$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ziyLrkKcIhaEyJElDNo4ffrKrRY.roa File: ziyLrkKcIhaEyJElDNo4ffrKrRY.roa (raw, json) Hash identifier: Oi29t53yKOTq0nS00A2z3VVXm4a2LWp4znBwPLXvw8E= Subject key identifier: CE:2C:8B:AE:42:9C:22:16:84:C8:91:25:0C:DA:38:7D:FA:CA:AD:16 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1656 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ziyLrkKcIhaEyJElDNo4ffrKrRY.roa Signing time: Tue 31 Mar 2026 08:01:36 +0000 ROA not before: Tue 31 Mar 2026 08:01:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5718 (0x1656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:01:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CE2C8BAE429C221684C891250CDA387DFACAAD16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:37:fd:20:1c:c2:25:db:63:27:f8:7e:1a: 81:8b:95:83:b1:10:b5:18:aa:d9:61:fe:2a:b6:b1: 2d:ea:b4:51:c0:d0:58:00:b8:d0:a2:6b:d2:0b:d7: 93:57:f0:11:e6:f3:cb:42:cf:ad:c7:48:4b:60:9c: d8:61:8b:b5:2d:a6:5a:88:d4:0e:6d:73:32:87:fd: ad:04:35:8c:a1:08:21:6c:b3:07:28:a1:60:c5:55: 38:6e:b3:24:d3:fd:87:ee:e5:a9:51:a0:cd:7f:bb: 84:6f:80:37:eb:84:2c:51:17:e4:16:ce:78:74:4c: f2:ec:23:7f:21:55:b5:bc:ae:9b:f4:93:a9:12:f1: 40:15:c4:35:46:e1:5d:d2:0b:cd:82:0d:c7:47:cb: 4e:21:8b:d2:80:4e:49:ba:04:28:bc:70:1c:12:68: 48:75:9e:e0:b1:25:e3:f5:10:fb:65:e0:50:8f:1f: 2a:53:06:92:63:42:38:7f:33:c4:5c:23:ba:80:2d: 9f:37:d4:5f:9b:75:3e:5a:d8:c5:ee:1d:f8:29:e1: 8c:72:76:8d:71:f0:3e:b0:a2:95:51:b9:f8:15:90: b7:da:f4:75:ef:da:f2:be:dc:d7:d1:5f:9c:7c:1b: d2:67:3e:d1:95:d4:9a:db:83:0d:75:60:fa:dc:53: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:8B:AE:42:9C:22:16:84:C8:91:25:0C:DA:38:7D:FA:CA:AD:16 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ziyLrkKcIhaEyJElDNo4ffrKrRY.roa sbgp-ipAddrBlock: critical IPv4: 49.104.72.0/22 Signature Algorithm: sha256WithRSAEncryption 16:d0:84:b3:67:2b:b9:7c:92:ca:f1:99:0c:ed:df:62:c2:ef: dc:7c:f1:d7:97:67:c3:92:ed:b6:93:d0:26:b5:48:1a:7f:01: 7a:6b:f9:8a:e9:14:10:fb:26:0f:eb:50:8f:3c:1f:c4:05:78: e1:f8:89:7f:d7:01:38:64:7c:a3:0c:ad:dc:4b:fc:64:71:29: d0:2f:94:f1:8d:c6:f7:e0:d0:7e:39:73:ae:8f:04:32:15:51: f6:f0:84:4e:02:b0:ea:98:31:c6:c8:d0:c8:23:a9:51:96:52: 7a:44:13:8a:48:aa:d4:79:45:c9:f1:a5:23:a1:94:34:28:e2: 56:a0:f0:bc:43:fc:15:4c:94:55:d6:0a:48:86:dd:af:bd:d1: 3e:f1:8b:5b:0b:f9:fa:45:4e:a5:19:f3:b1:a1:3a:14:c3:44: 7d:aa:92:10:40:3a:9f:17:58:08:5c:cd:9e:d0:1d:36:76:c7: be:23:a7:67:4b:09:d6:6f:7e:d7:04:c1:66:4c:84:40:0e:df: 9a:7d:25:83:60:ee:c5:21:bf:74:e5:d4:72:d5:1c:47:53:74: aa:3c:eb:19:5a:c7:d7:87:25:cf:6c:8c:2d:dd:0e:bb:a4:89: 03:d7:8f:2a:c7:c5:97:ab:d2:08:09:83:1c:ba:51:1b:7e:5a: 1a:0e:38:be -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAxMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENFMkM4QkFFNDI5QzIy MTY4NEM4OTEyNTBDREEzODdERkFDQUFEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCzjf9IBzCJdtjJ/h+GoGLlYOxELUYqtlh/iq2sS3qtFHA0FgA uNCia9IL15NX8BHm88tCz63HSEtgnNhhi7UtplqI1A5tczKH/a0ENYyhCCFsswco oWDFVThusyTT/Yfu5alRoM1/u4RvgDfrhCxRF+QWznh0TPLsI38hVbW8rpv0k6kS 8UAVxDVG4V3SC82CDcdHy04hi9KATkm6BCi8cBwSaEh1nuCxJeP1EPtl4FCPHypT BpJjQjh/M8RcI7qALZ831F+bdT5a2MXuHfgp4Yxydo1x8D6wopVRufgVkLfa9HXv 2vK+3NfRX5x8G9JnPtGV1Jrbgw11YPrcUyrPAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUziyLrkKcIhaEyJElDNo4ffrKrRYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ppeUxya0tjSWhhRXlKRWxETm80ZmZyS3JSWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaEgwDQYJKoZIhvcNAQELBQADggEB ABbQhLNnK7l8ksrxmQzt32LC79x88deXZ8OS7baT0Ca1SBp/AXpr+YrpFBD7Jg/r UI88H8QFeOH4iX/XAThkfKMMrdxL/GRxKdAvlPGNxvfg0H45c66PBDIVUfbwhE4C sOqYMcbI0MgjqVGWUnpEE4pIqtR5RcnxpSOhlDQo4lag8LxD/BVMlFXWCkiG3a+9 0T7xi1sL+fpFTqUZ87GhOhTDRH2qkhBAOp8XWAhczZ7QHTZ2x74jp2dLCdZvftcE wWZMhEAO35p9JYNg7sUhv3Tl1HLVHEdTdKo86xlax9eHJc9sjC3dDrukiQPXjyrH xZer0ggJgxy6URt+WhoOOL4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:03 2026 by rpki-client