$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uj7T4IESgQnSGnHbNb00aUMgolM.roa File: uj7T4IESgQnSGnHbNb00aUMgolM.roa (raw, json) Hash identifier: v9XJ5yzSRLj+6nTBO9XhxaNlg/obQCBooUv1EOnnzKE= Subject key identifier: BA:3E:D3:E0:81:12:81:09:D2:1A:71:DB:35:BD:34:69:43:20:A2:53 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 159B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uj7T4IESgQnSGnHbNb00aUMgolM.roa Signing time: Tue 31 Mar 2026 07:59:58 +0000 ROA not before: Tue 31 Mar 2026 07:59:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5531 (0x159b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BA3ED3E081128109D21A71DB35BD34694320A253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:2e:b2:3b:27:1c:9b:fe:51:a0:96:97:00: 6c:a8:36:e5:67:b5:75:c8:92:0c:63:f4:85:17:88: 96:62:84:be:e8:b8:7c:34:b6:76:4d:7d:34:45:e8: ec:0f:58:6c:e8:af:50:1e:5f:85:64:26:d3:80:11: 42:eb:18:19:d6:c6:48:4a:26:d3:19:04:5e:8a:af: 60:48:33:1b:45:9b:18:40:eb:64:16:08:1f:41:32: 0c:d8:96:23:5b:bc:dd:5b:4a:be:65:65:a1:d5:da: 21:0d:e8:02:05:e2:f9:8a:f8:0b:66:24:62:b6:55: 5c:05:ba:4e:22:9c:75:92:d5:16:e7:3b:f8:91:44: 7f:77:ac:ee:c7:a9:13:cc:87:d6:1b:5d:77:d1:f4: 2c:03:7e:02:9e:f5:82:5f:8f:37:92:62:0f:84:aa: 6d:3e:05:d7:c0:db:88:88:fc:f2:28:13:be:1e:74: 5b:1f:e8:b0:12:6d:9b:e1:a0:be:19:e5:0c:d9:6d: 77:25:52:dc:94:c1:7d:dc:5d:c6:c4:31:2d:e7:14: 69:f2:0c:14:8f:96:75:fe:70:18:a3:c7:04:67:1d: 48:27:64:09:f9:9e:2d:ef:ea:9c:91:64:05:53:51: ee:71:ee:0b:12:fd:9f:5e:7e:ee:7f:84:06:23:c3: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:D3:E0:81:12:81:09:D2:1A:71:DB:35:BD:34:69:43:20:A2:53 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uj7T4IESgQnSGnHbNb00aUMgolM.roa sbgp-ipAddrBlock: critical IPv4: 49.106.188.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:7b:3c:5f:45:2e:a8:4a:7e:0d:3d:61:94:65:9d:19:9a:7d: 97:b6:bd:52:67:ec:5d:30:f9:9e:82:6b:cb:f9:da:cf:55:38: 9b:86:49:37:99:5d:9e:cd:34:e3:77:b3:d2:5e:c8:3d:fa:38: a6:75:38:cc:17:cf:78:cb:2e:cb:74:16:fc:eb:f1:b1:25:b8: d6:84:5d:43:f3:98:26:21:a9:f6:bd:45:a5:3a:43:27:b4:09: 50:85:e0:f6:4a:52:c2:31:7c:06:68:2d:25:4d:94:51:c4:14: 64:ce:ac:38:49:7a:c7:e6:70:ae:e3:07:eb:03:d1:29:3c:78: 8d:5b:5e:40:e7:13:8a:6a:60:d1:d7:a8:c6:84:0d:80:81:6d: 6b:34:31:c1:e1:d4:74:d9:15:c9:75:3a:d7:aa:ce:c2:51:7d: 5d:a7:6d:18:dd:46:ec:46:46:35:a7:e7:a1:be:62:c9:89:8c: 73:cf:79:99:44:09:5f:c0:2e:e3:01:2b:fd:ac:6d:71:80:4a: c4:71:dc:cc:54:0c:52:62:22:a8:eb:e5:e0:2d:32:22:72:1a: 06:33:68:6e:93:5a:91:1c:e8:1c:39:b8:87:32:a8:3f:98:ab: 9b:cc:fb:ee:a0:69:b2:c6:3d:7e:9d:88:eb:84:c3:a1:cc:b5: 9a:63:6b:cd -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJBM0VEM0UwODExMjgx MDlEMjFBNzFEQjM1QkQzNDY5NDMyMEEyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9qi6yOyccm/5RoJaXAGyoNuVntXXIkgxj9IUXiJZihL7ouHw0 tnZNfTRF6OwPWGzor1AeX4VkJtOAEULrGBnWxkhKJtMZBF6Kr2BIMxtFmxhA62QW CB9BMgzYliNbvN1bSr5lZaHV2iEN6AIF4vmK+AtmJGK2VVwFuk4inHWS1RbnO/iR RH93rO7HqRPMh9YbXXfR9CwDfgKe9YJfjzeSYg+Eqm0+BdfA24iI/PIoE74edFsf 6LASbZvhoL4Z5QzZbXclUtyUwX3cXcbEMS3nFGnyDBSPlnX+cBijxwRnHUgnZAn5 ni3v6pyRZAVTUe5x7gsS/Z9efu5/hAYjw1bBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUuj7T4IESgQnSGnHbNb00aUMgolMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3VqN1Q0SUVTZ1FuU0duSGJOYjAwYVVNZ29sTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExarwwDQYJKoZIhvcNAQELBQADggEB AH17PF9FLqhKfg09YZRlnRmafZe2vVJn7F0w+Z6Ca8v52s9VOJuGSTeZXZ7NNON3 s9JeyD36OKZ1OMwXz3jLLst0Fvzr8bEluNaEXUPzmCYhqfa9RaU6Qye0CVCF4PZK UsIxfAZoLSVNlFHEFGTOrDhJesfmcK7jB+sD0Sk8eI1bXkDnE4pqYNHXqMaEDYCB bWs0McHh1HTZFcl1OteqzsJRfV2nbRjdRuxGRjWn56G+YsmJjHPPeZlECV/ALuMB K/2sbXGASsRx3MxUDFJiIqjr5eAtMiJyGgYzaG6TWpEc6Bw5uIcyqD+Yq5vM++6g abLGPX6diOuEw6HMtZpja80= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:03 2026 by rpki-client