$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7dPTz0WWAyaTGG5OtFOLpOff3ic.roa File: 7dPTz0WWAyaTGG5OtFOLpOff3ic.roa (raw, json) Hash identifier: yMs/BGGnMZF7y1r0Fpom7MaE4iPvr3+Qo+tPV2LAgno= Subject key identifier: ED:D3:D3:CF:45:96:03:26:93:18:6E:4E:B4:53:8B:A4:E7:DF:DE:27 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1741 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7dPTz0WWAyaTGG5OtFOLpOff3ic.roa Signing time: Tue 31 Mar 2026 08:03:27 +0000 ROA not before: Tue 31 Mar 2026 08:03:27 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5953 (0x1741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:27 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EDD3D3CF4596032693186E4EB4538BA4E7DFDE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:3b:42:29:8f:6c:a9:71:25:cb:13:85:f9: ef:ce:a0:ec:ba:55:8d:3e:18:16:cc:ef:82:96:ec: 7d:a5:3c:dc:e7:ca:79:21:b1:ff:74:3a:e2:51:58: 3b:88:49:a3:a2:5d:f5:dc:95:ae:d3:c8:31:1e:00: e8:db:87:09:f1:6a:cb:69:d3:9b:c1:7c:24:08:83: e9:99:93:4a:05:00:25:cc:c3:9c:b2:8a:5a:91:19: 8e:ab:20:fc:08:72:6b:a0:39:74:c4:69:30:cf:2d: 12:66:3f:b5:87:43:c4:8c:71:ce:b2:16:b3:b8:40: 6b:14:c3:ca:c6:d0:78:12:af:09:7e:f3:c3:69:16: a6:24:92:6a:f0:a2:e9:eb:07:65:43:bf:46:d0:4c: 41:c0:96:51:bb:d2:97:e0:d5:99:8a:2f:35:fa:d9: 8b:ae:43:c2:3c:fa:b8:78:a5:0f:12:ba:ee:f1:e4: c1:39:f5:fc:56:f9:90:59:b8:77:9a:c0:7a:c0:82: ae:c5:48:70:b8:16:7e:5a:81:ec:44:6e:15:ff:b8: b4:9b:7e:6e:10:0d:92:84:7c:1f:78:f6:ce:33:11: e7:29:60:6e:cd:b4:02:1f:70:30:cf:dd:94:46:eb: 04:7a:e4:c6:22:c7:f3:43:06:41:49:57:2a:71:b7: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:D3:CF:45:96:03:26:93:18:6E:4E:B4:53:8B:A4:E7:DF:DE:27 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7dPTz0WWAyaTGG5OtFOLpOff3ic.roa sbgp-ipAddrBlock: critical IPv4: 1.76.176.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:c4:b0:25:bd:ff:56:3d:bf:eb:68:39:9e:1d:8f:71:03:2a: b6:7b:72:72:d7:28:10:37:b2:95:3f:a0:41:1f:76:1a:b4:2d: 16:35:79:bf:e1:f8:9a:6c:f0:53:3a:96:d9:a0:6e:cf:1d:c0: 3c:93:14:90:84:39:81:01:94:00:18:45:89:56:5a:a5:be:c1: 74:93:13:15:7d:c8:bd:e7:fa:25:a0:06:24:5e:7c:75:88:91: 48:a6:25:ec:2e:8b:fd:20:72:e2:a0:88:99:df:76:ee:10:37: 09:49:c6:d2:34:28:6b:e8:1d:b9:ab:40:df:76:49:74:60:cd: 70:f6:e3:fd:6c:d8:b6:b4:e4:f7:fe:1f:ab:b0:dd:fb:60:02: 33:94:03:6f:b1:df:d8:23:f2:6e:f8:f8:3e:fb:b0:21:af:70: ef:f2:b3:f4:ab:dd:2a:18:51:0a:3e:ed:96:6d:b6:4b:54:01: 6c:40:60:f1:ba:28:49:ad:03:db:01:4c:0d:82:06:35:6a:af: d0:6c:2f:2c:3f:18:47:79:8d:e6:0b:bb:cf:07:6f:4d:9a:8a: d5:68:17:24:55:c7:44:17:cd:4a:c3:2f:df:0d:7b:0b:98:6b: 5e:fc:d9:1e:12:59:0e:01:7d:ce:67:30:15:2b:72:2c:83:f4: 52:24:af:9d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVERDNEM0NGNDU5NjAz MjY5MzE4NkU0RUI0NTM4QkE0RTdERkRFMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAyTtCKY9sqXElyxOF+e/OoOy6VY0+GBbM74KW7H2lPNznynkh sf90OuJRWDuISaOiXfXcla7TyDEeAOjbhwnxastp05vBfCQIg+mZk0oFACXMw5yy ilqRGY6rIPwIcmugOXTEaTDPLRJmP7WHQ8SMcc6yFrO4QGsUw8rG0HgSrwl+88Np FqYkkmrwounrB2VDv0bQTEHAllG70pfg1ZmKLzX62YuuQ8I8+rh4pQ8Suu7x5ME5 9fxW+ZBZuHeawHrAgq7FSHC4Fn5agexEbhX/uLSbfm4QDZKEfB949s4zEecpYG7N tAIfcDDP3ZRG6wR65MYix/NDBkFJVypxt70lAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU7dPTz0WWAyaTGG5OtFOLpOff3icwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzdkUFR6MFdXQXlhVEdHNU90Rk9McE9mZjNpYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQBTLAwDQYJKoZIhvcNAQELBQADggEB ABrEsCW9/1Y9v+toOZ4dj3EDKrZ7cnLXKBA3spU/oEEfdhq0LRY1eb/h+Jps8FM6 ltmgbs8dwDyTFJCEOYEBlAAYRYlWWqW+wXSTExV9yL3n+iWgBiRefHWIkUimJewu i/0gcuKgiJnfdu4QNwlJxtI0KGvoHbmrQN92SXRgzXD24/1s2La05Pf+H6uw3ftg AjOUA2+x39gj8m74+D77sCGvcO/ys/Sr3SoYUQo+7ZZttktUAWxAYPG6KEmtA9sB TA2CBjVqr9BsLyw/GEd5jeYLu88Hb02aitVoFyRVx0QXzUrDL98NewuYa1782R4S WQ4Bfc5nMBUrciyD9FIkr50= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:09 2026 by rpki-client