$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-_IymIEnf3NMUvCil6PxlbT_imI.roa File: -_IymIEnf3NMUvCil6PxlbT_imI.roa (raw, json) Hash identifier: Jksnn6pbn+KsXQOt9w4OmNNm4aGs58B/B01csyv+mRA= Subject key identifier: FB:F2:32:98:81:27:7F:73:4C:52:F0:A2:97:A3:F1:95:B4:FF:8A:62 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1487 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-_IymIEnf3NMUvCil6PxlbT_imI.roa Signing time: Tue 31 Mar 2026 07:57:43 +0000 ROA not before: Tue 31 Mar 2026 07:57:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5255 (0x1487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FBF2329881277F734C52F0A297A3F195B4FF8A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:ea:a7:1e:c9:fb:4a:c2:bd:e4:cb:8d:39: 04:e7:4a:5d:1c:d4:02:6f:aa:66:0c:a9:95:66:ed: 8f:1d:11:0e:0a:ee:37:e7:1a:e5:69:88:0a:fb:a3: 80:3c:de:24:e5:71:b5:66:b1:6b:ed:57:bb:90:50: f6:9c:d7:56:48:12:34:14:f7:e0:77:ea:a0:cf:95: 49:d2:cd:60:60:65:02:63:30:7c:6f:1c:81:49:8c: 53:0d:4e:93:28:5e:bb:30:29:d5:80:32:bc:e1:7d: 82:4d:6d:20:01:0e:f6:2a:1d:90:bc:e5:76:4b:5a: ae:85:9a:b5:6e:ce:13:8e:a7:58:a0:ea:3e:ba:0c: 6b:68:7e:ba:aa:12:a0:3b:53:50:5c:7a:54:c5:59: ee:22:f3:99:7a:3f:25:b9:de:38:8a:72:1c:ab:a9: 61:47:01:2a:6d:c0:45:09:0f:83:8d:7c:76:14:67: 7b:3e:91:17:6b:cc:e7:2c:a3:66:c2:fc:81:7e:3e: ad:c8:5b:3b:fe:f8:37:a8:56:3d:ab:50:97:69:fb: c2:89:01:ac:5a:7a:b6:30:60:ee:41:4d:5d:74:89: 45:9c:a5:49:20:f1:67:5b:ca:b4:87:2b:88:90:6f: 06:79:13:c4:b9:f0:15:ab:35:05:f8:91:cc:de:89: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:32:98:81:27:7F:73:4C:52:F0:A2:97:A3:F1:95:B4:FF:8A:62 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-_IymIEnf3NMUvCil6PxlbT_imI.roa sbgp-ipAddrBlock: critical IPv4: 1.79.22.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:07:e7:6b:c7:8a:e3:2f:d6:18:57:ea:50:17:20:7d:da:e1: da:8c:6e:11:89:7e:c1:08:c0:7a:ea:76:06:b0:ac:5b:47:d7: cb:65:da:87:f8:01:37:f0:e0:30:05:d7:ba:e1:5c:5d:34:75: f4:64:15:40:9a:38:6b:6f:2f:9e:d5:0e:c8:0a:74:54:c6:c6: b5:b3:9b:9b:14:22:ad:d4:cf:ce:86:19:7c:c8:77:27:a3:d8: 2c:44:ad:a6:db:f4:4e:c2:a7:99:b4:dd:90:cc:9a:7b:64:af: 43:c6:20:ca:14:9a:5c:a5:78:28:8f:ba:fa:ca:5a:c8:d1:80: 5f:20:97:ce:6d:ae:64:a4:fe:a7:c8:31:f3:a1:8f:b0:b8:2b: 7a:5f:71:dc:5c:98:5c:67:06:df:3c:b0:25:b7:b7:4c:28:95: 8f:56:18:8c:91:86:8c:d8:7f:80:1f:d9:fc:64:68:51:99:3f: e0:9e:4f:85:44:06:bf:a7:89:17:d9:72:67:c7:2f:f8:10:52: 36:b9:bd:6f:fc:2e:75:da:9c:b9:ab:7f:7e:41:b9:5c:a3:42: fe:f0:b6:98:a6:f3:ff:a6:b3:13:d4:06:34:ed:24:e0:67:02: 3f:cf:d0:e2:10:f9:8f:35:0d:c4:a7:25:71:3a:53:41:b7:1a: ad:e2:b5:a5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCRjIzMjk4ODEyNzdG NzM0QzUyRjBBMjk3QTNGMTk1QjRGRjhBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfmOqnHsn7SsK95MuNOQTnSl0c1AJvqmYMqZVm7Y8dEQ4K7jfn GuVpiAr7o4A83iTlcbVmsWvtV7uQUPac11ZIEjQU9+B36qDPlUnSzWBgZQJjMHxv HIFJjFMNTpMoXrswKdWAMrzhfYJNbSABDvYqHZC85XZLWq6FmrVuzhOOp1ig6j66 DGtofrqqEqA7U1BcelTFWe4i85l6PyW53jiKchyrqWFHASptwEUJD4ONfHYUZ3s+ kRdrzOcso2bC/IF+Pq3IWzv++DeoVj2rUJdp+8KJAaxaerYwYO5BTV10iUWcpUkg 8WdbyrSHK4iQbwZ5E8S58BWrNQX4kczeiXpVAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU+/IymIEnf3NMUvCil6PxlbT/imIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5Ly1fSXltSUVuZjNOTVV2Q2lsNlB4bGJUX2ltSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTxYwDQYJKoZIhvcNAQELBQADggEB AH0H52vHiuMv1hhX6lAXIH3a4dqMbhGJfsEIwHrqdgawrFtH18tl2of4ATfw4DAF 17rhXF00dfRkFUCaOGtvL57VDsgKdFTGxrWzm5sUIq3Uz86GGXzIdyej2CxErabb 9E7Cp5m03ZDMmntkr0PGIMoUmlyleCiPuvrKWsjRgF8gl85trmSk/qfIMfOhj7C4 K3pfcdxcmFxnBt88sCW3t0wolY9WGIyRhozYf4Af2fxkaFGZP+CeT4VEBr+niRfZ cmfHL/gQUja5vW/8LnXanLmrf35BuVyjQv7wtpim8/+msxPUBjTtJOBnAj/P0OIQ +Y81DcSnJXE6U0G3Gq3itaU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:35 2026 by rpki-client