$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hE1VfoRBHPbk89uOIGMFGabB8y0.roa File: hE1VfoRBHPbk89uOIGMFGabB8y0.roa (raw, json) Hash identifier: j3jY+GftTlzvenaWVGvhR/Cye9YXk8Srw1y6GfH7/o0= Subject key identifier: 84:4D:55:7E:84:41:1C:F6:E4:F3:DB:8E:20:63:05:19:A6:C1:F3:2D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15C7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hE1VfoRBHPbk89uOIGMFGabB8y0.roa Signing time: Tue 31 Mar 2026 08:00:24 +0000 ROA not before: Tue 31 Mar 2026 08:00:24 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5575 (0x15c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:24 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=844D557E84411CF6E4F3DB8E20630519A6C1F32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:9e:f5:c6:9a:6d:28:0c:18:9b:c6:99:fa: a6:a4:84:90:71:ce:6d:d8:22:0f:aa:8f:ab:8e:60: 22:1a:b1:4c:32:76:de:7c:dc:95:97:e1:48:89:2b: 04:7f:f7:e8:9d:0c:a2:e9:eb:0a:91:a1:37:4b:d1: 60:1b:18:8e:c7:b2:17:9f:1c:ce:1f:4e:08:2f:5a: cf:ab:13:da:13:a8:c8:f4:1c:00:2e:5c:f1:6a:ed: 2d:e3:6a:d2:7a:71:74:fd:00:a3:fc:0f:cd:6b:fa: 23:15:95:90:96:3d:5c:f8:1a:b4:aa:7b:c9:85:50: 8a:db:54:3a:b3:9c:2f:5f:7c:98:a5:c8:25:f1:c8: d2:90:87:fc:3f:88:5c:bf:c9:da:48:89:9e:7c:b0: 73:d7:32:13:f1:8b:a0:64:b9:56:5a:be:0c:76:1b: 11:22:d6:9b:ee:41:b0:8c:12:5e:f5:2d:b2:64:b8: 43:64:29:c9:6e:b9:f5:ed:12:80:a4:b9:8a:19:e4: 0e:c3:80:83:87:80:da:a4:a0:7a:31:34:f2:21:3d: 56:33:4a:03:b5:b4:c3:3e:4a:e6:75:68:5b:88:78: fa:cf:c2:84:2e:88:da:e1:ab:c1:1b:05:a6:a9:9f: a5:41:f6:c9:4d:e4:5d:2a:e9:dc:e4:25:cb:79:e3: 49:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:55:7E:84:41:1C:F6:E4:F3:DB:8E:20:63:05:19:A6:C1:F3:2D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hE1VfoRBHPbk89uOIGMFGabB8y0.roa sbgp-ipAddrBlock: critical IPv4: 49.98.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:28:81:40:ca:9d:c9:01:9f:f6:bd:4f:35:62:56:f1:8d:56: 72:02:6c:67:3a:24:36:6d:55:c3:5a:39:83:77:97:d3:59:f1: f6:d7:33:87:89:5e:5f:af:6a:b8:ba:e0:c7:80:a4:49:9c:8c: 38:16:02:cb:e9:f0:07:e1:27:7b:fe:c2:2a:37:a5:80:03:94: 92:d2:17:88:d9:30:ab:26:3d:f9:9a:f2:4b:52:94:eb:f9:39: e4:e0:e2:9e:c2:b4:c9:f9:e7:db:7c:68:db:51:e8:c0:c7:42: de:69:b2:d8:96:17:56:ab:9e:ad:a9:de:7c:c4:b6:10:1b:9f: a2:41:b7:f7:8a:28:f5:14:50:84:a8:44:19:61:27:ae:14:f8: 71:d9:d5:10:24:73:b4:5b:40:83:88:d1:7b:e8:1b:6e:86:b4: 63:0e:be:bd:c6:a7:72:3b:51:a8:8b:50:ec:f7:b2:72:04:a3: 7e:7f:1c:79:f3:50:ca:b6:5e:4a:f5:2e:94:9c:6d:f1:11:62: 53:b9:99:9b:71:71:9b:44:e6:41:d9:e9:cd:47:23:1e:25:1b: 3a:91:3c:e8:37:e3:eb:75:91:c0:da:c5:36:dd:1e:13:48:36: 35:03:82:ab:27:5e:31:3e:b2:ec:26:77:0a:9e:1f:ed:bf:41: 35:26:e4:6e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0NEQ1NTdFODQ0MTFD RjZFNEYzREI4RTIwNjMwNTE5QTZDMUYzMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCIZ71xpptKAwYm8aZ+qakhJBxzm3YIg+qj6uOYCIasUwydt58 3JWX4UiJKwR/9+idDKLp6wqRoTdL0WAbGI7HshefHM4fTggvWs+rE9oTqMj0HAAu XPFq7S3jatJ6cXT9AKP8D81r+iMVlZCWPVz4GrSqe8mFUIrbVDqznC9ffJilyCXx yNKQh/w/iFy/ydpIiZ58sHPXMhPxi6BkuVZavgx2GxEi1pvuQbCMEl71LbJkuENk KcluufXtEoCkuYoZ5A7DgIOHgNqkoHoxNPIhPVYzSgO1tMM+SuZ1aFuIePrPwoQu iNrhq8EbBaapn6VB9slN5F0q6dzkJct540mrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhE1VfoRBHPbk89uOIGMFGabB8y0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2hFMVZmb1JCSFBiazg5dU9JR01GR2FiQjh5MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYgAwDQYJKoZIhvcNAQELBQADggEB AC8ogUDKnckBn/a9TzViVvGNVnICbGc6JDZtVcNaOYN3l9NZ8fbXM4eJXl+vari6 4MeApEmcjDgWAsvp8AfhJ3v+wio3pYADlJLSF4jZMKsmPfma8ktSlOv5OeTg4p7C tMn559t8aNtR6MDHQt5pstiWF1arnq2p3nzEthAbn6JBt/eKKPUUUISoRBlhJ64U +HHZ1RAkc7RbQIOI0XvoG26GtGMOvr3Gp3I7UaiLUOz3snIEo35/HHnzUMq2Xkr1 LpScbfERYlO5mZtxcZtE5kHZ6c1HIx4lGzqRPOg34+t1kcDaxTbdHhNINjUDgqsn XjE+suwmdwqeH+2/QTUm5G4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:54 2026 by rpki-client