$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y8K2PVsOYYn8VYIWD2_tC3JUrt8.roa File: Y8K2PVsOYYn8VYIWD2_tC3JUrt8.roa (raw, json) Hash identifier: tB1IK1igE7b1YucYl7Aig7ufSix/cadQAkIx2vN5aIU= Subject key identifier: 63:C2:B6:3D:5B:0E:61:89:FC:55:82:16:0F:6F:ED:0B:72:54:AE:DF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 183D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y8K2PVsOYYn8VYIWD2_tC3JUrt8.roa Signing time: Tue 31 Mar 2026 08:05:34 +0000 ROA not before: Tue 31 Mar 2026 08:05:34 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6205 (0x183d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:34 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=63C2B63D5B0E6189FC5582160F6FED0B7254AEDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:59:74:98:04:1f:81:25:b4:54:d6:9f:25: b8:1d:c1:86:1b:c2:ba:0a:cb:4d:f5:e0:96:17:75: 96:e2:cc:10:50:0e:88:b0:05:e9:4f:f9:c1:31:c9: a9:10:22:ec:b1:48:65:f1:01:b3:26:99:82:97:b1: 9e:0d:b0:94:52:10:7b:bb:34:56:b1:e2:c7:6b:ef: 09:18:8a:c5:9d:fd:fe:55:5a:c6:46:fa:fa:5d:7f: a7:fc:52:97:f2:20:7f:31:7a:f0:a9:17:52:91:47: 16:a4:00:80:72:e4:5e:a8:e9:d4:cc:a9:28:75:87: f4:84:e4:26:f1:bb:03:9d:9a:99:e8:99:79:c7:2a: 7e:a8:f5:f5:57:5b:0a:89:d1:53:04:a7:43:7c:09: 85:ad:73:d2:46:1c:17:d1:d4:ad:d3:57:e4:df:da: 22:6d:48:e2:98:4d:55:89:60:4b:14:af:9c:6d:fe: 6f:88:39:94:6a:f0:7e:e6:77:c6:1e:06:bc:45:2f: f9:df:d3:a2:cc:78:fb:3d:df:74:37:2e:51:71:c9: 2b:d6:22:bd:ea:22:48:b7:a2:2e:1e:ec:90:3e:cc: 27:42:2f:11:08:b6:4a:bb:7e:b7:83:7d:b3:20:fc: 43:17:f1:37:6a:f7:3a:4f:2c:8a:7a:2a:36:6e:77: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C2:B6:3D:5B:0E:61:89:FC:55:82:16:0F:6F:ED:0B:72:54:AE:DF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y8K2PVsOYYn8VYIWD2_tC3JUrt8.roa sbgp-ipAddrBlock: critical IPv4: 49.109.224.0/20 Signature Algorithm: sha256WithRSAEncryption 07:d1:2f:0a:f8:e0:63:06:e2:3f:61:7e:2c:22:db:56:63:c7: 63:93:97:57:ba:90:58:bb:f5:80:93:bf:a7:8d:1f:00:93:0b: 3f:a9:ba:b5:4e:c0:d9:9d:0c:5b:e9:d1:ea:4d:b2:97:bc:3b: f6:af:07:fe:28:1d:74:51:a0:d2:26:4d:34:41:dd:4c:97:99: f6:6f:67:5e:ba:d3:51:39:98:2a:cf:9b:6b:1a:5b:85:1e:27: 6a:8d:92:2a:49:c6:a6:7b:7c:56:7f:9e:72:f8:de:c0:03:2e: 8c:5e:aa:95:23:00:2a:20:bb:06:5b:ce:bf:a9:2c:51:7b:fe: c5:27:af:c0:b7:5f:a2:5b:9d:a6:f6:d8:0e:96:0c:4a:95:f7: 6a:57:bc:18:8f:a1:33:11:09:4e:65:01:d2:ad:9f:b0:8f:9d: b8:f9:63:ce:16:0b:2b:77:8f:5c:ec:20:51:d3:a5:83:7b:91: 4d:8c:fd:b3:87:ba:70:25:d7:47:ae:1b:eb:f2:0c:cf:72:15: cb:ff:df:1b:ea:c4:9d:52:25:1a:9a:b2:38:b1:f7:9c:5c:db: 18:10:93:18:bd:0c:df:57:b1:13:39:0f:0a:75:b4:e9:d0:19: 17:8b:56:74:30:41:74:d3:1d:a0:81:bb:72:fc:59:f8:08:a5: f4:33:e5:6e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzQzJCNjNENUIwRTYx ODlGQzU1ODIxNjBGNkZFRDBCNzI1NEFFREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Z1l0mAQfgSW0VNafJbgdwYYbwroKy0314JYXdZbizBBQDoiw BelP+cExyakQIuyxSGXxAbMmmYKXsZ4NsJRSEHu7NFax4sdr7wkYisWd/f5VWsZG +vpdf6f8UpfyIH8xevCpF1KRRxakAIBy5F6o6dTMqSh1h/SE5CbxuwOdmpnomXnH Kn6o9fVXWwqJ0VMEp0N8CYWtc9JGHBfR1K3TV+Tf2iJtSOKYTVWJYEsUr5xt/m+I OZRq8H7md8YeBrxFL/nf06LMePs933Q3LlFxySvWIr3qIki3oi4e7JA+zCdCLxEI tkq7freDfbMg/EMX8Tdq9zpPLIp6KjZudw4jAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUY8K2PVsOYYn8VYIWD2/tC3JUrt8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1k4SzJQVnNPWVluOFZZSVdEMl90QzNKVXJ0OC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxbeAwDQYJKoZIhvcNAQELBQADggEB AAfRLwr44GMG4j9hfiwi21Zjx2OTl1e6kFi79YCTv6eNHwCTCz+purVOwNmdDFvp 0epNspe8O/avB/4oHXRRoNImTTRB3UyXmfZvZ16601E5mCrPm2saW4UeJ2qNkipJ xqZ7fFZ/nnL43sADLoxeqpUjACoguwZbzr+pLFF7/sUnr8C3X6Jbnab22A6WDEqV 92pXvBiPoTMRCU5lAdKtn7CPnbj5Y84WCyt3j1zsIFHTpYN7kU2M/bOHunAl10eu G+vyDM9yFcv/3xvqxJ1SJRqasjix95xc2xgQkxi9DN9XsRM5Dwp1tOnQGReLVnQw QXTTHaCBu3L8WfgIpfQz5W4= -----END CERTIFICATE-----Generated at Tue Apr 7 21:02:10 2026 by rpki-client