$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cvzBJKt4cO2ixuraeXTQiL6jUtk.roa File: cvzBJKt4cO2ixuraeXTQiL6jUtk.roa (raw, json) Hash identifier: ZgJgDM+MbxLrjxRv1+o/QEwdCrru4LFmXvFvKLcrDs4= Subject key identifier: 72:FC:C1:24:AB:78:70:ED:A2:C6:EA:DA:79:74:D0:88:BE:A3:52:D9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1394 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cvzBJKt4cO2ixuraeXTQiL6jUtk.roa Signing time: Tue 31 Mar 2026 07:55:53 +0000 ROA not before: Tue 31 Mar 2026 07:55:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5012 (0x1394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=72FCC124AB7870EDA2C6EADA7974D088BEA352D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:22:66:21:d5:93:62:94:cc:cd:41:1b:f0: 9a:4a:1a:70:1b:15:c7:55:d0:0d:cb:32:cd:cd:cb: 70:d3:b4:65:14:6c:55:7c:f3:b9:d3:55:bb:39:da: 9b:ea:97:91:be:07:3c:ce:d2:25:5a:a1:59:7c:9b: c8:cb:c7:f9:55:6e:ee:9a:46:7d:9a:91:ec:4a:01: e2:f9:b6:bf:ce:63:dc:47:20:b7:b7:80:5b:6a:64: a1:75:29:cf:19:ca:94:dc:e1:2b:bb:45:f8:a8:1b: 14:23:af:e0:2f:53:25:41:de:bf:dd:ab:9c:b7:4c: 9a:ef:94:86:94:72:fb:45:e7:19:22:b2:00:1d:83: a4:50:37:de:3f:3c:d6:1f:e5:da:05:2f:37:9b:a6: c9:bb:f9:d1:cc:ed:b0:ba:fd:e2:ea:f6:ca:02:52: a0:ea:d7:2e:bb:00:48:40:63:4e:16:aa:61:25:aa: c2:ac:08:f7:c7:46:9e:c8:94:5f:36:34:f1:26:9d: f7:a6:de:57:e4:f2:fc:0a:7b:e0:6d:3a:a1:4d:5c: 03:3c:42:c0:7c:14:06:37:bd:b7:77:07:01:72:b1: 01:86:9c:18:e8:10:24:00:ef:84:d9:c2:09:f3:99: 55:4a:26:98:e0:a2:a8:ab:89:d2:cf:3e:d9:7d:fd: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FC:C1:24:AB:78:70:ED:A2:C6:EA:DA:79:74:D0:88:BE:A3:52:D9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cvzBJKt4cO2ixuraeXTQiL6jUtk.roa sbgp-ipAddrBlock: critical IPv4: 49.97.68.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:0d:e9:44:0d:01:4a:61:6c:5d:d2:06:f9:7f:c9:65:21:65: 76:1a:02:59:b4:c1:91:2d:ef:1b:ec:c2:88:97:a4:12:46:5c: ce:e5:2b:15:7f:30:95:5d:27:2d:a5:de:f4:71:2c:eb:11:67: 63:85:a2:8e:38:bc:9c:6b:8e:d9:85:ab:65:7b:00:9d:bc:f1: 3f:a4:fb:4f:eb:4d:a5:93:6a:38:ee:86:2e:c9:71:75:7c:ae: 2c:32:98:66:32:bc:de:2e:9b:cd:8d:e0:c2:0f:f4:8d:84:2f: 12:5b:45:fa:b0:ef:fd:c0:95:2d:8c:55:3d:b7:d3:73:c4:5a: 04:00:af:75:dd:81:75:8b:fb:c9:3f:ab:6d:ab:5b:a5:3c:f5: ae:b3:e5:2f:c4:2f:2c:02:a4:3c:64:2b:ac:e7:70:eb:c0:6a: 95:68:bb:d4:29:9a:6b:3c:c4:c3:29:0d:0e:bc:a9:2c:8f:18: 4a:51:5e:2d:19:13:2f:04:be:f0:2b:3d:27:20:9c:c6:43:28: e0:3f:36:bd:fd:0a:a3:bf:98:5e:59:57:8c:e0:2b:4b:49:a3: 11:27:48:f7:da:fd:7b:9d:9b:2f:f1:2a:10:8c:6e:52:c0:47: 78:82:23:28:e4:cf:51:73:44:ad:23:ea:4b:d1:65:98:a0:25: f4:6a:4f:44 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyRkNDMTI0QUI3ODcw RURBMkM2RUFEQTc5NzREMDg4QkVBMzUyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJfCJmIdWTYpTMzUEb8JpKGnAbFcdV0A3LMs3Ny3DTtGUUbFV8 87nTVbs52pvql5G+BzzO0iVaoVl8m8jLx/lVbu6aRn2akexKAeL5tr/OY9xHILe3 gFtqZKF1Kc8ZypTc4Su7RfioGxQjr+AvUyVB3r/dq5y3TJrvlIaUcvtF5xkisgAd g6RQN94/PNYf5doFLzebpsm7+dHM7bC6/eLq9soCUqDq1y67AEhAY04WqmElqsKs CPfHRp7IlF82NPEmnfem3lfk8vwKe+BtOqFNXAM8QsB8FAY3vbd3BwFysQGGnBjo ECQA74TZwgnzmVVKJpjgoqiridLPPtl9/dHlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcvzBJKt4cO2ixuraeXTQiL6jUtkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2N2ekJKS3Q0Y08yaXh1cmFlWFRRaUw2alV0ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYUQwDQYJKoZIhvcNAQELBQADggEB AF4N6UQNAUphbF3SBvl/yWUhZXYaAlm0wZEt7xvswoiXpBJGXM7lKxV/MJVdJy2l 3vRxLOsRZ2OFoo44vJxrjtmFq2V7AJ288T+k+0/rTaWTajjuhi7JcXV8riwymGYy vN4um82N4MIP9I2ELxJbRfqw7/3AlS2MVT2303PEWgQAr3XdgXWL+8k/q22rW6U8 9a6z5S/ELywCpDxkK6zncOvAapVou9Qpmms8xMMpDQ68qSyPGEpRXi0ZEy8EvvAr PScgnMZDKOA/Nr39CqO/mF5ZV4zgK0tJoxEnSPfa/Xudmy/xKhCMblLAR3iCIyjk z1FzRK0j6kvRZZigJfRqT0Q= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:07 2026 by rpki-client