$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YvzYPZk5e3twkMHgtb3wDQxtty8.roa File: YvzYPZk5e3twkMHgtb3wDQxtty8.roa (raw, json) Hash identifier: MqwnVBmfAlmAjF4UPzmB1JTn9Bc2X3AjZFlGnBfHiP4= Subject key identifier: 62:FC:D8:3D:99:39:7B:7B:70:90:C1:E0:B5:BD:F0:0D:0C:6D:B7:2F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13C9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YvzYPZk5e3twkMHgtb3wDQxtty8.roa Signing time: Tue 31 Mar 2026 07:56:17 +0000 ROA not before: Tue 31 Mar 2026 07:56:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5065 (0x13c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=62FCD83D99397B7B7090C1E0B5BDF00D0C6DB72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:da:cb:ea:12:ed:4f:f6:55:32:9b:53:2f: 53:d1:b0:5e:36:80:1a:b8:04:66:24:a4:90:df:01: dc:01:95:a6:48:c4:4e:3b:f7:d7:24:80:5e:d5:49: fc:e6:5f:c8:24:94:5f:a5:65:ef:46:4b:1e:28:84: e6:59:79:6e:55:43:9c:a7:b9:fc:05:04:97:ea:e3: 04:1b:68:67:56:34:67:12:39:a8:b5:92:a6:19:df: c1:72:80:16:2b:4e:44:6e:43:a8:28:7b:80:70:a4: 8b:a6:4b:55:1f:1b:fc:e8:3c:7c:1a:a3:00:95:08: 9c:d3:fc:5a:55:65:91:cb:1c:93:55:27:09:3e:08: e8:0b:b1:a0:0e:d6:af:26:df:a8:96:d4:0a:6e:a5: ca:a5:d7:3b:95:a5:7c:1c:bb:0b:6d:cf:1d:ee:56: 6d:14:c5:5b:50:5a:83:18:b0:41:ff:a8:3b:68:01: c3:d3:b9:d6:6f:96:21:3b:5a:27:80:a3:09:93:73: f3:87:bb:5d:1e:e3:e8:1b:fb:f3:f8:1b:02:57:b1: ec:18:76:bb:c3:82:6e:b7:a8:a6:27:46:d3:16:5c: 3e:ed:bb:c8:d0:85:4c:37:28:6b:e6:19:96:73:1b: 33:2f:31:c5:98:f2:06:0d:2b:c0:d4:ee:5a:9d:ea: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FC:D8:3D:99:39:7B:7B:70:90:C1:E0:B5:BD:F0:0D:0C:6D:B7:2F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YvzYPZk5e3twkMHgtb3wDQxtty8.roa sbgp-ipAddrBlock: critical IPv4: 49.98.172.0/23 Signature Algorithm: sha256WithRSAEncryption 13:b6:d2:70:18:7c:5a:00:17:1c:fd:31:ad:3d:91:3b:62:14: 88:a6:7c:ba:2e:c2:59:20:60:e9:ae:98:b2:91:c2:cc:ed:da: 04:bf:23:33:a3:ba:3b:92:4e:f7:8d:85:55:2d:5f:66:34:f0: d7:af:d7:54:f0:0a:9a:7a:72:e4:7b:e0:86:2e:79:13:11:0f: fc:b1:1e:91:fe:18:b8:ee:59:db:7e:51:83:7f:e9:31:c2:82: ab:aa:d3:d8:fc:31:24:d5:13:70:d8:a9:c5:06:f8:d9:93:d0: 5b:4e:78:49:ef:b5:21:2c:19:56:c8:0c:fc:ce:bf:9d:d8:a7: 7c:19:cb:21:b8:f1:a6:9d:2d:82:99:c5:c0:c0:d7:c0:38:dc: 98:48:c5:32:4a:79:48:6b:b3:9e:61:0c:ce:a6:b3:a6:d4:74: 3e:7c:59:3b:b3:db:4d:42:20:f6:ef:82:55:8f:83:e3:0b:58: 83:d0:17:23:d0:a8:a7:23:e5:ae:43:b8:ea:2e:f1:2a:b4:53: d8:1c:7b:a0:1f:00:01:46:2a:5a:e3:0e:3b:54:72:46:7a:7e: f4:6a:87:d6:03:16:6f:92:8c:f6:d1:c0:cc:87:ba:0c:b9:6d: 67:4d:f6:db:98:20:d7:62:c8:7d:28:d6:02:3d:41:33:ca:5c: 79:14:66:be -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyRkNEODNEOTkzOTdC N0I3MDkwQzFFMEI1QkRGMDBEMEM2REI3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC14drL6hLtT/ZVMptTL1PRsF42gBq4BGYkpJDfAdwBlaZIxE47 99ckgF7VSfzmX8gklF+lZe9GSx4ohOZZeW5VQ5ynufwFBJfq4wQbaGdWNGcSOai1 kqYZ38FygBYrTkRuQ6goe4BwpIumS1UfG/zoPHwaowCVCJzT/FpVZZHLHJNVJwk+ COgLsaAO1q8m36iW1Apupcql1zuVpXwcuwttzx3uVm0UxVtQWoMYsEH/qDtoAcPT udZvliE7WieAowmTc/OHu10e4+gb+/P4GwJXsewYdrvDgm63qKYnRtMWXD7tu8jQ hUw3KGvmGZZzGzMvMcWY8gYNK8DU7lqd6hu/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUYvzYPZk5e3twkMHgtb3wDQxtty8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1l2ellQWms1ZTN0d2tNSGd0YjN3RFF4dHR5OC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYqwwDQYJKoZIhvcNAQELBQADggEB ABO20nAYfFoAFxz9Ma09kTtiFIimfLouwlkgYOmumLKRwszt2gS/IzOjujuSTveN hVUtX2Y08Nev11TwCpp6cuR74IYueRMRD/yxHpH+GLjuWdt+UYN/6THCgquq09j8 MSTVE3DYqcUG+NmT0FtOeEnvtSEsGVbIDPzOv53Yp3wZyyG48aadLYKZxcDA18A4 3JhIxTJKeUhrs55hDM6ms6bUdD58WTuz201CIPbvglWPg+MLWIPQFyPQqKcj5a5D uOou8Sq0U9gce6AfAAFGKlrjDjtUckZ6fvRqh9YDFm+SjPbRwMyHugy5bWdN9tuY INdiyH0o1gI9QTPKXHkUZr4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:54 2026 by rpki-client