$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S27-oGoC1nMmlW0co-TrN8H3Dro.roa File: S27-oGoC1nMmlW0co-TrN8H3Dro.roa (raw, json) Hash identifier: mJxAt73pEC7fnngBf0OOm1eTBLzGWZe3NxYRPSr7+wc= Subject key identifier: 4B:6E:FE:A0:6A:02:D6:73:26:95:6D:1C:A3:E4:EB:37:C1:F7:0E:BA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 183F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S27-oGoC1nMmlW0co-TrN8H3Dro.roa Signing time: Tue 31 Mar 2026 08:05:35 +0000 ROA not before: Tue 31 Mar 2026 08:05:35 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6207 (0x183f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:35 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4B6EFEA06A02D67326956D1CA3E4EB37C1F70EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:f7:a8:6a:ae:57:86:f7:bf:52:bf:85:9f: 6a:63:19:c8:c9:de:ef:cd:95:44:78:72:fb:0e:02: 25:c2:e8:5d:d3:76:63:be:7c:93:4d:fc:d6:50:f0: 66:7b:f3:87:64:a5:27:25:84:bf:d1:2c:8e:92:7d: 86:b0:c6:b4:a2:0b:fa:13:43:c0:05:6c:87:9e:2e: 13:1f:4c:12:16:02:d8:28:58:40:aa:de:36:7d:04: da:da:ca:8b:d7:41:a1:31:1b:d0:da:e3:27:e9:ee: bd:c9:f6:67:97:9b:e2:5c:93:d3:e6:d0:5d:13:90: 3a:bc:9e:3e:a5:fc:36:b5:e5:9a:e3:e9:2a:52:92: af:e8:96:d1:a0:99:b8:d1:07:2e:48:a0:cd:17:99: 9f:fd:ff:f9:77:e2:0b:09:4d:99:fd:4f:d7:ca:9c: cd:0c:f7:bf:e9:b1:d8:82:90:47:92:7c:3b:73:ba: d9:d8:6a:3a:6e:f7:06:23:62:4c:9f:67:23:e3:13: 92:b9:bf:18:0c:ab:96:26:92:1d:19:80:91:85:a5: 18:4b:84:a1:80:bb:f7:fc:cb:27:c0:1b:a8:e2:97: ff:45:a3:35:d0:91:8f:34:1c:ef:dc:0a:ad:b3:68: 47:95:f9:f9:87:1d:f7:78:ce:15:95:40:b1:a7:4a: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6E:FE:A0:6A:02:D6:73:26:95:6D:1C:A3:E4:EB:37:C1:F7:0E:BA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S27-oGoC1nMmlW0co-TrN8H3Dro.roa sbgp-ipAddrBlock: critical IPv4: 49.109.72.0/21 Signature Algorithm: sha256WithRSAEncryption d1:ec:cf:41:90:7d:92:76:d5:fe:12:09:ac:42:ef:22:68:4c: 40:48:e5:4d:dc:80:98:ae:f4:81:36:46:c1:dc:7a:75:4a:d2: 95:5c:be:25:2f:78:e1:aa:70:e7:e1:73:c1:41:f7:ba:a5:7b: 0a:77:e5:36:87:18:c0:0b:80:62:92:4f:21:04:02:79:c0:6f: 47:a3:18:11:8b:ae:24:22:b6:be:13:cd:bf:7b:ec:27:e9:2a: 71:27:a2:1d:36:ce:53:f9:12:0b:2e:a0:fb:77:7e:e3:e3:8a: 1b:c5:e5:33:5f:aa:4e:76:0e:69:0b:25:eb:82:47:3f:c6:09: 06:94:b9:f0:a5:de:2e:5d:ef:8b:0d:7f:92:e9:48:36:d5:01: a0:00:76:34:db:28:95:dc:97:5c:cb:91:5f:44:1c:d5:9d:0a: 32:53:a8:9e:b1:4e:4e:5e:9d:5b:55:6e:b2:64:4c:8b:9d:dc: 65:77:58:a7:67:ec:9e:fa:89:28:3e:f6:e2:36:2f:06:dd:33: bd:66:34:b5:cf:0d:af:b8:22:c2:1a:d3:83:f1:27:8a:60:95: a8:12:a9:77:d8:ec:49:68:7a:b7:a4:6f:11:25:58:d2:c9:20: bb:a4:25:7c:80:6a:45:0c:33:2c:4f:f5:b3:83:cc:1f:a3:8b: 9e:47:ee:e3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCNkVGRUEwNkEwMkQ2 NzMyNjk1NkQxQ0EzRTRFQjM3QzFGNzBFQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDet/eoaq5Xhve/Ur+Fn2pjGcjJ3u/NlUR4cvsOAiXC6F3TdmO+ fJNN/NZQ8GZ784dkpSclhL/RLI6SfYawxrSiC/oTQ8AFbIeeLhMfTBIWAtgoWECq 3jZ9BNrayovXQaExG9Da4yfp7r3J9meXm+Jck9Pm0F0TkDq8nj6l/Da15Zrj6SpS kq/oltGgmbjRBy5IoM0XmZ/9//l34gsJTZn9T9fKnM0M97/psdiCkEeSfDtzutnY ajpu9wYjYkyfZyPjE5K5vxgMq5Ymkh0ZgJGFpRhLhKGAu/f8yyfAG6jil/9FozXQ kY80HO/cCq2zaEeV+fmHHfd4zhWVQLGnSmWjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUS27+oGoC1nMmlW0co+TrN8H3DrowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1MyNy1vR29DMW5NbWxXMGNvLVRyTjhIM0Ryby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxbUgwDQYJKoZIhvcNAQELBQADggEB ANHsz0GQfZJ21f4SCaxC7yJoTEBI5U3cgJiu9IE2RsHcenVK0pVcviUveOGqcOfh c8FB97qlewp35TaHGMALgGKSTyEEAnnAb0ejGBGLriQitr4Tzb977CfpKnEnoh02 zlP5EgsuoPt3fuPjihvF5TNfqk52DmkLJeuCRz/GCQaUufCl3i5d74sNf5LpSDbV AaAAdjTbKJXcl1zLkV9EHNWdCjJTqJ6xTk5enVtVbrJkTIud3GV3WKdn7J76iSg+ 9uI2LwbdM71mNLXPDa+4IsIa04PxJ4pglagSqXfY7EloerekbxElWNLJILukJXyA akUMMyxP9bODzB+ji55H7uM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:44 2026 by rpki-client