$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lPKiWdF7UnRzaANzRFTO40qOhfo.roa File: lPKiWdF7UnRzaANzRFTO40qOhfo.roa (raw, json) Hash identifier: a0FK+DoAeGunAd0EZzPNsBrH9HXD4atK0IovrK1+8sI= Subject key identifier: 94:F2:A2:59:D1:7B:52:74:73:68:03:73:44:54:CE:E3:4A:8E:85:FA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1359 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lPKiWdF7UnRzaANzRFTO40qOhfo.roa Signing time: Wed 25 Mar 2026 09:05:10 +0000 ROA not before: Wed 25 Mar 2026 09:05:10 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4953 (0x1359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 25 09:05:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=94F2A259D17B5274736803734454CEE34A8E85FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:52:d7:12:86:80:f8:98:a2:ac:11:33:de: 7f:b9:d9:a0:4e:83:be:4f:fb:61:8b:68:07:f8:a8: d8:e4:b6:79:e7:0e:77:fe:6c:29:9d:1a:fd:1e:6d: 0c:67:13:f3:bc:62:b3:b6:a9:47:eb:87:44:75:7b: 6a:39:61:4d:4e:c7:cc:6d:a8:a9:34:3e:1a:b5:83: ff:2e:c9:25:24:81:6e:23:dc:2c:c1:15:29:94:a9: f4:36:40:68:ca:cf:de:27:88:4f:ee:b1:8a:4a:9a: 27:0e:55:de:95:82:f1:30:29:df:96:35:63:3d:f9: 89:83:8e:b7:9e:86:8a:a8:d8:31:10:91:52:bf:0e: da:db:5f:c2:cf:62:0f:8c:70:1b:b3:a8:b6:43:db: 36:0e:2f:3d:f2:56:7e:16:d5:c5:59:76:6e:d9:32: 29:27:3a:06:23:6a:fa:a4:54:b3:08:2d:a9:19:57: fd:f5:37:cf:21:f8:2f:8e:7b:77:ca:dc:3d:28:f1: 84:32:eb:0a:f9:6e:d7:e7:8e:bd:e0:a0:4a:71:86: 48:64:17:0c:c6:8f:83:2e:9d:62:11:8e:6d:13:42: 47:76:78:63:77:2b:b3:f5:fa:5d:e0:07:67:29:83: 9f:be:03:20:1e:2d:11:39:5c:5c:0b:63:f4:08:32: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F2:A2:59:D1:7B:52:74:73:68:03:73:44:54:CE:E3:4A:8E:85:FA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lPKiWdF7UnRzaANzRFTO40qOhfo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.0.0/19 Signature Algorithm: sha256WithRSAEncryption 3d:d8:5a:39:d6:09:8e:9f:90:cd:a3:ae:ef:1b:34:ca:1d:06: 1e:ee:17:85:a8:34:3f:13:c8:7c:42:c5:32:22:11:72:b5:d0: d1:ba:f7:5f:49:bb:1a:3e:96:1b:f5:c6:92:66:07:e8:bb:d0: 8b:03:2b:7e:32:ed:27:9c:ce:f4:91:e3:1d:3f:44:7f:8a:2e: f9:86:59:8b:00:7a:00:ce:4a:ea:3c:99:4e:4d:1d:ed:af:c7: 7e:e1:61:f0:87:72:14:76:4c:1c:dc:ab:67:a3:d9:55:ed:f1: 0a:23:1c:cc:52:fb:a9:82:2b:8b:e6:8e:53:3d:9c:bb:5b:38: 51:d0:ec:b9:48:e3:00:ae:30:00:7c:51:f4:d2:ef:2d:39:cf: 6e:f4:93:82:49:fd:6a:36:2b:4e:b2:fb:4a:f6:96:2c:ba:f3: 4e:8b:74:bc:96:2f:8d:d8:25:d5:f9:75:67:9d:45:33:d9:12: f8:08:be:64:f3:80:1e:dd:33:fe:16:cb:96:d6:24:4d:95:cd: 3c:ab:cb:1b:b2:03:83:57:66:5a:f0:7d:6f:c3:8d:6c:a2:f7: 57:3d:fd:d0:fb:aa:a2:b2:2a:2c:14:e4:aa:77:a9:9a:cd:ad: 0c:d1:1a:a4:c2:55:dc:6a:e8:af:52:f4:ac:69:e8:d2:d2:b3: a3:40:40:f1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICE1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMjUw OTA1MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0RjJBMjU5RDE3QjUy NzQ3MzY4MDM3MzQ0NTRDRUUzNEE4RTg1RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmXFLXEoaA+JiirBEz3n+52aBOg75P+2GLaAf4qNjktnnnDnf+ bCmdGv0ebQxnE/O8YrO2qUfrh0R1e2o5YU1Ox8xtqKk0Phq1g/8uySUkgW4j3CzB FSmUqfQ2QGjKz94niE/usYpKmicOVd6VgvEwKd+WNWM9+YmDjreehoqo2DEQkVK/ DtrbX8LPYg+McBuzqLZD2zYOLz3yVn4W1cVZdm7ZMiknOgYjavqkVLMILakZV/31 N88h+C+Oe3fK3D0o8YQy6wr5btfnjr3goEpxhkhkFwzGj4MunWIRjm0TQkd2eGN3 K7P1+l3gB2cpg5++AyAeLRE5XFwLY/QIMsitAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlPKiWdF7UnRzaANzRFTO40qOhfowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xQS2lXZEY3VW5SemFBTnpSRlRPNDBxT2hmby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxagAwDQYJKoZIhvcNAQELBQADggEBAD3YWjnWCY6fkM2jru8bNModBh7u F4WoND8TyHxCxTIiEXK10NG6919Juxo+lhv1xpJmB+i70IsDK34y7SeczvSR4x0/ RH+KLvmGWYsAegDOSuo8mU5NHe2vx37hYfCHchR2TBzcq2ej2VXt8QojHMxS+6mC K4vmjlM9nLtbOFHQ7LlI4wCuMAB8UfTS7y05z270k4JJ/Wo2K06y+0r2liy6806L dLyWL43YJdX5dWedRTPZEvgIvmTzgB7dM/4Wy5bWJE2VzTyryxuyA4NXZlrwfW/D jWyi91c9/dD7qqKyKiwU5Kp3qZrNrQzRGqTCVdxq6K9S9Kxp6NLSs6NAQPE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:13:52 2026 by rpki-client