$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6nANAsd-AqjZpeiQzB4ViHN4tfQ.roa File: 6nANAsd-AqjZpeiQzB4ViHN4tfQ.roa (raw, json) Hash identifier: wYdqUQx3AisrcsuU004mEyEjJWWs6EvcxxoI+SHvMho= Subject key identifier: EA:70:0D:02:C7:7E:02:A8:D9:A5:E8:90:CC:1E:15:88:73:78:B5:F4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1866 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6nANAsd-AqjZpeiQzB4ViHN4tfQ.roa Signing time: Tue 31 Mar 2026 08:05:54 +0000 ROA not before: Tue 31 Mar 2026 08:05:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6246 (0x1866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EA700D02C77E02A8D9A5E890CC1E15887378B5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:9c:e8:1b:4b:c7:3a:c0:23:38:e8:f3:29: 51:ae:e4:ca:41:36:a3:bb:15:70:87:ae:2e:9c:26: 33:d7:48:08:85:36:95:83:5c:d0:f8:18:ef:80:eb: d7:1b:cd:8d:4f:09:15:f2:a2:d3:79:be:2a:b9:ad: 1f:8b:b3:bf:2b:5c:9b:a1:d8:90:8e:df:32:3b:2c: 38:a9:02:83:f8:2e:f9:40:6d:10:8f:d4:07:a7:47: 9d:99:cc:96:56:52:90:0a:d5:60:a8:23:98:b3:69: 0b:6f:4c:b6:17:c3:32:5b:f8:0a:84:f5:48:2f:9c: 11:60:e0:48:cd:7e:95:14:57:8e:cf:15:13:ac:37: 97:fd:68:91:15:05:99:b5:43:45:cf:37:4a:27:6a: 53:3a:87:0e:da:df:da:26:d4:f8:bd:58:b8:1f:de: 83:d9:5e:4e:ef:e3:d3:d8:d7:d2:53:e0:a0:e6:f6: 47:39:be:fc:70:b3:ae:fd:7d:f1:18:18:54:f2:c8: 96:77:82:ae:28:cd:1f:92:2a:84:d2:07:d3:c5:9d: e3:92:60:fb:ca:8e:9a:b5:41:21:1c:42:b4:0d:83: db:85:96:72:80:f4:b6:28:56:f4:96:f5:2d:fc:da: 3d:b1:ef:50:1c:b9:79:4e:38:21:84:9b:e5:a2:e7: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:0D:02:C7:7E:02:A8:D9:A5:E8:90:CC:1E:15:88:73:78:B5:F4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6nANAsd-AqjZpeiQzB4ViHN4tfQ.roa sbgp-ipAddrBlock: critical IPv4: 1.66.32.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:e3:a8:cc:f6:67:ed:bb:00:0f:85:04:4a:03:08:5b:c6:88: cc:18:b0:9c:d9:97:98:92:90:f7:45:26:f0:6c:36:25:56:ca: 1c:90:ed:93:5e:4c:e5:a8:13:46:d9:13:73:4a:c7:e0:80:c0: 72:95:bd:1c:79:68:ed:56:da:88:fa:74:d3:df:c4:88:e4:1b: 9f:cf:e6:4a:32:a3:fb:14:c2:f2:09:78:f1:32:14:4b:9f:e0: b3:46:cd:34:4d:3d:a9:f2:e7:9e:08:5c:ca:50:1d:80:fb:81: 9b:0f:23:56:1c:24:e7:f9:7c:0d:81:17:d1:af:dc:ab:1c:9c: b1:93:9d:f7:5e:9b:61:2a:d5:b0:b0:44:3b:2e:ca:1e:a4:47: c1:b4:30:92:d0:f3:b7:dc:9e:dd:be:1c:ce:8a:1f:75:fe:9b: ea:3f:4e:4e:75:ac:70:cf:1e:10:c0:06:37:8b:cf:21:01:e1: 5e:a5:3a:57:ea:00:37:7d:40:8e:19:bf:27:cd:b1:93:72:48: e4:c4:12:b4:54:98:f0:bf:3c:ef:31:02:6a:7f:13:60:38:44: 3e:f0:e3:dc:12:a1:02:77:bb:05:69:75:fc:d8:25:7a:f0:1e: 56:04:99:19:94:5d:54:37:7b:16:99:e7:cc:55:f5:60:6b:16: 10:7f:29:fe -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVBNzAwRDAyQzc3RTAy QThEOUE1RTg5MENDMUUxNTg4NzM3OEI1RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZQZzoG0vHOsAjOOjzKVGu5MpBNqO7FXCHri6cJjPXSAiFNpWD XND4GO+A69cbzY1PCRXyotN5viq5rR+Ls78rXJuh2JCO3zI7LDipAoP4LvlAbRCP 1AenR52ZzJZWUpAK1WCoI5izaQtvTLYXwzJb+AqE9UgvnBFg4EjNfpUUV47PFROs N5f9aJEVBZm1Q0XPN0onalM6hw7a39om1Pi9WLgf3oPZXk7v49PY19JT4KDm9kc5 vvxws679ffEYGFTyyJZ3gq4ozR+SKoTSB9PFneOSYPvKjpq1QSEcQrQNg9uFlnKA 9LYoVvSW9S382j2x71AcuXlOOCGEm+Wi5+hdAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU6nANAsd+AqjZpeiQzB4ViHN4tfQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzZuQU5Bc2QtQXFqWnBlaVF6QjRWaUhONHRmUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBQiAwDQYJKoZIhvcNAQELBQADggEB AB3jqMz2Z+27AA+FBEoDCFvGiMwYsJzZl5iSkPdFJvBsNiVWyhyQ7ZNeTOWoE0bZ E3NKx+CAwHKVvRx5aO1W2oj6dNPfxIjkG5/P5koyo/sUwvIJePEyFEuf4LNGzTRN Pany554IXMpQHYD7gZsPI1YcJOf5fA2BF9Gv3KscnLGTnfdem2Eq1bCwRDsuyh6k R8G0MJLQ87fcnt2+HM6KH3X+m+o/Tk51rHDPHhDABjeLzyEB4V6lOlfqADd9QI4Z vyfNsZNySOTEErRUmPC/PO8xAmp/E2A4RD7w49wSoQJ3uwVpdfzYJXrwHlYEmRmU XVQ3exaZ58xV9WBrFhB/Kf4= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:26 2026 by rpki-client