$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qbM2wG1U6wVD-5F6wDWkSOBRrJA.roa File: qbM2wG1U6wVD-5F6wDWkSOBRrJA.roa (raw, json) Hash identifier: eh6P3Eiswi+c1T1RTouwC9iDWVd+q5vc6QvDLYv37iw= Subject key identifier: A9:B3:36:C0:6D:54:EB:05:43:FB:91:7A:C0:35:A4:48:E0:51:AC:90 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 162F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qbM2wG1U6wVD-5F6wDWkSOBRrJA.roa Signing time: Tue 31 Mar 2026 08:01:20 +0000 ROA not before: Tue 31 Mar 2026 08:01:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5679 (0x162f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=A9B336C06D54EB0543FB917AC035A448E051AC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:c2:a3:7b:b8:01:64:86:c1:db:14:55:1f: 89:de:60:27:71:48:8a:8b:b4:a2:ff:99:72:5a:86: f0:02:f8:9e:5c:da:b1:f0:28:52:d4:28:9a:e1:af: 17:58:93:fc:03:62:f1:a8:14:6a:f0:7c:16:4e:9b: 7e:22:52:ea:e9:91:ff:3e:34:6a:e2:b4:89:4b:2d: af:a4:fb:a0:66:db:ce:c0:6e:f0:61:4f:71:85:97: 1b:70:cb:29:59:5d:29:41:4a:1a:16:94:03:f7:cf: 53:94:73:21:23:ae:00:7d:61:8e:d4:a0:f4:7b:10: 1e:5e:dd:96:70:e8:0f:21:33:27:43:66:83:91:9e: f3:cd:d2:8b:c7:f9:09:87:86:9a:38:73:81:49:fb: 7b:13:fb:67:82:f1:d9:93:43:19:e9:50:db:a6:da: 88:b3:d0:79:f8:80:ce:5e:fb:e3:9f:60:ee:7c:ac: ff:92:40:0e:8c:55:8b:36:e5:0c:09:2f:0a:ce:35: 7f:0d:c6:b5:5f:33:fd:7e:c1:a1:02:68:ba:d4:65: 2d:02:cb:ee:0a:12:a9:89:a7:d7:bf:8b:78:dd:20: 0e:a6:49:3c:9c:3a:b7:5b:31:31:13:cd:75:6b:f6: 5a:d7:b0:49:bd:8b:06:87:d8:4f:79:30:1e:26:67: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:36:C0:6D:54:EB:05:43:FB:91:7A:C0:35:A4:48:E0:51:AC:90 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qbM2wG1U6wVD-5F6wDWkSOBRrJA.roa sbgp-ipAddrBlock: critical IPv4: 49.106.214.0/24 Signature Algorithm: sha256WithRSAEncryption 85:af:6f:c0:b7:66:7a:c0:28:82:ff:02:9a:46:73:45:44:69: 31:69:42:f1:8f:a6:ec:0b:93:c7:86:23:16:33:bb:22:9d:52: a4:a5:37:b1:fb:c7:f4:1d:30:77:f9:1e:70:ce:95:0f:cb:ff: 79:11:7e:41:65:a9:88:68:ad:08:f6:bf:76:46:cd:cc:da:29: 09:bd:4a:03:e6:51:48:16:09:62:b6:7b:94:7a:03:5b:64:e7: 69:87:3d:a4:da:04:b9:fd:55:4c:ef:a1:7d:27:d1:f4:b7:75: d9:85:bd:6d:e4:1e:10:4b:00:ad:6c:28:dc:23:12:1b:ef:c1: 03:43:ce:b9:10:e3:0d:70:94:62:b6:ac:15:05:3c:3e:3e:6f: 39:87:58:62:5f:3a:18:18:90:5c:ab:0c:df:9d:9e:d4:15:43: 80:ed:20:61:73:35:b0:1a:a7:bb:a4:50:73:82:61:a9:f6:4b: 27:b8:73:d5:1d:96:07:7c:bd:b2:2d:5c:89:12:74:ea:a5:d5: b1:70:25:6f:84:ad:b0:39:6f:90:47:96:60:4f:ad:53:28:c7: 1d:8f:b4:7b:96:36:01:86:47:01:18:6a:d3:cb:da:37:8a:38: c0:fe:7c:61:9e:3e:16:8d:5e:33:de:13:6f:68:fd:aa:9d:90: 91:0d:a0:bf -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5QjMzNkMwNkQ1NEVC MDU0M0ZCOTE3QUMwMzVBNDQ4RTA1MUFDOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsEsKje7gBZIbB2xRVH4neYCdxSIqLtKL/mXJahvAC+J5c2rHw KFLUKJrhrxdYk/wDYvGoFGrwfBZOm34iUurpkf8+NGritIlLLa+k+6Bm287AbvBh T3GFlxtwyylZXSlBShoWlAP3z1OUcyEjrgB9YY7UoPR7EB5e3ZZw6A8hMydDZoOR nvPN0ovH+QmHhpo4c4FJ+3sT+2eC8dmTQxnpUNum2oiz0Hn4gM5e++OfYO58rP+S QA6MVYs25QwJLwrONX8NxrVfM/1+waECaLrUZS0Cy+4KEqmJp9e/i3jdIA6mSTyc OrdbMTETzXVr9lrXsEm9iwaH2E95MB4mZ32jAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUqbM2wG1U6wVD+5F6wDWkSOBRrJAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3FiTTJ3RzFVNndWRC01RjZ3RFdrU09CUnJKQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxatYwDQYJKoZIhvcNAQELBQADggEB AIWvb8C3ZnrAKIL/AppGc0VEaTFpQvGPpuwLk8eGIxYzuyKdUqSlN7H7x/QdMHf5 HnDOlQ/L/3kRfkFlqYhorQj2v3ZGzczaKQm9SgPmUUgWCWK2e5R6A1tk52mHPaTa BLn9VUzvoX0n0fS3ddmFvW3kHhBLAK1sKNwjEhvvwQNDzrkQ4w1wlGK2rBUFPD4+ bzmHWGJfOhgYkFyrDN+dntQVQ4DtIGFzNbAap7ukUHOCYan2Sye4c9Udlgd8vbIt XIkSdOql1bFwJW+ErbA5b5BHlmBPrVMoxx2PtHuWNgGGRwEYatPL2jeKOMD+fGGe PhaNXjPeE29o/aqdkJENoL8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:13 2026 by rpki-client