$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNiDqZN4S1YbIPwebX-B9SY1JsM.roa File: sNiDqZN4S1YbIPwebX-B9SY1JsM.roa (raw, json) Hash identifier: vveQqoTM9tg7gFESz9pPzIWwEfSrTxZFvyAehjDmRQQ= Subject key identifier: B0:D8:83:A9:93:78:4B:56:1B:20:FC:1E:6D:7F:81:F5:26:35:26:C3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 181E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNiDqZN4S1YbIPwebX-B9SY1JsM.roa Signing time: Tue 31 Mar 2026 08:05:18 +0000 ROA not before: Tue 31 Mar 2026 08:05:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6174 (0x181e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B0D883A993784B561B20FC1E6D7F81F5263526C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:34:b3:ab:0a:d4:c8:0d:c5:69:68:b8:9c: e0:27:7f:38:5e:db:5d:01:4a:71:25:ae:bc:a1:fa: fa:ce:98:57:d1:f7:11:20:f0:77:0e:09:0c:38:19: 46:b2:0d:bc:3d:16:93:56:1e:8c:a9:a8:c1:88:28: 8e:e7:53:ac:b7:1f:47:61:6a:38:0e:01:85:0b:75: 76:77:b3:60:75:01:e6:be:27:f7:8e:76:ab:14:43: d5:05:dc:c3:fd:ca:ec:40:e2:60:42:8d:4a:c3:b3: 48:a7:0e:14:eb:d3:2d:b9:20:24:b6:31:cd:e3:8e: 89:f8:c3:a5:02:ac:c7:25:5d:03:3f:be:29:96:41: 08:07:d9:b4:0a:d3:22:0d:51:b7:19:9a:02:27:60: 8e:38:dd:7c:bc:98:ec:94:d6:11:3c:64:5e:5e:4a: 55:2d:d5:bb:28:03:0a:ab:32:45:be:f4:a4:b3:7f: 5f:86:38:4f:e0:2c:df:1e:a0:96:f8:61:b3:76:98: 56:be:1f:26:88:9c:2d:fe:03:4c:d8:9c:9a:db:cc: 1c:44:7c:5d:3d:69:28:76:51:6e:bb:67:cb:e9:4b: ef:53:b0:c6:92:72:ba:d5:89:fa:26:01:b5:e6:ab: 84:94:12:26:da:eb:39:42:45:34:e2:c3:e2:e1:da: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D8:83:A9:93:78:4B:56:1B:20:FC:1E:6D:7F:81:F5:26:35:26:C3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNiDqZN4S1YbIPwebX-B9SY1JsM.roa sbgp-ipAddrBlock: critical IPv4: 220.210.30.0/24 Signature Algorithm: sha256WithRSAEncryption 27:46:0a:3a:cf:fb:57:3b:09:45:d1:6a:8f:f7:61:9c:f7:3e: c5:3a:75:c0:24:9b:e9:66:50:34:00:5c:4a:1d:a9:ce:61:65: 4c:e9:a1:a1:45:3e:38:62:d5:9f:b2:37:94:b2:b7:c8:55:94: 09:4c:03:18:dc:8e:95:c8:b9:2f:54:68:85:a2:bc:34:64:a7: 21:41:a2:cf:db:f4:43:f9:06:c6:4c:ce:9f:bc:c3:fa:8c:50: 1a:33:39:30:ab:85:89:96:0c:35:d0:29:6d:02:3e:3e:bc:1b: ba:80:d5:c1:82:68:f8:9a:01:2e:76:10:49:f8:33:62:04:b8: 82:a5:88:9d:ac:7b:4d:c6:90:5c:ec:ba:b1:7c:48:5f:bd:35: 12:aa:0a:b5:ef:85:01:de:7e:a5:41:77:c6:be:3e:1a:2a:bc: 79:97:61:9e:50:4c:75:1d:33:f6:34:67:f6:7b:6a:12:5d:5a: 4b:4a:bd:a3:f0:bd:c6:56:78:05:5d:7f:80:dc:96:11:b0:48: 25:15:18:a6:a5:1f:14:09:ae:dc:a2:0a:e5:df:01:b8:38:fd: e1:eb:f4:1c:e9:57:2e:c2:d1:c5:e0:fd:32:80:a3:e0:fd:4e: d7:74:51:79:9a:41:87:74:32:5e:a3:c5:f9:c9:67:e0:97:5f: cb:9f:c5:47 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIwRDg4M0E5OTM3ODRC NTYxQjIwRkMxRTZEN0Y4MUY1MjYzNTI2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJJDSzqwrUyA3FaWi4nOAnfzhe210BSnElrryh+vrOmFfR9xEg 8HcOCQw4GUayDbw9FpNWHoypqMGIKI7nU6y3H0dhajgOAYULdXZ3s2B1Aea+J/eO dqsUQ9UF3MP9yuxA4mBCjUrDs0inDhTr0y25ICS2Mc3jjon4w6UCrMclXQM/vimW QQgH2bQK0yINUbcZmgInYI443Xy8mOyU1hE8ZF5eSlUt1bsoAwqrMkW+9KSzf1+G OE/gLN8eoJb4YbN2mFa+HyaInC3+A0zYnJrbzBxEfF09aSh2UW67Z8vpS+9TsMaS crrVifomAbXmq4SUEiba6zlCRTTiw+Lh2mV9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUsNiDqZN4S1YbIPwebX+B9SY1JsMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3NOaURxWk40UzFZYklQd2ViWC1COVNZMUpzTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADc0h4wDQYJKoZIhvcNAQELBQADggEB ACdGCjrP+1c7CUXRao/3YZz3PsU6dcAkm+lmUDQAXEodqc5hZUzpoaFFPjhi1Z+y N5Syt8hVlAlMAxjcjpXIuS9UaIWivDRkpyFBos/b9EP5BsZMzp+8w/qMUBozOTCr hYmWDDXQKW0CPj68G7qA1cGCaPiaAS52EEn4M2IEuIKliJ2se03GkFzsurF8SF+9 NRKqCrXvhQHefqVBd8a+PhoqvHmXYZ5QTHUdM/Y0Z/Z7ahJdWktKvaPwvcZWeAVd f4DclhGwSCUVGKalHxQJrtyiCuXfAbg4/eHr9BzpVy7C0cXg/TKAo+D9Ttd0UXma QYd0Ml6jxfnJZ+CXX8ufxUc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:57 2026 by rpki-client