$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xNIJWoFVwCSGMYKr1xd9pH6moLQ.roa File: xNIJWoFVwCSGMYKr1xd9pH6moLQ.roa (raw, json) Hash identifier: xnt3DA/V+06Fju7fuThY9nKh+Om9lw7p0iCUL520D4E= Subject key identifier: C4:D2:09:5A:81:55:C0:24:86:31:82:AB:D7:17:7D:A4:7E:A6:A0:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17A4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xNIJWoFVwCSGMYKr1xd9pH6moLQ.roa Signing time: Tue 31 Mar 2026 08:04:15 +0000 ROA not before: Tue 31 Mar 2026 08:04:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.231.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6052 (0x17a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C4D2095A8155C024863182ABD7177DA47EA6A0B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:dc:31:7d:21:09:7b:b1:fc:2c:00:fe:d8: 08:f7:8a:62:99:ea:8b:54:17:07:59:91:a1:d5:19: 79:88:41:44:9d:c2:bd:ae:90:6c:b5:f8:b7:07:ea: 00:5a:ab:5d:0e:b9:f2:62:ab:bd:83:c7:2a:db:64: 45:8e:57:ad:db:93:13:57:b2:6a:6f:62:68:99:ba: 17:f5:d9:3b:ea:38:18:fa:2d:9a:94:59:a1:39:43: 66:b7:ae:c9:01:61:d2:a1:f6:b8:b3:29:ce:9c:3c: 8d:a2:e5:7b:ac:4f:a7:85:1f:67:98:f3:9a:c4:25: 91:0b:63:99:34:76:2d:7f:a8:73:10:a6:ff:00:ac: 35:24:b0:5b:0e:7e:7d:de:fe:f1:7b:75:a9:7d:34: 17:e3:2a:48:66:75:27:67:9c:a8:db:63:3b:3c:09: ae:d0:1f:cf:d8:23:bb:0f:c3:1b:43:f6:c1:d3:42: 68:be:c8:c1:05:b5:1c:ac:83:5b:7a:d3:77:f7:63: cb:16:7e:9c:0b:dc:25:8a:a6:72:da:9a:d7:8c:56: b0:ec:d7:74:8a:46:4f:cb:ba:65:1d:8e:20:7f:95: 9d:b1:6f:eb:c0:53:73:86:21:39:e9:a8:77:e7:45: c6:c3:51:d8:93:76:db:02:ae:cd:0f:1e:98:03:86: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D2:09:5A:81:55:C0:24:86:31:82:AB:D7:17:7D:A4:7E:A6:A0:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xNIJWoFVwCSGMYKr1xd9pH6moLQ.roa sbgp-ipAddrBlock: critical IPv4: 27.231.128.0/17 Signature Algorithm: sha256WithRSAEncryption 18:ca:30:6a:43:34:c5:8f:99:43:92:91:45:6c:e9:41:08:8e: 23:9d:dc:75:12:12:33:1d:da:e8:a6:43:e9:e9:c3:1f:ad:a8: 6b:b4:9d:67:71:f1:a1:ec:a5:d3:b9:66:41:ab:0f:47:ad:e5: 09:48:54:23:3c:f1:15:a5:c4:29:36:53:34:9b:c2:cb:05:85: a1:5a:6d:7d:9f:20:8f:25:86:e6:d3:97:1e:a7:76:76:7d:7e: 00:ae:62:6c:53:09:54:89:4a:29:29:72:e9:d1:19:2b:c2:70: 29:f1:8b:88:6a:b7:39:f8:c8:c4:54:23:f5:a0:20:54:72:51: 07:08:51:b3:42:75:e7:99:b8:68:f9:6c:83:3f:39:95:6e:7d: bc:ea:df:5f:08:09:5e:8e:bb:f7:dc:3c:fb:84:53:86:d7:84: e4:4d:6c:40:75:e4:5a:29:48:e1:6c:47:ce:50:96:4b:d6:0e: 3b:82:92:a8:66:61:42:6f:56:5b:e4:be:61:e0:c7:0f:82:82: 10:f8:23:e6:da:72:03:de:cc:29:9a:ff:6d:63:6d:f0:d7:e0: 59:16:a6:90:f6:0c:d4:42:87:1c:42:5f:d7:ac:2a:43:82:a4: cf:a0:3a:b8:a1:8c:fe:de:16:db:0e:87:f7:06:29:ce:18:dc: ee:4b:48:34 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM0RDIwOTVBODE1NUMw MjQ4NjMxODJBQkQ3MTc3REE0N0VBNkEwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmZNwxfSEJe7H8LAD+2Aj3imKZ6otUFwdZkaHVGXmIQUSdwr2u kGy1+LcH6gBaq10OufJiq72DxyrbZEWOV63bkxNXsmpvYmiZuhf12TvqOBj6LZqU WaE5Q2a3rskBYdKh9rizKc6cPI2i5XusT6eFH2eY85rEJZELY5k0di1/qHMQpv8A rDUksFsOfn3e/vF7dal9NBfjKkhmdSdnnKjbYzs8Ca7QH8/YI7sPwxtD9sHTQmi+ yMEFtRysg1t603f3Y8sWfpwL3CWKpnLamteMVrDs13SKRk/LumUdjiB/lZ2xb+vA U3OGITnpqHfnRcbDUdiTdtsCrs0PHpgDhj81AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUxNIJWoFVwCSGMYKr1xd9pH6moLQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3hOSUpXb0ZWd0NTR01ZS3IxeGQ5cEg2bW9MUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcb54AwDQYJKoZIhvcNAQELBQADggEB ABjKMGpDNMWPmUOSkUVs6UEIjiOd3HUSEjMd2uimQ+npwx+tqGu0nWdx8aHspdO5 ZkGrD0et5QlIVCM88RWlxCk2UzSbwssFhaFabX2fII8lhubTlx6ndnZ9fgCuYmxT CVSJSikpcunRGSvCcCnxi4hqtzn4yMRUI/WgIFRyUQcIUbNCdeeZuGj5bIM/OZVu fbzq318ICV6Ou/fcPPuEU4bXhORNbEB15FopSOFsR85QlkvWDjuCkqhmYUJvVlvk vmHgxw+CghD4I+bacgPezCma/21jbfDX4FkWppD2DNRChxxCX9esKkOCpM+gOrih jP7eFtsOh/cGKc4Y3O5LSDQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:43 2026 by rpki-client