$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQZfKjNSnDnW5lD1DZ1ulcK9kXY.roa File: hQZfKjNSnDnW5lD1DZ1ulcK9kXY.roa (raw, json) Hash identifier: G5UZlaiKCvP7Iehugof+LVAtznc2l081tb8YDHacn5w= Subject key identifier: 85:06:5F:2A:33:52:9C:39:D6:E6:50:F5:0D:9D:6E:95:C2:BD:91:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15D6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQZfKjNSnDnW5lD1DZ1ulcK9kXY.roa Signing time: Tue 31 Mar 2026 08:00:30 +0000 ROA not before: Tue 31 Mar 2026 08:00:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5590 (0x15d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=85065F2A33529C39D6E650F50D9D6E95C2BD9176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:02:3b:d2:bd:7c:05:89:90:1e:ce:73:12: 52:4f:e2:9d:5e:89:b0:a7:81:29:bc:4e:9c:4b:61: 57:b2:a8:50:3b:c6:d7:e2:90:10:36:83:8d:5e:4d: 7e:ad:01:c9:f6:66:6f:a0:16:85:74:47:cc:cc:0a: 9f:1a:3c:cc:e6:0d:ce:b7:20:c7:49:2e:c4:c9:32: 2a:4f:53:73:15:97:71:03:ac:aa:cf:96:37:89:ed: 23:61:80:09:33:91:32:19:03:fb:f7:08:29:82:4d: a3:eb:4b:c4:c6:48:5f:1e:ab:52:6d:24:c3:bb:b5: 12:4d:f2:0e:bb:23:8d:18:cf:c5:ad:19:7c:80:26: c2:72:93:cc:9b:7b:97:41:b0:92:a2:69:15:b1:78: 80:75:bb:98:40:9a:e9:1f:8e:07:db:19:61:04:78: 84:55:72:4c:42:aa:7d:14:5b:4b:ec:8b:e4:06:49: de:70:ec:ea:37:a9:17:fd:1d:e4:31:b4:05:f3:62: ce:42:cc:91:56:f1:72:e6:9f:bd:6e:de:11:a3:a1: ff:e5:30:ea:51:d5:bd:7d:c9:7e:55:e3:42:43:de: 33:5c:b3:b1:e8:66:b6:d7:b7:37:ee:d1:b0:ac:b2: d5:c5:d7:77:13:13:8b:f4:06:b4:cd:c2:d4:ea:12: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:06:5F:2A:33:52:9C:39:D6:E6:50:F5:0D:9D:6E:95:C2:BD:91:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQZfKjNSnDnW5lD1DZ1ulcK9kXY.roa sbgp-ipAddrBlock: critical IPv4: 49.98.78.0/23 Signature Algorithm: sha256WithRSAEncryption 38:84:48:0c:d6:b7:10:a8:86:53:d4:f5:79:e8:6d:cf:ef:bf: ce:8e:df:ec:53:69:bf:7a:a9:58:7a:c3:61:0c:3b:23:70:24: a3:46:12:64:1c:f2:3d:18:64:a6:a3:8a:26:14:2a:65:e0:61: 71:83:f7:8c:76:65:2f:0a:4c:09:5d:47:57:c6:4f:c3:f4:f6: d1:36:81:55:a1:0a:46:01:b0:02:05:f0:f8:4a:4d:f3:5d:5f: d5:47:a0:89:5d:f2:cb:fb:85:0e:f1:9f:c4:ce:de:4f:0c:21: 7d:6e:bb:3f:d5:f8:1f:a4:37:7e:8c:b9:fb:2e:60:2a:c8:20: 4f:68:6d:b8:04:14:35:ef:cc:b0:39:d9:b3:3d:d1:9d:a0:1c: 7d:28:77:61:e7:33:d1:3b:51:81:b6:90:32:68:e4:1d:72:49: 26:06:f2:a0:0a:b2:e8:8b:7d:9b:53:34:dd:c5:51:f4:87:40: 79:4e:a2:13:c8:4b:5f:9c:41:ba:20:6e:67:6c:77:da:b0:fa: 7d:b2:94:4b:44:ee:86:2d:17:2a:a3:74:f0:6e:ee:50:11:4d: c4:9f:89:04:aa:b8:05:6a:83:c0:e0:bc:e0:d5:a2:72:34:11: 16:ef:77:93:95:4a:1e:90:56:1a:30:5f:dd:cd:6c:11:60:4c: e8:cd:b3:f9 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1MDY1RjJBMzM1MjlD MzlENkU2NTBGNTBEOUQ2RTk1QzJCRDkxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxowI70r18BYmQHs5zElJP4p1eibCngSm8TpxLYVeyqFA7xtfi kBA2g41eTX6tAcn2Zm+gFoV0R8zMCp8aPMzmDc63IMdJLsTJMipPU3MVl3EDrKrP ljeJ7SNhgAkzkTIZA/v3CCmCTaPrS8TGSF8eq1JtJMO7tRJN8g67I40Yz8WtGXyA JsJyk8ybe5dBsJKiaRWxeIB1u5hAmukfjgfbGWEEeIRVckxCqn0UW0vsi+QGSd5w 7Oo3qRf9HeQxtAXzYs5CzJFW8XLmn71u3hGjof/lMOpR1b19yX5V40JD3jNcs7Ho ZrbXtzfu0bCsstXF13cTE4v0BrTNwtTqEqJnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhQZfKjNSnDnW5lD1DZ1ulcK9kXYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2hRWmZLak5TbkRuVzVsRDFEWjF1bGNLOWtYWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYk4wDQYJKoZIhvcNAQELBQADggEB ADiESAzWtxCohlPU9Xnobc/vv86O3+xTab96qVh6w2EMOyNwJKNGEmQc8j0YZKaj iiYUKmXgYXGD94x2ZS8KTAldR1fGT8P09tE2gVWhCkYBsAIF8PhKTfNdX9VHoIld 8sv7hQ7xn8TO3k8MIX1uuz/V+B+kN36MufsuYCrIIE9obbgEFDXvzLA52bM90Z2g HH0od2HnM9E7UYG2kDJo5B1ySSYG8qAKsuiLfZtTNN3FUfSHQHlOohPIS1+cQbog bmdsd9qw+n2ylEtE7oYtFyqjdPBu7lARTcSfiQSquAVqg8DgvODVonI0ERbvd5OV Sh6QVhowX93NbBFgTOjNs/k= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:59 2026 by rpki-client