$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XsAwYAkNG-xPok0sYSAHxrurqd4.roa File: XsAwYAkNG-xPok0sYSAHxrurqd4.roa (raw, json) Hash identifier: oS1pXhX0NhasdO/HfVrRNuelDSGQuu98SE9I4Y1Xs9I= Subject key identifier: 5E:C0:30:60:09:0D:1B:EC:4F:A2:4D:2C:61:20:07:C6:BB:AB:A9:DE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15A7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XsAwYAkNG-xPok0sYSAHxrurqd4.roa Signing time: Tue 31 Mar 2026 08:00:04 +0000 ROA not before: Tue 31 Mar 2026 08:00:04 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5543 (0x15a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:04 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5EC03060090D1BEC4FA24D2C612007C6BBABA9DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b6:30:51:03:6e:dd:74:42:cc:a8:3f:66:5f: e6:b7:18:84:4b:d4:61:d0:2d:85:da:d6:ba:1f:74: 2c:a7:77:05:f4:ae:16:dc:16:80:c2:f2:0e:d5:d6: b8:ae:32:7c:ba:96:9f:76:5d:94:e0:e4:64:15:09: 92:84:79:71:82:db:7d:2e:5b:00:ca:83:a6:a9:18: 80:82:25:33:b1:48:71:70:7c:8f:fb:ac:30:29:ec: bd:51:aa:76:31:bb:bc:6e:1d:84:81:39:0e:b1:fe: 03:71:72:88:54:7d:62:83:58:8b:3b:78:93:2a:e1: 31:31:bf:e4:4d:07:2c:34:5c:59:3e:c8:cf:bb:9a: 37:ca:f5:1f:53:3c:d9:85:63:78:40:d4:70:d3:9f: 66:56:ff:8b:40:a9:22:61:8f:5c:1b:0c:50:b0:cf: 8f:8d:3a:a3:ae:66:f4:bb:c2:61:9a:e8:38:53:b0: c7:5d:df:a4:81:9d:c0:42:d6:6c:f4:03:34:26:ff: 72:cf:d9:df:d0:b2:fd:fa:c5:0e:06:05:8e:a4:9e: e5:e4:e0:3c:30:52:3a:83:36:3d:75:7f:25:1b:40: 3a:28:9d:91:8d:c6:59:bf:48:32:5b:14:5f:d9:9e: 3a:6f:39:ca:4b:11:dc:b9:92:b2:4c:a8:2e:af:4c: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C0:30:60:09:0D:1B:EC:4F:A2:4D:2C:61:20:07:C6:BB:AB:A9:DE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XsAwYAkNG-xPok0sYSAHxrurqd4.roa sbgp-ipAddrBlock: critical IPv4: 49.102.132.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:46:70:7d:fb:bc:3e:f1:93:19:ee:6a:e2:b3:aa:7b:63:c2: d2:93:34:a5:e7:fd:c7:bd:ce:5b:18:82:a8:52:1f:83:07:f3: 52:97:f4:d6:55:78:d7:84:da:8d:da:ae:0d:d8:1e:17:6d:de: 66:d4:4c:57:61:e0:77:89:cb:09:fb:0e:81:c0:82:89:3e:b2: 6a:ce:91:7a:b8:28:de:8d:45:62:0a:0d:67:61:5e:84:f8:d9: df:f2:2a:b6:24:1b:da:60:c9:36:eb:b0:d0:3b:32:aa:4a:97: 0b:92:9e:78:6a:3e:cc:4d:49:5a:4b:03:11:2d:62:8d:c5:32: 59:d7:42:ff:62:8d:e5:fd:13:aa:98:74:73:36:b3:1c:34:2b: ad:b8:41:8e:1a:c6:62:c3:c0:d2:60:87:b1:39:0b:9e:4c:9d: a9:28:14:a8:29:2b:19:5f:98:74:c7:9d:cc:1e:b9:e9:18:e1: 0e:4a:72:b9:4c:f0:d9:4c:38:b9:ef:89:53:7a:7e:aa:e5:ba: 9d:36:11:50:f3:c5:b5:dd:b6:35:3b:92:7e:d1:9f:ce:c4:99: 83:e8:4d:4a:56:f4:03:45:74:54:f3:a3:4f:e5:8e:48:3d:3d: 94:63:75:dc:ef:ee:e5:9e:78:14:53:10:87:77:57:49:b4:f0: bc:d5:8d:28 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFacwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFQzAzMDYwMDkwRDFC RUM0RkEyNEQyQzYxMjAwN0M2QkJBQkE5REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5tjBRA27ddELMqD9mX+a3GIRL1GHQLYXa1rofdCyndwX0rhbc FoDC8g7V1riuMny6lp92XZTg5GQVCZKEeXGC230uWwDKg6apGICCJTOxSHFwfI/7 rDAp7L1RqnYxu7xuHYSBOQ6x/gNxcohUfWKDWIs7eJMq4TExv+RNByw0XFk+yM+7 mjfK9R9TPNmFY3hA1HDTn2ZW/4tAqSJhj1wbDFCwz4+NOqOuZvS7wmGa6DhTsMdd 36SBncBC1mz0AzQm/3LP2d/Qsv36xQ4GBY6knuXk4DwwUjqDNj11fyUbQDoonZGN xlm/SDJbFF/ZnjpvOcpLEdy5krJMqC6vTGA9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXsAwYAkNG+xPok0sYSAHxrurqd4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1hzQXdZQWtORy14UG9rMHNZU0FIeHJ1cnFkNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExZoQwDQYJKoZIhvcNAQELBQADggEB AC9GcH37vD7xkxnuauKzqntjwtKTNKXn/ce9zlsYgqhSH4MH81KX9NZVeNeE2o3a rg3YHhdt3mbUTFdh4HeJywn7DoHAgok+smrOkXq4KN6NRWIKDWdhXoT42d/yKrYk G9pgyTbrsNA7MqpKlwuSnnhqPsxNSVpLAxEtYo3FMlnXQv9ijeX9E6qYdHM2sxw0 K624QY4axmLDwNJgh7E5C55MnakoFKgpKxlfmHTHncweuekY4Q5KcrlM8NlMOLnv iVN6fqrlup02EVDzxbXdtjU7kn7Rn87EmYPoTUpW9ANFdFTzo0/ljkg9PZRjddzv 7uWeeBRTEId3V0m08LzVjSg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:53 2026 by rpki-client