$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rKM2EMzhwq6hdePHUz2RY_Sqjg0.roa File: rKM2EMzhwq6hdePHUz2RY_Sqjg0.roa (raw, json) Hash identifier: 1izoqXt2ew0xh0EKE1K0Ex7DRCgDV8WKBMQZijrb/Bk= Subject key identifier: AC:A3:36:10:CC:E1:C2:AE:A1:75:E3:C7:53:3D:91:63:F4:AA:8E:0D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16E9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rKM2EMzhwq6hdePHUz2RY_Sqjg0.roa Signing time: Tue 31 Mar 2026 08:02:44 +0000 ROA not before: Tue 31 Mar 2026 08:02:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5865 (0x16e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=ACA33610CCE1C2AEA175E3C7533D9163F4AA8E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:9f:71:8d:17:9d:2a:10:5d:ad:76:0c:d4: 8c:df:1c:b2:46:e4:34:8b:e0:0f:73:63:f8:37:5a: 8e:57:c3:91:99:3b:3f:6d:1b:24:98:2f:db:d1:f4: fd:b1:d9:6f:64:e1:01:bd:72:52:8c:da:2a:9d:64: 25:17:76:19:29:ee:7f:d1:67:a5:bc:ab:74:fb:59: f1:2c:f4:6f:99:0e:15:d7:c7:76:1b:22:29:42:e3: a8:47:59:89:17:28:75:e0:2c:37:60:2c:85:06:26: 1e:a2:81:41:83:be:b9:ae:f7:03:eb:d9:d2:7c:4d: 1a:bd:49:9f:b5:2d:0f:1e:a7:ce:5f:7f:e1:0f:5b: 3e:9a:e0:6d:df:cf:77:cd:c4:6b:45:1f:0b:a5:ec: a9:30:90:0a:5a:f4:01:b4:99:29:36:e7:ac:c7:5c: 4b:9d:f4:7a:64:9d:ff:20:e6:03:81:a9:3e:22:e6: 37:82:33:84:3f:a3:db:0f:9d:53:1c:31:ef:a8:1d: 55:ed:8e:62:09:ca:4b:18:eb:e8:f0:5b:9c:6d:ec: 6b:00:a0:e0:3f:5a:5e:8a:0c:eb:d1:51:0b:09:2c: 58:c2:76:10:cb:9b:e4:cb:a4:c6:4c:a9:83:80:35: 15:29:40:6c:88:7a:0a:6f:8b:06:bc:fd:5a:b9:e3: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A3:36:10:CC:E1:C2:AE:A1:75:E3:C7:53:3D:91:63:F4:AA:8E:0D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rKM2EMzhwq6hdePHUz2RY_Sqjg0.roa sbgp-ipAddrBlock: critical IPv4: 49.106.240.0/21 Signature Algorithm: sha256WithRSAEncryption 61:78:b7:f0:8e:67:a2:6d:ad:ce:b3:31:93:7b:a4:ca:75:7f: 18:3a:26:a2:3a:ca:ed:14:ba:52:a0:9d:f8:93:56:93:78:a1: 8c:86:7e:b5:d0:d3:54:bf:d6:8d:41:19:a1:d8:fa:ef:35:77: 3d:6f:9c:ec:d9:e9:47:ca:54:ae:8d:0a:2c:26:a9:1f:7a:7a: 35:70:82:6a:c4:41:7a:f6:50:1f:b2:04:69:09:54:bf:4f:ee: cd:b9:8b:7e:67:c9:5d:33:f9:24:f3:3b:97:81:61:b6:16:db: 6f:c1:71:c0:08:da:a0:b4:6b:74:2e:8a:cb:4a:ac:16:9d:94: 48:cf:f3:de:b1:b1:f0:90:f0:92:3a:80:d3:6c:5f:82:48:3f: 74:43:fa:32:9c:d9:19:55:fe:43:5f:ac:5a:f9:c3:fe:8d:43: 2e:74:5f:5b:9b:97:54:0f:e1:0a:cd:ad:60:3a:ae:a8:91:59: 31:a1:82:e7:d2:8b:f1:cc:69:2f:33:b2:51:95:c5:95:ca:e2: 4b:94:01:46:33:4e:64:02:31:53:66:a2:76:5f:8c:ab:64:34: 0f:3e:cd:0a:e1:f8:ab:6a:c8:e4:61:29:d1:48:fe:ee:d8:a2: 9d:e2:6d:3d:87:75:17:a3:91:8d:2f:05:cd:a8:68:ee:ea:60: a6:71:fc:4b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDQTMzNjEwQ0NFMUMy QUVBMTc1RTNDNzUzM0Q5MTYzRjRBQThFMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0BJ9xjRedKhBdrXYM1IzfHLJG5DSL4A9zY/g3Wo5Xw5GZOz9t GySYL9vR9P2x2W9k4QG9clKM2iqdZCUXdhkp7n/RZ6W8q3T7WfEs9G+ZDhXXx3Yb IilC46hHWYkXKHXgLDdgLIUGJh6igUGDvrmu9wPr2dJ8TRq9SZ+1LQ8ep85ff+EP Wz6a4G3fz3fNxGtFHwul7KkwkApa9AG0mSk256zHXEud9Hpknf8g5gOBqT4i5jeC M4Q/o9sPnVMcMe+oHVXtjmIJyksY6+jwW5xt7GsAoOA/Wl6KDOvRUQsJLFjCdhDL m+TLpMZMqYOANRUpQGyIegpviwa8/Vq54+AZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUrKM2EMzhwq6hdePHUz2RY/Sqjg0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3JLTTJFTXpod3E2aGRlUEhVejJSWV9TcWpnMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxavAwDQYJKoZIhvcNAQELBQADggEB AGF4t/COZ6Jtrc6zMZN7pMp1fxg6JqI6yu0UulKgnfiTVpN4oYyGfrXQ01S/1o1B GaHY+u81dz1vnOzZ6UfKVK6NCiwmqR96ejVwgmrEQXr2UB+yBGkJVL9P7s25i35n yV0z+STzO5eBYbYW22/BccAI2qC0a3QuistKrBadlEjP896xsfCQ8JI6gNNsX4JI P3RD+jKc2RlV/kNfrFr5w/6NQy50X1ubl1QP4QrNrWA6rqiRWTGhgufSi/HMaS8z slGVxZXK4kuUAUYzTmQCMVNmonZfjKtkNA8+zQrh+KtqyORhKdFI/u7Yop3ibT2H dRejkY0vBc2oaO7qYKZx/Es= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:16 2026 by rpki-client