$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-pZNHTvur82k4r9_hLE4D4_EMN0.roa File: -pZNHTvur82k4r9_hLE4D4_EMN0.roa (raw, json) Hash identifier: eFaSutknaZEt8K+qI5AcZTT0Sla29XHtJVCtn6mOr6I= Subject key identifier: FA:96:4D:1D:3B:EE:AF:CD:A4:E2:BF:7F:84:B1:38:0F:8F:C4:30:DD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13BB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-pZNHTvur82k4r9_hLE4D4_EMN0.roa Signing time: Tue 31 Mar 2026 07:56:11 +0000 ROA not before: Tue 31 Mar 2026 07:56:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5051 (0x13bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FA964D1D3BEEAFCDA4E2BF7F84B1380F8FC430DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:04:9a:84:a6:d4:8d:fc:db:bc:64:1b:60: 1d:c3:56:e1:5a:5f:22:74:04:7f:16:a3:2e:e8:fe: 56:e2:78:f1:68:bd:53:83:4e:de:a7:04:40:15:ca: a8:ad:9b:95:d7:cd:94:eb:ff:5e:f7:8f:10:6b:0f: 60:5c:17:77:b0:58:0b:3c:de:6d:71:4a:f7:05:6c: a2:97:99:5c:17:92:a1:aa:99:6b:17:d5:60:12:05: 16:e3:74:ee:6a:f2:3b:55:d5:d7:27:0f:86:04:70: f5:13:3d:b2:51:0b:48:5d:3f:63:aa:aa:a1:29:06: 43:cd:c5:98:82:98:65:87:b3:39:2c:3a:e2:31:aa: bf:63:d4:fb:9b:b8:3b:11:11:c9:c2:0c:9b:9d:71: 54:15:66:77:8d:f4:4a:03:bb:8c:c3:56:fe:2f:da: de:f5:d4:27:fe:97:42:3a:ac:cc:ff:f1:85:65:03: 38:ee:c6:6e:d7:40:37:c5:77:cd:32:aa:9f:3a:b4: 28:de:aa:13:c6:3f:c8:5c:1b:a7:2b:50:81:28:75: 83:4d:8f:26:9e:cf:c2:cb:12:36:1e:dc:ce:97:a0: 26:3b:92:8e:41:db:3e:25:bf:75:24:96:19:13:22: 72:be:2f:f3:7c:e7:b8:02:2f:00:3a:c5:9c:ba:6b: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:96:4D:1D:3B:EE:AF:CD:A4:E2:BF:7F:84:B1:38:0F:8F:C4:30:DD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-pZNHTvur82k4r9_hLE4D4_EMN0.roa sbgp-ipAddrBlock: critical IPv4: 1.66.90.0/24 Signature Algorithm: sha256WithRSAEncryption 40:7b:56:23:0d:01:af:dd:e1:48:cb:67:e4:59:d4:52:7f:c8: 1b:e3:41:38:a5:6e:72:11:4a:19:20:02:00:5e:20:13:95:ae: 18:01:21:d7:21:e5:15:01:57:d0:5b:39:44:38:11:56:fe:f0: 3d:8b:07:8e:cb:c4:ac:29:35:97:d2:42:56:0b:b7:e0:76:0b: 70:c6:0a:98:3f:4e:1a:ca:4a:b5:2a:e4:e9:4c:34:b0:58:b7: 7f:7c:4b:03:92:81:93:c3:cc:5e:d9:a2:70:15:3b:20:f4:e5: 95:d2:1f:1f:33:9d:a6:5a:18:25:5f:27:54:6e:64:97:c5:e9: 7b:a1:30:f1:ea:51:18:8a:8d:21:15:fd:f9:66:d7:48:6c:1c: e9:de:68:4e:87:08:b6:fc:22:a1:a1:60:a3:b0:d0:da:4c:2a: c7:57:c8:70:00:a8:a4:14:ea:e0:ac:bc:00:94:7f:b0:ba:d2: 1c:fe:26:df:e8:f6:df:0e:4d:d0:6c:7b:cf:40:0d:9f:c1:c1: 57:ce:81:3e:f3:98:a0:ef:a1:77:2f:c8:81:8f:9a:15:67:e7: 31:5b:f4:ee:7a:14:20:5a:98:ba:78:8e:84:81:94:54:cd:5f: 18:cc:10:ba:c7:fa:c8:65:b7:14:c7:5c:54:63:02:10:4d:69: 86:f6:f0:69 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBOTY0RDFEM0JFRUFG Q0RBNEUyQkY3Rjg0QjEzODBGOEZDNDMwREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFEASahKbUjfzbvGQbYB3DVuFaXyJ0BH8Woy7o/lbiePFovVOD Tt6nBEAVyqitm5XXzZTr/173jxBrD2BcF3ewWAs83m1xSvcFbKKXmVwXkqGqmWsX 1WASBRbjdO5q8jtV1dcnD4YEcPUTPbJRC0hdP2OqqqEpBkPNxZiCmGWHszksOuIx qr9j1PubuDsREcnCDJudcVQVZneN9EoDu4zDVv4v2t711Cf+l0I6rMz/8YVlAzju xm7XQDfFd80yqp86tCjeqhPGP8hcG6crUIEodYNNjyaez8LLEjYe3M6XoCY7ko5B 2z4lv3UklhkTInK+L/N857gCLwA6xZy6a5mzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU+pZNHTvur82k4r9/hLE4D4/EMN0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5Ly1wWk5IVHZ1cjgyazRyOV9oTEU0RDRfRU1OMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABQlowDQYJKoZIhvcNAQELBQADggEB AEB7ViMNAa/d4UjLZ+RZ1FJ/yBvjQTilbnIRShkgAgBeIBOVrhgBIdch5RUBV9Bb OUQ4EVb+8D2LB47LxKwpNZfSQlYLt+B2C3DGCpg/ThrKSrUq5OlMNLBYt398SwOS gZPDzF7ZonAVOyD05ZXSHx8znaZaGCVfJ1RuZJfF6XuhMPHqURiKjSEV/flm10hs HOneaE6HCLb8IqGhYKOw0NpMKsdXyHAAqKQU6uCsvACUf7C60hz+Jt/o9t8OTdBs e89ADZ/BwVfOgT7zmKDvoXcvyIGPmhVn5zFb9O56FCBamLp4joSBlFTNXxjMELrH +shltxTHXFRjAhBNaYb28Gk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:03 2026 by rpki-client