$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4ukJ4xLUanIez3fZFeNtcSIh8_M.roa File: 4ukJ4xLUanIez3fZFeNtcSIh8_M.roa (raw, json) Hash identifier: 4BDXSrt3zjIjNFxj3g9JpNmYiaxTri2YXJtbwAw4ugM= Subject key identifier: E2:E9:09:E3:12:D4:6A:72:1E:CF:77:D9:15:E3:6D:71:22:21:F3:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1364 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4ukJ4xLUanIez3fZFeNtcSIh8_M.roa Signing time: Tue 31 Mar 2026 07:55:28 +0000 ROA not before: Tue 31 Mar 2026 07:55:28 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4964 (0x1364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E2E909E312D46A721ECF77D915E36D712221F3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:00:14:be:bd:d6:67:8f:78:19:ff:41:aa: 75:fb:a0:42:a2:be:52:05:42:b0:b1:da:8d:fe:39: 3c:75:20:95:71:f4:47:17:21:e2:33:7b:ec:c8:2f: 54:72:7c:6e:db:39:d7:be:07:c4:b7:b5:ed:2b:bd: 19:42:10:d6:26:e5:8d:7f:1a:68:98:85:7e:60:68: 7c:c2:fc:6b:71:9e:64:2b:be:b0:a8:9e:32:74:0d: d4:d8:9f:37:85:9f:f1:f1:5a:d7:00:3f:92:37:5c: be:06:1e:3d:d8:21:cf:6e:b5:5b:0d:64:b1:1f:d8: 72:29:5d:55:4e:fe:40:3a:4e:a1:b6:98:c6:37:a6: 84:c1:bb:73:7a:09:83:63:9a:04:bf:74:41:7c:48: 9e:81:d3:e1:52:03:2e:a3:a5:db:1e:91:20:ca:a1: 01:71:a8:b2:91:85:2a:42:37:b4:3d:45:59:4a:da: 70:00:90:14:b1:30:c3:79:9a:0f:17:01:3c:72:0c: 69:0d:be:41:5e:e4:04:e3:96:d3:b0:aa:87:66:71: 4f:7c:8c:e6:f8:80:85:29:e6:05:b2:88:ec:ce:ba: f5:6d:f6:d0:ae:29:55:5e:00:f9:90:38:7d:99:d9: d0:dc:61:58:4a:e1:4e:91:8a:02:00:a3:54:f8:9c: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E9:09:E3:12:D4:6A:72:1E:CF:77:D9:15:E3:6D:71:22:21:F3:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4ukJ4xLUanIez3fZFeNtcSIh8_M.roa sbgp-ipAddrBlock: critical IPv4: 1.66.92.0/24 Signature Algorithm: sha256WithRSAEncryption 31:86:b4:60:2e:fa:60:9b:5e:18:1e:56:9e:eb:37:8d:ad:40: 65:20:56:05:f0:6a:52:07:80:e4:68:e5:df:f8:d6:51:4b:e9: 57:f5:d0:53:50:e2:e8:b9:31:73:4d:fe:a1:80:38:99:cf:d0: aa:63:40:17:cd:0e:67:05:42:1b:eb:4d:16:a5:13:37:d8:31: b1:cf:47:27:a2:58:a1:43:5e:d1:df:f2:90:40:f6:cf:3b:d4: 7f:a0:ce:25:7e:58:c9:1c:6b:a8:4c:16:03:a9:3c:cb:81:8b: 2d:c9:be:bd:3c:0d:c7:f2:fd:35:e4:c3:b9:99:ae:b4:a4:b8: 18:e6:19:78:39:97:6b:f5:60:24:e0:91:95:61:81:fb:3a:be: 19:da:4d:69:6e:d0:05:31:2a:d7:1d:4d:16:f1:21:99:70:df: fc:cf:9b:b2:65:df:d5:e9:b6:da:52:10:88:56:7d:4e:81:9e: 1f:b7:d1:4c:9f:ea:4f:a5:7c:22:be:e0:cd:0d:44:23:29:e3: df:14:21:cb:68:ad:de:bf:6b:2b:5f:49:5e:eb:94:7f:e0:90: 4e:e2:72:d9:a3:42:89:37:fa:c4:d1:55:20:44:00:46:93:85: b2:56:da:a1:a6:cd:e5:bc:52:e1:3e:e7:3e:01:98:c0:c5:da: dc:66:00:2e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyRTkwOUUzMTJENDZB NzIxRUNGNzdEOTE1RTM2RDcxMjIyMUYzRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0/AAUvr3WZ494Gf9BqnX7oEKivlIFQrCx2o3+OTx1IJVx9EcX IeIze+zIL1RyfG7bOde+B8S3te0rvRlCENYm5Y1/GmiYhX5gaHzC/GtxnmQrvrCo njJ0DdTYnzeFn/HxWtcAP5I3XL4GHj3YIc9utVsNZLEf2HIpXVVO/kA6TqG2mMY3 poTBu3N6CYNjmgS/dEF8SJ6B0+FSAy6jpdsekSDKoQFxqLKRhSpCN7Q9RVlK2nAA kBSxMMN5mg8XATxyDGkNvkFe5ATjltOwqodmcU98jOb4gIUp5gWyiOzOuvVt9tCu KVVeAPmQOH2Z2dDcYVhK4U6RigIAo1T4nMh3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU4ukJ4xLUanIez3fZFeNtcSIh8/MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzR1a0o0eExVYW5JZXozZlpGZU50Y1NJaDhfTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABQlwwDQYJKoZIhvcNAQELBQADggEB ADGGtGAu+mCbXhgeVp7rN42tQGUgVgXwalIHgORo5d/41lFL6Vf10FNQ4ui5MXNN /qGAOJnP0KpjQBfNDmcFQhvrTRalEzfYMbHPRyeiWKFDXtHf8pBA9s871H+gziV+ WMkca6hMFgOpPMuBiy3Jvr08Dcfy/TXkw7mZrrSkuBjmGXg5l2v1YCTgkZVhgfs6 vhnaTWlu0AUxKtcdTRbxIZlw3/zPm7Jl39XpttpSEIhWfU6Bnh+30Uyf6k+lfCK+ 4M0NRCMp498UIctord6/aytfSV7rlH/gkE7ictmjQok3+sTRVSBEAEaThbJW2qGm zeW8UuE+5z4BmMDF2txmAC4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:15 2026 by rpki-client