$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qgrx0d99tIEBrslOise6dPUbBbQ.roa File: qgrx0d99tIEBrslOise6dPUbBbQ.roa (raw, json) Hash identifier: 0hKu1XQtVdyK8PUy88KBlZ9XF1saGOEhB0bbZ6gSZV8= Subject key identifier: AA:0A:F1:D1:DF:7D:B4:81:01:AE:C9:4E:8A:C7:BA:74:F5:1B:05:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 164B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qgrx0d99tIEBrslOise6dPUbBbQ.roa Signing time: Tue 31 Mar 2026 08:01:32 +0000 ROA not before: Tue 31 Mar 2026 08:01:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5707 (0x164b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AA0AF1D1DF7DB48101AEC94E8AC7BA74F51B05B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:c4:17:e6:37:5a:07:01:6f:cb:ed:ed:bb: 52:27:88:00:f4:36:c7:8c:4f:c8:b1:39:13:21:d0: e6:f9:dd:3f:59:b8:8e:9b:32:79:de:62:13:88:07: 02:f4:ba:a2:6b:fd:7e:be:14:0a:5a:59:aa:b0:3f: 76:b7:9d:a8:f1:ac:93:f6:68:4f:22:b1:32:d3:fb: 25:78:e9:1f:6e:be:62:b5:6e:dd:78:b8:ae:bb:46: 24:e6:88:07:50:a7:32:02:44:b2:fc:ca:a4:a6:cf: cb:97:e1:c4:47:30:65:83:7d:ec:3f:b5:c4:46:50: 67:5b:17:08:e9:74:34:82:a8:ec:cf:61:7b:ab:8b: f9:6e:bb:09:5d:bc:ba:91:89:bc:d0:8f:99:63:5d: 1b:ec:2a:f3:68:41:cc:df:8f:be:a3:5f:eb:74:94: 63:e0:a3:81:07:74:c4:10:32:83:b8:35:bd:aa:72: c6:a5:96:1b:79:80:2c:7d:27:3f:34:a1:95:f8:63: 8a:4d:2a:37:ee:45:ba:53:24:83:0e:44:fd:9a:81: ab:2c:22:29:99:a6:ce:b9:e8:51:a2:f6:fe:17:c1: 84:92:6b:67:c4:99:c0:64:c9:71:95:f0:bb:ba:36: 39:20:cf:e6:1b:a4:27:41:ae:97:d5:98:9c:7b:55: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:F1:D1:DF:7D:B4:81:01:AE:C9:4E:8A:C7:BA:74:F5:1B:05:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qgrx0d99tIEBrslOise6dPUbBbQ.roa sbgp-ipAddrBlock: critical IPv4: 49.104.12.0/23 Signature Algorithm: sha256WithRSAEncryption 17:6c:f0:9a:ca:79:a7:fc:3f:58:22:85:87:7e:fa:6b:03:6a: 09:8b:15:07:60:3e:70:55:70:ca:4e:c3:c0:62:70:08:23:0c: 92:49:97:54:7b:08:6e:3d:30:af:7c:cc:65:87:04:b4:f2:ad: 5b:9a:9f:49:a9:bb:a2:bc:2e:2e:dd:20:96:c9:54:75:fb:9f: a6:6e:81:f8:c6:8c:98:0a:8b:aa:65:f3:23:7b:1f:44:b8:ef: 88:e2:e0:61:31:e3:26:4d:1c:d3:9e:ae:de:a7:14:03:bc:b2: 65:83:aa:67:ac:73:53:1b:83:2b:66:47:67:5b:76:af:70:cc: e0:17:ae:2b:ad:26:e9:79:eb:eb:96:3f:df:d2:8e:22:7a:57: 61:c7:c3:f2:01:31:28:7d:73:50:04:73:36:be:9b:4b:29:26: 72:82:6a:54:e5:cb:4e:6c:0f:f4:dc:63:d8:df:f4:27:f2:7f: 67:6b:2f:4b:aa:66:7a:f0:3d:47:92:60:aa:46:5a:78:8a:05: 40:96:7f:ee:ed:fb:27:fe:a7:32:04:09:22:d1:51:ad:6e:de: a4:90:b3:09:c8:58:53:d4:b3:c6:fc:ad:a5:de:f1:36:4c:84: f0:24:ee:1b:5e:d9:52:95:de:62:83:9e:9d:6d:4a:de:ea:92: 94:e9:12:19 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBMEFGMUQxREY3REI0 ODEwMUFFQzk0RThBQzdCQTc0RjUxQjA1QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCSN8QX5jdaBwFvy+3tu1IniAD0NseMT8ixORMh0Ob53T9ZuI6b MnneYhOIBwL0uqJr/X6+FApaWaqwP3a3najxrJP2aE8isTLT+yV46R9uvmK1bt14 uK67RiTmiAdQpzICRLL8yqSmz8uX4cRHMGWDfew/tcRGUGdbFwjpdDSCqOzPYXur i/luuwldvLqRibzQj5ljXRvsKvNoQczfj76jX+t0lGPgo4EHdMQQMoO4Nb2qcsal lht5gCx9Jz80oZX4Y4pNKjfuRbpTJIMORP2agassIimZps656FGi9v4XwYSSa2fE mcBkyXGV8Lu6Njkgz+YbpCdBrpfVmJx7VbRzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUqgrx0d99tIEBrslOise6dPUbBbQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3FncngwZDk5dElFQnJzbE9pc2U2ZFBVYkJiUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaAwwDQYJKoZIhvcNAQELBQADggEB ABds8JrKeaf8P1gihYd++msDagmLFQdgPnBVcMpOw8BicAgjDJJJl1R7CG49MK98 zGWHBLTyrVuan0mpu6K8Li7dIJbJVHX7n6ZugfjGjJgKi6pl8yN7H0S474ji4GEx 4yZNHNOert6nFAO8smWDqmesc1MbgytmR2dbdq9wzOAXriutJul56+uWP9/SjiJ6 V2HHw/IBMSh9c1AEcza+m0spJnKCalTly05sD/TcY9jf9Cfyf2drL0uqZnrwPUeS YKpGWniKBUCWf+7t+yf+pzIECSLRUa1u3qSQswnIWFPUs8b8raXe8TZMhPAk7hte 2VKV3mKDnp1tSt7qkpTpEhk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:09 2026 by rpki-client