$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nLBLgbR4Y3u2LrYz9J_HLsKsSwE.roa File: nLBLgbR4Y3u2LrYz9J_HLsKsSwE.roa (raw, json) Hash identifier: Xto4CSEPC+O3d6pCxNRQ5GP7iWSl/kDkkSsagR213T8= Subject key identifier: 9C:B0:4B:81:B4:78:63:7B:B6:2E:B6:33:F4:9F:C7:2E:C2:AC:4B:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1398 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nLBLgbR4Y3u2LrYz9J_HLsKsSwE.roa Signing time: Tue 31 Mar 2026 07:55:55 +0000 ROA not before: Tue 31 Mar 2026 07:55:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5016 (0x1398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9CB04B81B478637BB62EB633F49FC72EC2AC4B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:bd:cb:58:ae:bd:44:ba:c5:b7:e8:61:35: 04:9c:eb:a7:12:48:e1:c4:32:f0:dc:58:b7:1a:cd: 48:ff:46:a6:cf:2a:aa:4a:6b:1a:c7:44:62:13:34: 99:9b:40:64:2a:eb:0b:52:d6:95:c2:8f:2d:19:45: b9:60:4d:c8:16:bf:87:90:5f:f9:e3:82:ad:33:7c: e1:8d:c3:d5:15:36:c7:89:2d:76:62:99:5a:a0:c6: 09:14:18:a1:6e:d1:b2:50:19:e0:6f:a8:02:c0:01: b2:64:c0:04:0e:6d:09:a9:2e:3d:3a:ea:66:87:f8: 32:54:d3:95:32:ca:3b:10:ed:70:9f:3b:14:d9:52: 89:4e:8f:52:5b:e9:08:93:04:8c:fc:d4:e2:a1:52: 35:56:60:1f:fc:08:91:3f:55:3b:02:a2:e7:1c:ae: 37:3e:89:36:e3:48:62:3f:d6:0f:4e:44:8f:85:5c: 4c:55:65:2c:17:f1:ad:ae:5b:f9:1a:f3:03:b5:e4: 95:c2:f5:2a:59:ea:fc:e7:ac:ab:5d:2f:57:aa:62: 2a:cf:d9:5e:a1:d0:77:6f:0a:51:9a:12:7a:a0:07: 12:7d:ec:17:31:e1:fe:33:9e:e2:f9:e9:2a:02:f3: c1:45:a1:8d:80:3c:9a:73:aa:81:c5:e6:46:b2:54: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B0:4B:81:B4:78:63:7B:B6:2E:B6:33:F4:9F:C7:2E:C2:AC:4B:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nLBLgbR4Y3u2LrYz9J_HLsKsSwE.roa sbgp-ipAddrBlock: critical IPv4: 1.75.224.0/22 Signature Algorithm: sha256WithRSAEncryption 81:47:90:7d:99:df:42:02:ee:2a:9e:b4:9b:14:47:2f:61:02: fa:97:d2:a8:ae:40:6e:75:87:6f:9e:7d:d2:39:0b:51:24:4e: 64:70:b7:c0:5b:ad:5d:95:c8:7a:ed:b5:d3:63:6a:ce:bd:c1: 5c:2f:06:3b:ed:9f:7e:53:df:e1:93:28:55:86:02:e2:a2:1e: 97:72:b4:19:c9:2e:02:e6:70:64:9e:3a:41:96:aa:44:0f:38: e0:d3:d9:f7:1f:86:21:e0:16:3f:4d:14:dd:d1:bc:34:c9:87: 5b:8c:f1:d7:6b:04:da:ae:02:ab:dd:b0:05:72:1a:42:3a:00: 23:ec:44:44:1a:e2:27:ef:f9:a7:39:b4:16:fb:b6:f9:30:a5: cc:b3:5e:34:36:d1:77:e2:f7:d6:ce:d8:ff:82:1f:4e:46:9d: d8:35:5c:08:fc:5c:20:f7:39:02:50:78:f7:c3:53:37:05:72: 94:25:79:a5:99:0b:d1:85:4b:86:45:32:60:ff:31:03:69:5f: 35:e6:16:61:dc:95:e0:07:5d:db:b3:45:ca:26:ea:81:b0:5c: 47:0c:0b:8a:e6:ca:c4:45:b7:71:08:09:80:d6:1a:10:1e:ee: 47:45:e7:8b:52:68:34:03:c9:c0:18:c4:bb:b7:b1:1a:c8:a2: 3f:61:7b:81 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDQjA0QjgxQjQ3ODYz N0JCNjJFQjYzM0Y0OUZDNzJFQzJBQzRCMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDv873LWK69RLrFt+hhNQSc66cSSOHEMvDcWLcazUj/RqbPKqpK axrHRGITNJmbQGQq6wtS1pXCjy0ZRblgTcgWv4eQX/njgq0zfOGNw9UVNseJLXZi mVqgxgkUGKFu0bJQGeBvqALAAbJkwAQObQmpLj066maH+DJU05UyyjsQ7XCfOxTZ UolOj1Jb6QiTBIz81OKhUjVWYB/8CJE/VTsCouccrjc+iTbjSGI/1g9ORI+FXExV ZSwX8a2uW/ka8wO15JXC9SpZ6vznrKtdL1eqYirP2V6h0HdvClGaEnqgBxJ97Bcx 4f4znuL56SoC88FFoY2APJpzqoHF5kayVH3ZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUnLBLgbR4Y3u2LrYz9J/HLsKsSwEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L25MQkxnYlI0WTN1MkxyWXo5Sl9ITHNLc1N3RS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBS+AwDQYJKoZIhvcNAQELBQADggEB AIFHkH2Z30IC7iqetJsURy9hAvqX0qiuQG51h2+efdI5C1EkTmRwt8BbrV2VyHrt tdNjas69wVwvBjvtn35T3+GTKFWGAuKiHpdytBnJLgLmcGSeOkGWqkQPOODT2fcf hiHgFj9NFN3RvDTJh1uM8ddrBNquAqvdsAVyGkI6ACPsREQa4ifv+ac5tBb7tvkw pcyzXjQ20Xfi99bO2P+CH05Gndg1XAj8XCD3OQJQePfDUzcFcpQleaWZC9GFS4ZF MmD/MQNpXzXmFmHcleAHXduzRcom6oGwXEcMC4rmysRFt3EICYDWGhAe7kdF54tS aDQDycAYxLu3sRrIoj9he4E= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:38 2026 by rpki-client