$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/znYfONsZBYic5G-NnadCs6aZER8.roa File: znYfONsZBYic5G-NnadCs6aZER8.roa (raw, json) Hash identifier: PCNL6KBfgAPkcfQmUOMSLOBY4z/tX2SWjNZV0YMsiEM= Subject key identifier: CE:76:1F:38:DB:19:05:88:9C:E4:6F:8D:9D:A7:42:B3:A6:99:11:1F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1529 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/znYfONsZBYic5G-NnadCs6aZER8.roa Signing time: Tue 31 Mar 2026 07:59:03 +0000 ROA not before: Tue 31 Mar 2026 07:59:03 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.110.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5417 (0x1529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CE761F38DB1905889CE46F8D9DA742B3A699111F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:67:dd:b1:49:7e:0a:95:ee:13:04:b7:ec: 44:fd:7f:0f:4e:41:6a:1b:a5:f1:2c:c7:4e:30:0c: a8:ae:e8:5a:41:04:e0:16:3c:b9:17:10:b8:c0:e2: ae:5a:41:26:53:13:ed:bb:c8:ab:69:e1:c5:6b:12: 4a:e6:69:8f:ac:13:2b:c0:c5:3d:c8:3d:79:06:f4: 86:56:8e:e6:c4:a9:56:37:cb:0e:83:e9:02:b1:77: 44:34:8b:11:b1:62:49:d4:0d:70:5d:cf:87:09:61: 86:60:0a:c1:3d:7f:ed:48:7c:89:ca:5b:60:70:97: 08:f3:12:94:85:42:44:fc:f2:0d:aa:30:d4:8d:32: 6e:f6:f1:c6:9e:8d:80:f9:11:68:da:2c:73:bd:54: 38:61:45:45:1b:c9:5e:33:4b:32:75:4b:7d:5f:72: 70:a2:47:4a:da:32:da:b7:ce:a2:d9:5c:ee:09:85: d6:58:1c:07:07:87:3c:06:9b:38:7b:69:36:36:ed: f2:16:b2:99:37:52:93:c9:79:60:10:58:45:68:a5: 3c:ec:79:c5:78:eb:5b:2c:9e:ac:61:2f:8c:0e:0c: 27:b3:ac:f6:dc:90:57:a3:a3:82:9e:e7:5f:66:2e: aa:ab:fa:66:fb:45:55:b6:d7:e3:70:76:98:94:af: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:76:1F:38:DB:19:05:88:9C:E4:6F:8D:9D:A7:42:B3:A6:99:11:1F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/znYfONsZBYic5G-NnadCs6aZER8.roa sbgp-ipAddrBlock: critical IPv4: 49.110.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4b:f5:dd:70:fa:56:e4:70:32:7f:ed:a7:fd:cc:74:68:f2:92: 8d:21:cc:09:bc:79:37:f1:76:15:37:fd:b8:c2:84:8b:ce:ae: db:1f:4b:72:68:c5:cc:c5:a2:33:b5:07:d6:e7:55:d6:a4:f8: f7:15:8a:02:52:fd:97:78:f7:1f:64:fc:e3:6d:09:08:36:3a: 01:e4:35:21:61:7e:a3:ac:c2:15:82:a7:29:1c:1c:26:d0:17: 57:34:b5:84:41:a6:2f:a7:07:a5:35:ca:82:ba:ff:77:66:8b: 03:bf:34:fa:45:48:85:ed:c7:19:10:49:9a:c9:6c:f4:b4:d6: 76:ec:8f:58:36:54:ed:b0:27:49:b0:21:5d:8d:d5:9e:9a:ba: b9:f1:31:0e:67:d2:14:7d:53:4b:e2:c5:c8:07:51:99:94:43: 6b:e8:a9:3b:37:78:c3:55:70:3b:66:df:f7:e9:45:99:5e:2c: 14:9c:2b:8d:46:e1:2f:06:e1:00:ef:b2:20:66:8d:36:98:f7: 41:43:14:ad:2f:e5:5b:9b:57:d6:f3:f4:fa:9b:3e:9f:f4:c6: be:9d:18:42:f3:00:fd:9a:9c:7e:25:5b:1c:d9:98:3b:9a:a0: 24:e8:e1:1c:83:88:29:f6:81:90:63:a5:e8:ff:f8:3e:fc:0d: 12:7b:c8:19 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENFNzYxRjM4REIxOTA1 ODg5Q0U0NkY4RDlEQTc0MkIzQTY5OTExMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIcGfdsUl+CpXuEwS37ET9fw9OQWobpfEsx04wDKiu6FpBBOAW PLkXELjA4q5aQSZTE+27yKtp4cVrEkrmaY+sEyvAxT3IPXkG9IZWjubEqVY3yw6D 6QKxd0Q0ixGxYknUDXBdz4cJYYZgCsE9f+1IfInKW2BwlwjzEpSFQkT88g2qMNSN Mm728caejYD5EWjaLHO9VDhhRUUbyV4zSzJ1S31fcnCiR0raMtq3zqLZXO4JhdZY HAcHhzwGmzh7aTY27fIWspk3UpPJeWAQWEVopTzsecV461ssnqxhL4wODCezrPbc kFejo4Ke519mLqqr+mb7RVW21+NwdpiUr31zAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUznYfONsZBYic5G+NnadCs6aZER8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3puWWZPTnNaQllpYzVHLU5uYWRDczZhWkVSOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcxboAwDQYJKoZIhvcNAQELBQADggEB AEv13XD6VuRwMn/tp/3MdGjyko0hzAm8eTfxdhU3/bjChIvOrtsfS3JoxczFojO1 B9bnVdak+PcVigJS/Zd49x9k/ONtCQg2OgHkNSFhfqOswhWCpykcHCbQF1c0tYRB pi+nB6U1yoK6/3dmiwO/NPpFSIXtxxkQSZrJbPS01nbsj1g2VO2wJ0mwIV2N1Z6a urnxMQ5n0hR9U0vixcgHUZmUQ2voqTs3eMNVcDtm3/fpRZleLBScK41G4S8G4QDv siBmjTaY90FDFK0v5VubV9bz9PqbPp/0xr6dGELzAP2anH4lWxzZmDuaoCTo4RyD iCn2gZBjpej/+D78DRJ7yBk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:17 2026 by rpki-client