$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7i9LzMc35-1_bKlIMeT7zp_CnlI.roa File: 7i9LzMc35-1_bKlIMeT7zp_CnlI.roa (raw, json) Hash identifier: Hxsq/pkTC2qjQo18d25TmzhWxevcwtMKhxvjmQZ3Bto= Subject key identifier: EE:2F:4B:CC:C7:37:E7:ED:7F:6C:A9:48:31:E4:FB:CE:9F:C2:9E:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1570 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7i9LzMc35-1_bKlIMeT7zp_CnlI.roa Signing time: Tue 31 Mar 2026 07:59:39 +0000 ROA not before: Tue 31 Mar 2026 07:59:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5488 (0x1570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EE2F4BCCC737E7ED7F6CA94831E4FBCE9FC29E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:89:fd:15:49:bd:65:bd:5b:e2:3c:8e:21: 3e:cc:fd:a6:00:f5:58:ed:32:2a:c7:7b:12:c3:a9: c1:5e:7f:a9:52:07:5c:dc:ed:04:8e:27:2d:84:f8: de:bb:91:a4:36:0c:7d:30:a0:83:f1:cd:83:7e:6a: 29:00:9a:d5:95:7a:0b:af:c2:2e:3b:1f:42:00:dd: 44:2c:ef:c6:ee:4e:dd:33:0b:b0:e3:c0:63:f8:3c: d5:6a:cc:b0:2f:1c:6e:88:cb:e1:98:06:37:2e:13: ec:e1:9a:fb:94:c8:e6:ea:48:a6:d5:64:db:b6:ec: 98:66:97:6b:f3:00:d5:33:7a:b1:71:f3:ea:51:03: dd:f1:84:3e:e5:f4:7e:6b:83:84:79:c2:58:f3:0c: fa:c5:d9:7f:96:81:88:fd:67:16:2e:1a:b9:d2:93: 5a:72:99:9d:ef:8e:5f:78:bb:6c:90:d1:d2:c6:88: ac:9b:17:41:1f:c3:08:06:cb:bd:57:03:5f:4d:c0: 39:ac:db:ed:64:73:b8:78:d8:ba:dd:ea:23:f0:e6: f1:39:2f:5e:c4:c1:fe:11:b2:3e:79:b9:69:73:ed: 3c:bf:ec:28:49:4e:37:f9:4c:48:ea:35:de:50:b5: 97:09:87:de:bd:fd:c8:10:fa:0a:00:b4:69:77:17: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2F:4B:CC:C7:37:E7:ED:7F:6C:A9:48:31:E4:FB:CE:9F:C2:9E:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7i9LzMc35-1_bKlIMeT7zp_CnlI.roa sbgp-ipAddrBlock: critical IPv4: 1.79.104.0/21 Signature Algorithm: sha256WithRSAEncryption e0:48:14:63:24:5f:db:0a:9f:8b:9f:3b:28:50:68:0d:16:b2: fa:a4:f1:3c:69:ad:02:1f:2c:97:c1:26:d7:62:b7:9a:b5:68: 84:a9:2c:06:4f:5e:61:6c:8e:3f:74:78:9b:2b:63:5e:a8:c8: b5:11:14:34:91:3c:7e:03:16:15:17:da:f2:61:9c:36:f9:5e: 03:79:79:ce:c1:9d:2d:85:74:50:a8:78:85:e3:a6:e7:9d:30: 6a:7a:62:5c:79:a8:12:a8:02:34:ce:f2:93:81:8b:94:aa:a8: b2:78:16:04:b4:54:e0:1f:98:b9:55:20:6b:5f:89:14:0a:ba: ea:87:ee:ee:1a:35:7b:a1:f0:99:5a:f4:fe:66:e1:37:6f:bb: 0b:ae:aa:7d:25:47:c2:2c:45:b0:c3:9c:76:f4:b1:29:54:d6: 7c:25:1f:6e:43:dc:bd:85:c5:31:5d:fc:3a:e2:44:85:a0:b7: 7d:d5:2d:ed:bd:72:6c:93:41:d6:69:b6:09:42:69:e1:0d:19: a4:46:cf:82:d4:d8:b6:0d:00:bd:83:99:37:96:3e:b2:bd:07: dc:41:2f:ee:c9:97:ea:cb:81:c2:9f:ea:e0:05:e8:f3:df:96: 6d:52:75:aa:61:23:9d:45:78:1f:6a:a5:72:79:92:f0:87:56: 87:88:50:96 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVFMkY0QkNDQzczN0U3 RUQ3RjZDQTk0ODMxRTRGQkNFOUZDMjlFNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCibon9FUm9Zb1b4jyOIT7M/aYA9VjtMirHexLDqcFef6lSB1zc 7QSOJy2E+N67kaQ2DH0woIPxzYN+aikAmtWVeguvwi47H0IA3UQs78buTt0zC7Dj wGP4PNVqzLAvHG6Iy+GYBjcuE+zhmvuUyObqSKbVZNu27Jhml2vzANUzerFx8+pR A93xhD7l9H5rg4R5wljzDPrF2X+WgYj9ZxYuGrnSk1pymZ3vjl94u2yQ0dLGiKyb F0EfwwgGy71XA19NwDms2+1kc7h42Lrd6iPw5vE5L17Ewf4Rsj55uWlz7Ty/7ChJ Tjf5TEjqNd5QtZcJh969/cgQ+goAtGl3FyZfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU7i9LzMc35+1/bKlIMeT7zp/CnlIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzdpOUx6TWMzNS0xX2JLbElNZVQ3enBfQ25sSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBT2gwDQYJKoZIhvcNAQELBQADggEB AOBIFGMkX9sKn4ufOyhQaA0Wsvqk8TxprQIfLJfBJtdit5q1aISpLAZPXmFsjj90 eJsrY16oyLURFDSRPH4DFhUX2vJhnDb5XgN5ec7BnS2FdFCoeIXjpuedMGp6Ylx5 qBKoAjTO8pOBi5SqqLJ4FgS0VOAfmLlVIGtfiRQKuuqH7u4aNXuh8Jla9P5m4Tdv uwuuqn0lR8IsRbDDnHb0sSlU1nwlH25D3L2FxTFd/DriRIWgt33VLe29cmyTQdZp tglCaeENGaRGz4LU2LYNAL2DmTeWPrK9B9xBL+7Jl+rLgcKf6uAF6PPflm1Sdaph I51FeB9qpXJ5kvCHVoeIUJY= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:38 2026 by rpki-client