$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kA7TtQGvn99ym-ytIBpQjSpRMzA.roa File: kA7TtQGvn99ym-ytIBpQjSpRMzA.roa (raw, json) Hash identifier: x56G56L6JRvCbG2c8OqSMrd9Kstw3zj9mT3lYgExJe8= Subject key identifier: 90:0E:D3:B5:01:AF:9F:DF:72:9B:EC:AD:20:1A:50:8D:2A:51:33:30 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1664 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kA7TtQGvn99ym-ytIBpQjSpRMzA.roa Signing time: Tue 31 Mar 2026 08:01:43 +0000 ROA not before: Tue 31 Mar 2026 08:01:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5732 (0x1664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=900ED3B501AF9FDF729BECAD201A508D2A513330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:54:8d:03:65:bd:d4:45:05:40:e7:29:9c: 88:ef:cb:84:78:0b:04:bb:1d:a4:c6:c1:8d:4a:83: 01:a5:88:b6:b7:ed:2d:a8:e9:da:a9:2b:6b:29:5a: 01:c7:5b:34:97:8b:b0:6c:dd:45:ad:3e:56:ba:30: 04:90:a8:b4:c3:f7:89:7c:44:ad:a9:10:3a:2c:af: 9e:59:fb:2d:88:85:68:f3:ce:00:f0:0a:63:f0:7a: a7:42:1a:4a:4c:e0:ff:51:72:38:7a:16:f1:ec:0e: 53:59:75:8a:a7:ad:f5:cb:b7:5b:4e:e9:4a:9b:5d: 43:b6:db:8a:b3:73:83:69:93:71:65:ab:c9:55:53: 26:0d:8d:05:fd:4e:99:ce:1c:eb:44:5c:36:2f:15: 13:61:c8:f7:e2:b3:aa:86:6d:b7:84:2c:1f:b2:04: da:93:ab:60:2b:d3:3d:f3:e7:43:17:e4:61:e9:c3: 12:e9:30:0a:ca:32:a9:f7:d5:db:2a:e9:a2:81:7e: 89:89:c9:a2:41:0f:01:2d:bf:06:84:de:96:15:1e: 06:89:2b:3f:3a:21:56:95:41:27:35:79:5f:90:f8: f2:91:ac:be:c9:31:87:57:45:2f:97:86:17:8b:47: 4b:5b:27:db:c8:86:0c:0c:22:32:67:1f:73:e8:5c: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:D3:B5:01:AF:9F:DF:72:9B:EC:AD:20:1A:50:8D:2A:51:33:30 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kA7TtQGvn99ym-ytIBpQjSpRMzA.roa sbgp-ipAddrBlock: critical IPv4: 49.106.211.0/24 Signature Algorithm: sha256WithRSAEncryption b7:85:1e:68:74:b4:27:07:26:6e:5f:d5:d7:38:cd:42:c4:ff: e5:41:6a:40:a6:3e:e8:b7:c9:2b:11:2c:a7:53:23:c4:5b:9e: 72:5b:86:06:61:06:30:e3:b4:82:08:97:83:28:15:e7:76:0f: 06:d6:85:b9:45:5e:64:75:09:0d:d4:bd:2d:c7:c1:8b:56:00: db:ed:7c:c1:2e:49:4e:74:e7:2d:61:79:9b:25:c1:4c:e6:73: 13:36:77:87:9c:47:ab:6d:06:b5:37:eb:4a:96:cd:36:39:a3: cd:c1:3a:29:c9:e9:9d:82:9c:71:d7:c3:80:72:0e:fc:f1:86: 4a:24:3a:01:97:ee:10:4d:bf:0d:21:79:65:ed:26:d7:8a:6a: 7f:2b:ae:25:65:fc:06:eb:f7:70:ac:ee:fc:38:09:c0:92:24: 82:9b:b5:ee:4b:a5:63:d2:a6:5a:7e:b3:35:67:59:19:e1:e0: e6:31:c9:c4:7b:a3:4f:32:72:4e:1c:57:da:6a:3b:1b:6a:a0: af:8d:0a:ca:b7:7b:e4:85:39:de:43:ae:6a:5d:74:2f:81:24: 8e:b7:9e:d6:96:de:c7:21:35:5b:6a:52:a6:97:25:49:ed:06: f9:db:a9:37:d6:36:07:c2:3b:94:b8:ea:58:c6:dd:f2:a0:08: 09:e2:4d:bc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwMEVEM0I1MDFBRjlG REY3MjlCRUNBRDIwMUE1MDhEMkE1MTMzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC341SNA2W91EUFQOcpnIjvy4R4CwS7HaTGwY1KgwGliLa37S2o 6dqpK2spWgHHWzSXi7Bs3UWtPla6MASQqLTD94l8RK2pEDosr55Z+y2IhWjzzgDw CmPweqdCGkpM4P9Rcjh6FvHsDlNZdYqnrfXLt1tO6UqbXUO224qzc4Npk3Flq8lV UyYNjQX9TpnOHOtEXDYvFRNhyPfis6qGbbeELB+yBNqTq2Ar0z3z50MX5GHpwxLp MArKMqn31dsq6aKBfomJyaJBDwEtvwaE3pYVHgaJKz86IVaVQSc1eV+Q+PKRrL7J MYdXRS+XhheLR0tbJ9vIhgwMIjJnH3PoXGgxAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkA7TtQGvn99ym+ytIBpQjSpRMzAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tBN1R0UUd2bjk5eW0teXRJQnBRalNwUk16QS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxatMwDQYJKoZIhvcNAQELBQADggEB ALeFHmh0tCcHJm5f1dc4zULE/+VBakCmPui3ySsRLKdTI8RbnnJbhgZhBjDjtIII l4MoFed2DwbWhblFXmR1CQ3UvS3HwYtWANvtfMEuSU505y1heZslwUzmcxM2d4ec R6ttBrU360qWzTY5o83BOinJ6Z2CnHHXw4ByDvzxhkokOgGX7hBNvw0heWXtJteK an8rriVl/Abr93Cs7vw4CcCSJIKbte5LpWPSplp+szVnWRnh4OYxycR7o08yck4c V9pqOxtqoK+NCsq3e+SFOd5DrmpddC+BJI63ntaW3schNVtqUqaXJUntBvnbqTfW NgfCO5S46ljG3fKgCAniTbw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:21 2026 by rpki-client