$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/owtU8yVgJnKq6QqAH0GEAzVkXV0.roa File: owtU8yVgJnKq6QqAH0GEAzVkXV0.roa (raw, json) Hash identifier: 8dGxHXTlTNcVFy3C+4WfKcFgd7nBCoeXKabGJuDy8gY= Subject key identifier: A3:0B:54:F3:25:60:26:72:AA:E9:0A:80:1F:41:84:03:35:64:5D:5D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14FC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/owtU8yVgJnKq6QqAH0GEAzVkXV0.roa Signing time: Tue 31 Mar 2026 07:58:41 +0000 ROA not before: Tue 31 Mar 2026 07:58:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5372 (0x14fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A30B54F325602672AAE90A801F41840335645D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:b3:7c:ad:1d:68:9a:0b:5e:b3:b3:98:46: f2:41:20:a6:d9:b6:0a:c3:6d:62:16:a0:16:41:f7: 6a:af:0f:4f:39:a6:bf:f9:12:48:e3:b2:b6:76:a5: 9a:ad:db:36:a2:a8:7e:0c:ef:a7:8b:1e:01:9d:02: 56:3e:6c:d9:3c:d0:d8:7b:19:fb:50:71:03:55:57: 18:ba:c2:4a:08:dd:ad:2f:d2:78:87:9e:16:ea:a6: ba:10:43:20:92:10:5b:a1:de:ec:91:45:53:a7:df: 2e:8f:d5:a0:54:94:75:0a:37:ad:40:19:3a:01:8d: 90:ff:df:1c:f8:0f:de:b5:f5:5e:4d:31:ef:1b:24: e6:88:5e:96:68:8f:53:f7:f8:13:3d:e3:18:8a:4c: cf:f7:73:c9:17:cd:62:ab:a8:84:1b:4a:ae:c5:e3: ad:39:87:b6:92:ab:a5:1a:1d:ad:c4:ed:2e:2d:7d: 15:aa:59:90:e4:7d:3b:0f:5b:95:2e:c4:c0:61:7b: 63:e2:25:3b:a8:76:92:d8:3c:ef:38:54:9f:67:28: 5a:d5:4b:28:5b:e2:66:de:08:a1:f7:0b:3e:e5:c7: 66:14:e4:a3:6d:ad:79:5a:33:13:d1:14:77:ed:70: 33:1a:85:62:70:e2:49:cc:c4:39:74:82:0e:b1:11: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0B:54:F3:25:60:26:72:AA:E9:0A:80:1F:41:84:03:35:64:5D:5D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/owtU8yVgJnKq6QqAH0GEAzVkXV0.roa sbgp-ipAddrBlock: critical IPv4: 49.108.240.0/23 Signature Algorithm: sha256WithRSAEncryption cf:52:61:f2:58:75:af:5c:ed:64:8c:b1:b7:48:b6:18:cb:1e: f8:a2:a6:ad:42:d7:7a:7e:1a:41:8e:0e:1a:ea:7f:66:1f:85: 2d:ac:83:74:cd:9d:80:08:63:59:61:3c:56:97:c2:55:3b:52: cd:05:71:92:06:e2:61:81:8e:70:22:23:e9:2a:c3:fa:b4:de: 0d:c6:15:6f:d8:b3:ee:c3:39:83:8f:92:15:13:6a:9d:fa:36: f3:a9:f1:24:aa:f3:61:d1:3b:33:71:01:7c:a3:90:a5:a9:ce: 9f:f6:0d:8a:7d:e5:da:ad:89:1f:5e:6d:0a:72:fb:89:80:90: fe:89:47:26:97:f3:ef:3d:70:b0:a8:f0:83:98:70:87:10:ec: c0:68:a3:e5:d9:5d:6e:09:ba:af:ad:93:d0:e7:e7:1d:d2:25: 48:8d:d1:96:da:fe:8c:4b:48:93:43:ee:0e:19:32:10:77:14: c3:0d:2a:ca:da:39:7e:c2:60:95:f7:fa:b9:07:50:54:be:ec: ad:07:06:6d:eb:c2:5f:e5:08:cf:6e:ac:99:c5:d3:1d:dc:7a: 25:7c:e5:4c:b2:5c:30:bf:8e:c6:7d:44:c4:e5:08:e5:6a:ce: 73:6a:7d:53:43:05:e7:0b:64:d3:ee:d7:3f:ab:34:59:78:81: 54:29:20:ef -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzMEI1NEYzMjU2MDI2 NzJBQUU5MEE4MDFGNDE4NDAzMzU2NDVENUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgorN8rR1omgtes7OYRvJBIKbZtgrDbWIWoBZB92qvD085pr/5 EkjjsrZ2pZqt2zaiqH4M76eLHgGdAlY+bNk80Nh7GftQcQNVVxi6wkoI3a0v0niH nhbqproQQyCSEFuh3uyRRVOn3y6P1aBUlHUKN61AGToBjZD/3xz4D9619V5NMe8b JOaIXpZoj1P3+BM94xiKTM/3c8kXzWKrqIQbSq7F4605h7aSq6UaHa3E7S4tfRWq WZDkfTsPW5UuxMBhe2PiJTuodpLYPO84VJ9nKFrVSyhb4mbeCKH3Cz7lx2YU5KNt rXlaMxPRFHftcDMahWJw4knMxDl0gg6xEU0jAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUowtU8yVgJnKq6QqAH0GEAzVkXV0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L293dFU4eVZnSm5LcTZRcUFIMEdFQXpWa1hWMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExbPAwDQYJKoZIhvcNAQELBQADggEB AM9SYfJYda9c7WSMsbdIthjLHviipq1C13p+GkGODhrqf2YfhS2sg3TNnYAIY1lh PFaXwlU7Us0FcZIG4mGBjnAiI+kqw/q03g3GFW/Ys+7DOYOPkhUTap36NvOp8SSq 82HROzNxAXyjkKWpzp/2DYp95dqtiR9ebQpy+4mAkP6JRyaX8+89cLCo8IOYcIcQ 7MBoo+XZXW4Juq+tk9Dn5x3SJUiN0Zba/oxLSJND7g4ZMhB3FMMNKsraOX7CYJX3 +rkHUFS+7K0HBm3rwl/lCM9urJnF0x3ceiV85UyyXDC/jsZ9RMTlCOVqznNqfVND BecLZNPu1z+rNFl4gVQpIO8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:29 2026 by rpki-client