$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8cCAScsP-tzyW44Nc5HjmpTY2Y4.roa File: 8cCAScsP-tzyW44Nc5HjmpTY2Y4.roa (raw, json) Hash identifier: twkEzjcNDgg12di9dQQV9gLPt8UwEA5kvWqXxv5pICs= Subject key identifier: F1:C0:80:49:CB:0F:FA:DC:F2:5B:8E:0D:73:91:E3:9A:94:D8:D9:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1563 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8cCAScsP-tzyW44Nc5HjmpTY2Y4.roa Signing time: Tue 31 Mar 2026 07:59:33 +0000 ROA not before: Tue 31 Mar 2026 07:59:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5475 (0x1563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F1C08049CB0FFADCF25B8E0D7391E39A94D8D98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:4d:7d:0a:b4:49:77:40:2b:82:db:10:ba: f0:7b:ca:81:77:79:91:ba:8f:b7:e2:24:9f:b1:dc: 45:0a:ca:15:6f:96:8b:dd:36:b3:35:cb:d4:96:a8: 66:e2:59:26:92:d9:75:6d:fc:d0:1d:eb:b3:28:30: 86:ec:8b:e4:5e:01:35:6c:83:9b:86:f1:d1:20:cd: c5:85:30:a9:1e:d9:d1:c2:6e:21:02:df:d7:46:ba: b4:d6:0c:b4:41:b1:42:bd:54:b0:2e:31:ce:bc:08: 9d:83:a2:55:c1:df:7b:42:a6:57:ef:32:c0:a9:18: b8:c3:66:d5:4e:6c:41:29:00:3b:c2:e3:38:40:5e: 96:93:7f:ba:89:bc:30:f0:88:a8:aa:3a:69:6b:b3: 8c:23:b0:5d:19:eb:ca:62:e5:b5:64:91:a6:00:c6: 94:36:0a:f6:5c:39:68:52:db:d8:18:4b:95:f4:87: f7:52:dd:82:bd:73:f2:08:00:c9:a3:7a:f1:1e:c6: 96:3a:89:84:17:8b:62:4f:09:1c:0b:e3:20:56:9c: c0:04:26:fb:87:af:5f:ef:73:49:20:db:2b:fb:af: 27:7e:66:43:36:92:1a:5d:80:6f:ab:53:a0:e7:0b: 25:a0:ea:9b:b3:49:8e:92:76:fc:28:47:f8:b5:6f: a2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C0:80:49:CB:0F:FA:DC:F2:5B:8E:0D:73:91:E3:9A:94:D8:D9:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8cCAScsP-tzyW44Nc5HjmpTY2Y4.roa sbgp-ipAddrBlock: critical IPv4: 220.210.25.0/24 Signature Algorithm: sha256WithRSAEncryption 59:85:e3:64:b0:0b:a4:cb:2a:d8:e4:56:f0:6d:70:28:6b:aa: 9f:db:85:82:2d:0f:16:3b:e5:ef:d6:5d:96:db:ed:e7:75:73: 83:34:4a:9e:8f:f8:c1:db:83:b4:3f:f0:f9:5e:90:ee:23:5f: a7:63:75:cb:55:38:a5:49:b4:79:a6:1a:60:e7:77:66:9a:12: 4f:06:7e:3a:f3:37:5c:15:15:10:10:d2:96:db:31:aa:a7:bc: 51:77:f9:3b:4f:82:c0:3a:e7:64:a6:2e:10:71:4f:a9:32:61: d6:ac:4e:bf:5d:03:7a:83:d6:eb:56:76:8f:d1:86:22:cc:a6: d7:c2:c6:16:19:41:0e:4b:9f:a2:ed:0e:53:ad:46:b5:31:e9: 56:04:98:06:fe:e0:86:9f:10:01:b2:d2:63:ef:77:0a:5d:e9: 13:3d:c2:93:f3:cf:41:05:67:85:c6:b5:4c:8c:9b:96:a6:b7: 8a:8b:dc:6d:cc:84:c4:23:b5:a5:59:01:c2:29:34:1d:72:a6: f0:56:c8:24:73:2f:8e:bf:8b:0e:ec:4e:8b:ee:af:ab:da:66: 8a:23:fd:65:2d:43:61:5c:82:27:6f:29:81:36:99:a7:72:a4: 17:98:1f:9d:91:1b:4d:d7:49:d1:08:d6:44:bc:dd:86:fe:3b: bc:2a:ef:1d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYxQzA4MDQ5Q0IwRkZB RENGMjVCOEUwRDczOTFFMzlBOTREOEQ5OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK1U19CrRJd0ArgtsQuvB7yoF3eZG6j7fiJJ+x3EUKyhVvlovd NrM1y9SWqGbiWSaS2XVt/NAd67MoMIbsi+ReATVsg5uG8dEgzcWFMKke2dHCbiEC 39dGurTWDLRBsUK9VLAuMc68CJ2DolXB33tCplfvMsCpGLjDZtVObEEpADvC4zhA XpaTf7qJvDDwiKiqOmlrs4wjsF0Z68pi5bVkkaYAxpQ2CvZcOWhS29gYS5X0h/dS 3YK9c/IIAMmjevEexpY6iYQXi2JPCRwL4yBWnMAEJvuHr1/vc0kg2yv7ryd+ZkM2 khpdgG+rU6DnCyWg6puzSY6SdvwoR/i1b6LDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU8cCAScsP+tzyW44Nc5HjmpTY2Y4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzhjQ0FTY3NQLXR6eVc0NE5jNUhqbXBUWTJZNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADc0hkwDQYJKoZIhvcNAQELBQADggEB AFmF42SwC6TLKtjkVvBtcChrqp/bhYItDxY75e/WXZbb7ed1c4M0Sp6P+MHbg7Q/ 8PlekO4jX6djdctVOKVJtHmmGmDnd2aaEk8GfjrzN1wVFRAQ0pbbMaqnvFF3+TtP gsA652SmLhBxT6kyYdasTr9dA3qD1utWdo/RhiLMptfCxhYZQQ5Ln6LtDlOtRrUx 6VYEmAb+4IafEAGy0mPvdwpd6RM9wpPzz0EFZ4XGtUyMm5amt4qL3G3MhMQjtaVZ AcIpNB1ypvBWyCRzL46/iw7sTovur6vaZooj/WUtQ2FcgidvKYE2madypBeYH52R G03XSdEI1kS83Yb+O7wq7x0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:47 2026 by rpki-client