$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UFoc_paDaFCSLpff-p1KYysZNns.roa File: UFoc_paDaFCSLpff-p1KYysZNns.roa (raw, json) Hash identifier: 6jzO0cGKeKJ0Ac9oNEjdcPSObl58a3wv6mZjdAqaJzI= Subject key identifier: 50:5A:1C:FE:96:83:68:50:92:2E:97:DF:FA:9D:4A:63:2B:19:36:7B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13A0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UFoc_paDaFCSLpff-p1KYysZNns.roa Signing time: Tue 31 Mar 2026 07:55:58 +0000 ROA not before: Tue 31 Mar 2026 07:55:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5024 (0x13a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=505A1CFE96836850922E97DFFA9D4A632B19367B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:13:49:0a:7a:97:90:c2:67:21:b3:3f:13: 89:a8:56:8e:9f:af:53:bb:c5:07:4b:bc:06:7c:c3: fd:7e:24:ab:c9:b4:b2:d3:80:63:00:f5:44:62:b5: c7:14:00:97:f3:c6:8d:ae:9f:1d:6f:c8:98:0d:7e: db:06:c2:79:13:f6:1c:22:b7:3c:05:d3:bb:2b:e6: 5a:07:38:37:9c:96:27:45:7c:19:aa:d7:26:fd:74: 2a:87:d9:92:5f:51:72:62:8c:f4:71:23:3e:85:19: 8d:5e:d2:5d:73:56:0f:b3:73:07:32:37:17:bb:74: 56:bc:4d:ac:4a:99:21:bf:ef:c8:f6:89:c2:20:19: 32:3b:0e:f6:c5:b6:f3:82:bc:eb:04:42:03:12:65: 96:a8:d6:4e:37:6d:45:a5:b7:1e:53:90:67:cc:a1: 4b:74:81:1d:56:7c:d7:c0:b9:14:c1:b5:e5:d7:0d: d6:94:e8:5c:2e:25:33:f9:03:b7:4c:ab:2e:59:59: b2:8e:5f:78:a3:4d:67:22:c2:87:2f:a9:37:c6:67: f2:9c:ba:db:8c:36:56:41:ab:bd:29:f5:4d:48:c2: 8a:85:72:fd:e4:c6:ab:d1:02:c9:a6:c8:56:47:8e: 31:a6:b0:1f:03:43:71:d1:4b:4a:8f:c9:d0:d1:15: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5A:1C:FE:96:83:68:50:92:2E:97:DF:FA:9D:4A:63:2B:19:36:7B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UFoc_paDaFCSLpff-p1KYysZNns.roa sbgp-ipAddrBlock: critical IPv4: 49.97.107.0/24 Signature Algorithm: sha256WithRSAEncryption 38:2f:3f:cc:d3:2f:e1:a0:49:db:a9:5e:c6:fe:15:c3:06:26: 36:70:20:25:b6:08:76:2c:e6:b0:1f:13:81:11:66:22:f2:67: 47:55:33:d8:ff:65:88:18:43:8b:29:d7:95:80:9a:a1:86:09: 71:c5:97:49:fe:15:9f:01:22:86:d8:ab:96:9b:f5:f2:00:83: d4:77:00:ea:59:90:26:33:cd:c4:35:f3:82:11:7f:20:42:9f: 7e:4e:8f:27:85:3f:da:af:b2:47:64:c1:64:2a:91:27:bb:69: 74:96:75:62:f1:5e:87:ba:12:52:c4:6e:28:d0:ca:bd:62:94: 6d:fa:9d:eb:21:61:39:75:95:ad:8b:4d:c7:5d:99:15:5b:ef: 75:cb:4b:29:26:42:b1:a5:a8:45:aa:f5:fe:05:9c:f8:0d:16: 3f:4c:27:b0:48:49:de:21:11:f1:36:71:c0:3c:30:6b:6f:cb: 5e:5f:c9:35:ab:de:de:ac:e2:ae:e1:23:78:4b:9e:5c:38:30: 2c:37:14:38:5a:35:04:25:14:fa:4a:41:0f:a9:b6:65:53:d2: 3d:b9:aa:82:e2:af:ac:50:6e:4c:26:c2:6a:18:ef:9f:54:27: 83:80:4f:13:2e:6f:cc:dd:a4:45:2c:af:5e:4a:90:b6:c8:6a: f1:2b:80:81 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUwNUExQ0ZFOTY4MzY4 NTA5MjJFOTdERkZBOUQ0QTYzMkIxOTM2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR7BNJCnqXkMJnIbM/E4moVo6fr1O7xQdLvAZ8w/1+JKvJtLLT gGMA9URitccUAJfzxo2unx1vyJgNftsGwnkT9hwitzwF07sr5loHODeclidFfBmq 1yb9dCqH2ZJfUXJijPRxIz6FGY1e0l1zVg+zcwcyNxe7dFa8TaxKmSG/78j2icIg GTI7DvbFtvOCvOsEQgMSZZao1k43bUWltx5TkGfMoUt0gR1WfNfAuRTBteXXDdaU 6FwuJTP5A7dMqy5ZWbKOX3ijTWciwocvqTfGZ/KcutuMNlZBq70p9U1IwoqFcv3k xqvRAsmmyFZHjjGmsB8DQ3HRS0qPydDRFXN7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUUFoc/paDaFCSLpff+p1KYysZNnswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1VGb2NfcGFEYUZDU0xwZmYtcDFLWXlzWk5ucy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYWswDQYJKoZIhvcNAQELBQADggEB ADgvP8zTL+GgSdupXsb+FcMGJjZwICW2CHYs5rAfE4ERZiLyZ0dVM9j/ZYgYQ4sp 15WAmqGGCXHFl0n+FZ8BIobYq5ab9fIAg9R3AOpZkCYzzcQ184IRfyBCn35OjyeF P9qvskdkwWQqkSe7aXSWdWLxXoe6ElLEbijQyr1ilG36neshYTl1la2LTcddmRVb 73XLSykmQrGlqEWq9f4FnPgNFj9MJ7BISd4hEfE2ccA8MGtvy15fyTWr3t6s4q7h I3hLnlw4MCw3FDhaNQQlFPpKQQ+ptmVT0j25qoLir6xQbkwmwmoY759UJ4OATxMu b8zdpEUsr15KkLbIavErgIE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:49 2026 by rpki-client