$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fk-wC1b7nXLuEPkMRgTOxO7LDSA.roa File: fk-wC1b7nXLuEPkMRgTOxO7LDSA.roa (raw, json) Hash identifier: pt3Mm5/2lxtkpABp2t/jo1Bv3FJZPPqYGzENM45+n60= Subject key identifier: 7E:4F:B0:0B:56:FB:9D:72:EE:10:F9:0C:46:04:CE:C4:EE:CB:0D:20 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1832 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fk-wC1b7nXLuEPkMRgTOxO7LDSA.roa Signing time: Tue 31 Mar 2026 08:05:27 +0000 ROA not before: Tue 31 Mar 2026 08:05:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6194 (0x1832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7E4FB00B56FB9D72EE10F90C4604CEC4EECB0D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:4b:3e:61:ef:d3:93:f4:e0:94:39:67:24: 23:d8:75:00:5a:78:52:f2:66:31:60:9e:93:1e:81: 9e:ec:9b:22:97:59:e9:9e:b5:43:ab:b0:f1:c7:ac: 54:81:e4:d7:b3:f8:17:42:b8:85:28:6e:0b:89:90: 0b:7d:33:fa:83:d2:78:dd:fb:a2:4e:04:5b:79:a5: d1:3d:e1:33:20:47:9d:79:83:73:4b:e8:13:e0:e2: 95:33:8a:f4:b8:95:f0:8b:04:00:df:f1:c2:b6:a4: cc:f0:e0:5a:41:ba:fc:2b:38:49:79:b9:9a:39:95: d8:bf:14:8b:be:48:82:7d:41:8f:e2:d9:aa:60:c2: e0:ac:ea:77:e0:93:3c:64:3b:f3:cc:fa:0e:48:f7: cf:98:7d:22:8a:80:89:eb:e2:5a:d4:49:88:89:76: 88:93:73:ef:88:8f:8a:33:a6:2b:3a:2c:85:e6:dd: 0f:71:6f:34:67:31:7d:61:4c:09:da:8c:e7:d6:d2: 4c:db:5b:ae:ec:5d:a2:38:62:55:db:41:5f:0e:fb: 54:92:7b:d1:67:cd:68:59:d5:a9:ee:6b:2b:68:f7: 58:bd:aa:45:7e:1b:18:f4:ad:0e:2c:8b:ef:17:b6: 53:27:ad:20:5d:45:9c:28:c3:9f:ac:d7:09:2b:1a: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4F:B0:0B:56:FB:9D:72:EE:10:F9:0C:46:04:CE:C4:EE:CB:0D:20 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fk-wC1b7nXLuEPkMRgTOxO7LDSA.roa sbgp-ipAddrBlock: critical IPv4: 49.96.96.0/20 Signature Algorithm: sha256WithRSAEncryption a4:5d:5c:89:10:27:22:88:ae:ec:17:03:f7:7b:f8:0b:65:48: 47:d9:cb:8d:d5:9e:c4:e2:aa:8c:21:2a:9e:84:e7:ae:48:2b: 5f:e8:f6:17:be:c7:89:40:d4:b2:6c:53:44:dd:9d:7c:69:c8: 12:97:ba:ec:fb:91:03:35:c7:b7:aa:bf:cb:b6:d4:1d:d3:35: 11:2d:50:64:71:ef:3f:f3:6e:94:8c:72:17:eb:bf:08:ca:cc: ac:e0:97:3c:62:dd:bb:bd:48:70:af:44:ef:a6:42:62:4e:e9: 96:24:ad:c7:28:6a:a2:c6:78:30:a0:7a:75:a1:55:b3:56:03: fc:0e:47:9b:53:53:14:e9:a6:24:35:56:52:2c:55:b8:8f:74: 58:41:ea:85:4b:d6:bd:ca:6e:8a:db:06:b8:ca:ce:68:9b:e0: 1c:70:05:e2:88:bd:59:4a:ab:f9:57:8e:04:de:75:49:30:35: 6b:95:3e:17:7e:92:58:f9:93:b2:de:2c:73:84:08:aa:1d:c9: f2:93:22:43:2a:c3:36:d6:b7:c0:ca:c1:0a:53:cd:77:7b:54: 68:7c:b7:e2:2b:cd:a4:21:66:34:f9:1b:ff:d1:4c:c2:77:50: ba:6f:25:db:ce:39:4b:9e:34:b3:5e:62:44:50:63:8c:ae:84: a9:14:58:44 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdFNEZCMDBCNTZGQjlE NzJFRTEwRjkwQzQ2MDRDRUM0RUVDQjBEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjJks+Ye/Tk/TglDlnJCPYdQBaeFLyZjFgnpMegZ7smyKXWeme tUOrsPHHrFSB5Nez+BdCuIUobguJkAt9M/qD0njd+6JOBFt5pdE94TMgR515g3NL 6BPg4pUzivS4lfCLBADf8cK2pMzw4FpBuvwrOEl5uZo5ldi/FIu+SIJ9QY/i2apg wuCs6nfgkzxkO/PM+g5I98+YfSKKgInr4lrUSYiJdoiTc++Ij4ozpis6LIXm3Q9x bzRnMX1hTAnajOfW0kzbW67sXaI4YlXbQV8O+1SSe9FnzWhZ1anuayto91i9qkV+ Gxj0rQ4si+8XtlMnrSBdRZwow5+s1wkrGhTlAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUfk+wC1b7nXLuEPkMRgTOxO7LDSAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2ZrLXdDMWI3blhMdUVQa01SZ1RPeE83TERTQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxYGAwDQYJKoZIhvcNAQELBQADggEB AKRdXIkQJyKIruwXA/d7+AtlSEfZy43VnsTiqowhKp6E565IK1/o9he+x4lA1LJs U0TdnXxpyBKXuuz7kQM1x7eqv8u21B3TNREtUGRx7z/zbpSMchfrvwjKzKzglzxi 3bu9SHCvRO+mQmJO6ZYkrccoaqLGeDCgenWhVbNWA/wOR5tTUxTppiQ1VlIsVbiP dFhB6oVL1r3KborbBrjKzmib4BxwBeKIvVlKq/lXjgTedUkwNWuVPhd+klj5k7Le LHOECKodyfKTIkMqwzbWt8DKwQpTzXd7VGh8t+IrzaQhZjT5G//RTMJ3ULpvJdvO OUueNLNeYkRQY4yuhKkUWEQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:15 2026 by rpki-client