$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vWRc-fxPmyQqrGH-iRUlm6_TO7c.roa File: vWRc-fxPmyQqrGH-iRUlm6_TO7c.roa (raw, json) Hash identifier: WJFyU1Z+RC78Sn7boILszxcGpzNTkyPwW4POe8Th+po= Subject key identifier: BD:64:5C:F9:FC:4F:9B:24:2A:AC:61:FE:89:15:25:9B:AF:D3:3B:B7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15DB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vWRc-fxPmyQqrGH-iRUlm6_TO7c.roa Signing time: Tue 31 Mar 2026 08:00:33 +0000 ROA not before: Tue 31 Mar 2026 08:00:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5595 (0x15db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BD645CF9FC4F9B242AAC61FE8915259BAFD33BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:70:4a:8f:40:8d:4e:a3:8d:44:44:7b:aa:68: 18:59:da:f4:4b:85:09:f8:b3:18:81:b1:74:b3:fd: 63:c3:35:f8:a6:7a:33:f7:72:63:54:80:f7:08:58: 39:32:63:9f:d9:a9:cc:a4:06:ef:67:df:ca:4c:9f: 86:8b:20:b2:a2:8e:1c:fb:4f:69:b5:89:cf:ff:27: 3b:c5:28:ab:6b:9c:4b:34:5b:ab:90:a3:22:08:8f: 32:2f:35:8b:54:3a:46:b2:77:38:0d:f4:f8:a5:2e: 9a:e0:24:69:df:70:00:03:5a:73:02:7b:39:56:05: f8:76:b1:b3:5d:5f:18:79:f1:ac:7b:a9:4f:45:b4: bc:5b:21:92:fd:ea:59:a0:e2:6b:7b:51:3e:61:2d: 01:b2:d7:30:26:5a:59:35:33:86:60:34:e4:cc:2b: a2:ca:e6:ba:d7:22:95:0e:61:e2:fc:21:78:1d:61: ee:2a:7d:2c:42:4e:01:fa:89:92:3a:7d:1b:f8:ee: 39:9e:04:8c:80:66:15:6e:b9:ce:07:f5:fd:03:2c: 3c:48:64:bd:cf:dc:b8:c2:33:99:e7:61:de:7d:48: f9:25:14:a3:e6:59:4e:46:76:27:73:a4:5a:ba:25: 28:47:c3:c9:55:ab:c2:e8:e7:e6:8d:a5:7f:86:d8: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:5C:F9:FC:4F:9B:24:2A:AC:61:FE:89:15:25:9B:AF:D3:3B:B7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vWRc-fxPmyQqrGH-iRUlm6_TO7c.roa sbgp-ipAddrBlock: critical IPv4: 49.96.29.0/24 Signature Algorithm: sha256WithRSAEncryption d6:7c:94:5e:49:5e:8b:54:94:10:4c:47:de:02:e6:db:1b:70: 5d:7f:0a:fc:45:fc:86:38:87:5c:57:45:a6:9b:e6:52:88:b1: e4:6e:27:b6:a5:b4:f8:2b:20:25:74:31:94:e5:54:e5:8c:62: 33:bd:d9:8a:40:56:4b:f0:a6:ad:3f:ba:c8:6f:6b:23:46:e2: d6:b5:3b:2f:3e:ab:f2:c3:90:d6:25:ea:91:e1:91:e7:95:9f: e7:c9:71:50:aa:ab:e1:51:20:bb:38:52:ac:05:4b:62:75:74: d7:96:2a:b5:14:b4:4c:b1:04:64:5c:0f:d4:bb:e5:a8:68:1b: ca:69:64:62:c5:a7:22:2c:5c:4f:15:a0:32:c6:81:2a:6e:b5: 4f:63:2f:1e:37:78:f0:94:3e:51:b8:3a:21:e0:04:69:8d:f8: c2:a2:a7:05:f0:20:83:41:9e:94:56:7b:e2:02:bf:58:a5:ad: ca:4c:52:2e:fc:4c:96:d0:92:83:5c:9a:68:6d:2d:3f:c6:ea: 1b:db:1e:76:ab:02:3b:06:27:5f:b1:4b:54:b9:70:ed:6c:c9: 97:dc:8c:b3:cd:0b:82:2e:a7:ed:23:fa:64:61:0a:aa:11:94: 14:dd:62:fe:df:bf:4c:89:26:a1:3b:f7:59:1c:05:e1:8d:60: 78:15:d0:d7 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJENjQ1Q0Y5RkM0RjlC MjQyQUFDNjFGRTg5MTUyNTlCQUZEMzNCQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3cEqPQI1Oo41ERHuqaBhZ2vRLhQn4sxiBsXSz/WPDNfimejP3 cmNUgPcIWDkyY5/ZqcykBu9n38pMn4aLILKijhz7T2m1ic//JzvFKKtrnEs0W6uQ oyIIjzIvNYtUOkaydzgN9PilLprgJGnfcAADWnMCezlWBfh2sbNdXxh58ax7qU9F tLxbIZL96lmg4mt7UT5hLQGy1zAmWlk1M4ZgNOTMK6LK5rrXIpUOYeL8IXgdYe4q fSxCTgH6iZI6fRv47jmeBIyAZhVuuc4H9f0DLDxIZL3P3LjCM5nnYd59SPklFKPm WU5GdidzpFq6JShHw8lVq8Lo5+aNpX+G2MQbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvWRc+fxPmyQqrGH+iRUlm6/TO7cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ZXUmMtZnhQbXlRcXJHSC1pUlVsbTZfVE83Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYB0wDQYJKoZIhvcNAQELBQADggEB ANZ8lF5JXotUlBBMR94C5tsbcF1/CvxF/IY4h1xXRaab5lKIseRuJ7altPgrICV0 MZTlVOWMYjO92YpAVkvwpq0/ushvayNG4ta1Oy8+q/LDkNYl6pHhkeeVn+fJcVCq q+FRILs4UqwFS2J1dNeWKrUUtEyxBGRcD9S75ahoG8ppZGLFpyIsXE8VoDLGgSpu tU9jLx43ePCUPlG4OiHgBGmN+MKipwXwIINBnpRWe+ICv1ilrcpMUi78TJbQkoNc mmhtLT/G6hvbHnarAjsGJ1+xS1S5cO1syZfcjLPNC4Iup+0j+mRhCqoRlBTdYv7f v0yJJqE791kcBeGNYHgV0Nc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:39 2026 by rpki-client