$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oPKOLK9Y7iCgLDxT1yGIfRMFavk.roa File: oPKOLK9Y7iCgLDxT1yGIfRMFavk.roa (raw, json) Hash identifier: YWcaUnZyF4v63Z+q80bsmcp0EYHM/2zT4mYiTsuLjQU= Subject key identifier: A0:F2:8E:2C:AF:58:EE:20:A0:2C:3C:53:D7:21:88:7D:13:05:6A:F9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 167D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oPKOLK9Y7iCgLDxT1yGIfRMFavk.roa Signing time: Tue 31 Mar 2026 08:01:54 +0000 ROA not before: Tue 31 Mar 2026 08:01:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5757 (0x167d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A0F28E2CAF58EE20A02C3C53D721887D13056AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:28:ab:64:be:38:1f:b7:2b:e9:d6:3d:49: 3d:99:27:98:fb:b8:e3:c6:14:00:73:5b:8c:69:ee: 11:d1:b5:76:ae:9d:10:d4:74:0b:2b:7a:e0:98:db: ef:d7:0c:29:ed:3f:d8:15:a9:f5:c8:f9:28:e1:8f: 5f:e3:a4:2a:85:a6:48:32:54:9c:62:76:a3:31:25: 44:31:64:07:9a:9a:73:07:47:8b:46:9a:8e:7e:eb: e5:3a:17:22:a8:96:bf:a5:78:01:a6:70:ab:10:01: 36:d8:ba:66:4a:16:81:c3:74:6b:2d:82:56:cd:76: 70:54:4e:eb:c4:72:36:e8:b4:bd:f3:89:72:ad:44: fb:5d:e0:36:aa:f3:68:7d:ee:94:38:ef:d1:fe:60: d8:27:33:8a:8f:48:a3:70:ca:7b:bf:58:03:93:7b: 94:41:33:11:27:4a:cf:b5:aa:ff:68:c9:06:e0:f9: b3:4d:83:21:93:d2:f4:30:60:ec:f4:83:d1:c6:2f: e6:ac:71:85:73:87:d8:ea:6e:c6:da:07:db:23:25: c9:52:aa:df:4d:20:a5:db:cd:8e:96:4a:2f:47:64: 3f:10:40:a8:c2:5d:57:9a:b1:20:47:bf:a5:85:64: ab:f4:62:7d:d6:56:07:f4:be:2a:6d:0b:68:71:c6: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:8E:2C:AF:58:EE:20:A0:2C:3C:53:D7:21:88:7D:13:05:6A:F9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oPKOLK9Y7iCgLDxT1yGIfRMFavk.roa sbgp-ipAddrBlock: critical IPv4: 49.106.207.0/24 Signature Algorithm: sha256WithRSAEncryption 46:4f:af:c6:47:e2:8a:78:15:cc:7a:af:e5:06:bd:d1:5d:68: 89:54:12:b4:1a:0c:50:71:7c:70:1d:4c:0c:81:11:f2:3f:58: 1e:2d:30:a8:7e:6c:67:f3:b0:af:10:c0:36:64:35:33:65:0a: 4f:8d:18:bc:1d:be:2e:2c:9c:51:df:df:90:98:d5:49:a6:04: 0b:81:7f:e5:5a:4b:f1:c8:76:0e:c0:99:4d:12:22:7d:bf:56: fc:cb:a2:f7:90:8e:03:36:c1:91:c0:9a:b1:bc:d5:ce:61:25: 54:95:01:a0:cf:17:40:f1:96:36:12:41:dd:fa:0f:d6:ef:c1: 2e:17:12:59:2d:e8:a7:73:98:f5:15:94:b9:0e:bb:ae:86:95: 99:90:2d:55:45:8b:5a:a6:64:c9:02:8b:4f:6c:8d:f3:43:e8: 42:68:5f:32:a8:b8:61:91:67:91:8e:8c:11:0e:54:6d:af:1c: 03:5f:c2:46:43:37:0c:94:04:6c:e5:3c:77:14:bf:4c:14:37: 76:11:67:09:4c:6f:54:57:ff:ca:41:f7:81:69:91:4f:68:cc: 82:74:70:a5:61:aa:b3:75:37:d3:e1:00:2c:4b:a8:6a:33:74: 45:81:db:db:9c:5d:13:6d:fc:80:4a:15:4f:de:ab:7e:34:4b: cc:1a:90:c8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwRjI4RTJDQUY1OEVF MjBBMDJDM0M1M0Q3MjE4ODdEMTMwNTZBRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGgyirZL44H7cr6dY9ST2ZJ5j7uOPGFABzW4xp7hHRtXaunRDU dAsreuCY2+/XDCntP9gVqfXI+Sjhj1/jpCqFpkgyVJxidqMxJUQxZAeamnMHR4tG mo5+6+U6FyKolr+leAGmcKsQATbYumZKFoHDdGstglbNdnBUTuvEcjbotL3ziXKt RPtd4Daq82h97pQ479H+YNgnM4qPSKNwynu/WAOTe5RBMxEnSs+1qv9oyQbg+bNN gyGT0vQwYOz0g9HGL+ascYVzh9jqbsbaB9sjJclSqt9NIKXbzY6WSi9HZD8QQKjC XVeasSBHv6WFZKv0Yn3WVgf0viptC2hxxjlZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUoPKOLK9Y7iCgLDxT1yGIfRMFavkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L29QS09MSzlZN2lDZ0xEeFQxeUdJZlJNRmF2ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxas8wDQYJKoZIhvcNAQELBQADggEB AEZPr8ZH4op4Fcx6r+UGvdFdaIlUErQaDFBxfHAdTAyBEfI/WB4tMKh+bGfzsK8Q wDZkNTNlCk+NGLwdvi4snFHf35CY1UmmBAuBf+VaS/HIdg7AmU0SIn2/VvzLoveQ jgM2wZHAmrG81c5hJVSVAaDPF0DxljYSQd36D9bvwS4XElkt6KdzmPUVlLkOu66G lZmQLVVFi1qmZMkCi09sjfND6EJoXzKouGGRZ5GOjBEOVG2vHANfwkZDNwyUBGzl PHcUv0wUN3YRZwlMb1RX/8pB94FpkU9ozIJ0cKVhqrN1N9PhACxLqGozdEWB29uc XRNt/IBKFU/eq340S8wakMg= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:42 2026 by rpki-client