$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVV73llqnGjf3A5dERGqhANyTl0.roa File: kVV73llqnGjf3A5dERGqhANyTl0.roa (raw, json) Hash identifier: t+YLyobiHPh8HOI26kMkDUrK6b25FCBsohLeeoRYHKI= Subject key identifier: 91:55:7B:DE:59:6A:9C:68:DF:DC:0E:5D:11:11:AA:84:03:72:4E:5D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15E5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVV73llqnGjf3A5dERGqhANyTl0.roa Signing time: Tue 31 Mar 2026 08:00:38 +0000 ROA not before: Tue 31 Mar 2026 08:00:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5605 (0x15e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=91557BDE596A9C68DFDC0E5D1111AA8403724E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a6:28:4f:83:ed:87:93:b7:dc:6a:cc:bc:2f: 80:52:d6:d0:e2:50:d8:00:7a:53:da:bc:f7:8c:30: 65:b6:21:e1:c1:6d:33:90:66:76:df:a3:4b:12:5c: e2:34:36:9c:97:6d:89:51:32:59:2c:1e:0a:d4:c8: 46:9e:bc:1a:8a:29:d7:a3:75:78:18:c7:f1:8e:cb: 3d:d5:70:ad:dc:0d:63:a5:7f:11:b1:db:64:af:e3: 96:3a:b1:07:b7:84:86:f9:b5:ae:be:09:ed:62:ad: 98:96:29:b9:df:82:17:1c:ce:b3:cc:4f:47:27:87: 6e:65:2e:85:80:9b:47:f0:71:a8:11:0c:2f:6c:07: 05:02:86:d7:4e:29:86:00:f0:af:bf:37:c0:2a:09: 18:63:2f:1c:0d:51:b0:f5:b1:16:ca:38:97:2b:a9: e6:9f:5a:2a:4d:45:18:15:f1:51:d1:c1:f2:fe:ed: e3:a9:51:79:28:50:c2:41:7d:22:5b:7c:95:95:86: 2b:dc:62:e4:8a:b6:f3:c3:b2:9a:c8:7a:4c:8b:67: 35:62:98:0a:eb:60:6d:10:0f:dc:84:55:16:d3:75: 15:85:f9:ec:68:aa:be:63:1b:43:76:13:a8:4a:7d: 0e:0a:7d:a7:79:d9:9c:0e:16:08:a2:c6:00:69:71: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:7B:DE:59:6A:9C:68:DF:DC:0E:5D:11:11:AA:84:03:72:4E:5D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVV73llqnGjf3A5dERGqhANyTl0.roa sbgp-ipAddrBlock: critical IPv4: 49.98.88.0/23 Signature Algorithm: sha256WithRSAEncryption bc:4d:e1:df:38:62:9f:6f:ea:0d:a7:39:8b:94:51:5c:aa:93: 3f:77:ba:2a:ce:87:6a:b6:8a:5a:37:38:2c:90:6d:19:2c:bf: a2:d3:50:46:11:9e:49:1d:19:2b:fa:c2:67:69:d8:21:46:9d: 3e:1d:76:5c:ea:e6:23:c6:d8:f0:7e:65:9c:7d:2e:b0:41:97: 58:8e:4b:92:19:f7:ec:38:27:03:68:c2:f7:1b:52:f3:b8:a8: 6e:b3:f8:9a:1d:2e:b4:24:c3:04:65:59:15:65:66:ad:5d:25: c1:09:64:75:c0:e7:2a:a1:e9:e6:93:39:da:c0:73:e9:c2:6c: 45:82:bd:27:98:eb:6e:28:13:b9:be:34:d5:fd:c2:8a:cb:db: 5f:dc:0d:0d:88:53:06:ad:61:34:99:89:fa:7a:bc:23:c2:21: 44:66:00:32:be:92:46:b6:0d:f5:fc:24:db:5b:12:d7:b9:c3: 05:c4:52:78:bc:6b:3c:64:6a:97:08:6e:ee:0d:e8:e5:fa:6f: 78:35:bc:ea:96:78:2e:75:b1:db:f4:19:77:dd:65:4b:3c:b2: 9a:25:f1:41:3b:c9:19:4c:0d:26:a4:5e:28:37:ba:a9:d4:b1: 7c:f1:75:d2:da:8b:12:5e:1d:2c:50:a1:67:1e:13:7d:86:ef: 47:43:ac:94 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkxNTU3QkRFNTk2QTlD NjhERkRDMEU1RDExMTFBQTg0MDM3MjRFNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqpihPg+2Hk7fcasy8L4BS1tDiUNgAelPavPeMMGW2IeHBbTOQ Znbfo0sSXOI0NpyXbYlRMlksHgrUyEaevBqKKdejdXgYx/GOyz3VcK3cDWOlfxGx 22Sv45Y6sQe3hIb5ta6+Ce1irZiWKbnfghcczrPMT0cnh25lLoWAm0fwcagRDC9s BwUChtdOKYYA8K+/N8AqCRhjLxwNUbD1sRbKOJcrqeafWipNRRgV8VHRwfL+7eOp UXkoUMJBfSJbfJWVhivcYuSKtvPDsprIekyLZzVimArrYG0QD9yEVRbTdRWF+exo qr5jG0N2E6hKfQ4Kfad52ZwOFgiixgBpcUeHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkVV73llqnGjf3A5dERGqhANyTl0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tWVjczbGxxbkdqZjNBNWRFUkdxaEFOeVRsMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYlgwDQYJKoZIhvcNAQELBQADggEB ALxN4d84Yp9v6g2nOYuUUVyqkz93uirOh2q2ilo3OCyQbRksv6LTUEYRnkkdGSv6 wmdp2CFGnT4ddlzq5iPG2PB+ZZx9LrBBl1iOS5IZ9+w4JwNowvcbUvO4qG6z+Jod LrQkwwRlWRVlZq1dJcEJZHXA5yqh6eaTOdrAc+nCbEWCvSeY624oE7m+NNX9worL 21/cDQ2IUwatYTSZifp6vCPCIURmADK+kka2DfX8JNtbEte5wwXEUni8azxkapcI bu4N6OX6b3g1vOqWeC51sdv0GXfdZUs8spol8UE7yRlMDSakXig3uqnUsXzxddLa ixJeHSxQoWceE32G70dDrJQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:56 2026 by rpki-client