$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l7b93GT-37hs3Vo6Vfb1p3PhTVk.roa File: l7b93GT-37hs3Vo6Vfb1p3PhTVk.roa (raw, json) Hash identifier: STlJRYoIta+asmbpnXP82tnx5FODxLDIYmvIdWBms6A= Subject key identifier: 97:B6:FD:DC:64:FE:DF:B8:6C:DD:5A:3A:55:F6:F5:A7:73:E1:4D:59 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15DC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l7b93GT-37hs3Vo6Vfb1p3PhTVk.roa Signing time: Tue 31 Mar 2026 08:00:33 +0000 ROA not before: Tue 31 Mar 2026 08:00:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5596 (0x15dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=97B6FDDC64FEDFB86CDD5A3A55F6F5A773E14D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0b:f8:f5:21:b9:c8:e3:57:93:b2:b5:73:61: f0:94:eb:cb:44:8e:8a:64:58:73:0b:5c:81:6a:ff: 94:e4:57:ac:b5:74:cf:11:54:f6:e6:31:4f:21:54: 88:96:59:12:bb:b5:76:62:a5:60:b3:9e:48:75:9a: af:c8:db:77:8c:2d:33:57:04:9f:b6:d0:3b:e7:9e: 08:ed:b9:6e:43:a6:70:2d:3e:85:64:43:fb:0c:46: 03:e0:c9:18:ed:7f:c7:56:da:83:64:ed:71:67:69: d3:eb:9d:5d:48:56:6f:ed:21:1f:81:34:ff:a4:a3: 0f:76:e1:21:de:e8:d3:a7:44:71:cf:2f:89:8b:5f: b2:6b:58:1c:0f:0c:75:e1:59:91:9f:8d:64:24:2c: 59:47:f8:7b:23:e8:c8:0c:1e:37:cd:6b:ed:30:52: f7:c2:29:5e:30:49:0a:58:77:c6:17:18:19:90:33: 51:72:e2:10:2e:42:97:cb:ef:28:88:89:fa:ce:70: 77:5e:9d:f1:c1:ad:7f:91:45:da:30:fa:5b:ca:e7: 6b:eb:a6:8e:62:09:38:95:d7:d6:91:4a:62:c7:4c: 7d:79:7d:79:0b:c0:60:e2:4b:f7:bc:f8:fb:3a:35: 5b:6d:03:04:69:18:40:9c:16:23:65:d9:5a:05:d5: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:FD:DC:64:FE:DF:B8:6C:DD:5A:3A:55:F6:F5:A7:73:E1:4D:59 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l7b93GT-37hs3Vo6Vfb1p3PhTVk.roa sbgp-ipAddrBlock: critical IPv4: 49.96.8.0/23 Signature Algorithm: sha256WithRSAEncryption 05:21:62:66:79:2a:e9:fa:e8:00:2e:fd:a9:89:25:f3:f1:b7: 06:84:13:95:8a:73:29:9a:f3:cf:ee:4f:d9:a9:e0:40:ff:db: af:82:54:6c:09:32:fd:fe:fc:dc:3d:cf:49:f5:e9:bc:14:6e: a4:a6:12:95:56:83:7a:a8:d8:db:5a:c5:76:bb:09:3c:21:bb: 3e:e1:7f:7a:28:bf:e3:b0:f9:cc:21:a2:ec:10:7b:eb:e3:9c: df:24:f4:06:2c:e9:ed:1d:d1:69:87:0c:e2:a4:d8:08:5b:c4: 71:2e:85:8f:1a:aa:6b:a6:aa:a9:01:17:32:42:96:b4:30:bd: 49:6c:d7:e3:33:ee:3d:87:7a:cd:cb:8b:4c:c5:6a:b1:18:aa: 2a:15:82:be:96:82:c4:c1:51:cf:b0:b4:b9:94:db:a5:92:99: b3:75:01:b7:d3:a4:5c:89:23:7e:2b:38:9d:a9:91:3e:9a:fb: f3:9e:18:74:2e:05:5a:93:d5:23:57:76:7b:c8:dc:8f:ca:78: dd:26:2f:43:37:17:d3:a7:07:b7:ce:c5:18:a8:5a:3e:92:52: a4:7d:5f:e7:f8:ca:91:da:34:b8:a2:ca:12:8d:c5:36:72:93: 70:91:16:84:0b:0b:28:d0:33:cd:b7:a7:e8:a5:58:fd:77:a9: 14:d7:ee:7c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3QjZGRERDNjRGRURG Qjg2Q0RENUEzQTU1RjZGNUE3NzNFMTRENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkC/j1IbnI41eTsrVzYfCU68tEjopkWHMLXIFq/5TkV6y1dM8R VPbmMU8hVIiWWRK7tXZipWCznkh1mq/I23eMLTNXBJ+20DvnngjtuW5DpnAtPoVk Q/sMRgPgyRjtf8dW2oNk7XFnadPrnV1IVm/tIR+BNP+kow924SHe6NOnRHHPL4mL X7JrWBwPDHXhWZGfjWQkLFlH+Hsj6MgMHjfNa+0wUvfCKV4wSQpYd8YXGBmQM1Fy 4hAuQpfL7yiIifrOcHdenfHBrX+RRdow+lvK52vrpo5iCTiV19aRSmLHTH15fXkL wGDiS/e8+Ps6NVttAwRpGECcFiNl2VoF1cn1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUl7b93GT+37hs3Vo6Vfb1p3PhTVkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2w3YjkzR1QtMzdoczNWbzZWZmIxcDNQaFRWay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYAgwDQYJKoZIhvcNAQELBQADggEB AAUhYmZ5Kun66AAu/amJJfPxtwaEE5WKcyma88/uT9mp4ED/26+CVGwJMv3+/Nw9 z0n16bwUbqSmEpVWg3qo2NtaxXa7CTwhuz7hf3oov+Ow+cwhouwQe+vjnN8k9AYs 6e0d0WmHDOKk2AhbxHEuhY8aqmumqqkBFzJClrQwvUls1+Mz7j2Hes3Li0zFarEY qioVgr6WgsTBUc+wtLmU26WSmbN1AbfTpFyJI34rOJ2pkT6a+/OeGHQuBVqT1SNX dnvI3I/KeN0mL0M3F9OnB7fOxRioWj6SUqR9X+f4ypHaNLiiyhKNxTZyk3CRFoQL CyjQM823p+ilWP13qRTX7nw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:15 2026 by rpki-client