$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ltdZ5EZ6QjnKdSfmvXm7v9ipcBY.roa File: ltdZ5EZ6QjnKdSfmvXm7v9ipcBY.roa (raw, json) Hash identifier: 0hSTDFlXANjdloWZAcUj2mOVPo2DOLu4q9JpARHGWs8= Subject key identifier: 96:D7:59:E4:46:7A:42:39:CA:75:27:E6:BD:79:BB:BF:D8:A9:70:16 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1815 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ltdZ5EZ6QjnKdSfmvXm7v9ipcBY.roa Signing time: Tue 31 Mar 2026 08:05:15 +0000 ROA not before: Tue 31 Mar 2026 08:05:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6165 (0x1815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=96D759E4467A4239CA7527E6BD79BBBFD8A97016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:f4:7f:43:82:1b:a0:ca:3c:2d:11:dc:e5: a9:0a:b3:dc:03:59:b8:27:6a:28:5a:47:1d:7c:da: 93:99:66:8c:c4:14:f7:2b:d5:d7:0e:1b:26:0d:53: 0a:f9:3b:7f:02:98:43:c8:17:5d:e3:92:c2:7c:e8: 24:3c:e8:a2:e7:d2:8c:25:82:fb:73:3a:2b:04:6d: 8d:d6:74:ab:0c:8a:1b:78:dd:8b:12:04:5d:2c:5c: 6a:27:a3:48:fb:02:de:91:b6:d7:96:f9:7c:56:d3: 83:86:67:0e:7a:9a:d1:e4:e0:63:ec:e9:b6:b9:6f: d3:9d:67:33:7b:9f:70:6e:a0:fd:df:08:9c:d9:00: bc:b7:5c:39:50:b2:9f:7e:49:01:78:87:73:59:ea: cd:7a:de:c0:b1:45:33:3e:b3:4b:5a:3d:1e:db:8e: 09:bc:46:77:a9:fe:89:c3:3f:94:4e:f9:40:93:8c: eb:ea:b6:7d:25:6f:74:c0:6a:86:9e:57:81:bc:d0: 43:a0:4e:6b:99:fe:38:66:d5:37:29:d3:d3:19:98: a6:03:ed:46:bb:f1:4b:b0:27:b9:1c:c7:5a:c5:c1: cc:28:82:99:0b:2d:64:66:5f:36:79:cc:c5:ab:0a: 92:73:8e:cb:20:39:30:37:01:4c:23:09:e5:9e:49: 41:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D7:59:E4:46:7A:42:39:CA:75:27:E6:BD:79:BB:BF:D8:A9:70:16 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ltdZ5EZ6QjnKdSfmvXm7v9ipcBY.roa sbgp-ipAddrBlock: critical IPv4: 211.14.95.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:d1:e7:33:13:4b:2e:46:c7:f8:f3:fa:ab:6b:68:16:ec:09: aa:96:66:ba:71:fc:c6:86:66:7e:52:15:bf:93:f0:2d:e2:b5: e8:a5:5c:eb:54:39:45:ae:40:ba:7b:44:2e:02:0a:80:97:2e: f8:1a:0a:c6:5b:95:ad:32:53:f9:2d:87:1e:f5:54:f5:35:1c: e2:d9:b3:a2:52:8c:6f:93:13:60:b8:18:cd:af:8a:06:58:41: 73:fb:e7:7d:49:2e:da:e9:c3:ba:b2:d7:d1:5a:28:1c:27:69: a4:20:2e:60:93:d9:2c:cf:76:c7:c3:cd:32:f3:32:5c:59:b7: b2:01:2e:44:21:32:3f:12:c7:06:9b:59:97:e4:67:c9:c5:e6: a4:99:fb:7b:9d:9b:65:48:ee:55:5a:63:de:f7:4b:9d:ee:a4: 89:bf:3d:90:33:42:63:67:f5:e6:4a:f5:b9:6e:b4:ca:8f:55: 2b:01:21:e6:df:18:6c:59:bd:d6:50:74:7f:57:e1:d0:cd:c2: 80:eb:a9:55:ea:58:94:b1:40:84:11:06:4b:20:3d:ae:db:b0: 85:3a:0c:54:c8:f1:52:d9:12:73:ee:dc:6f:75:b5:56:6b:d6: 0b:cd:43:0f:17:8a:44:b4:3f:c2:11:0a:94:e3:a9:90:6c:dd: ae:59:47:da -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2RDc1OUU0NDY3QTQy MzlDQTc1MjdFNkJENzlCQkJGRDhBOTcwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxxfR/Q4IboMo8LRHc5akKs9wDWbgnaihaRx182pOZZozEFPcr 1dcOGyYNUwr5O38CmEPIF13jksJ86CQ86KLn0owlgvtzOisEbY3WdKsMiht43YsS BF0sXGono0j7At6RtteW+XxW04OGZw56mtHk4GPs6ba5b9OdZzN7n3BuoP3fCJzZ ALy3XDlQsp9+SQF4h3NZ6s163sCxRTM+s0taPR7bjgm8Rnep/onDP5RO+UCTjOvq tn0lb3TAaoaeV4G80EOgTmuZ/jhm1Tcp09MZmKYD7Ua78UuwJ7kcx1rFwcwogpkL LWRmXzZ5zMWrCpJzjssgOTA3AUwjCeWeSUF9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUltdZ5EZ6QjnKdSfmvXm7v9ipcBYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2x0ZFo1RVo2UWpuS2RTZm12WG03djlpcGNCWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTDl8wDQYJKoZIhvcNAQELBQADggEB AD/R5zMTSy5Gx/jz+qtraBbsCaqWZrpx/MaGZn5SFb+T8C3iteilXOtUOUWuQLp7 RC4CCoCXLvgaCsZbla0yU/kthx71VPU1HOLZs6JSjG+TE2C4GM2vigZYQXP7531J Ltrpw7qy19FaKBwnaaQgLmCT2SzPdsfDzTLzMlxZt7IBLkQhMj8SxwabWZfkZ8nF 5qSZ+3udm2VI7lVaY973S53upIm/PZAzQmNn9eZK9blutMqPVSsBIebfGGxZvdZQ dH9X4dDNwoDrqVXqWJSxQIQRBksgPa7bsIU6DFTI8VLZEnPu3G91tVZr1gvNQw8X ikS0P8IRCpTjqZBs3a5ZR9o= -----END CERTIFICATE-----Generated at Tue Apr 7 21:07:03 2026 by rpki-client