$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9NE9fsUD6ZFdycpS1FnFu5DzvPI.roa File: 9NE9fsUD6ZFdycpS1FnFu5DzvPI.roa (raw, json) Hash identifier: 3W2c/zvjKT0WuIX+3v9mblHPpCaEULlYeQMMW4T9k5Q= Subject key identifier: F4:D1:3D:7E:C5:03:E9:91:5D:C9:CA:52:D4:59:C5:BB:90:F3:BC:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 136A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9NE9fsUD6ZFdycpS1FnFu5DzvPI.roa Signing time: Tue 31 Mar 2026 07:55:31 +0000 ROA not before: Tue 31 Mar 2026 07:55:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4970 (0x136a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=F4D13D7EC503E9915DC9CA52D459C5BB90F3BCF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:be:65:a6:3f:0d:7e:bc:4e:0c:74:d2:78:a3: 1c:11:f8:c0:98:9e:72:7c:8c:6c:2a:98:21:9a:94: 59:09:f8:bc:58:75:41:3d:9c:ff:3d:e3:0a:9e:7b: 69:32:ae:32:e9:1c:ee:fc:86:f7:c9:c9:1b:db:65: a9:f6:44:c7:a4:fc:83:ef:68:93:5d:5f:46:77:c7: 69:51:63:ff:41:a3:c8:dc:36:f8:cd:83:db:b9:89: 1c:23:2d:7a:59:58:7a:fc:5e:35:c8:5c:f1:bf:b9: 76:ba:dc:0d:01:9b:92:b0:fc:0a:ae:d0:db:91:1e: 20:9a:30:ad:de:52:23:f7:53:32:31:b0:6e:02:a7: e3:10:b4:46:8b:a7:09:cc:76:a7:77:37:29:80:67: 52:f1:97:2c:57:12:56:ee:2d:69:db:07:6e:15:d3: 9b:70:8a:01:ad:30:42:a5:e8:92:f1:2d:34:59:e0: 85:ce:82:b2:3c:4e:f4:56:93:89:a4:be:88:5a:65: 38:5d:3a:0a:cb:c9:70:64:d2:c0:23:15:91:8a:10: 33:e1:c6:38:6c:22:50:1c:4a:04:ed:ee:46:c6:5a: f9:79:05:7b:1b:a1:34:ba:d9:e4:55:8e:14:5f:7f: f3:7c:43:0a:5a:6f:00:a6:58:d9:a2:31:fa:32:e2: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D1:3D:7E:C5:03:E9:91:5D:C9:CA:52:D4:59:C5:BB:90:F3:BC:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9NE9fsUD6ZFdycpS1FnFu5DzvPI.roa sbgp-ipAddrBlock: critical IPv4: 1.72.5.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e8:16:d7:13:bd:50:77:e5:d8:24:b0:69:0d:fe:6f:f5:9f: da:98:fa:1c:83:b8:12:41:31:aa:6b:9a:33:fb:cd:9a:a3:a1: 79:2f:41:93:0b:b9:95:5e:88:be:56:12:2e:65:3a:0b:b0:ce: b0:a2:9c:95:ac:b7:ff:e0:8b:54:03:90:b3:34:47:42:38:be: a3:e1:5a:e4:40:c6:f2:b5:ff:e2:7e:76:11:30:77:63:8e:82: 06:d7:1f:98:1a:67:70:5c:73:34:85:b5:7d:9a:17:02:92:73: 65:39:a8:d4:8d:f9:e4:b6:d4:78:eb:ed:b4:55:0a:d6:a2:76: de:c6:55:e8:c1:ac:d4:2e:c3:fd:37:b3:10:c5:2d:f5:8c:87: bc:88:c0:9d:db:2c:8c:ad:59:20:8a:74:df:7d:19:66:67:55: bc:17:7e:1f:93:3a:2a:57:be:e5:c1:22:f1:42:bc:57:6b:69: 1f:0a:67:e2:49:1a:23:d8:fe:19:4f:94:48:11:26:d8:a5:c1: 81:40:cb:34:2b:85:1a:8a:37:2e:4c:a3:76:35:fd:a2:e2:ee: 24:cc:a9:b5:f9:bb:0a:24:e7:2f:1d:46:59:e6:d8:6c:a6:1b: a7:61:c9:3d:ef:3c:9d:9d:69:bd:a8:cd:7a:44:5f:08:a9:8d: 2c:40:62:2b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0RDEzRDdFQzUwM0U5 OTE1REM5Q0E1MkQ0NTlDNUJCOTBGM0JDRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwvmWmPw1+vE4MdNJ4oxwR+MCYnnJ8jGwqmCGalFkJ+LxYdUE9 nP894wqee2kyrjLpHO78hvfJyRvbZan2RMek/IPvaJNdX0Z3x2lRY/9Bo8jcNvjN g9u5iRwjLXpZWHr8XjXIXPG/uXa63A0Bm5Kw/Aqu0NuRHiCaMK3eUiP3UzIxsG4C p+MQtEaLpwnMdqd3NymAZ1LxlyxXElbuLWnbB24V05twigGtMEKl6JLxLTRZ4IXO grI8TvRWk4mkvohaZThdOgrLyXBk0sAjFZGKEDPhxjhsIlAcSgTt7kbGWvl5BXsb oTS62eRVjhRff/N8QwpabwCmWNmiMfoy4o1rAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU9NE9fsUD6ZFdycpS1FnFu5DzvPIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzlORTlmc1VENlpGZHljcFMxRm5GdTVEenZQSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSAUwDQYJKoZIhvcNAQELBQADggEB AJ/oFtcTvVB35dgksGkN/m/1n9qY+hyDuBJBMaprmjP7zZqjoXkvQZMLuZVeiL5W Ei5lOguwzrCinJWst//gi1QDkLM0R0I4vqPhWuRAxvK1/+J+dhEwd2OOggbXH5ga Z3BcczSFtX2aFwKSc2U5qNSN+eS21Hjr7bRVCtaidt7GVejBrNQuw/03sxDFLfWM h7yIwJ3bLIytWSCKdN99GWZnVbwXfh+TOipXvuXBIvFCvFdraR8KZ+JJGiPY/hlP lEgRJtilwYFAyzQrhRqKNy5Mo3Y1/aLi7iTMqbX5uwok5y8dRlnm2GymG6dhyT3v PJ2dab2ozXpEXwipjSxAYis= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:00 2026 by rpki-client