$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zULPrk5SCZ6sr1xpNENefdFSsuM.roa File: zULPrk5SCZ6sr1xpNENefdFSsuM.roa (raw, json) Hash identifier: rSz1WxA5ohZNo3+Mpf+kglxU1kQ9N8LK9JvqN/6hMgY= Subject key identifier: CD:42:CF:AE:4E:52:09:9E:AC:AF:5C:69:34:43:5E:7D:D1:52:B2:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 153A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zULPrk5SCZ6sr1xpNENefdFSsuM.roa Signing time: Tue 31 Mar 2026 07:59:13 +0000 ROA not before: Tue 31 Mar 2026 07:59:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5434 (0x153a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CD42CFAE4E52099EACAF5C6934435E7DD152B2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:1d:ee:af:80:04:8d:d4:4e:4a:6d:ca:6c: 3f:59:50:a1:e2:8e:03:9c:7c:63:dd:91:27:3d:07: c0:ed:c2:13:99:2c:35:43:df:54:dd:24:25:24:32: 93:c6:40:32:6c:67:08:5e:9c:1a:96:c7:6e:49:e6: ee:51:c6:7e:fb:f6:be:16:71:42:dc:64:3d:f6:52: e1:9d:6c:ef:d3:b6:ca:8d:e7:09:9e:83:25:be:6f: dd:93:a6:9a:64:ba:23:27:60:59:a4:69:cc:5a:c2: a8:e0:6a:c1:8a:ae:b4:08:3a:08:f6:84:ef:ff:3e: 74:a3:2d:68:99:2a:52:45:97:d7:9b:e4:81:88:1d: 5d:f3:53:08:b4:81:1c:9b:a8:40:1f:3c:39:06:fc: 25:d8:2d:49:ef:a6:2a:c3:9c:81:31:2b:61:c5:a4: 97:76:f6:a3:13:ab:e4:66:cf:2c:44:dc:d3:2c:d2: d0:a6:ab:f3:a6:2c:46:c9:5a:4d:4e:1d:26:46:03: e3:76:af:b9:22:dc:ad:8a:5c:3b:cc:79:db:18:94: 58:5d:cb:fa:4a:ef:59:b8:70:68:3a:85:57:68:93: 32:9f:69:1d:b5:ad:c7:a2:8c:8b:b0:6a:6e:ba:c4: da:61:3d:12:37:12:b9:7d:20:8f:7c:a3:e5:73:ed: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:42:CF:AE:4E:52:09:9E:AC:AF:5C:69:34:43:5E:7D:D1:52:B2:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zULPrk5SCZ6sr1xpNENefdFSsuM.roa sbgp-ipAddrBlock: critical IPv4: 49.108.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0a:f9:60:80:44:b8:ad:d1:f5:02:e4:a8:71:a8:a6:c6:e5:8f: 3d:8f:15:4f:72:5e:55:b4:2a:b0:99:95:c0:71:49:e8:46:de: 68:04:ba:04:95:76:03:ea:05:22:8a:8d:2a:7b:10:60:24:34: eb:c9:b8:e9:9d:d6:65:0f:9f:cc:dd:1e:33:03:f4:0d:86:e1: 99:40:9d:31:8f:eb:66:aa:cb:f4:50:06:6b:e4:07:5b:ac:6a: c0:b5:2b:34:10:a8:56:a8:21:80:a8:ac:f4:d3:c1:48:f6:35: 26:ea:24:73:3e:4b:b0:31:06:ae:75:cc:e8:5c:48:57:24:3e: f5:da:f7:be:1b:e0:41:27:6a:6d:34:cf:5a:02:af:6d:39:a5: 2b:86:76:48:77:b6:19:76:1c:8e:cd:8c:bf:76:c3:06:8c:3f: 9d:73:1d:67:84:98:88:0f:b9:23:4b:a6:33:bc:48:d8:7c:93: 28:8b:e2:64:9e:6c:7f:2c:d2:b3:f6:90:8d:02:d8:a4:32:d0: f1:b2:ff:d2:3c:59:1b:ec:e0:b6:d5:7f:7c:d2:45:e6:d1:75: bd:63:8d:a3:6c:3b:02:c2:50:48:1f:4e:cf:13:10:d1:8b:fb: 9a:4a:58:d9:9d:74:49:ee:d6:c8:e9:76:69:2e:9a:2d:c4:16: 07:b2:f4:89 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENENDJDRkFFNEU1MjA5 OUVBQ0FGNUM2OTM0NDM1RTdERDE1MkIyRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRsx3ur4AEjdROSm3KbD9ZUKHijgOcfGPdkSc9B8DtwhOZLDVD 31TdJCUkMpPGQDJsZwhenBqWx25J5u5Rxn779r4WcULcZD32UuGdbO/TtsqN5wme gyW+b92TpppkuiMnYFmkacxawqjgasGKrrQIOgj2hO//PnSjLWiZKlJFl9eb5IGI HV3zUwi0gRybqEAfPDkG/CXYLUnvpirDnIExK2HFpJd29qMTq+RmzyxE3NMs0tCm q/OmLEbJWk1OHSZGA+N2r7ki3K2KXDvMedsYlFhdy/pK71m4cGg6hVdokzKfaR21 rceijIuwam66xNphPRI3Erl9II98o+Vz7SmvAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUzULPrk5SCZ6sr1xpNENefdFSsuMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3pVTFByazVTQ1o2c3IxeHBORU5lZmRGU3N1TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYxbIAwDQYJKoZIhvcNAQELBQADggEB AAr5YIBEuK3R9QLkqHGopsbljz2PFU9yXlW0KrCZlcBxSehG3mgEugSVdgPqBSKK jSp7EGAkNOvJuOmd1mUPn8zdHjMD9A2G4ZlAnTGP62aqy/RQBmvkB1usasC1KzQQ qFaoIYCorPTTwUj2NSbqJHM+S7AxBq51zOhcSFckPvXa974b4EEnam00z1oCr205 pSuGdkh3thl2HI7NjL92wwaMP51zHWeEmIgPuSNLpjO8SNh8kyiL4mSebH8s0rP2 kI0C2KQy0PGy/9I8WRvs4LbVf3zSRebRdb1jjaNsOwLCUEgfTs8TENGL+5pKWNmd dEnu1sjpdmkumi3EFgey9Ik= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:04 2026 by rpki-client