$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yl2J3WNuMpbMVkJLncbC8rgdt78.roa File: yl2J3WNuMpbMVkJLncbC8rgdt78.roa (raw, json) Hash identifier: lLDYBurr7th36rBFbT0XwwiDRWtzWec/jQnABPSY+k4= Subject key identifier: CA:5D:89:DD:63:6E:32:96:CC:56:42:4B:9D:C6:C2:F2:B8:1D:B7:BF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1687 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yl2J3WNuMpbMVkJLncbC8rgdt78.roa Signing time: Tue 31 Mar 2026 08:01:57 +0000 ROA not before: Tue 31 Mar 2026 08:01:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5767 (0x1687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CA5D89DD636E3296CC56424B9DC6C2F2B81DB7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:c5:85:cf:cd:18:67:2d:48:72:a4:c8:11: 09:14:d3:cd:f7:93:15:de:a7:ec:97:fc:78:be:81: 04:56:2a:dc:e3:02:06:4b:d7:29:97:ab:fb:85:8d: 6d:8c:b7:ec:3d:a7:b5:4e:b7:da:46:c9:63:e4:c1: b6:c5:e7:a2:c1:e2:bd:59:e4:37:ba:f3:3b:57:73: 00:4c:7a:c1:a5:26:36:12:6f:0a:a0:87:b1:66:bb: a2:d8:cc:17:b4:60:7e:02:f9:ec:9b:e8:70:0f:12: 69:e3:ca:57:08:d2:32:bd:11:7a:d8:72:b9:fb:5a: 90:0d:f9:26:e0:ec:61:cb:4e:e0:90:bc:48:fe:82: 06:e1:9e:3c:87:3d:55:b4:60:e2:da:05:49:69:18: 16:94:d5:f5:07:d7:32:90:bf:ef:e3:f8:0a:5d:6e: a1:0b:6a:53:c8:d6:6c:9a:b9:23:5f:76:15:42:95: 2e:5e:39:39:19:45:cc:6f:3f:29:94:82:81:fc:25: 0a:4a:e5:ca:af:b6:63:a7:36:ce:c3:20:f5:3c:9f: c9:4f:7a:d0:84:9e:b9:67:29:c3:c4:e0:e1:7b:9b: 27:45:d3:ea:66:68:1c:e6:61:b2:1f:70:36:17:6f: 69:1b:45:27:6e:af:02:e7:c5:cf:ed:a9:89:29:78: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5D:89:DD:63:6E:32:96:CC:56:42:4B:9D:C6:C2:F2:B8:1D:B7:BF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yl2J3WNuMpbMVkJLncbC8rgdt78.roa sbgp-ipAddrBlock: critical IPv4: 49.106.209.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:73:9f:c7:13:96:91:95:2b:26:d5:03:9b:4b:e4:2b:83:e1: 9f:26:92:7b:4c:47:81:5b:32:26:b7:59:a4:79:c4:2a:00:0c: 7f:f1:6d:50:87:d9:1b:81:fc:86:26:87:db:1e:29:0b:31:a8: b9:ca:b9:a6:79:5c:e4:7e:19:45:28:40:bd:b3:87:56:22:5c: e6:82:6b:a5:aa:31:69:91:75:f4:0b:02:c2:37:94:8e:11:28: 0f:b4:47:39:90:82:9c:6a:db:45:f0:b5:0d:cf:1e:79:81:3b: 64:ee:7d:aa:26:4e:16:ea:e9:57:32:32:ea:b0:bd:68:56:66: 0c:c4:41:77:eb:17:5e:49:25:b4:d4:78:2f:16:37:31:48:20: e1:3a:d2:1b:cb:c4:90:74:a2:02:09:b9:ff:da:c5:57:30:38: 48:4d:75:f6:06:c9:42:bd:33:0a:ab:2b:49:61:67:fc:af:62: 2b:b7:f2:a1:d3:9f:98:4e:6d:b0:e1:29:d0:1c:bc:af:4e:23: 48:24:92:fd:47:eb:9d:fc:a3:c5:ab:4a:57:ed:16:a9:5e:ad: 42:e0:f1:30:61:15:28:9f:96:45:8f:b6:bd:72:b7:d9:5d:14: 60:79:49:a0:ad:7b:70:b2:9b:e8:0c:3b:10:b5:05:86:31:d2: cf:74:56:e4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBNUQ4OURENjM2RTMy OTZDQzU2NDI0QjlEQzZDMkYyQjgxREI3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiosWFz80YZy1IcqTIEQkU0833kxXep+yX/Hi+gQRWKtzjAgZL 1ymXq/uFjW2Mt+w9p7VOt9pGyWPkwbbF56LB4r1Z5De68ztXcwBMesGlJjYSbwqg h7Fmu6LYzBe0YH4C+eyb6HAPEmnjylcI0jK9EXrYcrn7WpAN+Sbg7GHLTuCQvEj+ ggbhnjyHPVW0YOLaBUlpGBaU1fUH1zKQv+/j+ApdbqELalPI1myauSNfdhVClS5e OTkZRcxvPymUgoH8JQpK5cqvtmOnNs7DIPU8n8lPetCEnrlnKcPE4OF7mydF0+pm aBzmYbIfcDYXb2kbRSdurwLnxc/tqYkpeIpJAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUyl2J3WNuMpbMVkJLncbC8rgdt78wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3lsMkozV051TXBiTVZrSkxuY2JDOHJnZHQ3OC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxatEwDQYJKoZIhvcNAQELBQADggEB AHpzn8cTlpGVKybVA5tL5CuD4Z8mkntMR4FbMia3WaR5xCoADH/xbVCH2RuB/IYm h9seKQsxqLnKuaZ5XOR+GUUoQL2zh1YiXOaCa6WqMWmRdfQLAsI3lI4RKA+0RzmQ gpxq20XwtQ3PHnmBO2TufaomThbq6VcyMuqwvWhWZgzEQXfrF15JJbTUeC8WNzFI IOE60hvLxJB0ogIJuf/axVcwOEhNdfYGyUK9MwqrK0lhZ/yvYiu38qHTn5hObbDh KdAcvK9OI0gkkv1H6538o8WrSlftFqlerULg8TBhFSiflkWPtr1yt9ldFGB5SaCt e3Cym+gMOxC1BYYx0s90VuQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:34 2026 by rpki-client