$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ayftxUZ2cJquvs81GM77jsPPlU.roa File: 6ayftxUZ2cJquvs81GM77jsPPlU.roa (raw, json) Hash identifier: p6syJ3OAZW5Oa/UwJb3Uvs5fyjBlZPokDM5Ee9hwPR4= Subject key identifier: E9:AC:9F:B7:15:19:D9:C2:6A:BA:FB:3C:D4:63:3B:EE:3B:0F:3E:55 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17DF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ayftxUZ2cJquvs81GM77jsPPlU.roa Signing time: Tue 31 Mar 2026 08:04:42 +0000 ROA not before: Tue 31 Mar 2026 08:04:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6111 (0x17df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E9AC9FB71519D9C26ABAFB3CD4633BEE3B0F3E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:c7:94:13:e0:76:ab:a1:42:13:3b:fe:83: 0d:ea:ab:82:a4:6c:13:3a:4f:a3:10:2a:a7:41:de: 41:cb:88:fc:69:9a:95:3d:53:7a:40:87:62:39:a6: 9e:07:6e:20:f8:a8:33:5b:c4:14:0f:ee:a5:14:0b: 3b:40:d9:fb:da:91:39:04:09:58:64:c0:b7:6f:ee: d6:9c:16:11:c4:1f:5a:88:0a:50:e7:af:a6:36:3d: 09:3f:cb:c6:0a:3a:fe:a6:ce:ee:6a:46:dc:30:fb: 6a:1e:d8:95:9a:d9:4c:2d:e0:1c:bc:88:ab:df:99: 57:f9:84:cf:24:60:7d:e3:f6:29:c6:d4:e2:a6:9f: b7:f4:f6:25:b9:76:9f:2c:9e:f3:73:c6:bc:10:16: bb:f3:0f:1e:93:1b:3e:6a:1b:ce:63:ab:8a:65:bd: 79:89:74:23:43:44:d1:e7:97:b2:f8:27:06:17:f6: e0:07:63:71:28:aa:c5:e0:65:52:f5:86:42:eb:83: 8e:41:ed:f3:64:f2:4f:3b:ee:c3:ed:51:57:87:28: 06:07:65:0c:e8:c6:6e:66:6d:7e:2d:1c:2e:fd:30: 26:a0:fa:57:34:30:73:a7:02:c0:e1:cd:73:0f:a6: 08:c6:03:0a:8d:81:f2:b4:0c:60:0f:e8:80:f6:4b: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AC:9F:B7:15:19:D9:C2:6A:BA:FB:3C:D4:63:3B:EE:3B:0F:3E:55 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ayftxUZ2cJquvs81GM77jsPPlU.roa sbgp-ipAddrBlock: critical IPv4: 1.67.240.0/21 Signature Algorithm: sha256WithRSAEncryption 55:40:56:82:ee:75:2e:6b:79:be:3b:c1:55:6b:85:83:cd:ac: 8e:64:84:80:bc:2d:a8:11:f9:37:22:b9:d9:25:67:ee:da:be: bb:4a:e5:f5:66:b7:e4:98:66:aa:2d:f7:c7:72:da:53:71:c4: a4:9b:b3:27:92:e1:12:8a:7f:60:70:65:82:90:a4:56:f2:c5: ca:ff:5a:f2:83:bc:9c:b2:e8:a0:25:8d:4f:62:a3:b5:2a:d4: 10:32:7b:d2:63:69:bf:71:f3:81:45:4f:22:45:08:da:11:16: a6:35:2c:d5:27:f0:f8:2c:a0:06:1f:96:18:f5:3d:ad:bc:65: b0:01:ff:f4:8c:3a:e7:d7:98:3f:11:46:2a:e5:e8:64:09:4f: 28:09:2f:d9:3c:ef:10:01:5f:57:c5:1f:5f:78:7a:39:d2:3e: d4:8f:34:42:72:49:cf:3f:10:c6:6b:5c:f3:dc:a8:07:20:e1: b9:bb:ac:5b:fb:eb:61:d9:85:2d:12:04:1a:97:e0:8e:4a:41: 90:d2:be:3d:93:33:e9:df:cb:04:3f:19:c8:29:67:ad:99:17: 11:3d:09:29:03:50:8b:a2:44:fe:b9:78:06:ec:77:47:95:f9: 9f:4b:a4:86:ce:2f:aa:03:27:48:46:86:ac:1b:ef:47:ba:b8: ab:0d:39:f8 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU5QUM5RkI3MTUxOUQ5 QzI2QUJBRkIzQ0Q0NjMzQkVFM0IwRjNFNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGKseUE+B2q6FCEzv+gw3qq4KkbBM6T6MQKqdB3kHLiPxpmpU9 U3pAh2I5pp4HbiD4qDNbxBQP7qUUCztA2fvakTkECVhkwLdv7tacFhHEH1qIClDn r6Y2PQk/y8YKOv6mzu5qRtww+2oe2JWa2Uwt4By8iKvfmVf5hM8kYH3j9inG1OKm n7f09iW5dp8snvNzxrwQFrvzDx6TGz5qG85jq4plvXmJdCNDRNHnl7L4JwYX9uAH Y3EoqsXgZVL1hkLrg45B7fNk8k877sPtUVeHKAYHZQzoxm5mbX4tHC79MCag+lc0 MHOnAsDhzXMPpgjGAwqNgfK0DGAP6ID2S9dZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU6ayftxUZ2cJquvs81GM77jsPPlUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzZheWZ0eFVaMmNKcXV2czgxR003N2pzUFBsVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBQ/AwDQYJKoZIhvcNAQELBQADggEB AFVAVoLudS5reb47wVVrhYPNrI5khIC8LagR+TciudklZ+7avrtK5fVmt+SYZqot 98dy2lNxxKSbsyeS4RKKf2BwZYKQpFbyxcr/WvKDvJyy6KAljU9io7Uq1BAye9Jj ab9x84FFTyJFCNoRFqY1LNUn8PgsoAYflhj1Pa28ZbAB//SMOufXmD8RRirl6GQJ TygJL9k87xABX1fFH194ejnSPtSPNEJySc8/EMZrXPPcqAcg4bm7rFv762HZhS0S BBqX4I5KQZDSvj2TM+nfywQ/GcgpZ62ZFxE9CSkDUIuiRP65eAbsd0eV+Z9LpIbO L6oDJ0hGhqwb70e6uKsNOfg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:37 2026 by rpki-client