$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xQXbQVbxADV1zxkgEi4iBoSNDS4.roa File: xQXbQVbxADV1zxkgEi4iBoSNDS4.roa (raw, json) Hash identifier: 2cNtiESuZ+G8mcHvi6GYpgMmTP7W+yw1/H84DUc+IXY= Subject key identifier: C5:05:DB:41:56:F1:00:35:75:CF:19:20:12:2E:22:06:84:8D:0D:2E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1628 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xQXbQVbxADV1zxkgEi4iBoSNDS4.roa Signing time: Tue 31 Mar 2026 08:01:16 +0000 ROA not before: Tue 31 Mar 2026 08:01:16 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5672 (0x1628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:16 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C505DB4156F1003575CF1920122E2206848D0D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:1b:38:8f:3f:af:74:49:2d:e1:01:53:7c: d4:ab:4f:05:68:c2:c4:7a:f6:a6:26:57:82:34:b0: f8:27:91:a3:98:64:3c:9a:0f:49:25:c5:67:05:bc: 43:ce:22:7a:de:6a:e9:ba:10:b7:a6:d5:56:b0:d8: 8f:35:b5:7b:4b:de:8a:de:02:83:15:d7:b2:a7:8c: e8:b4:2f:bd:43:e7:dd:74:56:76:48:68:5b:f1:e9: 63:5b:95:70:15:9a:f4:ba:28:c0:dc:69:3d:7d:d0: d2:40:a8:71:43:0a:a3:4d:ce:5e:bb:ff:c4:74:4b: 7f:6d:2e:5b:d8:33:00:fd:6d:8c:b5:3c:ed:d0:12: 9b:0e:b9:da:9c:48:e1:29:f3:8d:32:aa:86:30:e5: 11:ec:18:62:d5:7e:35:23:40:4a:94:ed:ef:77:0a: 2e:74:47:4d:b4:e9:4e:7b:5f:34:eb:87:b3:94:9d: ed:c5:36:07:05:a8:ca:3e:6a:d8:82:e2:94:1e:d5: 07:13:35:e3:f9:7e:b4:94:83:5f:74:3a:55:b9:32: 68:b8:04:2c:82:da:d2:38:d9:38:d8:a0:d6:4e:4b: 8d:cc:56:31:1d:92:6e:c2:21:4a:3b:83:7c:03:64: 4d:27:9d:fc:0e:14:9e:00:26:98:b8:3e:c5:3c:75: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:05:DB:41:56:F1:00:35:75:CF:19:20:12:2E:22:06:84:8D:0D:2E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xQXbQVbxADV1zxkgEi4iBoSNDS4.roa sbgp-ipAddrBlock: critical IPv4: 49.98.48.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:cc:8d:5d:29:8f:21:27:52:e5:4d:ac:87:76:af:6f:47:50: d4:2a:8d:0f:3d:f7:2d:78:4c:8d:8a:01:3b:27:20:8a:75:f9: 73:d8:ab:e9:a3:1d:4a:2f:01:ee:e7:78:a4:6f:c3:62:07:11: f4:19:8f:51:db:dc:53:c7:c5:20:ce:6b:54:cc:17:3c:9b:29: 5e:49:50:79:f0:ca:7f:a5:d8:e6:9a:94:f4:55:c0:f9:37:9b: 39:4c:0e:ad:51:f6:6c:ff:b8:30:e3:ba:e6:42:e2:59:8b:10: 5c:11:8e:67:85:8c:4a:70:0f:45:f6:0c:e4:52:9f:c2:2f:c8: e5:37:a9:64:d8:a2:cd:fc:d7:29:c3:fd:fb:1d:e1:51:ac:1d: d8:75:f4:7f:c7:d6:ee:3e:a6:7c:58:a6:d1:e3:b3:45:07:3c: ff:22:f5:0b:25:a0:9e:87:85:08:11:88:75:28:3c:b3:a4:3c: 20:01:73:df:e8:48:51:e4:f1:a2:57:79:1b:03:bc:a4:1b:b1: 96:f5:fd:eb:7d:80:c6:9a:e4:f5:d8:2b:7b:1e:5d:e3:f7:df: 5f:63:1c:11:f8:33:ef:ec:b8:41:4f:5b:7e:33:46:54:c2:e4: 8c:21:b8:45:70:4b:77:43:72:74:f7:b9:60:7a:ec:c6:db:f6: df:dd:c6:7c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1MDVEQjQxNTZGMTAw MzU3NUNGMTkyMDEyMkUyMjA2ODQ4RDBEMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp9Rs4jz+vdEkt4QFTfNSrTwVowsR69qYmV4I0sPgnkaOYZDya D0klxWcFvEPOInreaum6ELem1Vaw2I81tXtL3oreAoMV17KnjOi0L71D5910VnZI aFvx6WNblXAVmvS6KMDcaT190NJAqHFDCqNNzl67/8R0S39tLlvYMwD9bYy1PO3Q EpsOudqcSOEp840yqoYw5RHsGGLVfjUjQEqU7e93Ci50R0206U57XzTrh7OUne3F NgcFqMo+atiC4pQe1QcTNeP5frSUg190OlW5Mmi4BCyC2tI42TjYoNZOS43MVjEd km7CIUo7g3wDZE0nnfwOFJ4AJpi4PsU8daupAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUxQXbQVbxADV1zxkgEi4iBoSNDS4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3hRWGJRVmJ4QURWMXp4a2dFaTRpQm9TTkRTNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYjAwDQYJKoZIhvcNAQELBQADggEB ADrMjV0pjyEnUuVNrId2r29HUNQqjQ899y14TI2KATsnIIp1+XPYq+mjHUovAe7n eKRvw2IHEfQZj1Hb3FPHxSDOa1TMFzybKV5JUHnwyn+l2OaalPRVwPk3mzlMDq1R 9mz/uDDjuuZC4lmLEFwRjmeFjEpwD0X2DORSn8IvyOU3qWTYos381ynD/fsd4VGs Hdh19H/H1u4+pnxYptHjs0UHPP8i9QsloJ6HhQgRiHUoPLOkPCABc9/oSFHk8aJX eRsDvKQbsZb1/et9gMaa5PXYK3seXeP3319jHBH4M+/suEFPW34zRlTC5IwhuEVw S3dDcnT3uWB67Mbb9t/dxnw= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:36 2026 by rpki-client