$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q2k-UjhkPtQO4M-xCpfAx72ujvA.roa File: q2k-UjhkPtQO4M-xCpfAx72ujvA.roa (raw, json) Hash identifier: lDuGi7XfiuDKJGSBf+IHZHBrFsh1lFMV9qjHREFPd88= Subject key identifier: AB:69:3E:52:38:64:3E:D4:0E:E0:CF:B1:0A:97:C0:C7:BD:AE:8E:F0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q2k-UjhkPtQO4M-xCpfAx72ujvA.roa Signing time: Tue 31 Mar 2026 07:56:22 +0000 ROA not before: Tue 31 Mar 2026 07:56:22 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5071 (0x13cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:22 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AB693E5238643ED40EE0CFB10A97C0C7BDAE8EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:87:8d:cb:c6:1a:0d:2e:38:e6:99:4c:e8: 7e:88:92:3b:fb:b8:88:a6:42:d5:2d:7d:0f:ed:ac: 0b:22:40:be:b6:09:16:d2:3d:a3:8a:29:07:ea:f4: 0d:56:93:64:d3:45:83:9e:f4:01:40:45:1b:3e:b1: 06:dc:73:c9:58:d1:44:1f:3c:06:7c:85:d7:7d:33: 13:72:57:fb:5f:71:88:b9:ce:ff:d4:11:80:76:84: ed:81:e1:31:1b:2e:48:89:53:6b:4d:c4:8a:2c:f6: 3f:05:a7:73:0f:72:24:4f:b1:2c:dd:97:9a:7d:cc: a1:07:a5:91:8e:04:4c:fa:27:e3:59:be:5e:63:a9: 89:71:af:9d:95:5d:2f:6c:c3:98:f5:d5:60:7e:9a: dd:ac:d7:ac:1c:db:cc:93:10:47:10:0c:d9:ad:c6: 24:26:33:f1:7c:0c:8b:f6:94:23:01:98:0e:78:93: 3f:5f:c5:84:60:2c:32:66:0f:52:44:db:1d:04:e0: 55:e9:cd:32:4a:d1:99:0e:d7:72:45:42:c9:9e:f8: be:fc:a7:7a:bc:20:52:8f:6c:cd:0c:18:81:89:6b: 14:d7:60:dd:fa:10:f2:f9:c9:b4:4a:30:25:bd:c5: 08:25:cf:8d:71:59:5a:6d:18:3a:9b:99:d3:ae:d8: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:3E:52:38:64:3E:D4:0E:E0:CF:B1:0A:97:C0:C7:BD:AE:8E:F0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q2k-UjhkPtQO4M-xCpfAx72ujvA.roa sbgp-ipAddrBlock: critical IPv4: 49.96.32.0/23 Signature Algorithm: sha256WithRSAEncryption 02:76:4d:e0:94:ec:9c:3b:f0:02:6b:42:31:4e:3b:ef:63:f2: 30:03:79:31:bb:8b:80:49:2e:08:5d:5a:1c:c8:f9:31:6d:38: 62:8f:fa:19:ed:ee:3e:16:82:d8:20:13:39:c8:d4:a8:ef:f3: a3:b3:4e:85:4a:56:0f:44:64:d4:b5:1f:ec:5d:38:d8:23:68: 61:d8:c1:72:bd:b2:db:e4:40:4a:8e:86:e2:d3:cc:ba:a1:25: df:41:93:32:61:cb:21:41:c7:cd:f7:21:f1:6c:c3:62:3a:e0: 5b:24:b7:b7:8d:a0:25:e8:92:ff:bf:ff:01:f6:67:b4:c7:8b: f7:e5:bd:81:6c:f5:8d:5b:09:31:dd:4c:88:86:e2:d7:2a:c5: b2:a1:00:00:e7:11:ad:1d:45:74:36:c9:95:c6:10:4e:32:59: ab:78:81:70:1b:6a:f9:33:fa:e9:c3:a9:37:30:b9:05:53:e3: 80:5e:83:a3:88:97:12:99:23:7f:2d:d2:9d:a5:29:b6:72:8f: 87:b6:d9:8e:ad:d5:04:3b:fd:5d:63:9a:9e:e1:3d:38:7d:21: 23:8c:57:3e:a8:19:b4:7c:99:fb:02:6d:24:e3:74:32:75:d0: 81:31:62:e1:f3:96:12:7c:be:d4:40:25:ce:d0:d6:ef:f6:44: 43:b6:9c:ad -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCNjkzRTUyMzg2NDNF RDQwRUUwQ0ZCMTBBOTdDMEM3QkRBRThFRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZ8YeNy8YaDS445plM6H6Ikjv7uIimQtUtfQ/trAsiQL62CRbS PaOKKQfq9A1Wk2TTRYOe9AFARRs+sQbcc8lY0UQfPAZ8hdd9MxNyV/tfcYi5zv/U EYB2hO2B4TEbLkiJU2tNxIos9j8Fp3MPciRPsSzdl5p9zKEHpZGOBEz6J+NZvl5j qYlxr52VXS9sw5j11WB+mt2s16wc28yTEEcQDNmtxiQmM/F8DIv2lCMBmA54kz9f xYRgLDJmD1JE2x0E4FXpzTJK0ZkO13JFQsme+L78p3q8IFKPbM0MGIGJaxTXYN36 EPL5ybRKMCW9xQglz41xWVptGDqbmdOu2PLpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUq2k+UjhkPtQO4M+xCpfAx72ujvAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3Eyay1VamhrUHRRTzRNLXhDcGZBeDcydWp2QS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYCAwDQYJKoZIhvcNAQELBQADggEB AAJ2TeCU7Jw78AJrQjFOO+9j8jADeTG7i4BJLghdWhzI+TFtOGKP+hnt7j4Wgtgg EznI1Kjv86OzToVKVg9EZNS1H+xdONgjaGHYwXK9stvkQEqOhuLTzLqhJd9BkzJh yyFBx833IfFsw2I64Fskt7eNoCXokv+//wH2Z7THi/flvYFs9Y1bCTHdTIiG4tcq xbKhAADnEa0dRXQ2yZXGEE4yWat4gXAbavkz+unDqTcwuQVT44Beg6OIlxKZI38t 0p2lKbZyj4e22Y6t1QQ7/V1jmp7hPTh9ISOMVz6oGbR8mfsCbSTjdDJ10IExYuHz lhJ8vtRAJc7Q1u/2REO2nK0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:51 2026 by rpki-client