$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pkZW_mjBTcrVPnINw9gnojd0N2Y.roa File: pkZW_mjBTcrVPnINw9gnojd0N2Y.roa (raw, json) Hash identifier: 41DmwgdGjxb3v2gwt4rxZQH4H0bMGADfJ+2rqd+lOuA= Subject key identifier: A6:46:56:FE:68:C1:4D:CA:D5:3E:72:0D:C3:D8:27:A2:37:74:37:66 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1586 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pkZW_mjBTcrVPnINw9gnojd0N2Y.roa Signing time: Tue 31 Mar 2026 07:59:48 +0000 ROA not before: Tue 31 Mar 2026 07:59:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5510 (0x1586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A64656FE68C14DCAD53E720DC3D827A237743766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:3a:ca:54:e9:2a:4b:8b:ed:77:c9:ae:5b: fd:07:fb:52:c6:4a:04:af:19:a0:28:08:4b:e1:e9: 67:01:93:c6:5f:20:13:4a:d5:9d:38:a6:68:ef:4c: 75:4e:d9:93:9a:ea:a5:c6:58:ac:e9:54:e2:02:a2: 91:04:a7:a0:9f:f7:3b:c7:a3:46:0e:73:fb:a6:68: 41:c1:1d:22:92:99:f8:99:4a:e9:65:c7:ab:6f:5a: 34:d0:b3:0f:fa:b9:67:73:16:25:4c:8a:52:8c:1f: 1a:7f:4f:ac:ee:f4:7a:18:41:3e:ac:7a:a8:ad:72: 0f:1e:a9:90:f7:8d:7f:e6:f3:6c:4c:8b:e4:5e:83: 9c:8e:2b:e3:62:dc:9e:97:d2:2a:ce:61:31:73:3f: cf:3b:a3:5a:1b:a1:b8:1d:b7:02:5a:4c:a6:06:ca: 5f:68:46:53:1d:e4:b8:6c:9d:9d:26:8d:da:db:4d: cf:eb:48:67:b5:13:e7:f4:be:62:5f:a9:67:f4:9d: 5f:28:a9:34:97:37:0f:0e:02:68:76:72:7e:d6:0d: 16:da:03:ef:51:33:76:68:68:fd:ab:3d:5a:8e:5f: 59:46:8a:de:89:10:9d:3d:75:a6:e4:81:a9:f3:eb: 9e:c9:eb:65:9c:59:8e:4c:bc:18:c8:f7:c0:17:eb: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:56:FE:68:C1:4D:CA:D5:3E:72:0D:C3:D8:27:A2:37:74:37:66 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pkZW_mjBTcrVPnINw9gnojd0N2Y.roa sbgp-ipAddrBlock: critical IPv4: 49.108.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1c:15:09:6b:b0:d9:fc:99:af:00:28:b9:4e:5b:1d:b2:a1:4e: 2c:fa:cb:d5:4a:0f:45:7c:fc:49:01:9a:2c:d4:42:2a:58:fc: c7:24:ea:9a:0e:1d:d8:12:0a:5d:74:81:0c:44:2a:ec:1f:74: de:3e:0b:04:d6:71:d4:64:a4:96:7a:f3:3e:82:db:b5:b8:2c: b3:99:d7:2f:8f:f5:c3:7b:90:4c:e3:77:24:4e:41:ad:65:da: 76:e3:6f:bc:a4:58:26:68:56:7a:e2:c7:30:24:20:56:ec:5a: f5:44:ee:e5:c9:01:96:22:18:e3:7f:b2:95:11:ed:4c:7c:a3: 7d:cf:18:c8:74:0c:1f:f0:2c:7d:9d:f2:6c:d8:0e:02:1c:33: ae:f7:5a:9f:0d:8d:38:e1:63:0b:3d:6d:ff:e1:43:70:b0:58: b0:05:44:7a:fb:bd:23:c4:b5:6a:23:98:e5:5e:2e:85:f4:7a: ba:98:90:07:3e:72:16:1c:48:4d:58:04:b9:e0:a3:9e:6a:ae: 2d:ac:86:db:11:c9:93:20:30:54:87:93:af:08:55:21:92:2d: d0:33:b4:d8:58:99:a5:a9:65:5a:32:aa:75:4e:25:76:a5:b5: ea:b7:65:4b:5e:63:a7:bf:42:d2:14:f3:f8:84:f6:15:57:a6: 65:80:aa:1a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2NDY1NkZFNjhDMTRE Q0FENTNFNzIwREMzRDgyN0EyMzc3NDM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCUTrKVOkqS4vtd8muW/0H+1LGSgSvGaAoCEvh6WcBk8ZfIBNK 1Z04pmjvTHVO2ZOa6qXGWKzpVOICopEEp6Cf9zvHo0YOc/umaEHBHSKSmfiZSull x6tvWjTQsw/6uWdzFiVMilKMHxp/T6zu9HoYQT6seqitcg8eqZD3jX/m82xMi+Re g5yOK+Ni3J6X0irOYTFzP887o1obobgdtwJaTKYGyl9oRlMd5LhsnZ0mjdrbTc/r SGe1E+f0vmJfqWf0nV8oqTSXNw8OAmh2cn7WDRbaA+9RM3ZoaP2rPVqOX1lGit6J EJ09dabkganz657J62WcWY5MvBjI98AX67pJAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUpkZW/mjBTcrVPnINw9gnojd0N2YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3BrWldfbWpCVGNyVlBuSU53OWdub2pkME4yWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcxbAAwDQYJKoZIhvcNAQELBQADggEB ABwVCWuw2fyZrwAouU5bHbKhTiz6y9VKD0V8/EkBmizUQipY/Mck6poOHdgSCl10 gQxEKuwfdN4+CwTWcdRkpJZ68z6C27W4LLOZ1y+P9cN7kEzjdyROQa1l2nbjb7yk WCZoVnrixzAkIFbsWvVE7uXJAZYiGON/spUR7Ux8o33PGMh0DB/wLH2d8mzYDgIc M673Wp8NjTjhYws9bf/hQ3CwWLAFRHr7vSPEtWojmOVeLoX0erqYkAc+chYcSE1Y BLngo55qri2shtsRyZMgMFSHk68IVSGSLdAztNhYmaWpZVoyqnVOJXalteq3ZUte Y6e/QtIU8/iE9hVXpmWAqho= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:36 2026 by rpki-client