$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AYn6CITMebn3xWtEoF2_MEVa4aE.roa File: AYn6CITMebn3xWtEoF2_MEVa4aE.roa (raw, json) Hash identifier: qEjVAHoB3WFahYe0+qyNimvHAjJWwEil8eiQMcaeB+0= Subject key identifier: 01:89:FA:08:84:CC:79:B9:F7:C5:6B:44:A0:5D:BF:30:45:5A:E1:A1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 153E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AYn6CITMebn3xWtEoF2_MEVa4aE.roa Signing time: Tue 31 Mar 2026 07:59:15 +0000 ROA not before: Tue 31 Mar 2026 07:59:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5438 (0x153e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0189FA0884CC79B9F7C56B44A05DBF30455AE1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:e7:2e:96:17:b0:e6:e2:db:6b:92:8c:3b: d4:b5:4f:06:d2:50:f2:f7:80:5a:2a:e7:b2:dd:a3: c7:af:72:5a:00:6e:18:15:f4:c2:45:2a:db:8f:ec: 9c:cd:f9:63:e5:a6:f4:d3:20:80:06:34:a4:0b:05: d9:05:37:21:60:3d:6f:83:85:b2:75:9a:ce:88:b8: 27:b0:0b:6f:53:df:2b:7a:bd:15:91:71:5c:c2:08: 9c:b8:70:a4:63:35:92:f7:99:8a:e4:f1:27:e8:1c: 36:e8:85:00:e0:50:4c:5e:2a:06:91:86:20:0f:71: 69:a2:98:7a:a1:a8:78:2e:a5:34:a2:3b:cf:87:97: 24:66:37:6f:3c:e7:9b:35:21:5c:ba:d4:77:70:33: 50:a2:95:d1:69:da:52:ca:9c:ec:35:78:32:7b:03: 39:c1:c4:1b:82:30:73:5f:8b:98:90:90:b9:26:3c: 29:86:ae:0b:79:48:3a:ce:d5:ea:1e:ab:09:51:b6: 9b:38:71:8c:9f:f6:06:a5:42:3f:8c:f5:3d:6e:1d: b6:8d:3a:99:f7:0c:93:67:ca:bb:9f:32:ea:a9:d1: 93:21:92:c0:70:0d:30:9e:4f:c4:f1:bf:c8:53:c6: fd:96:7c:e9:ff:83:9c:d0:51:a0:66:f7:b3:c2:a6: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:FA:08:84:CC:79:B9:F7:C5:6B:44:A0:5D:BF:30:45:5A:E1:A1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AYn6CITMebn3xWtEoF2_MEVa4aE.roa sbgp-ipAddrBlock: critical IPv4: 220.210.20.0/23 Signature Algorithm: sha256WithRSAEncryption b1:76:e1:c0:01:f6:07:3a:55:5c:73:ab:2a:dd:9c:49:33:ef: 9c:1d:06:13:9b:94:39:c2:9f:05:7b:40:71:f2:65:68:33:08: b0:dd:2c:68:1a:93:a7:3e:bb:2c:45:90:4c:69:e3:48:d0:8c: c8:b2:32:06:6c:5d:86:69:86:26:64:65:06:f3:a3:16:d2:9f: 5c:2b:1b:cd:0a:50:7e:72:c7:5d:a4:73:9f:08:a0:5c:08:fa: a6:85:f9:b4:20:d0:a4:27:ed:9e:09:e6:6d:6b:76:e7:78:ff: 38:af:ec:81:f5:2e:09:7e:9a:4b:dc:fb:b7:16:1f:16:83:81: 7b:9d:e4:65:4a:d7:34:f0:5c:47:8f:1c:22:9b:44:b4:c1:79: 96:86:9d:5a:53:95:a7:a3:55:52:d7:fb:2a:13:7f:e1:6c:67: a5:e0:19:7f:fb:f6:43:67:1c:a2:13:4c:30:48:68:20:0d:66: 8c:b0:a5:c3:3b:93:c6:68:10:6b:5d:bb:0e:54:0b:6e:81:c2: 8f:2d:82:73:8b:f5:99:0c:c6:1f:c5:21:89:8a:51:1a:25:47: 0a:72:82:2f:49:60:c6:b3:dd:db:03:da:4d:a7:b8:2a:71:e9: 4d:32:7a:c8:a9:04:10:5a:0c:3a:93:3c:31:9b:61:32:eb:44: 78:66:5c:c0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAxODlGQTA4ODRDQzc5 QjlGN0M1NkI0NEEwNURCRjMwNDU1QUUxQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH9uculhew5uLba5KMO9S1TwbSUPL3gFoq57Ldo8evcloAbhgV 9MJFKtuP7JzN+WPlpvTTIIAGNKQLBdkFNyFgPW+DhbJ1ms6IuCewC29T3yt6vRWR cVzCCJy4cKRjNZL3mYrk8SfoHDbohQDgUExeKgaRhiAPcWmimHqhqHgupTSiO8+H lyRmN28855s1IVy61HdwM1CildFp2lLKnOw1eDJ7AznBxBuCMHNfi5iQkLkmPCmG rgt5SDrO1eoeqwlRtps4cYyf9galQj+M9T1uHbaNOpn3DJNnyrufMuqp0ZMhksBw DTCeT8Txv8hTxv2WfOn/g5zQUaBm97PCpuWzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAYn6CITMebn3xWtEoF2/MEVa4aEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0FZbjZDSVRNZWJuM3hXdEVvRjJfTUVWYTRhRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0hQwDQYJKoZIhvcNAQELBQADggEB ALF24cAB9gc6VVxzqyrdnEkz75wdBhOblDnCnwV7QHHyZWgzCLDdLGgak6c+uyxF kExp40jQjMiyMgZsXYZphiZkZQbzoxbSn1wrG80KUH5yx12kc58IoFwI+qaF+bQg 0KQn7Z4J5m1rdud4/ziv7IH1Lgl+mkvc+7cWHxaDgXud5GVK1zTwXEePHCKbRLTB eZaGnVpTlaejVVLX+yoTf+FsZ6XgGX/79kNnHKITTDBIaCANZoywpcM7k8ZoEGtd uw5UC26Bwo8tgnOL9ZkMxh/FIYmKURolRwpygi9JYMaz3dsD2k2nuCpx6U0yesip BBBaDDqTPDGbYTLrRHhmXMA= -----END CERTIFICATE-----Generated at Tue Apr 7 22:23:27 2026 by rpki-client