$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RVnnwrmMNM2HmjsCWES65i4XEhA.roa File: RVnnwrmMNM2HmjsCWES65i4XEhA.roa (raw, json) Hash identifier: LRoRfs+Iw5qm9iJPzVQekmCpDeCO1f13kxsf/KBX0mM= Subject key identifier: 45:59:E7:C2:B9:8C:34:CD:87:9A:3B:02:58:44:BA:E6:2E:17:12:10 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1484 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RVnnwrmMNM2HmjsCWES65i4XEhA.roa Signing time: Tue 31 Mar 2026 07:57:42 +0000 ROA not before: Tue 31 Mar 2026 07:57:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5252 (0x1484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4559E7C2B98C34CD879A3B025844BAE62E171210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:47:6c:16:20:76:0e:cc:64:cd:cd:88:b4: 56:ed:2e:34:55:da:64:b3:60:4f:3b:cb:b1:ab:20: 91:2a:9d:05:c8:95:0c:d0:10:cf:c4:50:fd:a5:d3: 9a:5f:00:1e:b9:b8:21:e5:1e:9c:a8:ec:24:39:c1: d0:aa:e3:54:23:ec:f7:81:98:a4:a6:86:9d:90:5a: 37:e4:c3:76:19:2f:92:82:80:5c:8a:45:27:a7:82: 85:b0:98:2a:7e:c7:7b:17:39:89:71:45:b8:71:b6: 89:67:0c:41:85:c7:fd:50:c3:0e:34:1e:c3:0f:e1: c9:d7:bc:44:e5:d5:ff:7d:d5:40:91:ae:24:4f:41: b3:90:8a:2d:c7:57:51:b3:c9:7f:3b:1d:dc:84:2c: 4b:6c:57:77:f0:bf:88:44:e0:70:1f:19:9b:b0:d1: 2f:a9:39:89:37:a1:6b:29:c0:3e:57:2b:75:b4:4c: d4:7a:09:24:64:af:29:15:9a:d5:c6:ad:b1:08:3c: 7c:58:3d:f9:dd:12:c7:f1:e9:f5:4c:82:fe:14:01: 8b:96:1e:e3:40:d2:c8:74:75:ba:5d:13:f5:b2:ab: 83:27:32:3b:d9:cc:34:20:d4:cf:19:57:dc:2b:05: 59:47:d8:9f:10:21:a5:bc:7c:c2:5d:5a:36:06:17: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:E7:C2:B9:8C:34:CD:87:9A:3B:02:58:44:BA:E6:2E:17:12:10 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RVnnwrmMNM2HmjsCWES65i4XEhA.roa sbgp-ipAddrBlock: critical IPv4: 49.105.116.0/22 Signature Algorithm: sha256WithRSAEncryption c1:c1:e3:a8:ee:cc:19:52:40:c9:75:c8:a0:1e:53:c4:8e:51: 4c:ab:41:5c:b5:15:4f:2e:49:3e:7f:39:44:95:81:a8:06:0f: 41:b4:51:b4:99:d2:20:60:5b:a1:50:b7:8e:5a:84:12:68:c9: 83:ed:dc:c3:b7:54:a4:f9:c1:7b:6f:0a:15:5a:97:70:47:d6: a3:37:f1:d9:9f:fb:b7:d8:a7:3c:01:7b:e9:d8:79:37:77:c4: 22:f2:df:ec:bf:a7:3c:8d:86:d6:c9:41:af:bc:45:51:cc:b3: c4:aa:68:8f:98:16:8d:ec:93:62:c9:6c:7d:bc:b2:3e:c8:f9: c0:27:21:e8:97:38:82:62:63:61:6c:bc:e7:79:90:be:c8:94: 38:d8:a9:e5:44:21:fa:62:01:32:19:fc:d9:c0:cf:fd:ab:bf: 9d:8e:f7:fb:cd:20:e5:83:82:62:fe:3b:e9:e7:30:49:48:80: 47:d9:cc:ce:9b:33:c1:ba:8f:8f:78:9d:bb:88:3f:8c:99:0e: 64:6d:c8:51:b1:44:0f:e4:a3:c2:67:58:2c:0d:9b:e5:8d:b5: de:dc:f0:b1:9f:57:8a:ed:7b:90:a5:73:95:f2:ed:5a:5f:de: bc:e1:35:dc:ea:e9:53:60:9a:7a:c7:63:b7:c8:57:4e:42:66: d4:d6:b3:4b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1NTlFN0MyQjk4QzM0 Q0Q4NzlBM0IwMjU4NDRCQUU2MkUxNzEyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjU0dsFiB2Dsxkzc2ItFbtLjRV2mSzYE87y7GrIJEqnQXIlQzQ EM/EUP2l05pfAB65uCHlHpyo7CQ5wdCq41Qj7PeBmKSmhp2QWjfkw3YZL5KCgFyK RSengoWwmCp+x3sXOYlxRbhxtolnDEGFx/1Qww40HsMP4cnXvETl1f991UCRriRP QbOQii3HV1GzyX87HdyELEtsV3fwv4hE4HAfGZuw0S+pOYk3oWspwD5XK3W0TNR6 CSRkrykVmtXGrbEIPHxYPfndEsfx6fVMgv4UAYuWHuNA0sh0dbpdE/Wyq4MnMjvZ zDQg1M8ZV9wrBVlH2J8QIaW8fMJdWjYGF2OVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQURVnnwrmMNM2HmjsCWES65i4XEhAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1JWbm53cm1NTk0ySG1qc0NXRVM2NWk0WEVoQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaXQwDQYJKoZIhvcNAQELBQADggEB AMHB46juzBlSQMl1yKAeU8SOUUyrQVy1FU8uST5/OUSVgagGD0G0UbSZ0iBgW6FQ t45ahBJoyYPt3MO3VKT5wXtvChVal3BH1qM38dmf+7fYpzwBe+nYeTd3xCLy3+y/ pzyNhtbJQa+8RVHMs8SqaI+YFo3sk2LJbH28sj7I+cAnIeiXOIJiY2FsvOd5kL7I lDjYqeVEIfpiATIZ/NnAz/2rv52O9/vNIOWDgmL+O+nnMElIgEfZzM6bM8G6j494 nbuIP4yZDmRtyFGxRA/ko8JnWCwNm+WNtd7c8LGfV4rte5Clc5Xy7Vpf3rzhNdzq 6VNgmnrHY7fIV05CZtTWs0s= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:42 2026 by rpki-client