$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ic9-aHLJf2sGEo8OLMvB0VXg-_I.roa File: ic9-aHLJf2sGEo8OLMvB0VXg-_I.roa (raw, json) Hash identifier: FB81EJK6XoZDn7rUD3sLIy7RDdHVoCm9ebdDe/AH0Mw= Subject key identifier: 89:CF:7E:68:72:C9:7F:6B:06:12:8F:0E:2C:CB:C1:D1:55:E0:FB:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13BC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ic9-aHLJf2sGEo8OLMvB0VXg-_I.roa Signing time: Tue 31 Mar 2026 07:56:12 +0000 ROA not before: Tue 31 Mar 2026 07:56:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5052 (0x13bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=89CF7E6872C97F6B06128F0E2CCBC1D155E0FBF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:d3:fc:83:e3:3e:9b:af:23:4b:5e:d4:0d: 0c:46:2b:92:6c:35:bf:fb:7b:d3:b0:9e:55:27:03: f0:56:40:fb:c0:67:a8:17:b1:69:e4:5f:1c:62:61: 0e:7a:05:3c:f0:29:22:d1:c6:a8:6d:e3:f3:a8:8b: e5:a9:cf:d5:a0:52:9a:5d:41:e5:cb:5d:5a:3d:73: 18:60:9d:9a:c5:cd:c9:8c:15:c1:23:c8:64:4c:d7: 93:26:28:83:5c:e0:5c:06:a6:fd:d4:22:a8:c3:4b: 69:8f:df:50:f5:89:13:fd:6b:5b:25:d8:ce:6f:6c: ae:f8:13:9d:c7:86:b7:ed:45:fc:4a:16:44:e8:10: 05:8b:09:e5:d9:b9:d0:e0:8f:d0:d4:07:6d:b3:0a: 3b:3a:cb:40:1b:67:56:f7:91:c4:5c:a4:4a:c2:a2: 46:88:ad:95:fd:9b:75:83:01:d3:f1:7a:55:9b:dd: b5:9f:50:13:df:d5:0f:ac:c4:30:f7:d6:7e:e6:a8: cc:f7:cb:0d:df:50:bb:24:6b:eb:21:d9:53:ca:23: f2:f1:bb:b7:ea:08:c8:d8:80:95:fc:5c:9e:5e:bd: b5:e4:4c:85:ab:5a:0a:cc:b3:55:38:c8:55:80:7f: 3a:10:87:41:26:b9:f8:43:fd:da:fe:0f:17:50:6a: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:7E:68:72:C9:7F:6B:06:12:8F:0E:2C:CB:C1:D1:55:E0:FB:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ic9-aHLJf2sGEo8OLMvB0VXg-_I.roa sbgp-ipAddrBlock: critical IPv4: 49.98.216.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:03:95:d7:9e:80:9f:91:8c:ee:5d:29:fd:a4:0c:5f:0a:ec: 0b:00:b8:2b:7f:af:39:86:03:c4:97:ba:da:72:37:82:8d:c0: cf:cc:1b:ad:6f:3d:bf:ac:f5:bb:84:1f:99:f0:77:3c:1a:75: 40:e0:56:4d:64:4e:0e:82:c4:e0:e6:25:71:ea:34:9a:cb:bf: e8:65:d9:11:63:3f:55:35:a4:6e:94:23:a5:c1:48:f0:79:9d: ab:3f:b5:72:b9:c3:2c:ac:d5:45:4c:15:4d:6d:1c:0b:49:03: b1:ef:ee:ff:57:42:64:3c:7a:94:34:63:db:9d:b0:d1:ce:e6: 61:93:75:b4:a2:fd:70:ed:a6:48:98:d0:22:cb:83:6e:cf:d1: 3f:f5:32:7c:ce:76:f9:47:9c:ce:27:a1:78:43:86:3b:36:40: 1f:c2:42:f4:07:69:3c:f4:7b:c8:9d:cd:a8:26:a1:66:b4:ef: f1:87:b3:89:1f:ff:f7:2f:e1:55:50:b1:aa:6a:07:7a:b8:3b: 79:b2:7e:f3:0c:de:c4:74:55:14:94:15:3a:bd:37:42:b8:12: 69:33:4f:03:3e:6d:e2:10:8c:a0:5d:fd:94:e0:c9:d2:a9:08: b9:a7:61:a8:e5:0b:5d:c2:45:0b:e9:49:3b:b0:03:90:5d:34: 4c:53:8f:39 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE7wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5Q0Y3RTY4NzJDOTdG NkIwNjEyOEYwRTJDQ0JDMUQxNTVFMEZCRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRStP8g+M+m68jS17UDQxGK5JsNb/7e9OwnlUnA/BWQPvAZ6gX sWnkXxxiYQ56BTzwKSLRxqht4/Ooi+Wpz9WgUppdQeXLXVo9cxhgnZrFzcmMFcEj yGRM15MmKINc4FwGpv3UIqjDS2mP31D1iRP9a1sl2M5vbK74E53HhrftRfxKFkTo EAWLCeXZudDgj9DUB22zCjs6y0AbZ1b3kcRcpErCokaIrZX9m3WDAdPxelWb3bWf UBPf1Q+sxDD31n7mqMz3yw3fULska+sh2VPKI/Lxu7fqCMjYgJX8XJ5evbXkTIWr WgrMs1U4yFWAfzoQh0EmufhD/dr+DxdQajCXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUic9+aHLJf2sGEo8OLMvB0VXg+/IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2ljOS1hSExKZjJzR0VvOE9MTXZCMFZYZy1fSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxYtgwDQYJKoZIhvcNAQELBQADggEB AF4DldeegJ+RjO5dKf2kDF8K7AsAuCt/rzmGA8SXutpyN4KNwM/MG61vPb+s9buE H5nwdzwadUDgVk1kTg6CxODmJXHqNJrLv+hl2RFjP1U1pG6UI6XBSPB5nas/tXK5 wyys1UVMFU1tHAtJA7Hv7v9XQmQ8epQ0Y9udsNHO5mGTdbSi/XDtpkiY0CLLg27P 0T/1MnzOdvlHnM4noXhDhjs2QB/CQvQHaTz0e8idzagmoWa07/GHs4kf//cv4VVQ sapqB3q4O3myfvMM3sR0VRSUFTq9N0K4EmkzTwM+beIQjKBd/ZTgydKpCLmnYajl C13CRQvpSTuwA5BdNExTjzk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:55 2026 by rpki-client