$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TDQLm2MUR2S5t-CCGM_5ts2Ux4Y.roa File: TDQLm2MUR2S5t-CCGM_5ts2Ux4Y.roa (raw, json) Hash identifier: hyshgkFGwpX8t4ZF5oTGCf69rOkfyYfg2HFRYvJo60k= Subject key identifier: 4C:34:0B:9B:63:14:47:64:B9:B7:E0:82:18:CF:F9:B6:CD:94:C7:86 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13C4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TDQLm2MUR2S5t-CCGM_5ts2Ux4Y.roa Signing time: Tue 31 Mar 2026 07:56:15 +0000 ROA not before: Tue 31 Mar 2026 07:56:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5060 (0x13c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4C340B9B63144764B9B7E08218CFF9B6CD94C786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:23:f9:03:a7:ad:8d:97:fd:ea:b3:ec:a0: 68:b6:ce:89:c2:ad:fa:48:fc:e1:56:e3:0f:8c:71: 58:5f:e7:58:6c:6b:8b:cb:07:3a:ec:3c:04:be:13: db:38:41:2b:0d:a8:e5:b1:8e:ca:74:22:1a:85:a8: b1:4b:48:64:96:64:4f:97:2a:06:3d:95:0d:02:3f: 61:27:2f:bb:0c:19:42:29:cd:d6:90:b4:fb:7a:c6: a6:f6:26:4c:ef:b5:da:34:e4:18:49:10:c3:4c:ae: 7b:a7:78:ed:29:04:e4:02:c6:f2:13:d7:85:41:18: 60:35:a9:60:af:90:64:5f:ee:a7:80:ef:3c:67:fd: 87:2a:15:05:61:1d:e5:6e:66:f8:72:96:4c:77:21: 08:b2:66:6b:9b:98:5d:8b:e3:4e:99:2c:42:60:f8: b3:8d:18:1a:13:a5:af:3b:d6:31:4a:e8:e1:23:92: 36:40:32:17:9f:fb:1e:ac:71:4b:3e:d9:f8:13:d1: 14:47:b0:d8:b9:1e:de:be:d9:48:bf:a9:c0:43:28: eb:93:b9:1c:2e:3c:5b:69:74:0b:37:66:76:cd:51: 35:ca:43:ed:4b:44:d7:c4:9c:41:f2:33:38:3c:77: 89:05:db:35:cd:c8:4b:c1:f1:80:dc:46:c4:82:f7: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:34:0B:9B:63:14:47:64:B9:B7:E0:82:18:CF:F9:B6:CD:94:C7:86 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TDQLm2MUR2S5t-CCGM_5ts2Ux4Y.roa sbgp-ipAddrBlock: critical IPv4: 49.98.180.0/22 Signature Algorithm: sha256WithRSAEncryption 76:2e:e8:9f:23:95:af:8a:0b:ba:d1:d5:11:dc:fa:1d:a3:0b: cf:18:b7:11:1d:94:2b:75:81:81:24:7e:7c:c0:da:07:8a:da: eb:43:36:a9:d5:4f:3a:94:64:a3:c9:3d:f4:0f:88:85:94:5e: 27:20:3b:7c:5e:33:0f:f1:7c:dd:66:17:a6:ae:2f:e3:d7:0e: 1c:47:22:7f:c5:a2:f6:47:a6:c8:cc:18:fb:57:2e:fa:cc:2b: 80:43:1d:23:1c:fd:7d:02:5e:ed:ac:3b:d2:5c:52:b1:65:6d: 7d:34:df:be:93:28:52:32:8c:45:ba:a0:f9:94:28:4d:8a:48: 08:1b:c6:33:9a:14:e0:99:96:27:5f:a6:13:ee:b5:93:ae:cc: ea:b5:3b:20:1b:20:ff:ef:b0:cc:58:1b:67:ab:bf:0d:a2:76: f6:4d:02:49:bb:4d:27:20:79:e2:68:1c:03:df:5a:d1:24:be: 8d:14:89:65:86:1b:36:2f:72:f1:98:23:3d:e3:85:6d:f0:81: 47:7a:89:f9:dd:bf:23:79:9d:15:81:b2:b0:a2:3b:00:1e:86: 75:dc:e6:50:ae:ec:57:02:64:b4:f8:7a:75:28:25:0a:43:bf: 83:b9:15:19:6d:02:36:b2:1b:08:e1:ec:f3:33:64:00:5d:79: 60:76:bd:c8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDMzQwQjlCNjMxNDQ3 NjRCOUI3RTA4MjE4Q0ZGOUI2Q0Q5NEM3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC90SP5A6etjZf96rPsoGi2zonCrfpI/OFW4w+McVhf51hsa4vL BzrsPAS+E9s4QSsNqOWxjsp0IhqFqLFLSGSWZE+XKgY9lQ0CP2EnL7sMGUIpzdaQ tPt6xqb2Jkzvtdo05BhJEMNMrnuneO0pBOQCxvIT14VBGGA1qWCvkGRf7qeA7zxn /YcqFQVhHeVuZvhylkx3IQiyZmubmF2L406ZLEJg+LONGBoTpa871jFK6OEjkjZA Mhef+x6scUs+2fgT0RRHsNi5Ht6+2Ui/qcBDKOuTuRwuPFtpdAs3ZnbNUTXKQ+1L RNfEnEHyMzg8d4kF2zXNyEvB8YDcRsSC94anAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUTDQLm2MUR2S5t+CCGM/5ts2Ux4YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1REUUxtMk1VUjJTNXQtQ0NHTV81dHMyVXg0WS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYrQwDQYJKoZIhvcNAQELBQADggEB AHYu6J8jla+KC7rR1RHc+h2jC88YtxEdlCt1gYEkfnzA2geK2utDNqnVTzqUZKPJ PfQPiIWUXicgO3xeMw/xfN1mF6auL+PXDhxHIn/FovZHpsjMGPtXLvrMK4BDHSMc /X0CXu2sO9JcUrFlbX00376TKFIyjEW6oPmUKE2KSAgbxjOaFOCZlidfphPutZOu zOq1OyAbIP/vsMxYG2ervw2idvZNAkm7TScgeeJoHAPfWtEkvo0UiWWGGzYvcvGY Iz3jhW3wgUd6ifndvyN5nRWBsrCiOwAehnXc5lCu7FcCZLT4enUoJQpDv4O5FRlt AjayGwjh7PMzZABdeWB2vcg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:49 2026 by rpki-client