$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tSU6F2fDmPPbovWpT2AtHGx58Q4.roa File: tSU6F2fDmPPbovWpT2AtHGx58Q4.roa (raw, json) Hash identifier: DnA8409poC2hFu7OtGeJFSlj2OX2Bz3Z1CLV173Ivfw= Subject key identifier: B5:25:3A:17:67:C3:98:F3:DB:A2:F5:A9:4F:60:2D:1C:6C:79:F1:0E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1847 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tSU6F2fDmPPbovWpT2AtHGx58Q4.roa Signing time: Tue 31 Mar 2026 08:05:39 +0000 ROA not before: Tue 31 Mar 2026 08:05:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6215 (0x1847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B5253A1767C398F3DBA2F5A94F602D1C6C79F10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:8b:53:63:02:7d:c8:a5:ee:e8:38:c2:0b: 7f:1e:b0:37:b2:81:f6:85:80:19:98:1a:9d:3c:2c: a7:48:b4:c2:38:22:c7:9c:70:bf:c9:d2:3f:44:a2: 7a:5f:3b:0b:55:3e:3f:d6:8d:3a:dc:e4:a3:ce:a5: 5b:ba:bb:3e:9d:2b:6e:31:81:38:d6:b7:8b:b1:1e: 29:38:4d:55:89:23:a7:2d:4e:a6:94:e4:62:40:1d: 27:ed:b7:88:6a:29:28:74:ab:17:d5:97:3c:4c:3e: 3a:42:a0:ee:b2:25:16:f0:c9:78:6d:4a:2e:70:eb: 66:ba:41:32:57:0f:2d:4d:2e:c9:ad:8d:8a:8f:57: 65:42:5e:bf:83:b0:8d:be:56:49:8b:d0:b8:57:9e: 9e:7d:3b:d2:15:58:a1:75:36:75:49:7d:d2:d3:58: e2:64:aa:79:29:6d:73:1b:83:3e:38:72:1e:a4:3d: 1e:3f:44:c9:16:03:8c:35:1b:fd:84:b2:22:16:f5: ae:c5:ce:e8:e4:7b:59:d3:0e:a8:47:3e:11:cb:4c: f3:4d:f7:c2:17:8a:77:e7:9d:1f:3c:16:a1:7b:11: 88:cd:c5:f9:69:e8:5e:15:a3:b7:05:d6:64:3b:15: 75:ed:24:18:1d:7b:27:ad:fa:90:f0:77:43:6c:b8: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:25:3A:17:67:C3:98:F3:DB:A2:F5:A9:4F:60:2D:1C:6C:79:F1:0E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tSU6F2fDmPPbovWpT2AtHGx58Q4.roa sbgp-ipAddrBlock: critical IPv4: 49.97.193.0/24 Signature Algorithm: sha256WithRSAEncryption a2:57:63:71:e1:71:84:e4:ae:3a:5a:b5:a0:d8:5d:c6:67:1e: e4:69:b3:c2:c6:94:ad:2b:84:38:43:35:15:55:ca:2a:65:76: 8e:18:8e:04:1b:8b:42:d7:97:2d:c4:38:81:aa:90:0a:06:19: 56:ba:86:91:94:6a:64:52:87:a0:08:e4:e3:c2:8f:f9:33:e3: e5:25:32:5a:90:3f:97:2a:8b:80:05:cb:d4:7c:28:d2:2d:d4: c6:84:af:3f:60:e3:5e:c2:43:75:a6:bc:8c:fd:cd:a7:8a:64: ad:44:2f:3a:eb:60:7d:2e:e6:e8:95:06:1e:91:5c:05:c3:40: ac:f3:90:77:a8:0f:85:4c:c2:91:39:15:36:3f:ca:28:27:3f: a4:37:a7:07:2c:6a:e6:8f:62:d3:7f:70:3c:e6:4d:03:d2:42: 22:bb:26:c1:de:31:36:d5:bd:db:f8:ca:06:db:45:49:7e:15: a6:90:90:ce:26:4f:69:e8:12:a3:72:5b:49:2e:09:3c:d0:05: 84:7c:96:44:7e:d7:41:f9:49:61:bc:d8:88:0f:b0:11:89:8c: a0:d6:b8:1b:b2:e6:ea:28:4d:e2:77:a8:1d:c6:22:66:02:21: 9c:ef:f1:d2:96:8d:36:d5:7b:c5:ce:21:4c:51:0c:2e:6e:ae: 51:53:91:36 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI1MjUzQTE3NjdDMzk4 RjNEQkEyRjVBOTRGNjAyRDFDNkM3OUYxMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDqotTYwJ9yKXu6DjCC38esDeygfaFgBmYGp08LKdItMI4Isec cL/J0j9EonpfOwtVPj/WjTrc5KPOpVu6uz6dK24xgTjWt4uxHik4TVWJI6ctTqaU 5GJAHSftt4hqKSh0qxfVlzxMPjpCoO6yJRbwyXhtSi5w62a6QTJXDy1NLsmtjYqP V2VCXr+DsI2+VkmL0LhXnp59O9IVWKF1NnVJfdLTWOJkqnkpbXMbgz44ch6kPR4/ RMkWA4w1G/2EsiIW9a7Fzujke1nTDqhHPhHLTPNN98IXinfnnR88FqF7EYjNxflp 6F4Vo7cF1mQ7FXXtJBgdeyet+pDwd0NsuDwXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUtSU6F2fDmPPbovWpT2AtHGx58Q4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3RTVTZGMmZEbVBQYm92V3BUMkF0SEd4NThRNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYcEwDQYJKoZIhvcNAQELBQADggEB AKJXY3HhcYTkrjpataDYXcZnHuRps8LGlK0rhDhDNRVVyipldo4YjgQbi0LXly3E OIGqkAoGGVa6hpGUamRSh6AI5OPCj/kz4+UlMlqQP5cqi4AFy9R8KNIt1MaErz9g 417CQ3WmvIz9zaeKZK1ELzrrYH0u5uiVBh6RXAXDQKzzkHeoD4VMwpE5FTY/yign P6Q3pwcsauaPYtN/cDzmTQPSQiK7JsHeMTbVvdv4ygbbRUl+FaaQkM4mT2noEqNy W0kuCTzQBYR8lkR+10H5SWG82IgPsBGJjKDWuBuy5uooTeJ3qB3GImYCIZzv8dKW jTbVe8XOIUxRDC5urlFTkTY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:02 2026 by rpki-client