$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hDvVVdbAJZJYBvZoylV-qi4R0sQ.roa File: hDvVVdbAJZJYBvZoylV-qi4R0sQ.roa (raw, json) Hash identifier: 5m6HHHgfYVFI+TcM2ZFZf/pNC/uDapOG+1Pd4jyw9W8= Subject key identifier: 84:3B:D5:55:D6:C0:25:92:58:06:F6:68:CA:55:7E:AA:2E:11:D2:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 170F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hDvVVdbAJZJYBvZoylV-qi4R0sQ.roa Signing time: Tue 31 Mar 2026 08:03:03 +0000 ROA not before: Tue 31 Mar 2026 08:03:03 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5903 (0x170f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=843BD555D6C025925806F668CA557EAA2E11D2C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:d4:6f:d3:bc:41:d5:05:d0:09:d7:24:f0: e2:1e:8e:f4:54:83:a5:a5:3a:ac:57:19:b0:b0:6a: 90:e2:10:4b:f6:5d:3c:64:93:da:ab:4f:69:0f:ef: 17:a1:48:5a:aa:32:7d:15:88:26:08:18:77:29:47: 56:95:01:17:3b:35:70:e4:30:5c:68:11:47:8d:bc: d6:51:94:83:b5:1b:b1:1f:af:ba:8e:7f:95:06:14: a1:34:d4:f6:a6:f2:eb:76:c0:c1:6f:1e:5b:21:46: 31:ec:a8:2e:8c:2e:9e:63:01:a6:c0:a5:d6:17:17: af:c3:f0:de:f5:48:94:6a:55:4f:57:b8:d4:30:90: 68:3a:86:55:8d:30:db:5f:67:0a:05:41:61:e8:2b: 0c:4a:97:97:9e:59:45:6c:c9:7c:7d:cb:12:66:76: f3:33:bf:b0:df:62:f6:92:54:17:f5:00:45:54:07: 09:46:3f:75:7a:d9:53:2d:5b:e3:a8:31:67:c3:cc: f4:d6:a2:ac:39:b4:c2:65:e3:78:d4:6f:24:fc:1c: 50:d8:b8:5c:5f:ef:f6:53:69:22:73:1e:71:40:47: fc:17:f1:c6:e5:75:bb:25:2e:96:04:5f:bd:1f:a9: 99:7d:f3:75:fc:2f:35:c8:b3:f4:f2:50:a2:fc:ca: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:D5:55:D6:C0:25:92:58:06:F6:68:CA:55:7E:AA:2E:11:D2:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hDvVVdbAJZJYBvZoylV-qi4R0sQ.roa sbgp-ipAddrBlock: critical IPv4: 49.106.189.0/24 Signature Algorithm: sha256WithRSAEncryption df:03:4b:d3:1a:07:fb:65:21:3e:b8:0c:ca:48:16:0c:ac:72: 5b:78:71:66:20:cc:b4:08:13:d4:25:30:7f:3c:4c:89:78:80: b8:36:eb:02:37:62:e4:95:4d:3c:df:1f:4a:da:67:8f:31:87: 35:29:dd:eb:42:39:25:6e:39:a9:95:01:34:0d:23:e3:02:72: 6b:71:78:14:07:a0:e5:a3:8b:8c:1b:3f:80:e7:ea:b5:cd:db: 45:4d:d9:7c:6c:5f:2f:32:4b:bf:dd:77:50:0b:3b:05:01:96: f2:20:bf:0c:24:4b:cb:92:8b:78:91:a0:54:8b:ee:83:77:58: 8e:5c:9b:ae:04:11:a7:74:d5:2d:4e:2a:28:fd:f7:90:98:db: 9b:46:e5:41:73:f3:fa:9b:bc:5b:03:33:28:15:82:02:46:39: c0:52:48:b8:a7:6b:7b:cd:f2:df:1e:4a:82:0b:dc:c2:34:84: 05:f5:6f:14:0d:93:00:88:87:68:03:56:8f:2a:be:71:35:6b: 6f:53:40:f6:95:ec:55:39:25:97:93:9c:e8:0e:2b:8b:4a:77: bb:51:e7:f0:cd:eb:22:19:72:46:96:83:e9:fb:2b:ed:53:ab: f1:84:f8:e4:50:5c:df:fd:54:ac:f8:d2:78:8a:d0:30:93:5a: ef:01:89:a8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0M0JENTU1RDZDMDI1 OTI1ODA2RjY2OENBNTU3RUFBMkUxMUQyQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmO9Rv07xB1QXQCdck8OIejvRUg6WlOqxXGbCwapDiEEv2XTxk k9qrT2kP7xehSFqqMn0ViCYIGHcpR1aVARc7NXDkMFxoEUeNvNZRlIO1G7Efr7qO f5UGFKE01Pam8ut2wMFvHlshRjHsqC6MLp5jAabApdYXF6/D8N71SJRqVU9XuNQw kGg6hlWNMNtfZwoFQWHoKwxKl5eeWUVsyXx9yxJmdvMzv7DfYvaSVBf1AEVUBwlG P3V62VMtW+OoMWfDzPTWoqw5tMJl43jUbyT8HFDYuFxf7/ZTaSJzHnFAR/wX8cbl dbslLpYEX70fqZl983X8LzXIs/TyUKL8yu73AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhDvVVdbAJZJYBvZoylV+qi4R0sQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2hEdlZWZGJBSlpKWUJ2Wm95bFYtcWk0UjBzUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxar0wDQYJKoZIhvcNAQELBQADggEB AN8DS9MaB/tlIT64DMpIFgysclt4cWYgzLQIE9QlMH88TIl4gLg26wI3YuSVTTzf H0raZ48xhzUp3etCOSVuOamVATQNI+MCcmtxeBQHoOWji4wbP4Dn6rXN20VN2Xxs Xy8yS7/dd1ALOwUBlvIgvwwkS8uSi3iRoFSL7oN3WI5cm64EEad01S1OKij995CY 25tG5UFz8/qbvFsDMygVggJGOcBSSLina3vN8t8eSoIL3MI0hAX1bxQNkwCIh2gD Vo8qvnE1a29TQPaV7FU5JZeTnOgOK4tKd7tR5/DN6yIZckaWg+n7K+1Tq/GE+ORQ XN/9VKz40niK0DCTWu8Biag= -----END CERTIFICATE-----Generated at Tue Apr 7 22:27:12 2026 by rpki-client