$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lIF-quIydEKwode77zvIfyMB_bs.roa File: lIF-quIydEKwode77zvIfyMB_bs.roa (raw, json) Hash identifier: 0El7ebW3gnw9OjKIykxMIDH+sKEpW5lCzs/M02c4Uhs= Subject key identifier: 94:81:7E:AA:E2:32:74:42:B0:A1:D7:BB:EF:3B:C8:7F:23:01:FD:BB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15EE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lIF-quIydEKwode77zvIfyMB_bs.roa Signing time: Tue 31 Mar 2026 08:00:43 +0000 ROA not before: Tue 31 Mar 2026 08:00:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5614 (0x15ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=94817EAAE2327442B0A1D7BBEF3BC87F2301FDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:3e:df:f6:c0:ed:76:f6:8b:2c:aa:26:aa: 16:ca:b0:a0:f9:26:43:34:f3:8e:af:3d:57:c1:3a: 11:7d:aa:28:9d:44:87:b7:e5:bb:07:eb:fe:dc:82: 48:f3:66:b5:bc:61:07:ed:34:98:5d:e2:15:1f:a9: 62:aa:17:c9:08:d7:3c:14:ca:ac:eb:88:fc:e9:52: 9a:03:8b:14:49:33:b2:bf:13:e4:70:91:3a:ca:8b: ec:10:c5:1b:73:00:61:3b:03:9f:47:62:ef:3f:cf: 23:2d:09:ad:09:cf:c9:72:34:21:67:74:09:32:ed: 11:bb:f3:38:7b:ce:f6:a2:6e:6d:45:8b:c6:c1:b6: 0f:44:fd:7e:db:ed:ee:d2:50:4e:7b:78:80:42:96: ee:27:a1:d8:0c:40:01:3c:ec:26:1f:74:95:00:a3: 2f:9b:30:87:ac:64:cb:34:37:3c:05:56:6e:c9:78: 66:b5:86:78:bb:53:43:14:f0:b3:42:74:5e:bf:3a: ae:3e:b8:de:a9:aa:2b:f9:a0:79:9f:e9:a8:b0:eb: c1:a0:40:32:29:05:20:ee:a9:1d:a1:7c:da:85:db: 81:95:7a:ea:2d:dd:32:d9:bb:f4:39:ff:dd:15:a7: 2c:f8:3f:b5:b4:22:e1:20:ae:e8:34:49:32:91:7c: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:7E:AA:E2:32:74:42:B0:A1:D7:BB:EF:3B:C8:7F:23:01:FD:BB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lIF-quIydEKwode77zvIfyMB_bs.roa sbgp-ipAddrBlock: critical IPv4: 49.98.60.0/23 Signature Algorithm: sha256WithRSAEncryption 80:d8:dc:e3:9e:94:72:8b:fa:18:35:8b:48:e2:64:1a:93:34: 25:b3:bc:29:2a:04:d3:16:eb:2b:ce:75:d2:46:a0:a5:40:97: d4:79:01:1b:62:8e:6c:86:4d:51:b8:ce:d5:f3:93:f9:f4:8b: 44:ed:f0:19:94:53:ab:82:10:9b:a9:55:6c:0d:ea:d4:1f:1a: d9:2b:fd:88:32:1b:5f:7e:0a:ad:23:63:91:a0:7e:7a:ae:fb: af:95:be:de:81:1f:85:27:d4:8a:1b:07:f1:a1:7e:40:be:5d: 56:ca:25:d4:1b:50:1d:73:f3:7c:e5:b3:48:39:fe:f4:13:94: 71:3f:46:4d:d7:6e:d1:5d:4f:c0:ef:1c:94:cf:b2:88:e4:35: 24:34:f8:73:ba:b3:a2:62:2f:51:7e:af:0a:73:d6:82:c1:88: e0:0e:60:10:64:3a:30:40:2b:09:7f:1d:60:93:a4:5a:55:30: 17:c1:d9:a7:aa:51:a2:65:10:6e:99:a7:c9:d4:c2:3a:33:f1: 02:86:7c:ba:7b:ff:3e:92:7b:c1:52:48:78:77:85:89:52:f4: c7:75:18:4c:21:47:1d:eb:68:90:18:c4:f2:df:3b:88:1d:1a: bd:00:23:83:b3:ba:11:20:eb:3b:92:3f:30:3f:4c:b5:aa:47: 20:4c:74:fe -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0ODE3RUFBRTIzMjc0 NDJCMEExRDdCQkVGM0JDODdGMjMwMUZEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi3T7f9sDtdvaLLKomqhbKsKD5JkM0846vPVfBOhF9qiidRIe3 5bsH6/7cgkjzZrW8YQftNJhd4hUfqWKqF8kI1zwUyqzriPzpUpoDixRJM7K/E+Rw kTrKi+wQxRtzAGE7A59HYu8/zyMtCa0Jz8lyNCFndAky7RG78zh7zvaibm1Fi8bB tg9E/X7b7e7SUE57eIBClu4nodgMQAE87CYfdJUAoy+bMIesZMs0NzwFVm7JeGa1 hni7U0MU8LNCdF6/Oq4+uN6pqiv5oHmf6aiw68GgQDIpBSDuqR2hfNqF24GVeuot 3TLZu/Q5/90Vpyz4P7W0IuEgrug0STKRfHfVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUlIF+quIydEKwode77zvIfyMB/bswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2xJRi1xdUl5ZEVLd29kZTc3enZJZnlNQl9icy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYjwwDQYJKoZIhvcNAQELBQADggEB AIDY3OOelHKL+hg1i0jiZBqTNCWzvCkqBNMW6yvOddJGoKVAl9R5ARtijmyGTVG4 ztXzk/n0i0Tt8BmUU6uCEJupVWwN6tQfGtkr/YgyG19+Cq0jY5Ggfnqu+6+Vvt6B H4Un1IobB/GhfkC+XVbKJdQbUB1z83zls0g5/vQTlHE/Rk3XbtFdT8DvHJTPsojk NSQ0+HO6s6JiL1F+rwpz1oLBiOAOYBBkOjBAKwl/HWCTpFpVMBfB2aeqUaJlEG6Z p8nUwjoz8QKGfLp7/z6Se8FSSHh3hYlS9Md1GEwhRx3raJAYxPLfO4gdGr0AI4Oz uhEg6zuSPzA/TLWqRyBMdP4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:49 2026 by rpki-client