$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zeDTXsQEHFN5vq6jDgqHSNt48ZU.roa File: zeDTXsQEHFN5vq6jDgqHSNt48ZU.roa (raw, json) Hash identifier: KWB1lXZybDIz7j9JmQnXI8nf2lTBPHTJxOHHE7J18bs= Subject key identifier: CD:E0:D3:5E:C4:04:1C:53:79:BE:AE:A3:0E:0A:87:48:DB:78:F1:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1633 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zeDTXsQEHFN5vq6jDgqHSNt48ZU.roa Signing time: Tue 31 Mar 2026 08:01:21 +0000 ROA not before: Tue 31 Mar 2026 08:01:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5683 (0x1633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CDE0D35EC4041C5379BEAEA30E0A8748DB78F195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:19:ac:33:81:06:05:43:f2:40:5b:47:e1: 4c:e6:97:4f:23:51:79:b2:0e:70:0b:f4:d5:1d:e5: f9:ce:d0:2d:47:72:95:12:58:16:53:ce:1c:b5:0b: 61:0c:d2:a3:0e:9e:c3:1f:05:cb:da:8c:b5:86:d8: e6:ab:46:d9:f8:a1:03:eb:e6:a3:26:22:2b:fd:12: b9:ca:cb:4a:85:07:66:e9:64:b1:1a:40:18:e9:d1: 3f:d0:4f:bf:cd:46:d9:b5:51:a1:30:b9:54:40:8c: d2:e2:9c:9a:cb:58:f5:00:74:94:94:cd:0b:31:bc: 44:58:c2:2c:7f:1d:dd:4b:91:bd:c7:c1:87:18:92: 0e:c0:fb:6e:12:bb:61:8d:40:ce:f7:c0:86:5a:f5: 6f:da:72:06:e2:a0:60:ba:67:67:32:c4:20:96:8c: ea:57:c0:9f:16:3f:3d:76:31:4b:5d:74:bb:4a:95: 55:f3:a3:3b:fb:21:b4:96:e1:10:bb:ff:ce:85:5b: 0d:f9:04:a2:f0:a2:25:aa:bb:7c:fb:cb:4b:66:30: c1:96:dd:a9:fd:07:db:58:1f:72:86:e8:dd:24:fe: a9:ad:79:f6:d5:09:bc:3e:55:5d:e2:f4:b1:2c:08: 87:2c:3e:d9:b0:36:e9:f9:a1:13:61:f3:ad:e8:a4: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:D3:5E:C4:04:1C:53:79:BE:AE:A3:0E:0A:87:48:DB:78:F1:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zeDTXsQEHFN5vq6jDgqHSNt48ZU.roa sbgp-ipAddrBlock: critical IPv4: 49.104.22.0/24 Signature Algorithm: sha256WithRSAEncryption bf:74:92:5f:23:bc:85:7b:02:61:93:1c:1f:d8:ab:e7:ed:dd: a1:0f:d0:1e:81:0f:9c:7a:9a:13:b2:94:81:0a:bd:e5:6e:92: fa:68:92:6c:bb:1f:d6:25:79:be:9a:f9:98:13:93:46:b3:5c: 67:22:77:2d:2f:84:eb:a8:b2:84:a5:35:47:d9:49:02:b2:d2: d9:88:e9:b2:ea:10:ff:f8:1e:5f:3b:e3:a0:78:26:c5:e3:d8: a7:40:cf:b9:0f:5f:a6:cf:4a:74:6a:3f:20:e8:b3:6e:25:48: 1d:6b:b9:cf:06:70:a8:77:5d:d2:3b:11:8d:48:e3:4b:6a:d5: fe:46:3c:85:17:31:3e:87:f8:a9:ec:ea:f3:58:82:46:93:2c: 32:95:0d:f8:5e:dd:cc:60:02:e6:a2:d1:69:a8:16:ab:29:33: 2f:bb:49:ea:bb:0b:b6:e9:03:97:6e:50:86:48:ea:bd:2a:e2: 53:8c:34:4b:37:c4:69:e7:21:3d:30:df:0c:f6:6a:70:ee:88: a4:0c:9c:2b:2c:b7:9d:06:ab:fc:7e:20:1b:e8:f2:5d:75:5b: 91:47:78:9a:22:fe:ca:f3:30:91:ef:90:2a:a7:15:eb:b4:34: 41:d5:36:51:1a:4d:44:9f:00:9b:3b:71:ee:e0:34:e0:8e:d9: 18:93:36:8d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENERTBEMzVFQzQwNDFD NTM3OUJFQUVBMzBFMEE4NzQ4REI3OEYxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDItRmsM4EGBUPyQFtH4Uzml08jUXmyDnAL9NUd5fnO0C1HcpUS WBZTzhy1C2EM0qMOnsMfBcvajLWG2OarRtn4oQPr5qMmIiv9ErnKy0qFB2bpZLEa QBjp0T/QT7/NRtm1UaEwuVRAjNLinJrLWPUAdJSUzQsxvERYwix/Hd1Lkb3HwYcY kg7A+24Su2GNQM73wIZa9W/acgbioGC6Z2cyxCCWjOpXwJ8WPz12MUtddLtKlVXz ozv7IbSW4RC7/86FWw35BKLwoiWqu3z7y0tmMMGW3an9B9tYH3KG6N0k/qmtefbV Cbw+VV3i9LEsCIcsPtmwNun5oRNh863opORZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUzeDTXsQEHFN5vq6jDgqHSNt48ZUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3plRFRYc1FFSEZONXZxNmpEZ3FIU050NDhaVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaBYwDQYJKoZIhvcNAQELBQADggEB AL90kl8jvIV7AmGTHB/Yq+ft3aEP0B6BD5x6mhOylIEKveVukvpokmy7H9Yleb6a +ZgTk0azXGcidy0vhOuosoSlNUfZSQKy0tmI6bLqEP/4Hl8746B4JsXj2KdAz7kP X6bPSnRqPyDos24lSB1ruc8GcKh3XdI7EY1I40tq1f5GPIUXMT6H+Kns6vNYgkaT LDKVDfhe3cxgAuai0WmoFqspMy+7Seq7C7bpA5duUIZI6r0q4lOMNEs3xGnnIT0w 3wz2anDuiKQMnCsst50Gq/x+IBvo8l11W5FHeJoi/srzMJHvkCqnFeu0NEHVNlEa TUSfAJs7ce7gNOCO2RiTNo0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:33 2026 by rpki-client