$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hnhF5-rfY9wa7Qnz-ab0DvzXkZM.roa File: hnhF5-rfY9wa7Qnz-ab0DvzXkZM.roa (raw, json) Hash identifier: UGDI9aPjyjjGFi0IO10akYB50YTxz/Wnl4Rj6y8eLAs= Subject key identifier: 86:78:45:E7:EA:DF:63:DC:1A:ED:09:F3:F9:A6:F4:0E:FC:D7:91:93 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15DA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hnhF5-rfY9wa7Qnz-ab0DvzXkZM.roa Signing time: Tue 31 Mar 2026 08:00:32 +0000 ROA not before: Tue 31 Mar 2026 08:00:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5594 (0x15da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=867845E7EADF63DC1AED09F3F9A6F40EFCD79193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:3d:97:c7:83:30:00:3c:27:8a:2b:0e:8c: 0a:21:6f:a5:8c:ed:71:9d:47:96:4c:86:5d:80:55: 98:62:ac:3a:c3:6c:51:2f:cd:01:b2:82:c7:57:14: 3e:d5:53:a9:d1:de:21:c6:0c:40:70:b0:19:18:cf: ab:da:fd:4e:b0:82:e3:16:2f:75:cd:47:ee:3f:09: 43:b9:1c:69:1f:a2:68:97:3d:f5:c2:5d:43:23:a5: c5:32:b7:2e:b0:1d:3d:e9:0b:16:bc:58:07:fe:ae: 9f:d3:1d:bc:80:18:0a:c1:8c:f6:e3:5b:45:92:cd: c1:d4:5d:0b:29:b2:4d:c2:6f:27:20:5b:ee:59:fc: 30:aa:26:28:6a:0f:0f:4c:3d:dd:49:69:83:bc:62: 6a:40:1e:c1:f8:2d:c4:74:c7:3e:90:ce:97:0b:7f: dd:0f:ce:5a:2e:d4:32:6a:fe:94:4a:53:de:68:4c: 59:aa:19:88:d4:d5:bc:12:4c:38:60:84:95:a1:f1: c2:b5:1f:3f:5f:c3:9c:f4:32:26:14:9e:b5:ae:9c: 3b:2d:5a:66:0a:51:64:1d:21:ec:f3:2a:93:bb:d5: 4a:dd:a2:64:57:34:2a:ce:a7:ed:e0:62:f6:6e:b6: 71:99:98:fd:87:0e:39:4b:57:13:90:3f:10:34:76: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:78:45:E7:EA:DF:63:DC:1A:ED:09:F3:F9:A6:F4:0E:FC:D7:91:93 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hnhF5-rfY9wa7Qnz-ab0DvzXkZM.roa sbgp-ipAddrBlock: critical IPv4: 49.97.30.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f0:75:97:4a:d3:c2:79:3c:9e:d5:b6:ea:a4:db:5d:8b:2c: 05:39:65:fe:56:a3:96:97:86:59:e2:24:59:9b:d3:87:c6:a5: f3:86:40:75:56:b3:16:a5:8e:57:cb:74:bc:36:45:aa:28:66: b4:f1:06:61:aa:d8:b5:d5:30:4e:b9:83:7b:af:e5:d2:de:e9: ba:e6:f4:52:30:54:56:ec:7f:fa:7a:37:ad:9c:ad:e4:f4:63: 27:fe:ac:a2:08:6c:f5:32:ae:be:76:5c:12:15:d0:82:4b:99: cf:ad:7b:41:fa:92:c3:8d:3e:68:b9:d7:d1:2f:fa:e1:54:2f: b8:d9:29:e9:2c:a3:15:77:97:e8:8a:14:b1:04:37:c0:9e:6b: 48:4a:33:e9:16:ad:8d:b6:d1:e3:2f:63:a8:98:2a:bb:9b:58: 51:ce:e5:b2:e2:70:90:ba:3e:85:b4:1e:5f:f4:0f:e3:53:71: f0:50:b5:e2:8e:bb:92:83:83:4b:22:3f:f5:eb:c1:e1:7b:89: d2:7d:0d:84:0b:6c:48:df:63:a3:4f:56:57:d6:7e:ad:74:cd: 8f:c9:64:cc:f3:76:47:87:3b:36:c0:11:02:b3:65:3a:2a:0e: 64:8b:c2:13:0b:eb:af:b8:53:bd:ab:34:1b:9d:3c:9e:12:62: 68:af:51:35 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2Nzg0NUU3RUFERjYz REMxQUVEMDlGM0Y5QTZGNDBFRkNENzkxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ4z2Xx4MwADwniisOjAohb6WM7XGdR5ZMhl2AVZhirDrDbFEv zQGygsdXFD7VU6nR3iHGDEBwsBkYz6va/U6wguMWL3XNR+4/CUO5HGkfomiXPfXC XUMjpcUyty6wHT3pCxa8WAf+rp/THbyAGArBjPbjW0WSzcHUXQspsk3CbycgW+5Z /DCqJihqDw9MPd1JaYO8YmpAHsH4LcR0xz6QzpcLf90Pzlou1DJq/pRKU95oTFmq GYjU1bwSTDhghJWh8cK1Hz9fw5z0MiYUnrWunDstWmYKUWQdIezzKpO71UrdomRX NCrOp+3gYvZutnGZmP2HDjlLVxOQPxA0dn+7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUhnhF5+rfY9wa7Qnz+ab0DvzXkZMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2huaEY1LXJmWTl3YTdRbnotYWIwRHZ6WGtaTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYR4wDQYJKoZIhvcNAQELBQADggEB AJvwdZdK08J5PJ7Vtuqk212LLAU5Zf5Wo5aXhlniJFmb04fGpfOGQHVWsxaljlfL dLw2RaooZrTxBmGq2LXVME65g3uv5dLe6brm9FIwVFbsf/p6N62creT0Yyf+rKII bPUyrr52XBIV0IJLmc+te0H6ksONPmi519Ev+uFUL7jZKeksoxV3l+iKFLEEN8Ce a0hKM+kWrY220eMvY6iYKrubWFHO5bLicJC6PoW0Hl/0D+NTcfBQteKOu5KDg0si P/XrweF7idJ9DYQLbEjfY6NPVlfWfq10zY/JZMzzdkeHOzbAEQKzZToqDmSLwhML 66+4U72rNBudPJ4SYmivUTU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:36 2026 by rpki-client