$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WQy3CMwXpsIO8-rOuh13WyLQiVo.roa File: WQy3CMwXpsIO8-rOuh13WyLQiVo.roa (raw, json) Hash identifier: 5RXarf7xRsw4MYiTL/u9Ot82GowfqIpUQdYsiodPVEU= Subject key identifier: 59:0C:B7:08:CC:17:A6:C2:0E:F3:EA:CE:BA:1D:77:5B:22:D0:89:5A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16F0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WQy3CMwXpsIO8-rOuh13WyLQiVo.roa Signing time: Tue 31 Mar 2026 08:02:48 +0000 ROA not before: Tue 31 Mar 2026 08:02:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.100.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5872 (0x16f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=590CB708CC17A6C20EF3EACEBA1D775B22D0895A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:c1:f8:c2:a5:f5:e4:34:91:9e:74:36:24: 6b:4e:aa:25:1a:1b:fb:8f:e3:a0:f1:d8:07:c0:aa: f3:a9:e3:42:8c:7c:22:6e:ed:81:9a:35:2c:b6:2d: 82:96:fa:dd:41:df:4a:40:77:06:e0:ff:0e:b8:94: 31:fd:1d:a7:e7:70:9a:30:da:64:95:c0:9b:d9:35: 52:cd:0f:40:30:d5:32:8b:4f:eb:b9:22:0f:ff:59: d9:36:06:63:34:7c:bc:5d:3a:17:f9:b1:75:de:09: 6e:ca:13:29:8a:0c:80:92:06:55:e2:45:2a:90:76: b7:87:6e:b2:e3:81:7b:aa:af:42:fa:59:c3:10:a6: e8:9c:db:f4:42:b1:20:e7:b0:9c:6d:e3:4e:e3:83: 5b:79:f3:2d:92:7a:df:42:a7:8c:bf:56:28:c1:26: 4b:bb:96:f9:d0:48:14:06:9a:40:da:ee:02:ed:b0: c5:5f:63:19:e8:d1:dc:d0:59:79:91:81:d7:b0:7d: 43:31:5f:a5:17:6c:96:37:1c:1e:a9:76:12:6d:d4: d0:63:41:90:1a:59:b2:0e:42:99:0b:96:f6:16:34: 2a:1c:21:09:79:20:80:e0:69:53:ee:4c:aa:60:f7: 24:d1:aa:91:25:2d:c8:89:a4:7c:de:6d:3a:86:c0: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0C:B7:08:CC:17:A6:C2:0E:F3:EA:CE:BA:1D:77:5B:22:D0:89:5A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WQy3CMwXpsIO8-rOuh13WyLQiVo.roa sbgp-ipAddrBlock: critical IPv4: 49.100.160.0/20 Signature Algorithm: sha256WithRSAEncryption a3:b0:0c:c8:01:c0:7f:8d:19:8d:eb:87:05:17:ac:5c:75:c3: eb:01:14:a1:85:1a:00:47:1d:37:84:ef:c7:20:c3:1c:33:65: b8:10:ca:60:51:50:94:dd:94:7e:a4:b1:e5:22:5d:78:1d:07: 48:fc:ef:93:d0:cd:81:08:66:c1:98:40:30:1e:d1:71:74:cb: 1c:f6:60:09:ed:57:21:38:03:ae:b4:31:ff:15:d1:6b:3e:60: a3:a3:ab:df:0e:79:10:bf:b8:ad:bd:a6:09:ed:38:25:87:ce: 9e:4d:2c:d2:c4:6b:86:ea:68:d2:1c:51:d2:5b:75:3b:48:3a: b1:88:9c:43:83:60:dd:36:91:a0:08:30:52:79:3d:58:d6:7d: 49:29:ae:90:ae:8b:a0:11:8b:74:d3:c0:01:e1:35:4f:a0:9f: 1a:3d:27:13:cb:ca:6e:ec:eb:9b:9c:14:ce:f2:fa:9b:3f:f5: b8:88:36:66:f4:22:2a:ec:a6:2a:44:e4:42:c4:50:fd:4b:e9: b4:c5:82:e1:f5:5b:2f:f4:58:8f:39:7a:2e:91:57:8d:bd:b2: 1d:fd:51:80:4e:6d:79:0e:5a:eb:10:77:66:8f:cc:21:de:cd: fd:54:2a:65:bc:5f:ad:22:d9:4a:e2:f8:c6:e3:da:7a:55:62: a7:25:c4:5a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU5MENCNzA4Q0MxN0E2 QzIwRUYzRUFDRUJBMUQ3NzVCMjJEMDg5NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXOsH4wqX15DSRnnQ2JGtOqiUaG/uP46Dx2AfAqvOp40KMfCJu 7YGaNSy2LYKW+t1B30pAdwbg/w64lDH9HafncJow2mSVwJvZNVLND0Aw1TKLT+u5 Ig//Wdk2BmM0fLxdOhf5sXXeCW7KEymKDICSBlXiRSqQdreHbrLjgXuqr0L6WcMQ puic2/RCsSDnsJxt407jg1t58y2Set9Cp4y/VijBJku7lvnQSBQGmkDa7gLtsMVf Yxno0dzQWXmRgdewfUMxX6UXbJY3HB6pdhJt1NBjQZAaWbIOQpkLlvYWNCocIQl5 IIDgaVPuTKpg9yTRqpElLciJpHzebTqGwHc5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUWQy3CMwXpsIO8+rOuh13WyLQiVowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1dReTNDTXdYcHNJTzgtck91aDEzV3lMUWlWby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxZKAwDQYJKoZIhvcNAQELBQADggEB AKOwDMgBwH+NGY3rhwUXrFx1w+sBFKGFGgBHHTeE78cgwxwzZbgQymBRUJTdlH6k seUiXXgdB0j875PQzYEIZsGYQDAe0XF0yxz2YAntVyE4A660Mf8V0Ws+YKOjq98O eRC/uK29pgntOCWHzp5NLNLEa4bqaNIcUdJbdTtIOrGInEODYN02kaAIMFJ5PVjW fUkprpCui6ARi3TTwAHhNU+gnxo9JxPLym7s65ucFM7y+ps/9biINmb0IirspipE 5ELEUP1L6bTFguH1Wy/0WI85ei6RV429sh39UYBObXkOWusQd2aPzCHezf1UKmW8 X60i2Uri+Mbj2npVYqclxFo= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:57 2026 by rpki-client