$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c2SakAIdizLZPzZtmK0pZV8fNh0.roa File: c2SakAIdizLZPzZtmK0pZV8fNh0.roa (raw, json) Hash identifier: ws4jWxZ8wh7hHd5ZLwgyROXXlG4mWiLBtgUU47AFKvo= Subject key identifier: 73:64:9A:90:02:1D:8B:32:D9:3F:36:6D:98:AD:29:65:5F:1F:36:1D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1618 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c2SakAIdizLZPzZtmK0pZV8fNh0.roa Signing time: Tue 31 Mar 2026 08:01:07 +0000 ROA not before: Tue 31 Mar 2026 08:01:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5656 (0x1618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=73649A90021D8B32D93F366D98AD29655F1F361D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:a7:4d:69:cf:d1:38:63:77:bb:c0:3f:83: 78:32:44:78:71:72:5a:78:94:42:9d:13:6a:c6:15: 7f:62:c2:e9:78:20:61:f8:a3:ce:be:e1:29:39:29: 4a:e4:59:6c:51:fb:3f:7b:da:ef:92:dd:c9:c5:4c: 88:80:b5:c6:b7:c1:2a:87:54:93:02:a2:f3:d9:30: 5a:98:17:60:71:76:ea:14:e5:5a:4d:31:f2:9b:63: ed:e6:44:3b:b7:45:4d:64:88:66:70:26:4e:f6:c7: 1b:68:01:18:b0:fb:8f:e7:b5:a1:cc:44:50:d6:63: f8:1f:ae:8a:2a:86:11:56:71:b3:86:08:e4:73:0f: 73:86:0a:db:ce:cb:61:47:d8:6f:de:bf:ef:08:43: 5b:4b:0b:04:be:e1:4f:30:ce:f1:ac:2b:b0:40:5f: 5c:c0:fb:91:57:b3:78:25:a2:2f:45:b9:a5:c7:31: 08:4f:cb:e2:44:ff:d9:bf:82:94:3b:bf:50:54:cf: 22:78:b5:9e:13:f2:d6:95:51:0e:d6:eb:8b:75:14: 57:94:f1:76:bd:d7:49:67:76:02:be:6e:0e:17:45: e7:88:17:a6:dc:74:3c:75:f6:50:5c:6c:83:15:62: 62:8f:ce:a5:12:01:f9:00:22:1e:6b:02:e6:52:91: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:64:9A:90:02:1D:8B:32:D9:3F:36:6D:98:AD:29:65:5F:1F:36:1D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c2SakAIdizLZPzZtmK0pZV8fNh0.roa sbgp-ipAddrBlock: critical IPv4: 49.98.66.0/23 Signature Algorithm: sha256WithRSAEncryption 08:7e:3e:c1:4f:9c:81:8a:8e:8b:51:1d:7e:b1:0b:16:d1:17: e9:c6:ce:23:76:a1:26:80:da:9c:b8:91:fc:63:db:8d:28:f1: f5:e3:15:33:5e:c8:65:29:e0:8f:82:d6:14:cb:43:b2:6a:a6: dc:ce:87:60:75:ae:8b:4c:2c:a5:b3:0f:1a:c1:92:24:40:2f: 9b:7b:e2:d9:a2:ba:5d:2f:73:42:22:69:16:81:d6:21:24:21: d4:64:f2:5f:77:f2:7b:b8:94:ef:5b:e2:de:95:0b:96:13:37: e2:b2:d3:4c:df:fc:19:c8:5c:8c:49:76:e4:97:8e:f1:10:8b: b8:97:4b:b7:1b:42:1f:91:54:89:26:97:c5:ab:a6:57:08:9e: fc:6e:90:ed:02:9e:f1:32:17:77:3f:19:11:2e:b2:bb:54:da: ca:91:18:62:ad:28:26:1b:ab:91:1a:de:3f:91:ac:52:8e:fd: ed:f1:c9:3c:0b:50:89:bc:ab:35:89:1a:f3:ed:e6:ff:25:d5: ba:1c:44:78:96:24:7e:4c:f0:e2:ea:d9:3b:4c:9e:30:8f:d4: 9c:58:b8:e0:6c:b6:c5:ea:d7:e5:af:a9:1f:0a:98:c5:19:61: 1e:11:94:6a:56:40:54:a6:1e:f8:7b:18:0f:31:88:3c:e8:46: 0c:b5:97:48 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczNjQ5QTkwMDIxRDhC MzJEOTNGMzY2RDk4QUQyOTY1NUYxRjM2MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaMqdNac/ROGN3u8A/g3gyRHhxclp4lEKdE2rGFX9iwul4IGH4 o86+4Sk5KUrkWWxR+z972u+S3cnFTIiAtca3wSqHVJMCovPZMFqYF2BxduoU5VpN MfKbY+3mRDu3RU1kiGZwJk72xxtoARiw+4/ntaHMRFDWY/gfrooqhhFWcbOGCORz D3OGCtvOy2FH2G/ev+8IQ1tLCwS+4U8wzvGsK7BAX1zA+5FXs3gloi9FuaXHMQhP y+JE/9m/gpQ7v1BUzyJ4tZ4T8taVUQ7W64t1FFeU8Xa910lndgK+bg4XReeIF6bc dDx19lBcbIMVYmKPzqUSAfkAIh5rAuZSkX9PAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUc2SakAIdizLZPzZtmK0pZV8fNh0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2MyU2FrQUlkaXpMWlB6WnRtSzBwWlY4Zk5oMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYkIwDQYJKoZIhvcNAQELBQADggEB AAh+PsFPnIGKjotRHX6xCxbRF+nGziN2oSaA2py4kfxj240o8fXjFTNeyGUp4I+C 1hTLQ7JqptzOh2B1rotMLKWzDxrBkiRAL5t74tmiul0vc0IiaRaB1iEkIdRk8l93 8nu4lO9b4t6VC5YTN+Ky00zf/BnIXIxJduSXjvEQi7iXS7cbQh+RVIkml8WrplcI nvxukO0CnvEyF3c/GREusrtU2sqRGGKtKCYbq5Ea3j+RrFKO/e3xyTwLUIm8qzWJ GvPt5v8l1bocRHiWJH5M8OLq2TtMnjCP1JxYuOBstsXq1+WvqR8KmMUZYR4RlGpW QFSmHvh7GA8xiDzoRgy1l0g= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:21 2026 by rpki-client