$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/njuvZwUQRB43iheEfbgVxHUfBVA.roa File: njuvZwUQRB43iheEfbgVxHUfBVA.roa (raw, json) Hash identifier: aYMlGpZBHZXCXCcT4DDhKR1ii58PanvHOoCNlKaB6i4= Subject key identifier: 9E:3B:AF:67:05:10:44:1E:37:8A:17:84:7D:B8:15:C4:75:1F:05:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16F5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/njuvZwUQRB43iheEfbgVxHUfBVA.roa Signing time: Tue 31 Mar 2026 08:02:51 +0000 ROA not before: Tue 31 Mar 2026 08:02:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5877 (0x16f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9E3BAF670510441E378A17847DB815C4751F0550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:2a:4a:74:d9:78:de:87:3e:82:00:f9:92: 6e:c2:7a:1f:71:a7:a2:58:5c:a3:a2:61:c5:06:bb: 0a:7f:0f:25:38:9c:ee:ea:51:f9:c7:da:04:4f:11: d7:5b:86:eb:e0:70:bb:a0:33:54:c2:6d:d5:10:01: ca:fa:b1:39:2c:2c:9c:d7:ef:53:61:64:a4:5a:50: 4d:47:04:07:2f:46:05:3b:2c:4f:1b:fc:0b:18:de: 0e:2d:34:32:87:c5:b7:da:6f:6b:19:29:a7:45:c3: 2f:17:d8:b7:58:7e:89:97:b2:5b:d8:33:d3:11:10: b3:03:fb:d4:7b:60:5d:69:5d:46:b0:f7:5e:4f:fe: cf:13:40:e4:ae:11:62:e4:2d:44:80:2b:3a:69:f1: 99:3f:d1:17:a6:54:6d:af:ab:4f:2f:be:07:cf:a5: ce:87:fc:3c:6c:68:48:4a:b9:e1:7b:d0:5c:04:d8: 4b:9c:0d:81:32:5c:0d:1d:77:36:65:fc:94:9a:c5: 68:4b:ef:93:e5:cf:ae:6b:28:2d:99:d3:db:28:40: e7:5c:18:0c:53:85:7d:61:45:b2:27:bc:ea:5b:95: ae:4e:6d:96:7f:c9:90:e4:72:bd:e7:51:dd:ad:48: 43:05:b7:58:df:67:f1:4d:13:e1:b9:a9:24:c0:80: 83:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3B:AF:67:05:10:44:1E:37:8A:17:84:7D:B8:15:C4:75:1F:05:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/njuvZwUQRB43iheEfbgVxHUfBVA.roa sbgp-ipAddrBlock: critical IPv4: 49.108.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:88:b6:27:1b:f4:c8:5f:96:9f:ca:d1:a6:9e:81:c8:ee:3b: af:9a:5f:4f:cc:9a:e2:f8:d3:4f:c8:7d:9b:41:88:b3:62:cc: 4e:23:fb:e5:c8:54:5c:6a:b7:cb:28:8f:b6:6b:39:1f:2f:98: cb:47:46:d6:ff:8d:e5:4c:d9:2c:fb:07:3e:77:83:e4:34:f6: d4:20:86:ad:20:7c:89:60:47:c6:0f:98:1a:b5:b6:79:fb:5a: 41:f5:05:0f:bd:ec:26:b9:7a:e1:dd:a9:2d:da:7d:f5:ce:4e: 2a:b7:4f:a1:e2:ee:4d:c3:29:d0:0e:d1:68:7f:a9:14:05:de: 15:a6:5f:cc:05:d2:82:a5:bc:13:82:84:b7:a0:ab:a7:b4:c8: 22:a6:b4:50:80:88:74:bf:60:7a:9a:40:01:13:f8:d7:4e:f6: a0:66:ed:2c:1c:d5:c2:f3:76:4d:e7:3f:90:d6:e1:2e:c3:4f: 55:6e:39:19:ef:2b:86:b6:55:0b:ed:65:1c:d4:06:58:09:10: 52:d3:12:60:47:6c:6b:6a:2b:4f:9d:bc:f8:7f:1c:05:f6:8b: e6:8a:7d:c9:0f:91:ff:bf:1a:0d:2b:70:83:78:58:85:85:5c: 1f:36:35:07:fc:8c:48:90:da:93:e2:f8:fc:05:c5:9c:21:0d: 89:96:d8:4d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFM0JBRjY3MDUxMDQ0 MUUzNzhBMTc4NDdEQjgxNUM0NzUxRjA1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgTypKdNl43oc+ggD5km7Ceh9xp6JYXKOiYcUGuwp/DyU4nO7q UfnH2gRPEddbhuvgcLugM1TCbdUQAcr6sTksLJzX71NhZKRaUE1HBAcvRgU7LE8b /AsY3g4tNDKHxbfab2sZKadFwy8X2LdYfomXslvYM9MRELMD+9R7YF1pXUaw915P /s8TQOSuEWLkLUSAKzpp8Zk/0RemVG2vq08vvgfPpc6H/DxsaEhKueF70FwE2Euc DYEyXA0ddzZl/JSaxWhL75Plz65rKC2Z09soQOdcGAxThX1hRbInvOpbla5ObZZ/ yZDkcr3nUd2tSEMFt1jfZ/FNE+G5qSTAgIMhAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUnjuvZwUQRB43iheEfbgVxHUfBVAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L25qdXZad1VRUkI0M2loZUVmYmdWeEhVZkJWQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUxbIAwDQYJKoZIhvcNAQELBQADggEB AEuIticb9Mhflp/K0aaegcjuO6+aX0/MmuL400/IfZtBiLNizE4j++XIVFxqt8so j7ZrOR8vmMtHRtb/jeVM2Sz7Bz53g+Q09tQghq0gfIlgR8YPmBq1tnn7WkH1BQ+9 7Ca5euHdqS3affXOTiq3T6Hi7k3DKdAO0Wh/qRQF3hWmX8wF0oKlvBOChLegq6e0 yCKmtFCAiHS/YHqaQAET+NdO9qBm7Swc1cLzdk3nP5DW4S7DT1VuORnvK4a2VQvt ZRzUBlgJEFLTEmBHbGtqK0+dvPh/HAX2i+aKfckPkf+/Gg0rcIN4WIWFXB82NQf8 jEiQ2pPi+PwFxZwhDYmW2E0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:22 2026 by rpki-client