$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/evNpjJnHcaCw_ObKA6JidovmkKs.roa File: evNpjJnHcaCw_ObKA6JidovmkKs.roa (raw, json) Hash identifier: CyuleFl0TBuarV7p1Me6JetxjbJ1o1ATEiWCKhKVkHQ= Subject key identifier: 7A:F3:69:8C:99:C7:71:A0:B0:FC:E6:CA:03:A2:62:76:8B:E6:90:AB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16F1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/evNpjJnHcaCw_ObKA6JidovmkKs.roa Signing time: Tue 31 Mar 2026 08:02:49 +0000 ROA not before: Tue 31 Mar 2026 08:02:49 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.111.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5873 (0x16f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:49 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7AF3698C99C771A0B0FCE6CA03A262768BE690AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:f3:bb:8b:07:3e:81:fd:de:4e:d9:d4:fd: d0:d7:cc:8c:fc:84:3f:7e:22:68:78:8b:af:ca:62: 82:69:d6:fe:b6:18:61:0e:00:4f:f3:51:7b:6c:8c: da:a1:05:bf:cf:44:26:dc:56:6d:a0:56:2c:9a:1e: aa:25:6d:ef:d5:86:04:5c:25:31:8e:ff:07:7d:9e: ca:01:ae:6e:8b:53:19:91:b4:b4:76:da:74:c4:c2: c9:06:99:cb:25:2e:96:35:b1:f6:e7:bf:9c:08:fa: f7:73:1b:7b:88:fc:14:91:a5:9b:24:0f:eb:99:5d: 41:3b:bd:33:5d:43:b5:eb:e2:f1:68:77:17:9c:a2: 31:0e:c8:ac:c5:04:5b:27:d4:d7:76:96:1e:62:cf: 5a:38:5f:7c:ca:12:0f:7a:59:c9:bc:91:86:b7:05: 87:15:0b:b0:ef:f1:6c:c2:75:27:17:21:c0:9c:95: c7:47:ad:c2:f2:ff:54:f9:c8:b4:d3:b1:5c:d1:58: e4:55:a5:59:6b:92:65:03:cb:bb:15:35:25:96:0a: 37:45:80:b9:08:e8:bb:1d:3c:77:d3:c4:b5:68:33: cd:e9:a7:67:8a:e8:76:ce:40:96:0f:34:82:22:1b: c5:c6:b1:db:f5:46:67:8c:35:86:5d:51:5b:10:20: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F3:69:8C:99:C7:71:A0:B0:FC:E6:CA:03:A2:62:76:8B:E6:90:AB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/evNpjJnHcaCw_ObKA6JidovmkKs.roa sbgp-ipAddrBlock: critical IPv4: 49.111.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:5b:b3:91:bd:d3:b6:eb:b6:3c:c0:ac:83:07:59:61:b1:74: a6:fa:6e:8f:38:eb:3e:73:41:f3:97:62:ad:e9:4d:f5:3c:e9: c2:59:92:7a:b5:48:f8:59:ce:93:34:0b:d0:df:67:a9:66:83: 83:ff:f4:ba:1a:6f:ff:23:a2:ba:f4:49:e1:42:86:19:b8:68: a3:40:e6:65:36:d7:27:14:77:55:53:f0:b2:09:fe:d2:32:e3: cd:b1:c4:39:33:9b:0d:9b:d4:fa:59:b8:dd:18:e7:64:d8:b6: 4f:83:07:66:75:58:bf:68:be:37:3c:90:a7:8c:71:fe:37:db: 5b:22:2c:bd:3e:d3:d8:2c:db:8e:37:eb:6c:04:2a:e6:b3:b6: 9b:ab:6c:85:6a:2b:c2:2b:c1:2d:26:89:37:28:72:e4:f1:3a: b9:b2:e3:9b:da:80:61:17:61:03:31:f8:08:90:00:f5:2d:7d: 5c:75:55:cd:0a:c2:fc:55:43:7b:86:d6:0f:82:5a:de:ba:cf: 73:47:4c:04:e8:0d:5a:8f:06:29:e7:17:7d:54:b2:ca:51:09: 11:55:c7:8c:6d:ee:d2:24:15:08:95:fc:6b:14:dc:aa:ea:0f: 39:6b:fe:1c:19:c2:7d:af:c5:81:bf:1b:93:43:5a:ca:e1:4a: 83:16:6d:84 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdBRjM2OThDOTlDNzcx QTBCMEZDRTZDQTAzQTI2Mjc2OEJFNjkwQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVo/O7iwc+gf3eTtnU/dDXzIz8hD9+Imh4i6/KYoJp1v62GGEO AE/zUXtsjNqhBb/PRCbcVm2gViyaHqolbe/VhgRcJTGO/wd9nsoBrm6LUxmRtLR2 2nTEwskGmcslLpY1sfbnv5wI+vdzG3uI/BSRpZskD+uZXUE7vTNdQ7Xr4vFodxec ojEOyKzFBFsn1Nd2lh5iz1o4X3zKEg96Wcm8kYa3BYcVC7Dv8WzCdScXIcCclcdH rcLy/1T5yLTTsVzRWORVpVlrkmUDy7sVNSWWCjdFgLkI6LsdPHfTxLVoM83pp2eK 6HbOQJYPNIIiG8XGsdv1RmeMNYZdUVsQIAjnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUevNpjJnHcaCw/ObKA6JidovmkKswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2V2TnBqSm5IY2FDd19PYktBNkppZG92bWtLcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcxb4AwDQYJKoZIhvcNAQELBQADggEB AE5bs5G907brtjzArIMHWWGxdKb6bo846z5zQfOXYq3pTfU86cJZknq1SPhZzpM0 C9DfZ6lmg4P/9Loab/8jorr0SeFChhm4aKNA5mU21ycUd1VT8LIJ/tIy482xxDkz mw2b1PpZuN0Y52TYtk+DB2Z1WL9ovjc8kKeMcf4321siLL0+09gs244362wEKuaz tpurbIVqK8IrwS0miTcocuTxOrmy45vagGEXYQMx+AiQAPUtfVx1Vc0KwvxVQ3uG 1g+CWt66z3NHTAToDVqPBinnF31UsspRCRFVx4xt7tIkFQiV/GsU3KrqDzlr/hwZ wn2vxYG/G5NDWsrhSoMWbYQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:54 2026 by rpki-client