$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/psH-atnJFkjdNEF9KImcJYeDou8.roa File: psH-atnJFkjdNEF9KImcJYeDou8.roa (raw, json) Hash identifier: QEXiDIBsynLvmBf8IlA/U8xLIS7ObpCWpw0K4FoUTQo= Subject key identifier: A6:C1:FE:6A:D9:C9:16:48:DD:34:41:7D:28:89:9C:25:87:83:A2:EF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17D0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/psH-atnJFkjdNEF9KImcJYeDou8.roa Signing time: Tue 31 Mar 2026 08:04:36 +0000 ROA not before: Tue 31 Mar 2026 08:04:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6096 (0x17d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A6C1FE6AD9C91648DD34417D28899C258783A2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:b7:74:e4:3f:1c:c3:11:39:a4:42:81:93: 2e:d1:3c:0b:b5:16:f9:46:fd:05:70:99:ed:b5:8f: 06:b5:05:9f:55:68:8d:f7:c5:e8:2f:a9:f0:48:0c: bf:08:1b:ec:97:a9:92:f8:9c:be:9a:8f:42:7c:65: f9:da:51:08:ef:a6:f0:1e:71:29:2c:6f:d8:1f:c6: 4a:47:5f:7e:69:6f:c9:33:be:62:b4:9a:a6:61:d6: 9b:6d:2f:9b:2a:33:ff:1a:af:72:2c:70:ac:2b:23: 7d:3b:ab:b8:02:34:1c:e5:ec:49:a7:7c:38:c2:38: c7:42:48:7b:38:b3:e4:bb:54:b3:ee:fc:73:73:03: 0d:8d:58:5f:d5:2f:68:41:70:dc:9e:49:15:b5:85: 6b:d6:c8:35:7f:d7:41:f4:2b:54:8d:2e:16:a8:a1: 43:bd:9d:9d:dd:e5:d3:6b:7e:02:cb:f9:f3:f2:a2: b4:ef:83:1f:d4:b4:99:d7:38:02:28:ee:f4:2a:6e: 59:28:95:89:e9:cf:a5:7a:ce:9e:f9:64:14:9a:7e: ee:d9:2d:6a:8f:fb:a8:ba:f0:72:90:05:d7:f9:0c: d0:cd:85:d3:6a:92:75:19:a5:6b:33:af:df:fd:52: 8a:3d:34:7d:7b:cf:6a:fd:de:37:73:c2:7f:43:c3: 9c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:FE:6A:D9:C9:16:48:DD:34:41:7D:28:89:9C:25:87:83:A2:EF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/psH-atnJFkjdNEF9KImcJYeDou8.roa sbgp-ipAddrBlock: critical IPv4: 49.108.208.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:89:ef:f4:64:80:38:3d:33:93:ed:4e:f5:40:43:36:a3:40: 25:61:02:3e:33:51:32:70:9b:4f:85:17:0c:28:63:c6:29:9a: 38:f7:3c:f5:b1:6f:16:e4:9f:26:17:fa:cb:7e:10:46:dd:e0: ed:89:72:be:4f:c1:93:75:8f:8e:ba:3b:6c:c2:99:09:aa:89: 27:27:16:8e:70:10:1e:23:e7:08:de:e5:6f:98:59:8e:9b:b4: 37:55:94:66:31:ca:d9:58:98:ca:11:1a:68:36:89:69:c6:fe: 73:b3:f3:1d:8f:4c:e7:7c:0f:05:92:f7:33:05:50:5c:d5:35: e0:2e:a5:2e:ea:39:35:13:81:18:4e:80:7f:80:f0:b3:c9:fb: 20:06:03:be:1c:f7:c7:e7:25:3d:7a:80:5c:d7:5c:80:f4:b3: 2f:04:e6:e9:2d:a2:db:6d:dd:30:c2:dd:ea:d1:98:3c:9f:d9: cb:5a:ba:5a:36:5c:74:00:ff:2d:79:c6:c4:85:be:33:9e:8d: b5:d6:50:bc:4e:a2:2e:9f:eb:b3:3f:2b:05:36:7f:d4:56:74: ad:29:58:91:93:2a:00:ec:f7:b9:96:35:76:2c:26:91:f9:93: e2:b9:73:79:03:14:5b:bb:dc:89:31:64:a4:2d:b9:5a:f7:df: e3:df:1b:e3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2QzFGRTZBRDlDOTE2 NDhERDM0NDE3RDI4ODk5QzI1ODc4M0EyRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH9Ld05D8cwxE5pEKBky7RPAu1FvlG/QVwme21jwa1BZ9VaI33 xegvqfBIDL8IG+yXqZL4nL6aj0J8ZfnaUQjvpvAecSksb9gfxkpHX35pb8kzvmK0 mqZh1pttL5sqM/8ar3IscKwrI307q7gCNBzl7EmnfDjCOMdCSHs4s+S7VLPu/HNz Aw2NWF/VL2hBcNyeSRW1hWvWyDV/10H0K1SNLhaooUO9nZ3d5dNrfgLL+fPyorTv gx/UtJnXOAIo7vQqblkolYnpz6V6zp75ZBSafu7ZLWqP+6i68HKQBdf5DNDNhdNq knUZpWszr9/9Uoo9NH17z2r93jdzwn9Dw5zdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUpsH+atnJFkjdNEF9KImcJYeDou8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3BzSC1hdG5KRmtqZE5FRjlLSW1jSlllRG91OC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxbNAwDQYJKoZIhvcNAQELBQADggEB AEqJ7/RkgDg9M5PtTvVAQzajQCVhAj4zUTJwm0+FFwwoY8Ypmjj3PPWxbxbknyYX +st+EEbd4O2Jcr5PwZN1j466O2zCmQmqiScnFo5wEB4j5wje5W+YWY6btDdVlGYx ytlYmMoRGmg2iWnG/nOz8x2PTOd8DwWS9zMFUFzVNeAupS7qOTUTgRhOgH+A8LPJ +yAGA74c98fnJT16gFzXXID0sy8E5uktottt3TDC3erRmDyf2ctaulo2XHQA/y15 xsSFvjOejbXWULxOoi6f67M/KwU2f9RWdK0pWJGTKgDs97mWNXYsJpH5k+K5c3kD FFu73IkxZKQtuVr33+PfG+M= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:10 2026 by rpki-client