$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UpRIiDnLwN_kznPHLKdvG6lLbPg.roa File: UpRIiDnLwN_kznPHLKdvG6lLbPg.roa (raw, json) Hash identifier: iqhXT91kpE7qJOhUHeTtyj5YFCdShFSPeGA1nHe7Gis= Subject key identifier: 52:94:48:88:39:CB:C0:DF:E4:CE:73:C7:2C:A7:6F:1B:A9:4B:6C:F8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1865 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UpRIiDnLwN_kznPHLKdvG6lLbPg.roa Signing time: Tue 31 Mar 2026 08:05:54 +0000 ROA not before: Tue 31 Mar 2026 08:05:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6245 (0x1865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5294488839CBC0DFE4CE73C72CA76F1BA94B6CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:38:84:de:12:da:7b:67:8e:43:3e:da:37: 67:e9:f9:8e:10:d1:cd:e3:cf:8f:45:cd:d6:bf:76: 44:ad:13:25:cd:38:93:00:b9:47:fc:a7:ef:bc:ed: 97:61:49:4d:56:63:f4:19:6e:80:8a:5b:91:b5:e1: c1:25:a3:64:d9:cb:08:3c:ba:93:d8:fe:87:e3:7f: 4e:a7:16:0f:ad:c2:5c:ac:8c:27:8f:bf:88:ef:b6: 5c:0c:75:ec:af:f1:e3:a0:bd:35:74:c8:b1:98:82: 5d:4e:ee:71:4d:f5:16:e7:92:05:1a:9c:90:a7:ce: b2:00:68:37:96:18:80:d4:05:8f:3f:28:03:ff:f1: ed:36:64:d0:7b:10:23:c1:28:8e:3d:27:a3:51:aa: e1:2c:b9:87:51:53:e4:1c:bc:e6:87:96:11:0a:d2: 94:ff:0a:75:e9:be:ac:e0:43:93:97:41:8e:4d:f9: a9:a2:b9:12:7b:61:76:9f:96:6a:4a:d0:20:19:43: c5:70:8e:2d:a3:04:d1:af:54:0e:94:c2:94:3f:17: 4c:31:dc:42:93:4b:62:37:f9:c4:c3:bd:d7:2a:df: 5d:73:c9:93:9e:a3:26:ca:a3:b3:cb:ef:7f:7e:07: 40:e1:56:47:97:09:d4:83:b0:84:a1:a9:2f:d7:03: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:48:88:39:CB:C0:DF:E4:CE:73:C7:2C:A7:6F:1B:A9:4B:6C:F8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UpRIiDnLwN_kznPHLKdvG6lLbPg.roa sbgp-ipAddrBlock: critical IPv4: 49.109.240.0/22 Signature Algorithm: sha256WithRSAEncryption 83:e6:f9:bc:36:91:86:cd:a7:a7:d8:8b:aa:4a:2a:e7:6c:87: 67:01:74:2d:36:02:7c:69:94:86:3d:85:ed:c6:fe:c3:fb:67: 4a:c7:11:0d:6d:e0:c0:c6:5b:35:79:58:ca:81:cd:26:ba:5e: 60:0b:70:9e:c2:e5:94:f6:61:8b:3d:2e:12:3f:b1:3f:50:86: c2:92:97:ab:70:d4:44:c7:0e:44:0e:ee:9d:9d:e9:6d:ee:e7: a4:21:10:b2:65:1d:ad:a6:fa:9f:af:63:10:79:a9:18:97:04: 75:c5:cc:e9:e0:10:5b:83:8e:7f:bb:b6:88:c8:35:e8:a4:e4: 44:4a:9c:a0:d2:df:21:50:ef:30:f2:67:b2:a6:6c:a5:32:94: 0e:f5:c0:7a:29:2a:b0:79:2d:6a:bb:93:3e:2c:aa:84:70:69: d5:c0:53:97:e2:d3:c5:d0:b3:fa:d7:3b:8b:ef:07:32:25:29: 7b:b1:ea:3e:65:69:bd:b6:2b:5e:d9:3e:10:98:9a:b7:a8:68: cb:81:e8:42:5d:85:1d:af:6c:4f:34:3d:6e:f3:5d:ea:6b:ca: 08:e5:81:64:5b:d3:ba:0a:70:9e:d2:5f:f8:c8:fc:6f:48:87: d8:23:06:8e:f6:a3:5c:a9:4d:a3:b8:22:00:bd:b1:19:90:6b: 55:cc:a9:0d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyOTQ0ODg4MzlDQkMw REZFNENFNzNDNzJDQTc2RjFCQTk0QjZDRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNBDiE3hLae2eOQz7aN2fp+Y4Q0c3jz49Fzda/dkStEyXNOJMA uUf8p++87ZdhSU1WY/QZboCKW5G14cElo2TZywg8upPY/ofjf06nFg+twlysjCeP v4jvtlwMdeyv8eOgvTV0yLGYgl1O7nFN9RbnkgUanJCnzrIAaDeWGIDUBY8/KAP/ 8e02ZNB7ECPBKI49J6NRquEsuYdRU+QcvOaHlhEK0pT/CnXpvqzgQ5OXQY5N+ami uRJ7YXaflmpK0CAZQ8Vwji2jBNGvVA6UwpQ/F0wx3EKTS2I3+cTDvdcq311zyZOe oybKo7PL739+B0DhVkeXCdSDsIShqS/XA/fVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUUpRIiDnLwN/kznPHLKdvG6lLbPgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1VwUklpRG5Md05fa3puUEhMS2R2RzZsTGJQZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxbfAwDQYJKoZIhvcNAQELBQADggEB AIPm+bw2kYbNp6fYi6pKKudsh2cBdC02AnxplIY9he3G/sP7Z0rHEQ1t4MDGWzV5 WMqBzSa6XmALcJ7C5ZT2YYs9LhI/sT9QhsKSl6tw1ETHDkQO7p2d6W3u56QhELJl Ha2m+p+vYxB5qRiXBHXFzOngEFuDjn+7tojINeik5ERKnKDS3yFQ7zDyZ7KmbKUy lA71wHopKrB5LWq7kz4sqoRwadXAU5fi08XQs/rXO4vvBzIlKXux6j5lab22K17Z PhCYmreoaMuB6EJdhR2vbE80PW7zXeprygjlgWRb07oKcJ7SX/jI/G9Ih9gjBo72 o1ypTaO4IgC9sRmQa1XMqQ0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:49 2026 by rpki-client