$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJGfrcK5GVxtuH2oKzqHNQ3g5gU.roa File: rJGfrcK5GVxtuH2oKzqHNQ3g5gU.roa (raw, json) Hash identifier: MqfGiMDeKKNsjIoagjpxdx7M30GEMnCP4lLsmmqwSnM= Subject key identifier: AC:91:9F:AD:C2:B9:19:5C:6D:B8:7D:A8:2B:3A:87:35:0D:E0:E6:05 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16A0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJGfrcK5GVxtuH2oKzqHNQ3g5gU.roa Signing time: Tue 31 Mar 2026 08:02:09 +0000 ROA not before: Tue 31 Mar 2026 08:02:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5792 (0x16a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AC919FADC2B9195C6DB87DA82B3A87350DE0E605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:fb:88:a2:23:fd:87:52:b7:91:94:3f:5b: 41:8b:38:40:3d:e5:51:bf:b4:1b:67:39:33:25:9b: ce:47:2c:96:06:c4:21:0d:8e:9b:99:bb:2e:6f:df: b5:c2:af:8c:26:4e:70:73:91:ea:18:33:34:6f:78: c5:91:58:4f:f3:f6:b7:83:8b:5d:8b:84:af:0b:42: 33:68:96:b4:7b:d9:57:4d:d0:fc:f5:ab:7d:aa:32: 59:d0:17:2c:ce:e5:3b:05:fa:a5:b3:86:96:96:a1: c7:68:6f:8b:a3:d9:2b:ad:cc:2d:50:c3:13:6a:34: 10:34:ca:78:a6:35:f2:57:68:2d:83:2d:73:b9:39: 54:82:8a:ee:93:e2:64:7d:a0:31:d5:47:10:0c:0c: a2:dc:55:e3:d6:6e:69:80:41:f9:0d:43:fc:57:24: bc:45:ef:6d:9e:a1:9f:ee:e3:8d:ad:63:bd:56:cc: 62:ba:30:90:79:c8:10:19:27:f8:e7:91:4c:29:67: 0c:e4:64:86:45:28:70:4b:09:6b:f2:11:23:48:8a: 17:44:19:3c:39:83:6b:35:dd:e8:0a:bc:66:3f:7f: 15:81:19:4a:97:08:55:c6:fb:34:df:99:4e:d2:7a: d0:be:30:7a:2c:37:d0:06:68:1f:87:ef:8f:e4:d5: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:91:9F:AD:C2:B9:19:5C:6D:B8:7D:A8:2B:3A:87:35:0D:E0:E6:05 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJGfrcK5GVxtuH2oKzqHNQ3g5gU.roa sbgp-ipAddrBlock: critical IPv4: 49.104.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:c4:28:ff:d0:4d:62:78:36:01:a0:73:b0:fe:8f:ed:19:2f: 72:b6:c5:da:53:85:73:b5:ed:7e:9a:8f:44:1d:dc:bf:fc:34: 05:08:98:18:53:6c:2f:4d:14:ef:58:25:12:0b:92:1a:6f:f4: 31:1d:4e:3b:62:f1:65:2b:63:f3:bc:21:61:6f:47:91:b5:9d: 0a:52:11:1c:5f:8c:fd:c6:e4:af:56:9a:77:23:c5:4d:9f:46: 4f:0a:34:c6:c9:a3:c1:8c:95:26:6a:bc:44:37:a0:66:87:64: ee:bf:ac:b9:2d:5c:5f:44:6b:40:6f:50:96:b7:a2:04:c8:f7: 52:33:08:8a:4a:3f:49:8a:77:e1:fc:2d:b4:fb:2c:2e:a7:8e: fe:b3:b3:48:39:a5:55:90:0f:12:fe:eb:51:3a:ff:aa:e4:ac: b2:21:8c:16:b8:ed:68:81:d9:0a:4e:f9:31:b2:b7:61:bf:de: ef:03:03:77:35:93:a5:6a:53:e6:37:c5:d8:e9:38:da:65:ea: db:26:3c:bb:58:0c:d9:b7:0a:ef:78:e6:1f:ed:50:73:5b:24: af:74:da:ec:d9:16:01:dc:ec:84:cb:3f:8a:65:e8:4e:2e:c5: 1a:84:1b:cc:c9:21:9c:0c:43:89:c7:bb:c0:cc:00:40:21:7c: ec:55:aa:1f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDOTE5RkFEQzJCOTE5 NUM2REI4N0RBODJCM0E4NzM1MERFMEU2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMnPuIoiP9h1K3kZQ/W0GLOEA95VG/tBtnOTMlm85HLJYGxCEN jpuZuy5v37XCr4wmTnBzkeoYMzRveMWRWE/z9reDi12LhK8LQjNolrR72VdN0Pz1 q32qMlnQFyzO5TsF+qWzhpaWocdob4uj2SutzC1QwxNqNBA0ynimNfJXaC2DLXO5 OVSCiu6T4mR9oDHVRxAMDKLcVePWbmmAQfkNQ/xXJLxF722eoZ/u442tY71WzGK6 MJB5yBAZJ/jnkUwpZwzkZIZFKHBLCWvyESNIihdEGTw5g2s13egKvGY/fxWBGUqX CFXG+zTfmU7SetC+MHosN9AGaB+H74/k1REVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUrJGfrcK5GVxtuH2oKzqHNQ3g5gUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3JKR2ZyY0s1R1Z4dHVIMm9LenFITlEzZzVnVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaAQwDQYJKoZIhvcNAQELBQADggEB AC7EKP/QTWJ4NgGgc7D+j+0ZL3K2xdpThXO17X6aj0Qd3L/8NAUImBhTbC9NFO9Y JRILkhpv9DEdTjti8WUrY/O8IWFvR5G1nQpSERxfjP3G5K9WmncjxU2fRk8KNMbJ o8GMlSZqvEQ3oGaHZO6/rLktXF9Ea0BvUJa3ogTI91IzCIpKP0mKd+H8LbT7LC6n jv6zs0g5pVWQDxL+61E6/6rkrLIhjBa47WiB2QpO+TGyt2G/3u8DA3c1k6VqU+Y3 xdjpONpl6tsmPLtYDNm3Cu945h/tUHNbJK902uzZFgHc7ITLP4pl6E4uxRqEG8zJ IZwMQ4nHu8DMAEAhfOxVqh8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:19 2026 by rpki-client