$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nValj-ZymWaLm4oKgSLPMvfOYyA.roa File: nValj-ZymWaLm4oKgSLPMvfOYyA.roa (raw, json) Hash identifier: gVeFKqUa8ALLyheAt9aaRUuQ/wmA5aYX615ejIja8/o= Subject key identifier: 9D:56:A5:8F:E6:72:99:66:8B:9B:8A:0A:81:22:CF:32:F7:CE:63:20 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1864 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nValj-ZymWaLm4oKgSLPMvfOYyA.roa Signing time: Tue 31 Mar 2026 08:05:53 +0000 ROA not before: Tue 31 Mar 2026 08:05:53 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6244 (0x1864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:53 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9D56A58FE67299668B9B8A0A8122CF32F7CE6320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:b7:ee:b3:a7:9d:ca:41:53:15:d1:43:69: a4:50:b9:d8:75:18:be:1d:01:7d:69:d8:de:61:00: 2d:ba:6b:da:2d:0f:fa:d5:32:85:5f:d3:5d:d3:e3: 83:a9:18:82:f3:56:8f:80:c3:e9:e9:5f:1d:58:ff: 2c:17:fa:6a:3c:ca:24:13:b8:77:65:de:70:99:93: bd:69:1e:f3:1e:48:2c:d6:b6:68:64:95:b1:ec:22: 53:48:b9:b7:70:06:8c:d7:8b:2d:26:a1:ac:d7:42: 23:15:2b:6d:a7:6d:24:02:95:67:84:c4:cb:6b:4a: 24:66:5d:d4:10:ba:36:49:fd:13:aa:21:3f:3f:f9: 19:4e:38:9f:ad:36:ff:34:c0:f3:63:c0:f4:f0:c2: c8:5c:b0:f7:8f:6a:4a:ef:b7:ab:52:dd:d1:67:ed: 54:1d:45:a6:e1:4f:ac:f1:aa:f3:99:20:6d:0f:44: 75:ce:bc:4d:16:b5:c7:cb:65:93:c3:25:fb:b6:3c: e5:0e:86:e4:ce:17:77:62:09:d6:5d:5e:3f:9c:c7: e1:c2:25:73:e9:fd:9e:02:03:58:b3:8d:ce:24:a1: b4:a2:fc:c7:76:8b:ed:e7:1a:dc:95:f2:26:c9:0a: 0d:04:5e:6d:14:5f:8a:95:c9:d0:fd:d8:25:65:61: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:56:A5:8F:E6:72:99:66:8B:9B:8A:0A:81:22:CF:32:F7:CE:63:20 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nValj-ZymWaLm4oKgSLPMvfOYyA.roa sbgp-ipAddrBlock: critical IPv4: 49.102.168.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:b4:bf:8f:70:31:8c:0b:16:ad:e6:e2:70:73:98:89:8e:0c: bf:2f:c6:34:69:9d:3e:90:83:85:c2:07:26:40:73:47:13:ff: 7c:e6:66:64:6c:56:d1:dd:74:db:19:f5:de:26:eb:60:aa:cc: 89:e1:a8:85:68:9a:aa:4d:5c:4d:44:3f:fc:6c:ce:ed:64:1c: 5b:8a:01:84:62:4e:8e:87:71:8a:f9:a2:1f:2b:a6:27:e8:90: 59:ee:92:10:be:f6:2a:aa:39:3c:27:d5:b9:f2:5c:5e:a7:6f: 7f:21:73:ba:bb:6e:85:b1:99:c9:2d:ca:b5:38:da:56:97:54: 74:3c:a9:7c:ac:49:89:75:eb:db:54:8d:a9:92:99:de:8e:5a: 58:92:13:4d:4c:46:a6:11:96:7d:c5:f3:42:d3:3c:7b:fc:ed: e1:25:8b:0a:48:c8:40:c3:00:5b:d6:f5:16:e7:ee:c3:27:1e: 1d:d8:bd:b8:98:28:72:24:d6:6b:a7:1d:fe:db:43:51:5a:08: d6:fe:5c:a1:9d:34:56:c7:15:90:4c:ac:d9:87:72:48:f1:6d: 16:dc:f1:0e:7d:1b:98:21:0f:1f:0d:75:0b:e0:b7:01:fc:2e: 7b:7c:4e:52:17:3c:4e:37:36:97:0e:a1:93:7a:be:28:d5:0d: cd:de:b9:5e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1NTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlENTZBNThGRTY3Mjk5 NjY4QjlCOEEwQTgxMjJDRjMyRjdDRTYzMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoALfus6edykFTFdFDaaRQudh1GL4dAX1p2N5hAC26a9otD/rV MoVf013T44OpGILzVo+Aw+npXx1Y/ywX+mo8yiQTuHdl3nCZk71pHvMeSCzWtmhk lbHsIlNIubdwBozXiy0moazXQiMVK22nbSQClWeExMtrSiRmXdQQujZJ/ROqIT8/ +RlOOJ+tNv80wPNjwPTwwshcsPePakrvt6tS3dFn7VQdRabhT6zxqvOZIG0PRHXO vE0WtcfLZZPDJfu2POUOhuTOF3diCdZdXj+cx+HCJXPp/Z4CA1izjc4kobSi/Md2 i+3nGtyV8ibJCg0EXm0UX4qVydD92CVlYSQdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUnValj+ZymWaLm4oKgSLPMvfOYyAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L25WYWxqLVp5bVdhTG00b0tnU0xQTXZmT1l5QS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxZqgwDQYJKoZIhvcNAQELBQADggEB AJ+0v49wMYwLFq3m4nBzmImODL8vxjRpnT6Qg4XCByZAc0cT/3zmZmRsVtHddNsZ 9d4m62CqzInhqIVomqpNXE1EP/xszu1kHFuKAYRiTo6HcYr5oh8rpifokFnukhC+ 9iqqOTwn1bnyXF6nb38hc7q7boWxmcktyrU42laXVHQ8qXysSYl169tUjamSmd6O WliSE01MRqYRln3F80LTPHv87eEliwpIyEDDAFvW9Rbn7sMnHh3YvbiYKHIk1mun Hf7bQ1FaCNb+XKGdNFbHFZBMrNmHckjxbRbc8Q59G5ghDx8NdQvgtwH8Lnt8TlIX PE43NpcOoZN6vijVDc3euV4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:58 2026 by rpki-client