$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lQb96x9HMDCZzr-2j9_7PICah4g.roa File: lQb96x9HMDCZzr-2j9_7PICah4g.roa (raw, json) Hash identifier: w0WaU42EFff7GsIzUhbehX+s7MjP55+VfBH5TwM/kGg= Subject key identifier: 95:06:FD:EB:1F:47:30:30:99:CE:BF:B6:8F:DF:FB:3C:80:9A:87:88 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 176F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lQb96x9HMDCZzr-2j9_7PICah4g.roa Signing time: Tue 31 Mar 2026 08:03:47 +0000 ROA not before: Tue 31 Mar 2026 08:03:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5999 (0x176f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9506FDEB1F47303099CEBFB68FDFFB3C809A8788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:91:a5:eb:57:40:4f:b0:b9:68:3b:0b:c8: 0c:da:24:8b:e3:d0:09:a5:db:b5:f3:cd:a1:5e:8d: b9:ec:4a:ae:77:b0:9a:87:3f:d5:cc:09:01:9f:14: 97:bc:88:ea:ae:d5:af:f4:22:2a:77:40:33:aa:9e: e6:6f:0a:4f:ff:6e:d2:0d:a3:ff:68:27:0b:6b:1e: 7a:ee:c7:d1:38:c7:c9:f3:ad:b9:02:00:25:2a:43: b4:4d:12:fe:51:1b:cd:84:e8:2b:6b:ca:19:0d:a0: 96:36:ae:df:69:57:6e:68:4d:c9:ed:4c:65:a1:a7: de:ea:07:39:70:60:87:52:09:d5:db:3a:f7:54:9f: c1:7f:f4:3b:d2:ed:c7:e2:d8:a1:c6:2e:43:f7:83: a8:f1:b3:fa:51:0d:6f:8c:83:3d:50:84:2d:ba:ae: 2a:68:1c:49:45:6f:56:7c:71:d2:76:1e:55:40:c4: d4:47:1a:1e:47:fa:cc:79:fd:a8:a5:45:63:73:bb: 20:eb:e5:5c:1a:49:95:dd:17:0b:28:37:f1:d2:84: 8e:40:4b:d2:81:44:86:d5:f9:35:fc:70:4e:1a:ed: 6a:7f:20:5e:a6:42:e7:b2:8a:e4:3e:a4:5b:cd:f8: 62:86:e0:6d:55:b3:0e:8f:fd:7d:fd:bb:16:f9:3b: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:06:FD:EB:1F:47:30:30:99:CE:BF:B6:8F:DF:FB:3C:80:9A:87:88 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lQb96x9HMDCZzr-2j9_7PICah4g.roa sbgp-ipAddrBlock: critical IPv4: 211.14.93.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b1:ff:57:39:5c:ac:1f:19:cd:c8:7c:c2:f5:39:a6:18:8e: e0:3c:d8:79:58:d4:ee:13:e6:24:14:24:3c:9f:7d:99:5a:c2: e9:75:50:fd:d2:36:cd:f3:a0:7a:6f:ab:97:31:5d:a7:94:c3: 9c:70:1a:05:71:ca:29:d0:3b:d1:0a:77:63:7e:9b:33:12:a8: e4:9b:c7:49:e3:5b:9c:9c:c3:b4:76:78:52:06:2a:32:88:d7: ef:44:c7:bc:a5:4f:dc:d2:a1:bd:0a:57:9b:72:22:83:72:4a: 42:09:cc:65:d7:7b:14:7d:e9:78:3f:50:88:b7:d7:3b:55:d7: 62:f2:e9:94:46:90:a9:cd:53:89:d0:88:4b:bc:59:e0:09:90: 4e:92:73:56:07:a6:dc:a1:65:c8:be:6e:39:5e:86:67:70:e9: 78:9b:47:7e:24:09:1d:e4:cc:d3:1c:85:d6:95:67:fe:fd:f6: f6:c7:f1:52:2d:01:89:f7:3f:f1:a0:1d:80:ed:fb:e9:29:f3: bd:f4:3d:24:0c:d4:8e:f1:7b:bc:4c:8c:f4:53:4f:07:66:01: 1a:68:81:dd:06:40:1f:06:b3:95:87:6e:2a:b0:9a:ca:7c:1e: aa:ed:0c:b2:bc:53:86:fa:b4:85:0e:e2:72:1a:52:18:09:5a: 01:30:24:3c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1MDZGREVCMUY0NzMw MzA5OUNFQkZCNjhGREZGQjNDODA5QTg3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtPJGl61dAT7C5aDsLyAzaJIvj0Aml27XzzaFejbnsSq53sJqH P9XMCQGfFJe8iOqu1a/0Iip3QDOqnuZvCk//btINo/9oJwtrHnrux9E4x8nzrbkC ACUqQ7RNEv5RG82E6CtryhkNoJY2rt9pV25oTcntTGWhp97qBzlwYIdSCdXbOvdU n8F/9DvS7cfi2KHGLkP3g6jxs/pRDW+Mgz1QhC26ripoHElFb1Z8cdJ2HlVAxNRH Gh5H+sx5/ailRWNzuyDr5VwaSZXdFwsoN/HShI5AS9KBRIbV+TX8cE4a7Wp/IF6m QueyiuQ+pFvN+GKG4G1Vsw6P/X39uxb5OyVjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUlQb96x9HMDCZzr+2j9/7PICah4gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2xRYjk2eDlITURDWnpyLTJqOV83UElDYWg0Zy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTDl0wDQYJKoZIhvcNAQELBQADggEB ACWx/1c5XKwfGc3IfML1OaYYjuA82HlY1O4T5iQUJDyffZlawul1UP3SNs3zoHpv q5cxXaeUw5xwGgVxyinQO9EKd2N+mzMSqOSbx0njW5ycw7R2eFIGKjKI1+9Ex7yl T9zSob0KV5tyIoNySkIJzGXXexR96Xg/UIi31ztV12Ly6ZRGkKnNU4nQiEu8WeAJ kE6Sc1YHptyhZci+bjlehmdw6XibR34kCR3kzNMchdaVZ/799vbH8VItAYn3P/Gg HYDt++kp8730PSQM1I7xe7xMjPRTTwdmARpogd0GQB8Gs5WHbiqwmsp8HqrtDLK8 U4b6tIUO4nIaUhgJWgEwJDw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:39 2026 by rpki-client