$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ba-YXWtIJMjH3y4EoKznqHu5LWs.roa File: ba-YXWtIJMjH3y4EoKznqHu5LWs.roa (raw, json) Hash identifier: oWX2m+I+kg4hlhrD34ENfdSyNsy7PvomXXC27L3xRM8= Subject key identifier: 6D:AF:98:5D:6B:48:24:C8:C7:DF:2E:04:A0:AC:E7:A8:7B:B9:2D:6B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 160C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ba-YXWtIJMjH3y4EoKznqHu5LWs.roa Signing time: Tue 31 Mar 2026 08:01:00 +0000 ROA not before: Tue 31 Mar 2026 08:01:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5644 (0x160c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6DAF985D6B4824C8C7DF2E04A0ACE7A87BB92D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:ec:74:bc:bf:6c:47:ee:90:40:db:39:d4: f1:32:13:13:2a:41:b7:3d:2d:2c:f4:f2:0c:36:f0: b9:3d:ca:59:4c:7f:41:3a:73:24:dc:d8:89:bf:62: a5:e1:f1:e3:fa:7f:ac:4f:be:1f:e0:5f:30:e9:25: 97:d2:1a:dc:55:77:ea:31:5f:4f:9a:fe:51:6a:4e: da:ff:5f:a2:56:3a:81:71:f6:10:96:62:be:76:72: f0:63:a6:af:b0:24:bd:2a:8c:36:bb:59:c0:13:db: 5e:e2:37:61:32:95:10:61:6f:48:cc:4e:47:1c:ce: 94:8d:7c:fb:eb:7e:46:cd:c5:05:ad:57:19:4f:de: a7:83:1a:23:d5:e2:92:91:03:21:1e:26:7f:65:17: 11:db:fc:73:24:4a:7f:d5:9c:06:5b:01:6a:69:11: 24:9a:1b:24:d8:13:12:db:ac:09:d5:c7:b1:b6:fc: 41:1f:65:23:54:71:1c:80:66:50:bc:8d:60:7f:81: 04:2f:dc:e8:50:18:25:a2:cf:ff:b2:f9:6b:42:d6: b0:fe:91:23:2e:88:b5:74:36:5e:24:45:da:2c:3c: 5a:82:63:1d:16:d9:d2:ab:92:38:1f:a3:56:75:06: 37:c6:e0:03:60:76:29:6f:24:0c:e2:0a:54:03:db: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:98:5D:6B:48:24:C8:C7:DF:2E:04:A0:AC:E7:A8:7B:B9:2D:6B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ba-YXWtIJMjH3y4EoKznqHu5LWs.roa sbgp-ipAddrBlock: critical IPv4: 49.96.6.0/23 Signature Algorithm: sha256WithRSAEncryption 71:82:08:45:e5:a3:3f:24:5d:95:7c:6e:a2:e0:9b:75:bc:3d: f0:9f:23:dc:83:c2:3e:16:3a:ee:9b:8f:af:4f:6f:86:b8:3b: ef:09:6e:4e:8c:35:bf:f7:1b:c6:5c:d7:bc:5e:5b:68:fc:a7: 7a:27:4a:e1:8a:14:10:90:9e:87:fe:b0:3d:26:d6:83:0e:9e: 92:ef:c1:d1:f3:48:c8:9f:0d:40:58:c5:d9:92:73:7d:90:8c: f9:9a:22:ad:20:2d:21:f9:45:f8:a7:4e:54:4a:44:6c:ec:b5: c8:d3:91:cd:f1:9f:cb:d8:2e:a7:cd:8a:24:56:7d:9b:5c:89: a9:d5:8b:96:3f:fe:fe:3b:13:db:30:fa:46:a5:1d:81:b0:2e: 00:93:d8:6c:dd:61:a7:4f:86:14:75:61:b0:5d:2a:cf:5c:22: 07:8d:cb:a2:dc:63:bb:d5:05:a0:e5:07:bb:83:75:c5:f1:0e: 59:c1:8b:5e:59:00:0f:46:0c:91:3b:fe:b4:80:27:9c:56:b9: c5:92:8e:24:c2:e1:84:10:ea:56:a4:bc:94:85:3c:68:42:9f: 58:8b:e7:69:ea:39:50:4d:55:9b:90:bc:a2:12:49:f0:4e:63: a1:1b:49:71:9d:a4:b8:c2:8d:8e:d1:37:5b:9d:39:2f:09:c4: e9:97:70:6b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZEQUY5ODVENkI0ODI0 QzhDN0RGMkUwNEEwQUNFN0E4N0JCOTJENkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMCOx0vL9sR+6QQNs51PEyExMqQbc9LSz08gw28Lk9yllMf0E6 cyTc2Im/YqXh8eP6f6xPvh/gXzDpJZfSGtxVd+oxX0+a/lFqTtr/X6JWOoFx9hCW Yr52cvBjpq+wJL0qjDa7WcAT217iN2EylRBhb0jMTkcczpSNfPvrfkbNxQWtVxlP 3qeDGiPV4pKRAyEeJn9lFxHb/HMkSn/VnAZbAWppESSaGyTYExLbrAnVx7G2/EEf ZSNUcRyAZlC8jWB/gQQv3OhQGCWiz/+y+WtC1rD+kSMuiLV0Nl4kRdosPFqCYx0W 2dKrkjgfo1Z1BjfG4ANgdilvJAziClQD20yXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUba+YXWtIJMjH3y4EoKznqHu5LWswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2JhLVlYV3RJSk1qSDN5NEVvS3pucUh1NUxXcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYAYwDQYJKoZIhvcNAQELBQADggEB AHGCCEXloz8kXZV8bqLgm3W8PfCfI9yDwj4WOu6bj69Pb4a4O+8Jbk6MNb/3G8Zc 17xeW2j8p3onSuGKFBCQnof+sD0m1oMOnpLvwdHzSMifDUBYxdmSc32QjPmaIq0g LSH5RfinTlRKRGzstcjTkc3xn8vYLqfNiiRWfZtcianVi5Y//v47E9sw+kalHYGw LgCT2GzdYadPhhR1YbBdKs9cIgeNy6LcY7vVBaDlB7uDdcXxDlnBi15ZAA9GDJE7 /rSAJ5xWucWSjiTC4YQQ6lakvJSFPGhCn1iL52nqOVBNVZuQvKISSfBOY6EbSXGd pLjCjY7RN1udOS8JxOmXcGs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:27 2026 by rpki-client