$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TUT4pfHbiYXdsqDrjJxRD4MuwD8.roa File: TUT4pfHbiYXdsqDrjJxRD4MuwD8.roa (raw, json) Hash identifier: MeSklX2cghJ5HG0sTHAzmILbErn5MVx5YuHMxhEXscU= Subject key identifier: 4D:44:F8:A5:F1:DB:89:85:DD:B2:A0:EB:8C:9C:51:0F:83:2E:C0:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16A4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TUT4pfHbiYXdsqDrjJxRD4MuwD8.roa Signing time: Tue 31 Mar 2026 08:02:12 +0000 ROA not before: Tue 31 Mar 2026 08:02:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5796 (0x16a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4D44F8A5F1DB8985DDB2A0EB8C9C510F832EC03F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:78:b7:ef:c5:d3:e6:4a:76:4f:c5:32:51: 6e:fc:81:ac:3a:6c:8c:b5:10:b8:ff:2e:67:35:f9: a1:02:46:80:b3:6d:42:8b:70:e4:9a:c7:c3:10:6c: 6c:6a:36:68:28:58:33:4c:fd:09:50:8a:64:45:9d: 3f:1e:90:e4:8e:39:dc:fc:d3:97:b0:1b:7a:93:31: 5f:3e:eb:1f:97:a6:bf:7e:ad:0e:98:6e:10:63:69: 39:8c:d0:67:de:5c:4c:3d:8c:72:fa:ef:3c:5c:68: 99:47:33:53:26:5a:84:09:b7:6c:3c:af:88:98:f9: 24:fc:46:0c:54:68:0f:3b:c7:63:ac:d3:5e:f4:38: 78:b5:44:bf:b8:19:57:d7:90:7d:b3:b6:57:ce:10: 2e:13:e8:29:f1:36:1f:56:6a:44:54:93:03:01:8e: 4a:39:68:f8:f9:ca:80:e7:f6:50:61:35:c8:d9:8f: 6a:66:c6:17:38:96:7c:c5:a7:5c:88:91:1c:bc:b3: 95:1f:2a:d0:f2:14:51:37:e9:05:d4:8d:8f:c0:b6: 8b:72:04:34:70:4d:d2:64:c4:b6:21:bc:30:ba:0d: ab:17:0b:51:93:87:65:8d:0c:bc:98:94:fc:45:60: 58:31:1b:1c:33:32:32:7b:86:49:26:61:e0:5a:0b: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:44:F8:A5:F1:DB:89:85:DD:B2:A0:EB:8C:9C:51:0F:83:2E:C0:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TUT4pfHbiYXdsqDrjJxRD4MuwD8.roa sbgp-ipAddrBlock: critical IPv4: 49.104.254.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e1:94:0a:46:8f:a3:8c:d7:b1:50:b3:61:44:db:be:0f:6d: bf:46:5a:d7:33:10:ce:02:81:4e:5c:1a:38:4a:c3:2c:ea:97: 08:dc:f8:0d:75:bd:69:f9:13:6d:75:23:73:a6:d5:97:40:c4: dd:cd:f5:a6:96:4d:3e:97:c3:15:cb:ff:0d:3e:4d:33:95:26: c0:39:72:6e:1d:2d:40:5c:5b:0e:85:23:be:ad:16:15:f6:ff: 00:88:de:0f:1c:84:63:47:ad:da:b5:37:e7:6e:22:76:c5:30: 12:48:e9:32:5f:6b:e1:40:f8:6c:7a:f9:e3:f8:22:31:13:55: 0b:ff:aa:a8:9b:c9:3e:b1:b4:6e:05:4c:be:45:1f:1f:dd:1b: 81:bc:0d:2f:5e:a3:1c:11:aa:3b:13:ad:21:e7:74:59:67:bc: f3:96:f6:d6:a7:5a:23:6d:57:94:69:23:39:20:13:19:62:a7: 77:c8:de:f4:16:0c:fd:4a:74:69:db:68:b9:71:1c:68:3e:89: d5:90:d4:8b:25:fd:42:95:48:0f:06:b6:e2:cf:ee:54:48:44: cd:01:c7:f6:3b:1b:d8:64:da:5f:cf:25:90:5d:2d:79:28:1d: 35:ed:1d:43:8b:cd:7a:43:c0:a4:cd:db:b0:e8:18:68:41:3d: d6:08:f9:1c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRENDRGOEE1RjFEQjg5 ODVEREIyQTBFQjhDOUM1MTBGODMyRUMwM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1kHi378XT5kp2T8UyUW78gaw6bIy1ELj/Lmc1+aECRoCzbUKL cOSax8MQbGxqNmgoWDNM/QlQimRFnT8ekOSOOdz805ewG3qTMV8+6x+Xpr9+rQ6Y bhBjaTmM0GfeXEw9jHL67zxcaJlHM1MmWoQJt2w8r4iY+ST8RgxUaA87x2Os0170 OHi1RL+4GVfXkH2ztlfOEC4T6CnxNh9WakRUkwMBjko5aPj5yoDn9lBhNcjZj2pm xhc4lnzFp1yIkRy8s5UfKtDyFFE36QXUjY/AtotyBDRwTdJkxLYhvDC6DasXC1GT h2WNDLyYlPxFYFgxGxwzMjJ7hkkmYeBaC4DpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUTUT4pfHbiYXdsqDrjJxRD4MuwD8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1RVVDRwZkhiaVlYZHNxRHJqSnhSRDRNdXdEOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaP4wDQYJKoZIhvcNAQELBQADggEB AIHhlApGj6OM17FQs2FE274Pbb9GWtczEM4CgU5cGjhKwyzqlwjc+A11vWn5E211 I3Om1ZdAxN3N9aaWTT6XwxXL/w0+TTOVJsA5cm4dLUBcWw6FI76tFhX2/wCI3g8c hGNHrdq1N+duInbFMBJI6TJfa+FA+Gx6+eP4IjETVQv/qqibyT6xtG4FTL5FHx/d G4G8DS9eoxwRqjsTrSHndFlnvPOW9tanWiNtV5RpIzkgExlip3fI3vQWDP1KdGnb aLlxHGg+idWQ1Isl/UKVSA8GtuLP7lRIRM0Bx/Y7G9hk2l/PJZBdLXkoHTXtHUOL zXpDwKTN27DoGGhBPdYI+Rw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:17 2026 by rpki-client