$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vut2HTvCakPqWO7hLb430PSUz3Y.roa File: vut2HTvCakPqWO7hLb430PSUz3Y.roa (raw, json) Hash identifier: FKIYSzPCS3n2Zz7rEPH9Fo65td6mW7zlli/ZBG3k92o= Subject key identifier: BE:EB:76:1D:3B:C2:6A:43:EA:58:EE:E1:2D:BE:37:D0:F4:94:CF:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15ED Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vut2HTvCakPqWO7hLb430PSUz3Y.roa Signing time: Tue 31 Mar 2026 08:00:43 +0000 ROA not before: Tue 31 Mar 2026 08:00:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5613 (0x15ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BEEB761D3BC26A43EA58EEE12DBE37D0F494CF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:05:05:e0:15:0a:e0:3f:4d:9e:95:bc:f1: cc:42:33:22:17:e2:b5:02:47:f1:2c:15:4b:7b:ff: a9:52:fc:02:60:7a:ba:90:03:d2:3d:f3:90:d5:f3: 2a:e1:99:fb:9a:2b:42:ff:67:09:62:0f:5d:b5:5c: f3:50:3d:94:2a:00:0d:90:93:7c:e6:f3:80:a4:d0: c3:23:c4:9d:df:9d:69:66:f1:44:4e:f8:a9:bc:41: ca:ef:28:4b:df:51:5d:58:91:43:6f:57:dc:97:af: 99:7a:f2:a5:00:28:61:5e:3c:c4:72:d1:1e:16:31: 5c:74:49:ba:47:b1:06:21:58:e4:c1:3d:1c:6a:d8: 97:a2:ea:5f:fe:f0:1f:21:34:20:98:98:56:bd:07: 03:7e:44:6b:58:b5:37:e7:83:45:14:75:e6:9b:cf: 23:e8:6b:64:9f:bb:c3:ca:56:d5:fc:b3:67:47:9e: 41:cb:e6:6b:0f:7e:76:b3:1f:31:ef:3c:bf:63:24: 75:93:94:2c:cf:1d:c8:9c:28:4b:85:7e:0d:f6:2b: 97:8b:cc:89:aa:22:d4:4d:4a:2b:a3:69:02:fb:f4: ca:f8:ad:b3:02:69:47:c2:35:89:d1:70:b4:4d:f1: cf:69:81:dc:8a:7b:43:bc:f7:00:89:8e:e8:ea:58: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EB:76:1D:3B:C2:6A:43:EA:58:EE:E1:2D:BE:37:D0:F4:94:CF:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vut2HTvCakPqWO7hLb430PSUz3Y.roa sbgp-ipAddrBlock: critical IPv4: 49.96.10.0/23 Signature Algorithm: sha256WithRSAEncryption b3:6c:31:01:fb:71:86:38:69:6b:b0:d5:2e:2a:50:92:bf:85: f2:e4:bc:d3:87:d4:4a:04:9f:2d:7c:08:ba:66:12:e4:2b:be: d3:e4:fa:5a:f0:1f:06:68:fb:bd:2b:d6:35:09:08:9f:55:6b: c1:eb:a4:a3:cf:35:09:24:41:85:ed:aa:95:e5:c9:16:7b:f6: 55:24:c1:fa:eb:34:8d:4c:09:eb:87:3f:38:7d:f3:2a:e7:2d: 41:c8:eb:e1:9e:7c:2a:e8:54:e1:e6:32:8c:18:4f:f8:f0:0d: 4e:43:9c:a6:eb:23:2a:3d:06:00:0c:f0:43:c7:17:d0:0a:fb: 97:7e:10:82:06:bb:ec:d8:a7:de:fb:ff:a6:54:4a:ff:83:29: 38:25:2f:05:33:25:64:55:b9:3a:c3:4d:fb:6a:b6:d9:d2:7e: da:bf:6c:3f:16:62:05:1a:69:64:99:55:e1:f4:dc:90:fe:2f: b0:02:9f:81:77:a3:51:1e:d7:a3:ad:3b:c4:d0:4e:4e:17:7d: 00:b5:23:d0:a0:fc:b1:43:2d:75:3c:26:28:f7:c2:5d:4b:2b: 27:62:48:22:c1:3f:f8:ed:27:b7:00:09:71:67:01:e9:17:d5: 41:6f:cb:b3:13:c1:8d:37:79:8e:d2:08:b2:e6:eb:c9:4b:f5: 46:17:a7:e1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFRUI3NjFEM0JDMjZB NDNFQTU4RUVFMTJEQkUzN0QwRjQ5NENGNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdjgUF4BUK4D9NnpW88cxCMyIX4rUCR/EsFUt7/6lS/AJgerqQ A9I985DV8yrhmfuaK0L/ZwliD121XPNQPZQqAA2Qk3zm84Ck0MMjxJ3fnWlm8URO +Km8QcrvKEvfUV1YkUNvV9yXr5l68qUAKGFePMRy0R4WMVx0SbpHsQYhWOTBPRxq 2Jei6l/+8B8hNCCYmFa9BwN+RGtYtTfng0UUdeabzyPoa2Sfu8PKVtX8s2dHnkHL 5msPfnazHzHvPL9jJHWTlCzPHcicKEuFfg32K5eLzImqItRNSiujaQL79Mr4rbMC aUfCNYnRcLRN8c9pgdyKe0O89wCJjujqWOFzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvut2HTvCakPqWO7hLb430PSUz3YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3Z1dDJIVHZDYWtQcVdPN2hMYjQzMFBTVXozWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYAowDQYJKoZIhvcNAQELBQADggEB ALNsMQH7cYY4aWuw1S4qUJK/hfLkvNOH1EoEny18CLpmEuQrvtPk+lrwHwZo+70r 1jUJCJ9Va8HrpKPPNQkkQYXtqpXlyRZ79lUkwfrrNI1MCeuHPzh98yrnLUHI6+Ge fCroVOHmMowYT/jwDU5DnKbrIyo9BgAM8EPHF9AK+5d+EIIGu+zYp977/6ZUSv+D KTglLwUzJWRVuTrDTftqttnSftq/bD8WYgUaaWSZVeH03JD+L7ACn4F3o1Ee16Ot O8TQTk4XfQC1I9Cg/LFDLXU8Jij3wl1LKydiSCLBP/jtJ7cACXFnAekX1UFvy7MT wY03eY7SCLLm68lL9UYXp+E= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:55 2026 by rpki-client