$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SdzHGjLNxTu7CdoU6ovuqd76iUQ.roa File: SdzHGjLNxTu7CdoU6ovuqd76iUQ.roa (raw, json) Hash identifier: TaowjZahsMI4Xp+p+0nJJxHdeJ4gvw9IyaCQCDG6p9M= Subject key identifier: 49:DC:C7:1A:32:CD:C5:3B:BB:09:DA:14:EA:8B:EE:A9:DE:FA:89:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1527 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SdzHGjLNxTu7CdoU6ovuqd76iUQ.roa Signing time: Tue 31 Mar 2026 07:59:02 +0000 ROA not before: Tue 31 Mar 2026 07:59:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5415 (0x1527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=49DCC71A32CDC53BBB09DA14EA8BEEA9DEFA8944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:a2:50:7a:4e:b0:e3:0a:f3:16:2c:f8:bc: f8:9d:9e:40:2d:aa:0d:16:5a:7a:15:4b:eb:a1:ac: 62:18:a4:77:09:0e:e5:2b:40:55:f8:7f:39:08:94: 06:c3:e2:5d:ab:94:d6:b4:20:87:65:30:38:9f:c3: ff:8a:a1:fc:1a:a6:f4:45:f6:0f:40:ad:54:05:8b: b2:ce:a5:88:b3:ce:66:e4:a9:d7:62:65:17:f5:7c: 03:53:d1:cf:2f:29:70:35:6a:93:d8:02:ca:f1:47: 54:32:1e:bd:2a:c8:23:84:a1:bf:59:8b:32:c2:9b: 12:92:9a:37:c7:a7:a7:02:8a:6b:f1:1b:2b:7c:0a: b0:b3:43:f2:5e:eb:fd:d8:4d:9e:b3:37:e1:c1:2d: 34:ed:25:4b:2f:aa:2c:45:e9:88:88:84:2d:80:0e: 20:0c:38:fc:6e:6b:47:31:4e:af:4f:b3:62:8a:4f: ef:d9:24:a9:be:51:e3:1f:71:f3:5a:56:0a:d2:13: b2:5e:6d:30:48:c3:9c:5c:fb:20:ed:f6:ea:aa:39: 3c:47:ce:c1:7a:f9:b8:5f:1e:a0:bf:33:bf:89:30: af:35:9b:7a:83:c0:8d:86:f9:14:89:c3:d8:ec:ce: 18:8c:4f:36:85:36:39:cf:1e:ed:78:ee:5c:e2:65: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:C7:1A:32:CD:C5:3B:BB:09:DA:14:EA:8B:EE:A9:DE:FA:89:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SdzHGjLNxTu7CdoU6ovuqd76iUQ.roa sbgp-ipAddrBlock: critical IPv4: 220.210.48.0/21 Signature Algorithm: sha256WithRSAEncryption a5:26:1c:09:30:0c:85:c4:ba:41:88:f0:19:bb:9d:36:65:10: 74:fe:26:e8:5c:36:7e:17:66:48:4e:b5:7c:1d:1c:47:2c:4e: 8b:a8:3c:32:a9:99:64:49:ed:54:50:ca:61:6f:b2:72:d7:c0: 25:20:72:28:41:76:f0:81:8e:1d:5d:67:0d:df:52:b7:2f:e0: 06:55:0f:38:89:7d:79:0b:ee:95:b4:6f:bc:a6:04:0a:9d:db: 84:27:b2:62:b8:3d:3d:db:b3:ad:45:d8:ee:78:00:c1:19:9c: 27:df:ee:ae:03:cb:ec:0e:ea:c9:fe:ba:6e:2f:a0:30:46:ec: f0:15:44:44:03:ca:21:94:63:70:98:78:ff:67:aa:5a:ee:b3: 91:92:4a:92:b4:6f:eb:8d:88:fc:20:e1:59:82:45:ec:2d:92: e9:ef:33:67:70:ab:d5:ac:a2:82:af:c8:56:f4:c1:e3:f1:dd: 3e:8b:81:23:92:14:c2:3e:69:b8:94:29:1a:12:93:87:c3:5c: e4:00:1a:f1:16:54:cf:ad:f3:e2:c9:3f:bf:59:5c:89:af:5e: 34:d6:26:c8:0d:07:5f:dc:fa:1c:93:28:c7:af:46:78:17:59: a6:b2:0c:3e:33:04:8e:30:4b:e3:c5:47:13:8f:9c:22:63:6a: 8a:42:66:fb -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5RENDNzFBMzJDREM1 M0JCQjA5REExNEVBOEJFRUE5REVGQTg5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnQqJQek6w4wrzFiz4vPidnkAtqg0WWnoVS+uhrGIYpHcJDuUr QFX4fzkIlAbD4l2rlNa0IIdlMDifw/+KofwapvRF9g9ArVQFi7LOpYizzmbkqddi ZRf1fANT0c8vKXA1apPYAsrxR1QyHr0qyCOEob9ZizLCmxKSmjfHp6cCimvxGyt8 CrCzQ/Je6/3YTZ6zN+HBLTTtJUsvqixF6YiIhC2ADiAMOPxua0cxTq9Ps2KKT+/Z JKm+UeMfcfNaVgrSE7JebTBIw5xc+yDt9uqqOTxHzsF6+bhfHqC/M7+JMK81m3qD wI2G+RSJw9jszhiMTzaFNjnPHu147lziZe+nAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUSdzHGjLNxTu7CdoU6ovuqd76iUQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1NkekhHakxOeFR1N0Nkb1U2b3Z1cWQ3NmlVUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPc0jAwDQYJKoZIhvcNAQELBQADggEB AKUmHAkwDIXEukGI8Bm7nTZlEHT+JuhcNn4XZkhOtXwdHEcsTouoPDKpmWRJ7VRQ ymFvsnLXwCUgcihBdvCBjh1dZw3fUrcv4AZVDziJfXkL7pW0b7ymBAqd24QnsmK4 PT3bs61F2O54AMEZnCff7q4Dy+wO6sn+um4voDBG7PAVREQDyiGUY3CYeP9nqlru s5GSSpK0b+uNiPwg4VmCRewtkunvM2dwq9WsooKvyFb0wePx3T6LgSOSFMI+abiU KRoSk4fDXOQAGvEWVM+t8+LJP79ZXImvXjTWJsgNB1/c+hyTKMevRngXWaayDD4z BI4wS+PFRxOPnCJjaopCZvs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:01 2026 by rpki-client