$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hDj1BAPWyRDnsKtjS4OZfKZjexQ.roa File: hDj1BAPWyRDnsKtjS4OZfKZjexQ.roa (raw, json) Hash identifier: Tr3gPX5P/2KE6xXc8J4xFVegd//ucaVLUG5hfNcUOOs= Subject key identifier: 84:38:F5:04:03:D6:C9:10:E7:B0:AB:63:4B:83:99:7C:A6:63:7B:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1599 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hDj1BAPWyRDnsKtjS4OZfKZjexQ.roa Signing time: Tue 31 Mar 2026 07:59:57 +0000 ROA not before: Tue 31 Mar 2026 07:59:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5529 (0x1599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8438F50403D6C910E7B0AB634B83997CA6637B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:20:0d:2d:14:05:3c:0f:b3:49:a5:ff:80: 8e:5a:f0:ec:16:ce:96:66:da:d2:ed:dc:39:02:00: 09:c2:ab:8a:b1:c7:f4:97:c1:99:48:e8:b3:d3:ef: 37:0a:9b:a9:64:1f:ab:26:8a:e3:aa:39:bf:4a:a5: 05:25:88:ee:47:ba:68:32:2c:07:13:fb:7f:b3:19: 38:8a:df:a1:85:5f:74:80:ce:6e:6d:ed:a0:ea:31: 81:90:3b:b6:59:36:17:e0:74:9d:2a:8b:ef:6b:5e: b9:43:aa:bb:8e:90:fc:cd:7c:d3:f4:55:cc:9e:2e: fe:a3:76:ad:d8:6d:c2:66:64:ed:5a:e8:9d:6f:73: 93:f9:c0:36:43:67:45:38:86:32:35:46:ac:21:4a: 9c:e3:1c:b0:d4:b5:1c:7d:8e:74:47:07:7f:b4:4f: a6:cd:ec:94:d8:ed:41:4c:ae:2d:b0:04:e1:35:e6: f5:52:3a:9e:38:32:e3:96:24:4d:76:48:9d:9c:78: 49:b4:a4:cc:ad:8f:ba:d9:e1:1b:e5:aa:ae:79:79: 91:ce:52:af:5e:9f:dd:30:bd:11:2d:05:43:cc:70: 52:e3:0f:76:c6:7e:6f:5d:c0:b0:87:10:28:b6:4d: 1b:d6:bf:ed:b0:fc:ab:ba:86:8f:88:ce:51:05:9e: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:38:F5:04:03:D6:C9:10:E7:B0:AB:63:4B:83:99:7C:A6:63:7B:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hDj1BAPWyRDnsKtjS4OZfKZjexQ.roa sbgp-ipAddrBlock: critical IPv4: 49.102.128.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:4d:78:a8:f1:7b:69:27:04:e4:db:e7:5d:5a:c7:6a:c5:32: 77:41:87:1b:a1:51:00:49:33:e5:7f:d7:ac:15:65:60:18:ad: 4e:e3:d2:b5:ef:bf:a9:71:81:6e:b3:34:47:ee:64:64:d6:a5: a9:94:bb:07:68:6b:42:d7:b0:47:d2:b4:30:d0:ec:a9:ea:3f: 7a:5b:d6:05:98:99:18:b5:9c:60:eb:6f:b2:e0:38:a6:22:f1: de:79:3e:51:00:70:fa:10:16:0c:8a:ca:56:98:37:08:ce:cb: 4d:d6:82:1c:dd:26:65:00:37:6e:78:c3:15:46:bf:aa:7a:4f: a8:af:bc:c3:ea:1e:bd:e2:d8:9b:35:61:0e:56:29:90:f5:13: da:f8:ac:52:aa:5c:53:fb:3a:f4:3e:89:cd:d8:1a:a4:1e:64: 12:2a:86:68:97:f6:c1:02:d4:5e:84:f0:eb:8c:ff:2b:fd:5e: 9b:88:e2:f7:fe:0f:79:cc:27:88:7c:bf:f7:0c:54:e0:b4:87: 50:14:14:64:ea:c1:2f:9b:53:02:2d:61:78:cb:ae:65:fb:5c: 04:33:ce:07:c5:58:a7:08:a0:74:5b:c0:09:ad:92:28:4e:b0: 2b:03:79:bb:07:b2:d3:f0:e0:b5:26:1d:d2:85:78:35:72:65: e3:51:95:a8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0MzhGNTA0MDNENkM5 MTBFN0IwQUI2MzRCODM5OTdDQTY2MzdCMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDePiANLRQFPA+zSaX/gI5a8OwWzpZm2tLt3DkCAAnCq4qxx/SX wZlI6LPT7zcKm6lkH6smiuOqOb9KpQUliO5HumgyLAcT+3+zGTiK36GFX3SAzm5t 7aDqMYGQO7ZZNhfgdJ0qi+9rXrlDqruOkPzNfNP0VcyeLv6jdq3YbcJmZO1a6J1v c5P5wDZDZ0U4hjI1RqwhSpzjHLDUtRx9jnRHB3+0T6bN7JTY7UFMri2wBOE15vVS Op44MuOWJE12SJ2ceEm0pMytj7rZ4Rvlqq55eZHOUq9en90wvREtBUPMcFLjD3bG fm9dwLCHECi2TRvWv+2w/Ku6ho+IzlEFnt1LAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhDj1BAPWyRDnsKtjS4OZfKZjexQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2hEajFCQVBXeVJEbnNLdGpTNE9aZktaamV4US5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExZoAwDQYJKoZIhvcNAQELBQADggEB AHxNeKjxe2knBOTb511ax2rFMndBhxuhUQBJM+V/16wVZWAYrU7j0rXvv6lxgW6z NEfuZGTWpamUuwdoa0LXsEfStDDQ7KnqP3pb1gWYmRi1nGDrb7LgOKYi8d55PlEA cPoQFgyKylaYNwjOy03WghzdJmUAN254wxVGv6p6T6ivvMPqHr3i2Js1YQ5WKZD1 E9r4rFKqXFP7OvQ+ic3YGqQeZBIqhmiX9sEC1F6E8OuM/yv9XpuI4vf+D3nMJ4h8 v/cMVOC0h1AUFGTqwS+bUwItYXjLrmX7XAQzzgfFWKcIoHRbwAmtkihOsCsDebsH stPw4LUmHdKFeDVyZeNRlag= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:09 2026 by rpki-client