$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s5lTVl01IlSVrZcIsU5gBPCU6gc.roa File: s5lTVl01IlSVrZcIsU5gBPCU6gc.roa (raw, json) Hash identifier: Vioflrya4UsjxfhEmQrgoyYTvQjOjMeQot/SVg9TMJs= Subject key identifier: B3:99:53:56:5D:35:22:54:95:AD:97:08:B1:4E:60:04:F0:94:EA:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 169A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s5lTVl01IlSVrZcIsU5gBPCU6gc.roa Signing time: Tue 31 Mar 2026 08:02:07 +0000 ROA not before: Tue 31 Mar 2026 08:02:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5786 (0x169a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B39953565D35225495AD9708B14E6004F094EA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:74:77:31:ef:c3:7b:fb:0c:fb:b2:c8:ec: 3f:53:91:6a:7a:5f:dd:16:d2:24:8e:14:0f:2b:bc: 46:8a:8b:ee:b6:c4:ae:ac:1b:82:ee:97:e8:00:70: 5c:0d:25:2f:5e:b4:35:6d:9f:bd:77:74:39:5d:12: d7:e0:86:26:f7:de:ff:e8:a6:88:5c:aa:be:76:72: 36:4e:15:27:a9:97:02:ea:98:8f:eb:3c:cf:23:aa: 8f:07:06:55:43:17:e6:3d:cc:40:05:f6:67:5f:d0: fa:a0:f0:8a:7f:cc:bc:7c:e9:5c:88:3f:3f:83:93: ae:cf:d7:d4:83:66:d7:ee:3b:bd:6d:c8:15:b0:4f: ba:7d:82:3f:5d:70:92:e7:a4:5a:be:b1:c3:f2:e0: 6e:da:94:91:98:b7:32:8d:d9:fa:e3:6e:b4:6c:a7: 94:f3:55:70:44:bc:2a:ff:c6:91:d9:28:57:93:49: d3:80:80:97:18:41:16:20:3c:94:38:5b:f2:3a:03: 29:10:75:48:7a:92:37:b2:3b:bf:fc:13:63:4a:cd: 86:4a:2f:d4:13:22:45:e6:6d:10:ac:8e:5b:91:86: c6:91:9a:8c:6c:be:49:96:84:f6:e7:80:be:0c:87: 2e:2b:01:df:fa:23:2f:05:70:33:91:0d:db:4d:98: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:99:53:56:5D:35:22:54:95:AD:97:08:B1:4E:60:04:F0:94:EA:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s5lTVl01IlSVrZcIsU5gBPCU6gc.roa sbgp-ipAddrBlock: critical IPv4: 49.104.16.0/22 Signature Algorithm: sha256WithRSAEncryption 54:3e:7b:f5:51:04:9c:4c:72:4a:95:9b:b9:2a:69:f1:da:c8: 56:64:6f:01:dd:92:6d:d1:57:ee:4c:53:1d:e4:b5:54:ae:20: 7b:ca:63:b4:3b:e6:37:b1:d3:5b:81:c5:14:59:e7:c9:1b:c9: 06:28:95:74:6b:5a:03:e4:1f:63:44:5f:27:2e:c1:21:81:1a: 13:88:6f:b9:90:ab:08:a5:e2:b6:f9:13:dd:89:f3:5a:31:55: 24:a5:72:84:07:1a:72:6e:12:71:61:da:f1:47:79:1c:a2:12: 81:e6:bc:9a:e9:d2:6c:d8:86:a7:ab:36:0a:d2:58:f4:75:68: 15:63:d1:f6:08:f3:8f:d6:47:ac:cb:19:ce:f4:32:c9:01:aa: a7:a4:0c:7e:44:ea:80:ba:2d:03:94:bc:3f:c5:09:7b:40:07: 44:1c:65:66:a6:76:64:3a:89:38:3d:91:68:3f:24:ff:59:09: a0:5b:f5:98:ca:49:94:5d:dd:5e:b6:7a:75:52:9e:87:cb:0b: 5b:cf:e7:9c:74:8d:38:51:ef:71:51:75:4a:a2:96:1e:35:97: f8:c8:9d:00:fc:4f:19:3c:12:38:f2:35:9c:2f:bf:cb:1e:de: 17:2d:77:84:fa:21:d4:f5:a8:84:41:61:b7:c0:35:dd:1d:71: 93:4b:56:8c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIzOTk1MzU2NUQzNTIy NTQ5NUFEOTcwOEIxNEU2MDA0RjA5NEVBMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiKHR3Me/De/sM+7LI7D9TkWp6X90W0iSOFA8rvEaKi+62xK6s G4Lul+gAcFwNJS9etDVtn713dDldEtfghib33v/opohcqr52cjZOFSeplwLqmI/r PM8jqo8HBlVDF+Y9zEAF9mdf0Pqg8Ip/zLx86VyIPz+Dk67P19SDZtfuO71tyBWw T7p9gj9dcJLnpFq+scPy4G7alJGYtzKN2frjbrRsp5TzVXBEvCr/xpHZKFeTSdOA gJcYQRYgPJQ4W/I6AykQdUh6kjeyO7/8E2NKzYZKL9QTIkXmbRCsjluRhsaRmoxs vkmWhPbngL4Mhy4rAd/6Iy8FcDORDdtNmE9DAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUs5lTVl01IlSVrZcIsU5gBPCU6gcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3M1bFRWbDAxSWxTVnJaY0lzVTVnQlBDVTZnYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaBAwDQYJKoZIhvcNAQELBQADggEB AFQ+e/VRBJxMckqVm7kqafHayFZkbwHdkm3RV+5MUx3ktVSuIHvKY7Q75jex01uB xRRZ58kbyQYolXRrWgPkH2NEXycuwSGBGhOIb7mQqwil4rb5E92J81oxVSSlcoQH GnJuEnFh2vFHeRyiEoHmvJrp0mzYhqerNgrSWPR1aBVj0fYI84/WR6zLGc70MskB qqekDH5E6oC6LQOUvD/FCXtAB0QcZWamdmQ6iTg9kWg/JP9ZCaBb9ZjKSZRd3V62 enVSnofLC1vP55x0jThR73FRdUqilh41l/jInQD8Txk8EjjyNZwvv8se3hctd4T6 IdT1qIRBYbfANd0dcZNLVow= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:46 2026 by rpki-client