$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lXSKzHvZdNBEUh2_Nzg0T_NhP1o.roa File: lXSKzHvZdNBEUh2_Nzg0T_NhP1o.roa (raw, json) Hash identifier: bTMxeOJR+l8iPeb1fo7Vsmujs4mteC0kiB6tCI2yJMo= Subject key identifier: 95:74:8A:CC:7B:D9:74:D0:44:52:1D:BF:37:38:34:4F:F3:61:3F:5A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1391 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lXSKzHvZdNBEUh2_Nzg0T_NhP1o.roa Signing time: Tue 31 Mar 2026 07:55:51 +0000 ROA not before: Tue 31 Mar 2026 07:55:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5009 (0x1391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=95748ACC7BD974D044521DBF3738344FF3613F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:e6:96:ef:d1:f1:b0:ee:bc:92:ce:ee:06: 3e:4d:05:00:18:76:2a:ed:23:56:54:5f:4a:40:ff: 05:0e:cd:ab:e9:36:9b:14:41:4f:22:5c:52:ca:d3: fa:45:7b:cc:00:06:d1:2c:bb:82:54:f6:fb:5f:39: f2:64:34:64:6b:3a:fc:ba:d5:10:6b:70:83:d8:4d: 76:0b:78:5c:b9:94:3a:6b:ec:5b:15:db:ba:15:cd: c5:53:c6:ef:f2:55:d9:79:6b:02:49:68:be:59:e3: a6:63:6e:7b:32:c2:da:a5:e4:a2:1f:d2:2a:9f:5c: 88:b8:7e:33:47:07:70:18:b5:86:ce:bb:88:ad:9a: 23:1c:7d:2b:da:51:f6:4f:d2:39:79:99:f8:34:22: 5a:ab:59:38:95:ff:46:46:d1:f7:32:3e:22:2c:61: aa:33:5a:7b:2a:5f:2d:63:2a:34:a9:6d:90:14:db: 05:af:f7:bb:95:af:0c:a2:7a:16:8a:de:1e:1d:ed: f9:d4:91:d5:15:b7:19:58:65:6d:04:3e:45:f6:6c: fc:f4:6d:b7:e3:38:0b:5b:d8:39:14:bd:f9:6d:96: db:4d:25:60:f4:39:78:a4:3d:8a:ba:78:04:c6:23: 7d:4e:70:c3:06:3f:ae:a4:8a:e4:ab:74:85:df:52: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:74:8A:CC:7B:D9:74:D0:44:52:1D:BF:37:38:34:4F:F3:61:3F:5A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lXSKzHvZdNBEUh2_Nzg0T_NhP1o.roa sbgp-ipAddrBlock: critical IPv4: 49.97.20.0/22 Signature Algorithm: sha256WithRSAEncryption d9:b1:8d:e2:2d:1b:c8:99:ab:a4:c7:78:22:e6:d3:81:a0:0d: e3:a4:8d:c8:cb:31:26:38:c6:04:39:72:99:70:a1:22:bd:2c: 15:50:2e:ce:f2:38:76:6f:a7:3b:14:3b:98:13:b0:69:95:fd: 61:19:80:e6:8d:10:b3:6c:5f:13:08:34:f7:21:b1:9c:59:4e: 36:ed:a3:12:88:49:56:c5:e3:03:1c:1f:89:3a:c9:0a:ef:a6: 2b:f9:de:ad:fa:32:b7:26:25:fe:b7:50:44:07:69:7d:7c:f7: 93:ee:f9:a9:09:13:4c:ae:a8:99:81:fd:d9:7b:6f:d4:6b:3a: 21:d1:61:6e:2d:a3:ae:7c:bd:be:a0:be:4e:ca:73:1e:95:63: 3d:a5:72:da:09:04:00:52:ea:97:08:24:dc:8d:51:f5:f2:28: 42:71:b0:63:05:fc:93:b7:39:79:18:fe:95:ea:74:d1:e0:77: e3:2f:7d:4a:ad:05:15:f3:94:d9:b3:22:ae:7e:d9:3e:0e:4a: 5e:fe:80:ec:51:e3:8f:53:b5:5d:95:57:ac:0e:cc:76:32:51: e6:1a:2d:a4:03:08:8f:d3:e8:77:e4:8a:1c:8d:32:94:c6:b5: 63:8a:68:ed:d2:48:4d:d4:d2:4a:d6:10:2d:c4:06:18:5d:6a: 74:41:88:15 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1NzQ4QUNDN0JEOTc0 RDA0NDUyMURCRjM3MzgzNDRGRjM2MTNGNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1rOaW79HxsO68ks7uBj5NBQAYdirtI1ZUX0pA/wUOzavpNpsU QU8iXFLK0/pFe8wABtEsu4JU9vtfOfJkNGRrOvy61RBrcIPYTXYLeFy5lDpr7FsV 27oVzcVTxu/yVdl5awJJaL5Z46Zjbnsywtql5KIf0iqfXIi4fjNHB3AYtYbOu4it miMcfSvaUfZP0jl5mfg0IlqrWTiV/0ZG0fcyPiIsYaozWnsqXy1jKjSpbZAU2wWv 97uVrwyiehaK3h4d7fnUkdUVtxlYZW0EPkX2bPz0bbfjOAtb2DkUvfltlttNJWD0 OXikPYq6eATGI31OcMMGP66kiuSrdIXfUufTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUlXSKzHvZdNBEUh2/Nzg0T/NhP1owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2xYU0t6SHZaZE5CRVVoMl9OemcwVF9OaFAxby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYRQwDQYJKoZIhvcNAQELBQADggEB ANmxjeItG8iZq6THeCLm04GgDeOkjcjLMSY4xgQ5cplwoSK9LBVQLs7yOHZvpzsU O5gTsGmV/WEZgOaNELNsXxMINPchsZxZTjbtoxKISVbF4wMcH4k6yQrvpiv53q36 MrcmJf63UEQHaX1895Pu+akJE0yuqJmB/dl7b9RrOiHRYW4to658vb6gvk7Kcx6V Yz2lctoJBABS6pcIJNyNUfXyKEJxsGMF/JO3OXkY/pXqdNHgd+MvfUqtBRXzlNmz Iq5+2T4OSl7+gOxR449TtV2VV6wOzHYyUeYaLaQDCI/T6HfkihyNMpTGtWOKaO3S SE3U0krWEC3EBhhdanRBiBU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:39 2026 by rpki-client