$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_MA9Qndn2gBSxNWi7vfMHvPUGT4.roa File: _MA9Qndn2gBSxNWi7vfMHvPUGT4.roa (raw, json) Hash identifier: /3BAWDoBNOHpxmZqxEhUvw48CCqe5nZZQwGZkZt1Mis= Subject key identifier: FC:C0:3D:42:77:67:DA:00:52:C4:D5:A2:EE:F7:CC:1E:F3:D4:19:3E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 167C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_MA9Qndn2gBSxNWi7vfMHvPUGT4.roa Signing time: Tue 31 Mar 2026 08:01:54 +0000 ROA not before: Tue 31 Mar 2026 08:01:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5756 (0x167c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FCC03D427767DA0052C4D5A2EEF7CC1EF3D4193E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:47:33:bf:d1:20:8f:ab:01:7e:48:64:97: 6a:a0:24:35:2b:01:98:ba:3f:49:1f:3c:e1:73:37: 29:43:14:9f:31:be:75:fb:b0:9e:f8:90:e2:47:0b: 02:37:7d:96:cb:16:d8:30:85:09:a0:2a:c3:4d:f8: 19:da:4b:00:91:98:2f:4e:ab:90:38:5b:69:81:86: 08:6f:e9:54:48:14:5e:69:a6:8f:c4:0e:c1:f0:ce: 9c:e0:00:5d:42:7b:3d:17:51:d0:a4:fd:cd:8e:8a: be:14:35:9f:a5:dc:32:4b:0d:b8:2a:83:d8:82:36: 68:1d:be:48:00:72:ee:6e:d6:de:38:ea:63:64:26: bc:d9:3d:e5:64:62:8a:10:59:f8:2b:fe:7c:35:3f: 1b:ef:6b:41:88:64:73:08:d8:81:04:20:2e:e9:28: 3f:8a:90:a9:ed:f6:66:15:1f:c3:44:33:38:7d:1f: 62:28:e7:2f:98:3c:2e:b4:ab:eb:7a:a6:d6:8a:2c: b7:49:1d:e7:aa:28:fb:e2:f7:fd:b8:b2:15:f4:67: b1:bb:c7:4a:21:47:63:8c:f7:15:d5:b2:7e:b6:c2: ae:66:50:0c:24:af:3a:cb:b1:fe:f5:c3:ff:01:dc: 89:2e:7b:23:56:ea:38:c9:af:11:b3:b6:d3:5e:b4: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C0:3D:42:77:67:DA:00:52:C4:D5:A2:EE:F7:CC:1E:F3:D4:19:3E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_MA9Qndn2gBSxNWi7vfMHvPUGT4.roa sbgp-ipAddrBlock: critical IPv4: 49.104.11.0/24 Signature Algorithm: sha256WithRSAEncryption c4:6c:51:be:8f:96:69:ca:de:42:be:22:af:87:86:0e:78:4c: ae:d3:12:05:88:c2:ad:0d:3b:0a:84:8b:10:b2:3e:3c:6c:87: c4:01:ba:81:76:fa:82:f6:94:5a:e5:ab:13:ea:91:90:31:d5: 1b:7a:e7:4e:94:dd:95:43:8d:e2:f3:e2:87:8d:24:d0:f0:12: d3:c8:9d:3e:50:9a:e4:38:70:ab:b0:a1:0b:ec:4f:a8:76:00: 5c:d5:fc:2f:f8:4c:ca:36:ce:ec:f5:b4:3d:e4:12:12:0f:86: 06:1a:ae:30:7f:13:e6:a7:af:8f:77:db:5d:ff:b4:c5:e9:07: 05:55:e4:44:68:8c:e9:7a:71:ce:8b:3a:d6:4b:2f:e2:8f:2b: 0c:17:41:42:24:98:83:b2:8d:e4:2b:d3:c4:9c:e7:c1:32:21: d0:f0:37:85:d1:40:87:6b:9d:36:88:48:b7:ed:d4:34:f5:48: 93:5e:c2:a0:58:00:6b:be:72:16:8d:22:3f:0d:90:60:b2:f5: b4:41:b8:84:7c:1d:7b:44:eb:da:54:1e:84:62:29:05:66:25: 83:19:23:8f:82:ff:68:92:3f:2c:e2:4a:54:ff:1f:0a:39:cd: 8f:ab:08:bb:3f:08:ed:00:ce:0c:85:2b:6a:ee:1c:b0:d7:7b: c9:2b:08:e3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZDQzAzRDQyNzc2N0RB MDA1MkM0RDVBMkVFRjdDQzFFRjNENDE5M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxl0czv9Egj6sBfkhkl2qgJDUrAZi6P0kfPOFzNylDFJ8xvnX7 sJ74kOJHCwI3fZbLFtgwhQmgKsNN+BnaSwCRmC9Oq5A4W2mBhghv6VRIFF5ppo/E DsHwzpzgAF1Cez0XUdCk/c2Oir4UNZ+l3DJLDbgqg9iCNmgdvkgAcu5u1t446mNk JrzZPeVkYooQWfgr/nw1Pxvva0GIZHMI2IEEIC7pKD+KkKnt9mYVH8NEMzh9H2Io 5y+YPC60q+t6ptaKLLdJHeeqKPvi9/24shX0Z7G7x0ohR2OM9xXVsn62wq5mUAwk rzrLsf71w/8B3IkueyNW6jjJrxGzttNetBdbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU/MA9Qndn2gBSxNWi7vfMHvPUGT4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L19NQTlRbmRuMmdCU3hOV2k3dmZNSHZQVUdUNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaAswDQYJKoZIhvcNAQELBQADggEB AMRsUb6PlmnK3kK+Iq+Hhg54TK7TEgWIwq0NOwqEixCyPjxsh8QBuoF2+oL2lFrl qxPqkZAx1Rt6506U3ZVDjeLz4oeNJNDwEtPInT5QmuQ4cKuwoQvsT6h2AFzV/C/4 TMo2zuz1tD3kEhIPhgYarjB/E+anr493213/tMXpBwVV5ERojOl6cc6LOtZLL+KP KwwXQUIkmIOyjeQr08Sc58EyIdDwN4XRQIdrnTaISLft1DT1SJNewqBYAGu+chaN Ij8NkGCy9bRBuIR8HXtE69pUHoRiKQVmJYMZI4+C/2iSPyziSlT/Hwo5zY+rCLs/ CO0AzgyFK2ruHLDXe8krCOM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:49 2026 by rpki-client