$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/371UF486_kvPsCwf9sOl9gk3EZk.roa File: 371UF486_kvPsCwf9sOl9gk3EZk.roa (raw, json) Hash identifier: fJpp4ADyRKFtuj5ynTTijzfOTaVbpvPt+gHF1cFY8wM= Subject key identifier: DF:BD:54:17:8F:3A:FE:4B:CF:B0:2C:1F:F6:C3:A5:F6:09:37:11:99 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17BF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/371UF486_kvPsCwf9sOl9gk3EZk.roa Signing time: Tue 31 Mar 2026 08:04:29 +0000 ROA not before: Tue 31 Mar 2026 08:04:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6079 (0x17bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DFBD54178F3AFE4BCFB02C1FF6C3A5F609371199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:cb:b6:3c:89:eb:d3:34:72:36:89:7f:04: c6:eb:08:95:19:f8:2b:9a:56:67:ba:f9:57:33:42: b2:53:8f:50:b5:18:ae:1f:6c:a1:fa:28:ea:fe:56: 4c:ad:90:60:5f:91:9e:e9:ad:f0:da:04:a9:f1:c9: 01:55:7d:28:4b:3d:29:74:b4:08:48:20:46:d2:e1: be:e2:52:1d:73:18:3d:8f:bd:f2:bc:a0:e2:1f:07: 06:7c:d7:bc:8a:7c:90:a8:48:e8:ce:e6:4a:bf:db: 88:77:e2:fa:50:69:12:88:49:8a:83:7f:e7:11:b2: 83:76:e1:1c:a9:b9:c6:7f:b3:42:ed:b9:17:db:fc: a1:2c:af:4f:38:42:05:0c:85:6b:5c:f9:b8:38:b9: 39:f2:cf:46:75:81:77:22:b5:e9:b0:0b:c3:3f:5b: a0:63:1b:6c:a5:22:dc:8a:b7:92:36:a4:bb:8d:93: 26:33:81:22:0a:0f:e8:4b:9a:01:fe:74:19:ec:cc: d6:4f:e6:ac:8e:89:9a:23:e1:06:e1:cc:0d:61:4f: ff:31:ac:88:69:7c:75:ec:da:88:60:99:dc:7d:d2: d5:4c:a8:e6:02:35:13:1a:c4:33:01:06:23:b7:b9: e8:37:1f:de:39:ff:d6:23:af:f2:2c:62:97:84:bc: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BD:54:17:8F:3A:FE:4B:CF:B0:2C:1F:F6:C3:A5:F6:09:37:11:99 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/371UF486_kvPsCwf9sOl9gk3EZk.roa sbgp-ipAddrBlock: critical IPv4: 1.79.108.0/22 Signature Algorithm: sha256WithRSAEncryption 44:be:9c:e8:8e:6f:31:05:86:d9:03:e0:64:82:bb:db:57:61: 4d:74:c4:48:b1:8f:36:4b:9e:46:1b:28:b4:ec:d2:10:e2:b2: c7:a2:95:94:80:0f:05:45:eb:93:c1:d4:e9:14:6d:7e:b3:4b: f0:97:cc:a0:a4:69:66:9b:f2:b1:51:3e:f1:93:e0:72:e0:73: 0b:b4:e5:fb:88:b8:61:76:60:e0:4c:ba:4c:df:17:d2:d5:9f: 67:aa:9a:df:6a:98:f6:cc:91:e8:87:f5:a8:1e:df:2a:ac:b7: af:12:de:ca:ad:18:46:18:af:2b:f0:b0:90:83:9a:84:41:c1: 73:7e:75:ab:2b:ef:ca:b5:80:93:10:2d:16:51:2f:b1:8a:36: 39:e3:8f:b6:8c:1f:e2:f7:06:39:1e:75:3d:55:3f:07:b0:b1: b5:1c:1a:94:86:55:da:ea:31:9e:1a:58:b9:1d:01:95:af:90: e5:52:31:6a:fa:0b:4f:c6:4c:6f:56:d5:f5:34:4c:26:90:08: 5f:c0:af:83:1a:55:bb:e9:0a:b6:5f:fa:ae:cf:82:1e:6b:8c: c2:fa:61:4d:61:8b:8f:3b:08:69:5c:57:40:c3:5a:57:75:af: 91:eb:f3:49:4e:91:33:cf:00:53:15:43:5c:6d:3c:c3:65:ac: d0:a1:7d:3e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGQkQ1NDE3OEYzQUZF NEJDRkIwMkMxRkY2QzNBNUY2MDkzNzExOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMFsu2PInr0zRyNol/BMbrCJUZ+CuaVme6+VczQrJTj1C1GK4f bKH6KOr+VkytkGBfkZ7prfDaBKnxyQFVfShLPSl0tAhIIEbS4b7iUh1zGD2PvfK8 oOIfBwZ817yKfJCoSOjO5kq/24h34vpQaRKISYqDf+cRsoN24RypucZ/s0LtuRfb /KEsr084QgUMhWtc+bg4uTnyz0Z1gXcitemwC8M/W6BjG2ylItyKt5I2pLuNkyYz gSIKD+hLmgH+dBnszNZP5qyOiZoj4QbhzA1hT/8xrIhpfHXs2ohgmdx90tVMqOYC NRMaxDMBBiO3ueg3H945/9Yjr/IsYpeEvFQdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU371UF486/kvPsCwf9sOl9gk3EZkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzM3MVVGNDg2X2t2UHNDd2Y5c09sOWdrM0Vaay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBT2wwDQYJKoZIhvcNAQELBQADggEB AES+nOiObzEFhtkD4GSCu9tXYU10xEixjzZLnkYbKLTs0hDisseilZSADwVF65PB 1OkUbX6zS/CXzKCkaWab8rFRPvGT4HLgcwu05fuIuGF2YOBMukzfF9LVn2eqmt9q mPbMkeiH9age3yqst68S3sqtGEYYryvwsJCDmoRBwXN+dasr78q1gJMQLRZRL7GK Njnjj7aMH+L3BjkedT1VPwewsbUcGpSGVdrqMZ4aWLkdAZWvkOVSMWr6C0/GTG9W 1fU0TCaQCF/Ar4MaVbvpCrZf+q7Pgh5rjML6YU1hi487CGlcV0DDWld1r5Hr80lO kTPPAFMVQ1xtPMNlrNChfT4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:42 2026 by rpki-client