$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sYlXG2qyC0tU-AUyUYsE9NCnSzk.roa File: sYlXG2qyC0tU-AUyUYsE9NCnSzk.roa (raw, json) Hash identifier: s1RZBy+blewuqjijuD/+FtYUkpf7/jjlUgrbkUBXTaI= Subject key identifier: B1:89:57:1B:6A:B2:0B:4B:54:F8:05:32:51:8B:04:F4:D0:A7:4B:39 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1759 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sYlXG2qyC0tU-AUyUYsE9NCnSzk.roa Signing time: Tue 31 Mar 2026 08:03:38 +0000 ROA not before: Tue 31 Mar 2026 08:03:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5977 (0x1759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B189571B6AB20B4B54F80532518B04F4D0A74B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:67:21:4d:cf:5a:23:60:10:6d:67:b7:bd: 96:d1:81:9f:e6:bb:e2:e8:7b:80:c4:37:84:f4:ac: c8:d4:39:bf:d3:ef:a0:c5:a0:44:7a:ea:92:2d:ea: 5b:c6:10:70:45:f8:d3:46:4e:7f:a0:5d:15:97:93: 43:56:fc:a1:51:47:6b:49:1e:3b:71:b7:87:db:30: 13:2e:de:e6:f7:9b:99:49:b5:e5:ab:0d:c6:cd:56: 54:31:87:f0:07:77:6d:95:39:1c:b1:95:21:6e:0f: 49:10:28:b6:74:4d:4b:86:0c:a1:e9:dc:98:1a:12: ea:ad:00:f0:cd:85:6d:79:e8:72:14:c0:01:93:e1: 67:25:7b:c7:b1:94:00:09:fa:5a:15:fe:79:52:37: e5:65:a2:13:e3:cc:48:a7:4a:49:39:f6:d8:88:19: ba:dc:3a:d3:93:83:c1:fa:ae:e9:f0:ca:82:a8:a7: 96:3e:09:32:93:fe:c5:45:5d:f3:c5:43:a9:08:ce: 0f:25:f5:ff:04:17:b7:ef:19:60:4c:6a:94:27:6e: 0c:e1:ee:a0:6a:28:8a:d1:a9:9c:0a:59:d2:45:15: 29:be:d6:e9:bb:72:93:3c:be:34:99:24:75:ca:2a: c0:10:b6:33:62:05:43:d5:7e:69:60:37:a9:af:c6: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:89:57:1B:6A:B2:0B:4B:54:F8:05:32:51:8B:04:F4:D0:A7:4B:39 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sYlXG2qyC0tU-AUyUYsE9NCnSzk.roa sbgp-ipAddrBlock: critical IPv4: 49.108.241.0/24 Signature Algorithm: sha256WithRSAEncryption 52:34:63:8c:1f:57:9d:02:9d:ce:3d:14:9f:d8:6b:2f:a5:52: 66:42:88:37:8f:98:e3:d4:0e:d4:a3:bf:a8:1b:52:34:de:1d: d3:fd:cf:26:bf:90:bc:dd:85:88:f2:68:15:05:b4:5b:0f:b4: a2:26:9c:ae:6c:a9:a8:27:3e:3c:ee:05:e9:cc:3b:fd:65:ff: d0:06:db:15:99:ec:72:85:62:6f:0b:d9:9e:ab:c7:0d:50:87: 59:30:e8:46:c2:9a:83:bf:a6:3b:71:51:d3:29:84:da:4a:90: 05:d3:5c:0d:7a:b0:6a:9c:b5:ee:80:e0:f0:9f:d6:84:3f:7d: 07:34:15:77:3f:c2:03:0d:0f:2c:ee:7a:18:b0:2f:5a:42:53: 2f:aa:da:c7:4e:fa:ee:42:e0:c0:ec:10:c5:d1:87:fa:40:d5: 05:61:0f:d7:e8:92:22:4f:ec:16:38:17:25:3e:0d:95:5d:70: ad:bc:ad:5b:0f:30:3a:72:8e:9a:a3:c4:04:01:06:67:57:a4: 29:a8:77:8b:c8:a5:84:1c:bf:14:47:76:38:d6:97:7c:1e:d4: ee:c1:41:18:e7:16:0f:e4:d9:79:c1:35:e3:2e:88:14:84:75: 27:34:be:b5:f2:4c:11:13:01:68:d6:b1:71:97:c3:cc:57:03: f8:1f:a6:45 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxODk1NzFCNkFCMjBC NEI1NEY4MDUzMjUxOEIwNEY0RDBBNzRCMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJwmchTc9aI2AQbWe3vZbRgZ/mu+Loe4DEN4T0rMjUOb/T76DF oER66pIt6lvGEHBF+NNGTn+gXRWXk0NW/KFRR2tJHjtxt4fbMBMu3ub3m5lJteWr DcbNVlQxh/AHd22VORyxlSFuD0kQKLZ0TUuGDKHp3JgaEuqtAPDNhW156HIUwAGT 4Wcle8exlAAJ+loV/nlSN+VlohPjzEinSkk59tiIGbrcOtOTg8H6runwyoKop5Y+ CTKT/sVFXfPFQ6kIzg8l9f8EF7fvGWBMapQnbgzh7qBqKIrRqZwKWdJFFSm+1um7 cpM8vjSZJHXKKsAQtjNiBUPVfmlgN6mvxjhBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUsYlXG2qyC0tU+AUyUYsE9NCnSzkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3NZbFhHMnF5QzB0VS1BVXlVWXNFOU5DblN6ay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxbPEwDQYJKoZIhvcNAQELBQADggEB AFI0Y4wfV50Cnc49FJ/Yay+lUmZCiDePmOPUDtSjv6gbUjTeHdP9zya/kLzdhYjy aBUFtFsPtKImnK5sqagnPjzuBenMO/1l/9AG2xWZ7HKFYm8L2Z6rxw1Qh1kw6EbC moO/pjtxUdMphNpKkAXTXA16sGqcte6A4PCf1oQ/fQc0FXc/wgMNDyzuehiwL1pC Uy+q2sdO+u5C4MDsEMXRh/pA1QVhD9fokiJP7BY4FyU+DZVdcK28rVsPMDpyjpqj xAQBBmdXpCmod4vIpYQcvxRHdjjWl3we1O7BQRjnFg/k2XnBNeMuiBSEdSc0vrXy TBETAWjWsXGXw8xXA/gfpkU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:05 2026 by rpki-client