$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xt_hSpbYjiRilL2oUZqJNTq1TpM.roa File: Xt_hSpbYjiRilL2oUZqJNTq1TpM.roa (raw, json) Hash identifier: NiP+SPXu4SifJA8F7ROW2BVYVSawyyKFKui8RHkX8pk= Subject key identifier: 5E:DF:E1:4A:96:D8:8E:24:62:94:BD:A8:51:9A:89:35:3A:B5:4E:93 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17B1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xt_hSpbYjiRilL2oUZqJNTq1TpM.roa Signing time: Tue 31 Mar 2026 08:04:21 +0000 ROA not before: Tue 31 Mar 2026 08:04:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6065 (0x17b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5EDFE14A96D88E246294BDA8519A89353AB54E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7c:33:44:66:33:b9:e2:56:50:1d:94:6f:f7: 10:0f:7b:f0:fa:a9:11:76:6d:07:83:21:44:d5:a3: 86:df:ff:ad:0d:aa:b2:c0:62:52:03:52:34:74:a5: 00:88:55:db:da:f8:6b:e8:ca:b4:73:ef:33:ee:fb: d7:f0:cc:36:1d:76:dc:31:15:75:55:88:61:45:53: 1a:5e:2f:74:d3:c9:2c:ad:9d:09:ba:1a:d0:e0:27: e9:40:23:3e:55:f9:d0:09:21:a7:16:f1:dd:e6:eb: 62:53:0c:33:09:7f:17:39:51:91:65:a0:63:ed:b8: 4c:5f:bd:3b:75:65:cb:fb:87:b8:93:7f:61:18:6f: 38:e4:3d:b8:c7:e1:60:01:c3:ab:88:e5:72:ee:b7: e3:1f:46:4c:aa:0a:3a:5b:01:5a:84:b1:67:7c:ba: 5a:e1:2b:45:19:58:a3:16:82:a1:80:eb:cd:ee:f9: 95:1f:af:21:37:e3:16:7a:f4:e3:fb:69:70:b2:a0: b8:c9:a1:e6:fd:a0:53:40:5b:19:9c:46:1e:4d:a6: 90:41:e0:3d:21:c9:bf:59:92:69:be:e5:fe:ca:9f: af:e1:3d:f8:32:6b:12:62:b3:67:9f:10:fc:5d:f9: f0:2a:c3:09:e4:5e:61:60:74:57:b6:7d:2d:ca:8a: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DF:E1:4A:96:D8:8E:24:62:94:BD:A8:51:9A:89:35:3A:B5:4E:93 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xt_hSpbYjiRilL2oUZqJNTq1TpM.roa sbgp-ipAddrBlock: critical IPv4: 49.108.225.0/24 Signature Algorithm: sha256WithRSAEncryption e6:4f:ce:1b:35:3f:3b:aa:50:e6:f3:60:eb:96:2a:8e:9a:59: 22:65:fb:15:e5:96:85:57:99:f1:ae:9c:49:0a:49:4f:f7:4d: a9:04:a1:c2:57:5c:4a:57:d6:c1:ba:a4:2c:78:c8:d3:ff:01: 51:6a:5b:4e:22:8d:66:30:5a:fd:67:2a:f7:82:01:39:1c:44: e1:c4:94:35:9e:4b:8e:28:8e:7f:5e:0c:48:66:9d:67:ec:7e: a8:0b:5f:0f:ef:91:99:4f:6f:ed:5f:6f:22:7c:a4:82:1b:7f: 3e:35:09:8a:1c:79:e4:9b:41:ec:e8:f1:a5:ae:c7:ae:78:c2: ce:7b:fe:d2:87:0a:43:3c:c4:de:e2:46:18:d0:10:25:67:d0: 76:c6:80:ac:c6:54:e6:bc:b5:1a:09:04:8c:54:df:3b:54:24: 3e:0e:29:d0:a3:d5:4f:63:86:8e:81:54:3e:fd:c0:96:bb:82: 35:7e:a1:b6:f3:30:3f:05:71:3c:46:61:2f:2f:ac:e7:25:f8: 40:7b:b9:f1:a1:fb:9d:50:39:0e:e2:2e:31:9d:6f:3f:c8:e1: 78:e1:e3:a2:23:bc:7a:e5:15:11:a5:11:c1:f0:ca:fc:7c:07: 77:aa:e4:c5:97:25:2c:2f:0f:0c:a0:f0:5d:a7:60:aa:7e:71: f5:10:bc:17 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFREZFMTRBOTZEODhF MjQ2Mjk0QkRBODUxOUE4OTM1M0FCNTRFOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXfDNEZjO54lZQHZRv9xAPe/D6qRF2bQeDIUTVo4bf/60NqrLA YlIDUjR0pQCIVdva+GvoyrRz7zPu+9fwzDYddtwxFXVViGFFUxpeL3TTySytnQm6 GtDgJ+lAIz5V+dAJIacW8d3m62JTDDMJfxc5UZFloGPtuExfvTt1Zcv7h7iTf2EY bzjkPbjH4WABw6uI5XLut+MfRkyqCjpbAVqEsWd8ulrhK0UZWKMWgqGA683u+ZUf ryE34xZ69OP7aXCyoLjJoeb9oFNAWxmcRh5NppBB4D0hyb9Zkmm+5f7Kn6/hPfgy axJis2efEPxd+fAqwwnkXmFgdFe2fS3Kin5bAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXt/hSpbYjiRilL2oUZqJNTq1TpMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1h0X2hTcGJZamlSaWxMMm9VWnFKTlRxMVRwTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxbOEwDQYJKoZIhvcNAQELBQADggEB AOZPzhs1PzuqUObzYOuWKo6aWSJl+xXlloVXmfGunEkKSU/3TakEocJXXEpX1sG6 pCx4yNP/AVFqW04ijWYwWv1nKveCATkcROHElDWeS44ojn9eDEhmnWfsfqgLXw/v kZlPb+1fbyJ8pIIbfz41CYoceeSbQezo8aWux654ws57/tKHCkM8xN7iRhjQECVn 0HbGgKzGVOa8tRoJBIxU3ztUJD4OKdCj1U9jho6BVD79wJa7gjV+obbzMD8FcTxG YS8vrOcl+EB7ufGh+51QOQ7iLjGdbz/I4Xjh46IjvHrlFRGlEcHwyvx8B3eq5MWX JSwvDwyg8F2nYKp+cfUQvBc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:56 2026 by rpki-client