$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6yudMVTK7a8xIewHY3PNu9QftZU.roa File: 6yudMVTK7a8xIewHY3PNu9QftZU.roa (raw, json) Hash identifier: +AZgv6VcoY0JZi1yXdwthyWIK7enUbGRBSiZOc56k58= Subject key identifier: EB:2B:9D:31:54:CA:ED:AF:31:21:EC:07:63:73:CD:BB:D4:1F:B5:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16C6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6yudMVTK7a8xIewHY3PNu9QftZU.roa Signing time: Tue 31 Mar 2026 08:02:28 +0000 ROA not before: Tue 31 Mar 2026 08:02:28 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5830 (0x16c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EB2B9D3154CAEDAF3121EC076373CDBBD41FB595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:4a:a1:23:bb:29:ec:67:e6:0e:30:64:90: 68:fd:42:cf:2c:73:f8:d7:b8:bf:23:64:10:7a:bb: 1c:6e:2e:20:68:73:a9:68:42:2d:1f:f8:3f:7a:7a: ca:d9:f6:25:3f:e5:81:b1:6f:1b:15:24:7f:4f:a1: b1:b6:c3:8c:b9:c6:b8:c0:57:64:44:81:e4:7e:c8: 12:5d:47:25:99:4d:61:18:33:dd:d2:20:59:cc:60: f9:69:bd:ab:a6:83:5b:83:52:33:30:cb:5b:48:b7: 70:cd:e8:e3:17:69:db:81:0c:b4:8f:54:9e:93:80: 5e:c6:e0:46:9b:85:1d:7a:62:79:12:f7:47:a4:f0: d4:89:0a:b2:c9:c5:1c:d1:df:e5:89:f9:a5:af:73: 4f:9e:95:50:9d:8f:93:c4:d6:a0:8c:e4:ee:c6:88: c1:36:58:df:b1:2b:59:ec:22:29:03:59:1f:2c:9e: 46:fe:81:9e:5a:89:57:cd:fb:d1:90:e3:36:a6:d5: be:9e:a1:45:20:04:02:41:ab:3a:4c:c4:92:e5:aa: 3d:7b:bc:cf:0c:2a:d9:bb:27:c4:98:3e:0d:aa:e6: 5d:24:80:e3:09:0e:67:d9:2b:3b:d7:5f:89:55:e6: 39:c6:cf:30:7e:50:a7:06:54:6a:c5:32:04:65:e1: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2B:9D:31:54:CA:ED:AF:31:21:EC:07:63:73:CD:BB:D4:1F:B5:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6yudMVTK7a8xIewHY3PNu9QftZU.roa sbgp-ipAddrBlock: critical IPv4: 1.66.120.0/21 Signature Algorithm: sha256WithRSAEncryption 57:3e:1b:b8:af:a4:5c:0f:dd:a9:ea:81:7f:5d:28:e4:18:2b: 09:18:58:db:e3:de:c6:ba:4d:bd:28:e7:5d:5e:4f:96:43:bc: e2:e7:9d:73:92:59:31:b6:81:e4:4c:ce:50:3f:49:8c:aa:4e: fc:d0:53:35:4c:57:0e:f0:18:80:79:f6:ce:b1:48:96:bd:cb: 6f:8c:6c:9e:5c:e9:b2:98:13:67:3f:40:a6:18:da:be:b6:23: 8f:77:fa:71:56:b0:06:ce:76:27:0f:01:54:d3:68:b9:e4:01: 93:79:91:1f:61:16:d6:c8:e2:7d:07:a0:5d:5d:8e:78:fc:be: 4f:6d:36:b8:23:a6:f8:3c:6c:26:43:ab:2b:1d:22:5c:62:79: 00:52:5c:de:7a:d1:c9:cb:94:63:d9:de:3a:58:7c:72:1b:bf: be:5f:25:5f:b0:a0:7f:2e:c7:8c:0e:51:e2:4f:1e:a6:94:64: 41:f8:17:48:b7:c6:ad:ea:46:74:0c:6e:39:ed:38:46:ba:8b: 05:f9:50:b9:17:b3:00:61:e0:ab:75:fb:f2:7d:1b:68:ee:da: 4d:c7:96:0f:20:a8:d4:ed:4a:3d:ee:38:c0:ac:46:2c:22:79: db:47:ee:d2:98:4e:e1:a9:ea:c7:f3:1e:59:63:e5:0b:7b:20: 6d:c2:4f:24 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCMkI5RDMxNTRDQUVE QUYzMTIxRUMwNzYzNzNDREJCRDQxRkI1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/gkqhI7sp7GfmDjBkkGj9Qs8sc/jXuL8jZBB6uxxuLiBoc6lo Qi0f+D96esrZ9iU/5YGxbxsVJH9PobG2w4y5xrjAV2REgeR+yBJdRyWZTWEYM93S IFnMYPlpvaumg1uDUjMwy1tIt3DN6OMXaduBDLSPVJ6TgF7G4EabhR16YnkS90ek 8NSJCrLJxRzR3+WJ+aWvc0+elVCdj5PE1qCM5O7GiME2WN+xK1nsIikDWR8snkb+ gZ5aiVfN+9GQ4zam1b6eoUUgBAJBqzpMxJLlqj17vM8MKtm7J8SYPg2q5l0kgOMJ DmfZKzvXX4lV5jnGzzB+UKcGVGrFMgRl4UGbAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU6yudMVTK7a8xIewHY3PNu9QftZUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzZ5dWRNVlRLN2E4eElld0hZM1BOdTlRZnRaVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBQngwDQYJKoZIhvcNAQELBQADggEB AFc+G7ivpFwP3anqgX9dKOQYKwkYWNvj3sa6Tb0o511eT5ZDvOLnnXOSWTG2geRM zlA/SYyqTvzQUzVMVw7wGIB59s6xSJa9y2+MbJ5c6bKYE2c/QKYY2r62I493+nFW sAbOdicPAVTTaLnkAZN5kR9hFtbI4n0HoF1djnj8vk9tNrgjpvg8bCZDqysdIlxi eQBSXN560cnLlGPZ3jpYfHIbv75fJV+woH8ux4wOUeJPHqaUZEH4F0i3xq3qRnQM bjntOEa6iwX5ULkXswBh4Kt1+/J9G2ju2k3Hlg8gqNTtSj3uOMCsRiwiedtH7tKY TuGp6sfzHllj5Qt7IG3CTyQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:01 2026 by rpki-client