$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oDWy9PlMV5N9O5YEacnlXex-PY.roa File: _oDWy9PlMV5N9O5YEacnlXex-PY.roa (raw, json) Hash identifier: FHLFTFTRbTeMSkRNJaj19NpJyyo9M/oH0f5WmOXef7w= Subject key identifier: FE:80:D6:CB:D3:E5:31:5E:4D:F4:EE:58:11:A7:27:95:77:B1:F8:F6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 168C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oDWy9PlMV5N9O5YEacnlXex-PY.roa Signing time: Tue 31 Mar 2026 08:02:00 +0000 ROA not before: Tue 31 Mar 2026 08:02:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5772 (0x168c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FE80D6CBD3E5315E4DF4EE5811A7279577B1F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:be:cf:3a:ab:27:bb:24:49:1e:8f:0f:6b:26: 3f:07:a5:4c:84:c1:03:0b:c0:36:73:36:ea:cb:10: 3a:e0:db:75:b8:2c:0a:43:b3:03:ee:0a:30:9d:ed: 47:b0:d3:7b:92:0a:41:b0:68:27:e6:9c:48:95:73: 0e:d0:34:89:f3:b8:25:c4:b2:5a:b1:ae:83:b0:71: 96:fa:26:4c:f0:96:2c:24:31:46:0e:c4:25:22:2c: 02:0c:da:0d:75:d1:09:ff:c7:62:b5:b9:9d:b7:46: 23:d5:79:4a:32:6d:07:50:95:b5:21:96:aa:6d:2d: 91:3a:11:90:cf:29:2c:31:24:6c:a6:be:71:78:8a: fe:d6:3c:70:7c:6d:bc:9d:9c:c8:20:e0:58:09:8c: f1:81:0c:69:f3:cb:29:66:e1:1a:b3:3f:75:d0:c6: 01:48:82:95:f6:8a:84:ce:ef:88:ed:e0:e7:2b:f6: b1:e6:6a:23:3b:2b:ec:63:32:0c:94:ba:9c:a3:57: e2:e8:8b:95:04:09:a7:4d:d7:3a:43:b4:01:df:c9: b6:41:d7:aa:ff:5e:f6:eb:53:3d:66:78:90:d5:e3: bf:7a:b8:a4:40:30:33:21:91:0b:b7:84:c3:38:94: cd:c0:a8:e2:73:6c:50:3e:9d:e0:00:c9:97:3b:94: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:80:D6:CB:D3:E5:31:5E:4D:F4:EE:58:11:A7:27:95:77:B1:F8:F6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_oDWy9PlMV5N9O5YEacnlXex-PY.roa sbgp-ipAddrBlock: critical IPv4: 49.106.210.0/23 Signature Algorithm: sha256WithRSAEncryption 21:8a:8f:e0:6b:10:ba:28:91:1d:99:15:07:49:24:e6:88:06: 85:ef:4d:e9:01:5a:fc:b2:be:c5:cc:f9:d6:fa:04:04:62:ad: ac:29:27:e5:b0:82:26:e1:95:cf:2a:85:44:81:4c:c4:59:4b: 0d:f9:bd:3f:5d:e1:19:f9:9c:ac:b6:c0:a8:2b:bf:0f:b4:5b: f9:44:36:0b:b8:8a:1c:bd:d2:2d:bb:9c:0b:a0:53:d1:27:5d: 4f:04:da:1e:0f:97:f9:c0:cc:9a:0b:4a:5c:0a:b6:0d:f7:a4: aa:61:f3:f9:5f:64:de:70:46:d4:f1:83:c3:6e:10:83:b4:95: dc:0e:7f:2c:da:17:f4:37:69:19:ac:5f:9a:1d:87:c4:c4:31: 70:62:e4:cd:9d:3e:81:55:7c:bc:17:a4:82:0b:73:78:d7:d5: 20:29:40:63:17:31:5a:0a:56:86:56:64:70:dc:a0:57:eb:11: 5d:ed:e9:07:5d:d6:4f:db:9d:1c:b4:99:57:23:12:bd:a4:1b: a8:94:e4:3d:66:83:2a:ab:50:6b:cc:fc:ff:8a:42:75:27:af: e3:94:0d:d9:55:9f:3f:6e:12:c3:91:42:4b:0e:b4:fc:a0:cf: 01:67:df:68:a4:b2:9b:da:67:a3:57:db:af:4d:5f:f0:a9:33: a4:c2:3a:67 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZFODBENkNCRDNFNTMx NUU0REY0RUU1ODExQTcyNzk1NzdCMUY4RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmvs86qye7JEkejw9rJj8HpUyEwQMLwDZzNurLEDrg23W4LApD swPuCjCd7Uew03uSCkGwaCfmnEiVcw7QNInzuCXEslqxroOwcZb6JkzwliwkMUYO xCUiLAIM2g110Qn/x2K1uZ23RiPVeUoybQdQlbUhlqptLZE6EZDPKSwxJGymvnF4 iv7WPHB8bbydnMgg4FgJjPGBDGnzyylm4RqzP3XQxgFIgpX2ioTO74jt4Ocr9rHm aiM7K+xjMgyUupyjV+Loi5UECadN1zpDtAHfybZB16r/XvbrUz1meJDV4796uKRA MDMhkQu3hMM4lM3AqOJzbFA+neAAyZc7lEVrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU/oDWy9PlMV5N9O5YEacnlXex+PYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L19vRFd5OVBsTVY1TjlPNVlFYWNubFhleC1QWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExatIwDQYJKoZIhvcNAQELBQADggEB ACGKj+BrELookR2ZFQdJJOaIBoXvTekBWvyyvsXM+db6BARirawpJ+Wwgibhlc8q hUSBTMRZSw35vT9d4Rn5nKy2wKgrvw+0W/lENgu4ihy90i27nAugU9EnXU8E2h4P l/nAzJoLSlwKtg33pKph8/lfZN5wRtTxg8NuEIO0ldwOfyzaF/Q3aRmsX5odh8TE MXBi5M2dPoFVfLwXpIILc3jX1SApQGMXMVoKVoZWZHDcoFfrEV3t6Qdd1k/bnRy0 mVcjEr2kG6iU5D1mgyqrUGvM/P+KQnUnr+OUDdlVnz9uEsORQksOtPygzwFn32ik spvaZ6NX269NX/CpM6TCOmc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:55 2026 by rpki-client