ePcA4o= Subject key identifier: 45:05:3E:E4:CA:D2:1F:DE:61:8E:C0:89:5C:7D:48:9F:FB:C3:53:D3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 169E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQU-5MrSH95hjsCJXH1In_vDU9M.roa Signing time: Tue 31 Mar 2026 08:02:09 +0000 ROA not before: Tue 31 Mar 2026 08:02:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5790 (0x169e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=45053EE4CAD21FDE618EC0895C7D489FFBC353D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:e6:44:9b:8f:31:38:00:08:b7:f4:b1:61: 4c:5c:d3:30:74:d6:f5:0e:b1:2e:f6:42:78:3d:89: 35:72:d0:88:c0:02:c2:29:bf:8e:c1:73:4b:cc:c2: 05:f2:d1:ef:5c:7e:fd:44:0c:3a:13:92:b3:c1:04: a8:a8:b8:d9:25:8f:2e:36:cc:89:2f:cd:88:01:12: b4:66:fb:5e:b3:71:04:0b:06:15:59:0f:33:d2:60: da:88:f0:d0:5b:62:11:d8:a1:d4:ce:ba:54:24:db: de:a8:6c:0b:fd:38:bc:a8:10:05:0e:00:9c:36:13: 6c:bb:8e:74:a9:d6:d7:88:b7:80:41:98:fc:f9:28: b5:bf:f0:dc:24:65:53:c5:45:53:31:32:52:86:6f: 4e:d2:4c:78:5f:4e:a4:f7:0e:b0:5a:fa:94:07:e7: b5:41:c7:c1:9b:5e:e3:99:90:4d:9a:f1:17:94:21: 1b:4d:1f:50:f5:8d:fb:f4:de:b0:ac:84:dc:99:d0: fd:44:59:ba:a0:02:b7:30:3f:78:2b:37:9f:08:f6: 47:28:85:9b:db:03:51:36:74:20:a1:4c:5a:fc:fa: c1:55:8d:f1:68:fe:31:2f:de:7a:21:2a:3d:c1:b0: 6b:a1:22:b1:5d:9d:c9:a8:25:de:38:df:26:2c:f8: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:3E:E4:CA:D2:1F:DE:61:8E:C0:89:5C:7D:48:9F:FB:C3:53:D3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RQU-5MrSH95hjsCJXH1In_vDU9M.roa sbgp-ipAddrBlock: critical IPv4: 49.104.34.0/23 Signature Algorithm: sha256WithRSAEncryption 72:07:a8:69:3c:49:5c:da:48:09:b7:95:c5:05:1f:30:0a:73: cc:14:2d:f0:c4:50:28:36:8f:e7:e6:3f:8a:78:0e:98:dd:33: dc:d5:54:da:ce:6c:08:98:ff:d9:15:10:5a:02:3b:5f:5c:71: 21:e9:6e:30:64:5b:d4:f4:4e:cd:4a:2d:13:ae:81:07:89:b5: d6:1f:8f:c9:2c:ed:ba:62:e5:e0:fd:8d:58:d3:9e:22:1d:e5: 9b:81:19:65:12:f0:fe:0a:0e:f0:84:a2:10:e3:90:d2:42:fc: c8:d6:5e:c4:b9:bc:de:30:8a:f1:a5:7a:42:63:44:7d:f5:9f: 26:bc:72:ec:d2:d0:84:c3:48:a1:91:ae:90:8a:d1:08:28:07: a2:06:69:03:7f:9f:ba:d4:32:28:ba:25:4b:d5:d0:13:71:6a: 5e:25:88:e9:15:fb:67:e2:68:44:d7:df:7e:fa:78:8d:ab:94: d7:0a:af:3e:03:29:a1:53:de:40:20:5d:1a:43:95:51:ed:39: 95:e3:c5:a2:22:fc:a9:cb:92:03:1a:d3:02:2f:1c:c5:a6:a2: 3d:f6:bd:76:ff:a7:0d:00:d6:80:74:c7:5d:c2:4d:7a:9a:8e: 1f:8d:78:63:1b:f5:86:16:d2:8c:10:5d:72:d1:6b:d1:2e:4d: 0b:cd:29:1d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1MDUzRUU0Q0FEMjFG REU2MThFQzA4OTVDN0Q0ODlGRkJDMzUzRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIc+ZEm48xOAAIt/SxYUxc0zB01vUOsS72Qng9iTVy0IjAAsIp v47Bc0vMwgXy0e9cfv1EDDoTkrPBBKiouNkljy42zIkvzYgBErRm+16zcQQLBhVZ DzPSYNqI8NBbYhHYodTOulQk296obAv9OLyoEAUOAJw2E2y7jnSp1teIt4BBmPz5 KLW/8NwkZVPFRVMxMlKGb07STHhfTqT3DrBa+pQH57VBx8GbXuOZkE2a8ReUIRtN H1D1jfv03rCshNyZ0P1EWbqgArcwP3grN58I9kcohZvbA1E2dCChTFr8+sFVjfFo /jEv3nohKj3BsGuhIrFdncmoJd443yYs+MKtAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQURQU+5MrSH95hjsCJXH1In/vDU9MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1JRVS01TXJTSDk1aGpzQ0pYSDFJbl92RFU5TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaCIwDQYJKoZIhvcNAQELBQADggEB AHIHqGk8SVzaSAm3lcUFHzAKc8wULfDEUCg2j+fmP4p4DpjdM9zVVNrObAiY/9kV EFoCO19ccSHpbjBkW9T0Ts1KLROugQeJtdYfj8ks7bpi5eD9jVjTniId5ZuBGWUS 8P4KDvCEohDjkNJC/MjWXsS5vN4wivGlekJjRH31nya8cuzS0ITDSKGRrpCK0Qgo B6IGaQN/n7rUMii6JUvV0BNxal4liOkV+2fiaETX3376eI2rlNcKrz4DKaFT3kAg XRpDlVHtOZXjxaIi/KnLkgMa0wIvHMWmoj32vXb/pw0A1oB0x13CTXqajh+NeGMb 9YYW0owQXXLRa9EuTQvNKR0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:18 2026 by rpki-client