$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mOIbhug1DKev1NeOSNSgD1kX5ms.roa File: mOIbhug1DKev1NeOSNSgD1kX5ms.roa (raw, json) Hash identifier: xbSrKKda3+bXQYNW9zn4G/vlqdBwgQ/SotwkNiU4mJk= Subject key identifier: 98:E2:1B:86:E8:35:0C:A7:AF:D4:D7:8E:48:D4:A0:0F:59:17:E6:6B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15EC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mOIbhug1DKev1NeOSNSgD1kX5ms.roa Signing time: Tue 31 Mar 2026 08:00:42 +0000 ROA not before: Tue 31 Mar 2026 08:00:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5612 (0x15ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=98E21B86E8350CA7AFD4D78E48D4A00F5917E66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:a6:81:51:8f:80:ef:7d:95:56:8e:35:c4: af:50:b2:4d:f1:9a:83:a3:9f:f9:30:97:4f:c7:fa: 69:2d:6d:50:6a:79:5c:46:be:ed:a3:7e:be:5b:1d: c1:24:5e:f2:13:cd:17:d9:f0:11:af:e1:9a:87:7f: 57:9a:48:cd:35:47:f8:51:b1:fc:0c:44:ba:41:c4: b7:a4:c9:6c:8c:a6:5f:c6:6d:34:43:9b:1f:7b:6a: 04:a8:c4:ec:40:5e:d6:ae:84:78:e7:d8:7d:07:3f: f6:a1:35:97:d7:1e:ce:2e:c4:b8:75:71:d3:78:e4: ea:6c:d4:85:8b:c7:bd:58:d7:fb:77:06:1d:f8:90: 11:c4:a6:ae:d9:d7:37:7e:b8:43:2a:12:0e:69:25: fa:5d:43:18:5b:60:db:bf:a6:61:50:0a:30:b1:75: c9:23:5a:64:d9:e3:1c:4b:d1:3e:9f:6c:f1:43:04: 83:5f:bc:45:7d:f9:f9:03:ee:1a:94:b8:e0:2f:1a: ff:73:8a:06:47:92:48:53:52:48:e4:6f:50:b9:18: 10:02:5f:0b:55:39:27:c1:fc:b9:ae:fc:71:7a:31: 09:33:47:d0:2c:83:b3:71:8e:7f:25:f4:a9:d6:fe: 84:81:c2:f9:2a:46:d5:43:d2:67:5c:4b:4d:ec:03: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:1B:86:E8:35:0C:A7:AF:D4:D7:8E:48:D4:A0:0F:59:17:E6:6B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mOIbhug1DKev1NeOSNSgD1kX5ms.roa sbgp-ipAddrBlock: critical IPv4: 49.97.51.0/24 Signature Algorithm: sha256WithRSAEncryption 36:54:8e:ba:45:7f:ec:c3:8d:f3:46:75:6d:5f:73:43:45:36: 5d:c8:3a:da:6e:1e:31:d5:48:5b:3e:bb:25:a7:9f:a0:b0:e5: 87:e5:18:6b:74:17:e6:d6:47:26:8c:71:2c:2e:af:d8:34:0e: ce:9b:6f:fa:70:09:6e:51:fa:02:4b:c3:50:12:9d:c4:3b:d6: dc:ed:d2:8b:b7:25:2a:39:54:72:c8:bb:30:83:21:a6:71:c7: 19:93:62:db:41:00:51:4f:3b:cb:04:ab:c0:77:93:33:66:74: 7f:98:b9:2b:cd:e6:81:10:3c:dc:d4:08:42:4d:b5:2d:1f:1b: d5:76:96:b0:89:3b:4c:69:e6:51:17:f3:c1:86:4c:0e:96:26: 4b:0f:21:ea:3a:98:0f:42:92:3b:2f:18:42:3b:b3:f5:c3:90: 2f:ea:9e:ff:c6:c2:03:4e:2f:63:cf:c8:db:f5:2b:a3:1e:d6: 19:9f:23:87:cb:c7:d2:5e:e4:96:2e:ca:01:db:d7:b8:73:fa: 4e:bb:31:48:dc:3b:ec:2f:0d:9f:56:42:25:9e:48:99:9d:26: 2e:71:91:13:af:0f:5f:82:4f:d4:dc:da:da:6d:8d:7b:e8:d1: 16:9e:49:d4:84:ae:dc:a8:cf:49:87:65:15:b3:6b:64:d1:fa: 60:8c:76:a8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4RTIxQjg2RTgzNTBD QTdBRkQ0RDc4RTQ4RDRBMDBGNTkxN0U2NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP8aaBUY+A732VVo41xK9Qsk3xmoOjn/kwl0/H+mktbVBqeVxG vu2jfr5bHcEkXvITzRfZ8BGv4ZqHf1eaSM01R/hRsfwMRLpBxLekyWyMpl/GbTRD mx97agSoxOxAXtauhHjn2H0HP/ahNZfXHs4uxLh1cdN45Ops1IWLx71Y1/t3Bh34 kBHEpq7Z1zd+uEMqEg5pJfpdQxhbYNu/pmFQCjCxdckjWmTZ4xxL0T6fbPFDBINf vEV9+fkD7hqUuOAvGv9zigZHkkhTUkjkb1C5GBACXwtVOSfB/Lmu/HF6MQkzR9As g7Nxjn8l9KnW/oSBwvkqRtVD0mdcS03sA50bAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUmOIbhug1DKev1NeOSNSgD1kX5mswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L21PSWJodWcxREtldjFOZU9TTlNnRDFrWDVtcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYTMwDQYJKoZIhvcNAQELBQADggEB ADZUjrpFf+zDjfNGdW1fc0NFNl3IOtpuHjHVSFs+uyWnn6Cw5YflGGt0F+bWRyaM cSwur9g0Ds6bb/pwCW5R+gJLw1ASncQ71tzt0ou3JSo5VHLIuzCDIaZxxxmTYttB AFFPO8sEq8B3kzNmdH+YuSvN5oEQPNzUCEJNtS0fG9V2lrCJO0xp5lEX88GGTA6W JksPIeo6mA9CkjsvGEI7s/XDkC/qnv/GwgNOL2PPyNv1K6Me1hmfI4fLx9Je5JYu ygHb17hz+k67MUjcO+wvDZ9WQiWeSJmdJi5xkROvD1+CT9Tc2tptjXvo0RaeSdSE rtyoz0mHZRWza2TR+mCMdqg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:56 2026 by rpki-client