$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydEZ2j-XJBgvnBlStEYnKar82gk.roa File: ydEZ2j-XJBgvnBlStEYnKar82gk.roa (raw, json) Hash identifier: l+1tZ0iI0dqbKgY6vOU+pq8qiUIqVrmd8AJlcvdImfw= Subject key identifier: C9:D1:19:DA:3F:97:24:18:2F:9C:19:52:B4:46:27:29:AA:FC:DA:09 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1737 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydEZ2j-XJBgvnBlStEYnKar82gk.roa Signing time: Tue 31 Mar 2026 08:03:23 +0000 ROA not before: Tue 31 Mar 2026 08:03:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5943 (0x1737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C9D119DA3F9724182F9C1952B4462729AAFCDA09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:70:67:69:54:47:4b:31:a3:59:3e:4b:1a: 5c:78:3c:d9:1d:c0:1e:3b:77:db:01:24:12:e9:ae: 84:af:69:1f:8d:ba:76:9e:d0:a4:3c:2d:a7:39:60: 88:bc:23:4c:13:82:d6:e1:6a:89:65:0a:c3:8e:b2: a2:cc:98:86:35:d4:4d:81:25:02:3e:12:88:3b:8d: 06:29:66:40:5b:00:fe:ec:57:b9:a9:33:c6:b6:80: c8:58:d6:75:fa:13:ed:9e:24:4f:a8:b6:09:b4:a8: cb:50:4f:1b:93:cb:80:bb:2a:55:50:55:40:55:4e: ba:d8:18:c7:15:39:7a:80:9e:32:87:b4:96:58:62: eb:b4:e0:02:cb:81:5a:73:f3:cb:a4:30:35:1f:4b: 66:5c:dd:75:17:e9:e4:15:e7:5c:c5:38:49:c9:4e: b0:db:69:29:27:88:8d:ff:6a:de:17:f5:d9:c9:af: 70:db:ad:59:ca:13:61:5b:be:3f:1c:ec:f8:47:02: 2a:7d:c9:b0:98:5d:b7:0a:75:2a:88:21:5a:11:fa: b0:52:93:da:8a:ff:71:e4:a5:a9:ff:81:3f:9f:a0: 35:df:d1:95:72:c5:55:d3:fe:eb:97:73:e2:ab:8d: 72:75:44:3c:9e:9b:b8:35:91:2b:fc:3b:7c:42:94: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:19:DA:3F:97:24:18:2F:9C:19:52:B4:46:27:29:AA:FC:DA:09 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydEZ2j-XJBgvnBlStEYnKar82gk.roa sbgp-ipAddrBlock: critical IPv4: 49.108.192.0/20 Signature Algorithm: sha256WithRSAEncryption 01:58:8a:2b:aa:1a:85:e4:0d:dd:e6:73:65:56:31:01:43:5d: 0c:91:9c:09:6f:4e:12:52:19:e7:b8:69:3e:a7:65:ab:d8:28: c1:c3:50:15:65:fa:2e:5f:69:9c:b5:b4:fa:0c:fa:01:cf:48: c2:77:4d:b0:ed:8f:41:0d:c5:6a:2f:44:98:ea:40:c2:6b:75: 59:bc:50:cc:9b:7a:ae:d4:a4:fc:8d:b2:90:4b:96:31:22:ec: a9:63:99:4c:6d:66:ae:d9:7d:0b:36:ac:81:66:72:ab:57:8d: b6:4b:a0:07:51:53:d7:1e:53:fa:3e:2d:64:9b:a2:69:9c:1b: cf:2b:ed:07:84:63:c4:60:a9:aa:4b:40:51:fa:75:aa:02:3c: c8:46:7d:be:9b:d0:80:7d:dc:69:7d:54:62:df:15:58:76:61: 7b:bd:7f:c3:73:24:aa:fc:4f:7c:4d:85:00:1a:75:ae:3b:b7: 5e:6e:34:d2:0e:af:65:d6:9c:08:40:d6:99:d5:13:c8:fe:57: 46:d8:2b:37:5c:c1:43:14:29:70:e7:e2:0c:b3:6f:43:04:11: 01:10:d3:73:7a:e5:f7:a7:4f:af:0b:2a:51:ce:b4:aa:c6:23: ee:8d:5d:42:13:01:89:90:ba:d5:25:9b:7a:6c:86:a3:a6:5b: eb:8b:81:d3 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5RDExOURBM0Y5NzI0 MTgyRjlDMTk1MkI0NDYyNzI5QUFGQ0RBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKV3BnaVRHSzGjWT5LGlx4PNkdwB47d9sBJBLproSvaR+Nunae 0KQ8Lac5YIi8I0wTgtbhaollCsOOsqLMmIY11E2BJQI+Eog7jQYpZkBbAP7sV7mp M8a2gMhY1nX6E+2eJE+otgm0qMtQTxuTy4C7KlVQVUBVTrrYGMcVOXqAnjKHtJZY Yuu04ALLgVpz88ukMDUfS2Zc3XUX6eQV51zFOEnJTrDbaSkniI3/at4X9dnJr3Db rVnKE2Fbvj8c7PhHAip9ybCYXbcKdSqIIVoR+rBSk9qK/3Hkpan/gT+foDXf0ZVy xVXT/uuXc+KrjXJ1RDyem7g1kSv8O3xClOixAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUydEZ2j+XJBgvnBlStEYnKar82gkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3lkRVoyai1YSkJndm5CbFN0RVluS2FyODJnay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxbMAwDQYJKoZIhvcNAQELBQADggEB AAFYiiuqGoXkDd3mc2VWMQFDXQyRnAlvThJSGee4aT6nZavYKMHDUBVl+i5faZy1 tPoM+gHPSMJ3TbDtj0ENxWovRJjqQMJrdVm8UMybeq7UpPyNspBLljEi7KljmUxt Zq7ZfQs2rIFmcqtXjbZLoAdRU9ceU/o+LWSbommcG88r7QeEY8RgqapLQFH6daoC PMhGfb6b0IB93Gl9VGLfFVh2YXu9f8NzJKr8T3xNhQAada47t15uNNIOr2XWnAhA 1pnVE8j+V0bYKzdcwUMUKXDn4gyzb0MEEQEQ03N65fenT68LKlHOtKrGI+6NXUIT AYmQutUlm3pshqOmW+uLgdM= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:56 2026 by rpki-client