$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nkWAf7mIAGcQDd9mwJRKU2O4l7s.roa File: nkWAf7mIAGcQDd9mwJRKU2O4l7s.roa (raw, json) Hash identifier: ks2C8PtkLGuWJxrQ0ab1VBPlvdclzXoCAO0aRSBfpX0= Subject key identifier: 9E:45:80:7F:B9:88:00:67:10:0D:DF:66:C0:94:4A:53:63:B8:97:BB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 176D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nkWAf7mIAGcQDd9mwJRKU2O4l7s.roa Signing time: Tue 31 Mar 2026 08:03:47 +0000 ROA not before: Tue 31 Mar 2026 08:03:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5997 (0x176d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9E45807FB9880067100DDF66C0944A5363B897BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:5b:8d:72:2a:4d:2d:d5:e2:ea:f5:98:b8: 6c:09:c9:a7:15:ab:de:e5:43:ea:c0:50:af:3c:c4: 70:71:ef:44:9e:d4:e8:af:59:2c:89:d3:24:d3:e1: 68:ca:f6:37:f9:9b:8b:b9:a1:01:98:e3:37:2d:5a: c8:d4:32:48:0b:8a:fc:bc:9b:28:7c:b0:f6:bb:73: 7a:01:4e:3e:b7:99:36:7e:38:2d:da:1e:3e:80:95: 62:82:30:39:40:2e:d9:d2:54:26:0f:2c:ae:6c:d2: d9:5d:4c:06:fa:f1:45:c8:5e:17:18:1d:06:01:c6: 0d:46:29:5b:90:0e:2e:cb:8e:25:b9:cc:58:08:26: ed:42:12:23:59:7a:e3:32:ca:a2:de:ae:54:24:8f: 73:91:4c:33:ae:81:d4:63:17:a3:e9:b5:a2:be:8d: c7:eb:d7:d6:4a:54:ca:75:e9:08:c2:fe:0a:42:7c: 1a:12:41:f6:26:02:33:55:99:aa:03:a7:b7:02:e6: 4d:c6:f6:dc:9a:4e:25:db:fb:c1:78:15:fa:1d:17: 90:f8:8a:ad:7a:97:28:6f:22:77:88:26:90:13:3f: 3b:bb:02:78:1c:c0:9b:2d:19:83:ea:85:5b:80:4d: ae:19:02:48:7a:3e:e2:0a:a4:eb:38:76:fb:db:7b: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:80:7F:B9:88:00:67:10:0D:DF:66:C0:94:4A:53:63:B8:97:BB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nkWAf7mIAGcQDd9mwJRKU2O4l7s.roa sbgp-ipAddrBlock: critical IPv4: 49.106.92.0/23 Signature Algorithm: sha256WithRSAEncryption 66:8f:c3:46:d8:6b:7d:85:2c:ca:67:80:9a:11:02:7b:d8:7b: d4:c2:c1:73:fd:41:e5:4f:c3:67:de:97:77:5c:f8:a0:dd:67: 4d:ff:89:93:09:4b:16:c8:54:dd:ef:4e:96:cb:12:39:3f:3b: a6:2c:2d:64:34:5c:25:ba:7b:3a:83:4c:1d:76:d9:73:c9:14: 44:d6:3a:99:a5:6f:b2:54:ca:0a:07:d9:ad:41:32:56:0b:7b: 41:66:02:34:92:0c:46:55:17:07:52:09:90:ff:d4:21:88:3f: 05:0d:3e:54:6e:f0:b9:0f:7c:8e:fc:be:4c:ba:af:06:a2:76: dc:40:c4:27:3e:48:30:f4:86:45:24:b6:61:d6:69:ee:80:ca: bd:e5:b4:28:43:15:ef:4d:21:09:85:26:84:76:c3:a7:ba:e1: 90:6d:6a:8c:4a:d3:cc:46:bf:06:d6:06:a0:1e:68:35:c6:fd: 48:12:ec:5a:c3:7e:d0:82:70:cf:dd:d0:28:9d:3d:14:5d:22: 15:fd:60:6e:2b:50:c6:df:2b:7f:4f:c9:04:03:a1:da:25:09: 98:b9:32:b5:85:48:f7:e5:ba:3a:8a:a9:18:65:22:fe:b8:b6: 7c:d3:93:8d:ca:30:d8:a6:ac:f7:c0:52:b0:98:53:f5:2e:12: 8e:59:73:2e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFNDU4MDdGQjk4ODAw NjcxMDBEREY2NkMwOTQ0QTUzNjNCODk3QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb1luNcipNLdXi6vWYuGwJyacVq97lQ+rAUK88xHBx70Se1Oiv WSyJ0yTT4WjK9jf5m4u5oQGY4zctWsjUMkgLivy8myh8sPa7c3oBTj63mTZ+OC3a Hj6AlWKCMDlALtnSVCYPLK5s0tldTAb68UXIXhcYHQYBxg1GKVuQDi7LjiW5zFgI Ju1CEiNZeuMyyqLerlQkj3ORTDOugdRjF6PptaK+jcfr19ZKVMp16QjC/gpCfBoS QfYmAjNVmaoDp7cC5k3G9tyaTiXb+8F4FfodF5D4iq16lyhvIneIJpATPzu7Angc wJstGYPqhVuATa4ZAkh6PuIKpOs4dvvbeyALAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUnkWAf7mIAGcQDd9mwJRKU2O4l7swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L25rV0FmN21JQUdjUURkOW13SlJLVTJPNGw3cy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExalwwDQYJKoZIhvcNAQELBQADggEB AGaPw0bYa32FLMpngJoRAnvYe9TCwXP9QeVPw2fel3dc+KDdZ03/iZMJSxbIVN3v TpbLEjk/O6YsLWQ0XCW6ezqDTB122XPJFETWOpmlb7JUygoH2a1BMlYLe0FmAjSS DEZVFwdSCZD/1CGIPwUNPlRu8LkPfI78vky6rwaidtxAxCc+SDD0hkUktmHWae6A yr3ltChDFe9NIQmFJoR2w6e64ZBtaoxK08xGvwbWBqAeaDXG/UgS7FrDftCCcM/d 0CidPRRdIhX9YG4rUMbfK39PyQQDodolCZi5MrWFSPflujqKqRhlIv64tnzTk43K MNimrPfAUrCYU/UuEo5Zcy4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:09 2026 by rpki-client