$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jIDT8ZgVJAluTqg-MFXPlmeGFOU.roa File: jIDT8ZgVJAluTqg-MFXPlmeGFOU.roa (raw, json) Hash identifier: liOmg8qZPgP8oHUp38Horw6xP3x7UK2Mp9fDHDz6sUQ= Subject key identifier: 8C:80:D3:F1:98:15:24:09:6E:4E:A8:3E:30:55:CF:96:67:86:14:E5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 164C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jIDT8ZgVJAluTqg-MFXPlmeGFOU.roa Signing time: Tue 31 Mar 2026 08:01:32 +0000 ROA not before: Tue 31 Mar 2026 08:01:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5708 (0x164c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8C80D3F1981524096E4EA83E3055CF96678614E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:e4:6c:e9:59:31:df:e6:ca:90:a4:e6:4c: 9a:59:60:41:d9:32:67:28:3c:77:b8:f6:ec:4f:6c: 20:ed:eb:4f:6f:95:59:9b:fe:95:54:85:ee:46:5a: b5:c8:53:b5:ec:ba:2b:8a:22:80:9e:79:f4:3e:70: 0e:7b:0b:87:94:05:02:e6:f1:ab:53:ea:76:c9:8f: c5:1f:aa:99:0f:5e:e0:e7:04:45:c8:af:d7:84:15: 3b:80:ce:55:3a:87:91:fd:66:be:9a:d4:a7:58:4f: 05:d5:fc:44:47:30:26:23:6f:d7:6d:8f:60:43:c5: 42:39:d3:68:49:e1:2f:99:ab:4d:33:55:2d:20:5f: 44:c4:e3:73:a0:f0:a1:61:74:50:4f:e8:16:5a:30: af:56:47:18:df:ac:a4:f3:d4:99:fa:ce:e0:fe:a7: 31:e1:25:46:d5:2a:91:b8:02:65:00:23:fa:df:69: af:52:69:87:46:4c:35:e4:f6:c5:be:cb:98:b0:e1: f9:27:82:fb:d3:48:4d:30:f6:f0:9a:8a:59:45:fa: 25:20:6a:69:26:e6:a9:ac:e9:b5:14:e0:a3:29:fd: 8e:64:67:3c:42:ce:65:5f:33:b1:cf:1e:64:f9:9c: 1f:e1:20:2c:99:04:ef:e6:15:8c:08:22:19:d9:59: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:80:D3:F1:98:15:24:09:6E:4E:A8:3E:30:55:CF:96:67:86:14:E5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jIDT8ZgVJAluTqg-MFXPlmeGFOU.roa sbgp-ipAddrBlock: critical IPv4: 49.104.6.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:61:c2:a2:f3:b9:e2:ed:2d:63:e6:4b:c4:f9:f0:2b:64:07: a6:0e:da:bf:ff:40:89:5f:55:d1:bb:d5:00:9e:84:fd:91:6a: df:6d:a6:75:46:ac:fa:f9:41:05:b1:4f:18:dc:9f:3f:bd:5c: fb:23:b9:cc:b7:d3:a8:36:d5:37:1f:2c:ee:fc:a7:37:64:be: cf:5e:ad:33:52:4c:90:66:c9:c6:00:66:fa:62:79:8f:07:54: 95:3e:69:be:6a:ca:da:89:b8:c2:b7:c1:c7:1e:92:74:00:01: 7e:36:b7:c6:77:94:f1:a9:b2:35:28:30:d9:6b:b4:79:00:80: cc:1b:be:b0:f0:70:90:e4:b4:68:2f:85:38:31:2c:e1:e3:f7: 20:3e:e5:2e:de:8a:92:a9:49:9f:81:f3:ee:fe:aa:3d:b4:67: 02:ea:ed:d4:94:89:dc:ca:a1:50:c1:cd:bd:02:0f:ee:a5:dd: f2:2e:cc:f7:d6:22:8d:a2:ea:d4:a4:96:0b:ad:0b:29:02:19: b2:97:6e:4e:ef:47:7c:34:40:77:cc:63:2a:7f:e5:e9:36:fe: 79:ae:d5:3a:cc:8f:49:f7:d8:83:e4:4a:d3:de:fe:9a:53:78: 2b:5e:b7:77:ec:0f:77:7a:e3:fd:9f:0f:9d:27:37:cc:c4:8d: fe:24:e4:26 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDODBEM0YxOTgxNTI0 MDk2RTRFQTgzRTMwNTVDRjk2Njc4NjE0RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5DORs6Vkx3+bKkKTmTJpZYEHZMmcoPHe49uxPbCDt609vlVmb /pVUhe5GWrXIU7XsuiuKIoCeefQ+cA57C4eUBQLm8atT6nbJj8UfqpkPXuDnBEXI r9eEFTuAzlU6h5H9Zr6a1KdYTwXV/ERHMCYjb9dtj2BDxUI502hJ4S+Zq00zVS0g X0TE43Og8KFhdFBP6BZaMK9WRxjfrKTz1Jn6zuD+pzHhJUbVKpG4AmUAI/rfaa9S aYdGTDXk9sW+y5iw4fkngvvTSE0w9vCaillF+iUgamkm5qms6bUU4KMp/Y5kZzxC zmVfM7HPHmT5nB/hICyZBO/mFYwIIhnZWd/hAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUjIDT8ZgVJAluTqg+MFXPlmeGFOUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2pJRFQ4WmdWSkFsdVRxZy1NRlhQbG1lR0ZPVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaAYwDQYJKoZIhvcNAQELBQADggEB AH1hwqLzueLtLWPmS8T58CtkB6YO2r//QIlfVdG71QCehP2Rat9tpnVGrPr5QQWx Txjcnz+9XPsjucy306g21TcfLO78pzdkvs9erTNSTJBmycYAZvpieY8HVJU+ab5q ytqJuMK3wcceknQAAX42t8Z3lPGpsjUoMNlrtHkAgMwbvrDwcJDktGgvhTgxLOHj 9yA+5S7eipKpSZ+B8+7+qj20ZwLq7dSUidzKoVDBzb0CD+6l3fIuzPfWIo2i6tSk lgutCykCGbKXbk7vR3w0QHfMYyp/5ek2/nmu1TrMj0n32IPkStPe/ppTeCtet3fs D3d64/2fD50nN8zEjf4k5CY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:02 2026 by rpki-client