$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/krTFzoFS87dAjDzwTnKi1XTF8YE.roa File: krTFzoFS87dAjDzwTnKi1XTF8YE.roa (raw, json) Hash identifier: ow2PlKBHZ9RmtQBNhgduAvEAEUObvAsgZyaTXwUaxMc= Subject key identifier: 92:B4:C5:CE:81:52:F3:B7:40:8C:3C:F0:4E:72:A2:D5:74:C5:F1:81 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15C4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/krTFzoFS87dAjDzwTnKi1XTF8YE.roa Signing time: Tue 31 Mar 2026 08:00:23 +0000 ROA not before: Tue 31 Mar 2026 08:00:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5572 (0x15c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=92B4C5CE8152F3B7408C3CF04E72A2D574C5F181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:7b:56:51:a7:cf:e8:5b:92:0b:fc:ee:8c: 11:f1:fe:15:5a:cd:02:ce:eb:f9:63:50:c9:58:0b: be:de:96:40:dd:2b:fb:dc:04:a5:db:22:fb:42:a5: 20:02:07:99:00:3f:50:97:96:71:af:d7:b2:39:f6: fc:9d:7f:55:32:f8:c4:2f:f9:bb:61:ba:d4:3a:bf: f1:f3:b1:f1:ca:a0:bf:e3:b1:8b:4b:a8:33:70:e5: d7:8e:14:76:98:5a:f1:fd:bc:f6:c7:97:01:47:4f: d4:b9:16:5c:a9:a3:5d:bd:e0:6c:4c:31:37:f8:e1: 7e:4c:05:62:39:4b:a3:fc:25:1b:60:01:f5:9b:1a: 02:cf:75:d7:1d:c7:2c:9d:0f:d3:fa:2f:13:54:14: 25:59:69:d6:c6:fc:34:95:00:46:31:4b:23:80:bd: b5:1d:c6:d6:ed:d7:d1:f0:2f:7f:6b:cb:d4:39:dc: 3c:95:b9:ee:18:eb:5e:22:40:82:1b:6c:cb:62:77: 8b:9e:04:c7:15:5b:01:91:a5:d2:97:e7:48:4d:46: fc:1d:72:81:f5:1a:47:6d:bd:08:93:c2:f3:84:3b: 29:d7:ff:b2:81:39:94:cc:8a:21:ce:f5:0e:89:99: fc:1f:db:14:66:98:6d:a8:7d:5b:96:67:c5:cc:50: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:C5:CE:81:52:F3:B7:40:8C:3C:F0:4E:72:A2:D5:74:C5:F1:81 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/krTFzoFS87dAjDzwTnKi1XTF8YE.roa sbgp-ipAddrBlock: critical IPv4: 49.96.17.0/24 Signature Algorithm: sha256WithRSAEncryption e4:6f:ca:4b:63:f1:8a:2e:b9:30:78:bc:9b:f4:cb:be:da:2a: ab:4c:77:b9:c2:36:21:5b:8b:66:04:d7:8c:1e:41:5a:24:3e: f5:fb:3b:8b:0d:43:13:54:64:26:c1:9e:ba:28:70:ef:88:83: b3:fe:94:d8:c3:a2:ea:44:f5:58:2e:8b:ea:b8:c0:2c:1b:86: 1a:53:58:e3:3d:e3:3f:5f:1a:1c:9b:0d:f2:44:7f:6e:42:0a: dd:d9:0b:04:67:0f:61:d3:9b:12:5e:98:5a:5d:d3:87:c1:b5: f9:ba:ff:a8:e5:4d:3d:d3:50:35:c6:4e:ec:38:ad:4a:1e:aa: 4f:32:16:c2:63:b7:4e:30:b8:f3:b4:7d:78:94:d2:14:53:73: 36:ad:8c:73:44:38:34:be:76:8b:d8:1e:56:18:16:41:31:86: 12:81:87:7d:a5:7c:a4:5e:b0:77:8d:0f:3e:7e:6f:4f:bc:4f: 36:ff:38:c5:a1:b1:ee:b2:da:26:ba:6e:87:36:29:b5:ab:36: ae:2e:d1:64:23:4a:8f:22:64:d7:c0:9b:fb:28:41:78:e3:28: 18:e9:dc:22:79:0a:aa:d0:7d:ae:64:a3:ca:42:6b:1f:2f:03: d0:3b:e6:3b:5e:42:9b:81:8f:b3:b6:7c:48:82:18:6b:4a:eb: 8c:71:ef:c5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyQjRDNUNFODE1MkYz Qjc0MDhDM0NGMDRFNzJBMkQ1NzRDNUYxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC++HtWUafP6FuSC/zujBHx/hVazQLO6/ljUMlYC77elkDdK/vc BKXbIvtCpSACB5kAP1CXlnGv17I59vydf1Uy+MQv+bthutQ6v/HzsfHKoL/jsYtL qDNw5deOFHaYWvH9vPbHlwFHT9S5Flypo1294GxMMTf44X5MBWI5S6P8JRtgAfWb GgLPddcdxyydD9P6LxNUFCVZadbG/DSVAEYxSyOAvbUdxtbt19HwL39ry9Q53DyV ue4Y614iQIIbbMtid4ueBMcVWwGRpdKX50hNRvwdcoH1GkdtvQiTwvOEOynX/7KB OZTMiiHO9Q6Jmfwf2xRmmG2ofVuWZ8XMUFFpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkrTFzoFS87dAjDzwTnKi1XTF8YEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tyVEZ6b0ZTODdkQWpEendUbktpMVhURjhZRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYBEwDQYJKoZIhvcNAQELBQADggEB AORvyktj8YouuTB4vJv0y77aKqtMd7nCNiFbi2YE14weQVokPvX7O4sNQxNUZCbB nroocO+Ig7P+lNjDoupE9Vgui+q4wCwbhhpTWOM94z9fGhybDfJEf25CCt3ZCwRn D2HTmxJemFpd04fBtfm6/6jlTT3TUDXGTuw4rUoeqk8yFsJjt04wuPO0fXiU0hRT czatjHNEODS+dovYHlYYFkExhhKBh32lfKResHeNDz5+b0+8Tzb/OMWhse6y2ia6 boc2KbWrNq4u0WQjSo8iZNfAm/soQXjjKBjp3CJ5CqrQfa5ko8pCax8vA9A75jte QpuBj7O2fEiCGGtK64xx78U= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:25 2026 by rpki-client