$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AbBi34RAxLO7zXZjse-GOsdc1uI.roa File: AbBi34RAxLO7zXZjse-GOsdc1uI.roa (raw, json) Hash identifier: 4Mlrpbz/bQ8TfEnrjAYZi9o+aZetp8wUQNAUUiIcmdk= Subject key identifier: 01:B0:62:DF:84:40:C4:B3:BB:CD:76:63:B1:EF:86:3A:C7:5C:D6:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1718 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AbBi34RAxLO7zXZjse-GOsdc1uI.roa Signing time: Tue 31 Mar 2026 08:03:09 +0000 ROA not before: Tue 31 Mar 2026 08:03:09 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5912 (0x1718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:09 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=01B062DF8440C4B3BBCD7663B1EF863AC75CD6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:5e:e8:f9:c7:88:33:de:1b:dc:3d:fe:40: 25:5d:8b:dd:7a:74:bf:15:e0:2d:f1:7f:a3:c2:40: d6:d1:bc:f5:71:9f:da:c5:c9:57:90:23:ed:92:37: 26:37:3a:09:24:a6:1e:ac:54:1e:44:fa:59:a6:8c: 6c:ba:25:22:6d:f0:bf:38:66:d4:3d:c8:d3:a1:23: fd:5f:13:89:2f:2c:c1:82:63:f2:0c:75:7b:4d:45: 3c:87:bc:be:8d:13:85:50:44:08:a1:69:af:8d:7e: ce:b3:26:a1:5c:ee:57:40:3a:30:83:95:a5:b0:f4: 7f:b8:63:f3:3c:92:0e:f9:35:c1:8f:95:04:44:c2: 15:29:91:50:e9:ac:78:0e:29:cd:a9:09:96:93:92: cf:b7:51:b9:20:30:7b:2a:99:22:4b:91:97:a4:2d: ca:1a:04:c7:c0:ec:a1:6e:7c:6d:b0:5f:1c:87:aa: 54:8e:07:ef:f1:67:2f:61:1e:83:c7:50:06:ef:a4: 3f:36:00:11:a9:ed:ed:02:da:8d:29:ab:a1:42:9e: e3:83:4b:96:79:96:b0:38:da:04:f3:04:62:58:10: 54:3a:c8:dd:43:33:1e:66:f6:61:25:26:2a:34:2a: 3a:3d:f5:05:67:47:c2:6d:64:46:98:8c:a9:96:e6: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:62:DF:84:40:C4:B3:BB:CD:76:63:B1:EF:86:3A:C7:5C:D6:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AbBi34RAxLO7zXZjse-GOsdc1uI.roa sbgp-ipAddrBlock: critical IPv4: 1.66.24.0/22 Signature Algorithm: sha256WithRSAEncryption 77:e6:cf:e5:bb:17:19:c3:80:09:b2:db:d5:1b:73:26:a2:57: 0d:1d:b7:25:34:99:4e:d6:8d:c9:66:1e:9f:c6:ce:2b:8a:aa: 38:60:b4:1c:54:5f:04:44:1d:e7:f2:5d:fd:d3:b2:9f:c6:62: 9e:d0:22:cb:0b:78:15:a0:15:3c:c0:d0:a9:11:cd:9e:c2:b9: 0a:ac:d4:37:f9:f7:84:26:47:6b:25:9f:9d:44:e6:78:a0:a5: 58:94:e1:dd:e9:33:04:00:53:74:d6:56:34:68:eb:17:0c:20: bd:d4:54:15:9f:3c:86:50:6a:86:8a:72:4f:77:76:fb:bd:00: 34:40:b5:51:64:00:9c:d2:d4:8e:f8:56:2f:40:a8:25:f0:2c: b8:cd:7a:08:dd:6f:b1:43:ba:9c:f2:5a:73:27:fc:46:cf:59: 0f:39:b4:ad:d6:80:9b:bb:66:f4:cf:a9:6f:27:c8:06:c6:22: fc:88:0f:e7:24:3a:d8:7e:c8:eb:12:dc:d2:30:e4:7b:09:af: 48:ae:b1:09:33:0c:d8:40:35:5b:a3:8b:35:1c:95:8d:3d:ce: af:79:7d:08:ff:5e:82:6a:54:91:9e:01:7e:7b:56:8c:f9:ac: 12:9d:c6:70:71:e8:b1:f2:49:a0:0a:05:55:9b:51:8a:49:b1: b0:e9:64:06 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFxgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAxQjA2MkRGODQ0MEM0 QjNCQkNENzY2M0IxRUY4NjNBQzc1Q0Q2RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvRl7o+ceIM94b3D3+QCVdi916dL8V4C3xf6PCQNbRvPVxn9rF yVeQI+2SNyY3Ogkkph6sVB5E+lmmjGy6JSJt8L84ZtQ9yNOhI/1fE4kvLMGCY/IM dXtNRTyHvL6NE4VQRAihaa+Nfs6zJqFc7ldAOjCDlaWw9H+4Y/M8kg75NcGPlQRE whUpkVDprHgOKc2pCZaTks+3UbkgMHsqmSJLkZekLcoaBMfA7KFufG2wXxyHqlSO B+/xZy9hHoPHUAbvpD82ABGp7e0C2o0pq6FCnuODS5Z5lrA42gTzBGJYEFQ6yN1D Mx5m9mElJio0Kjo99QVnR8JtZEaYjKmW5o3tAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAbBi34RAxLO7zXZjse+GOsdc1uIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0FiQmkzNFJBeExPN3pYWmpzZS1HT3NkYzF1SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBQhgwDQYJKoZIhvcNAQELBQADggEB AHfmz+W7FxnDgAmy29UbcyaiVw0dtyU0mU7WjclmHp/GziuKqjhgtBxUXwREHefy Xf3Tsp/GYp7QIssLeBWgFTzA0KkRzZ7CuQqs1Df594QmR2sln51E5nigpViU4d3p MwQAU3TWVjRo6xcMIL3UVBWfPIZQaoaKck93dvu9ADRAtVFkAJzS1I74Vi9AqCXw LLjNegjdb7FDupzyWnMn/EbPWQ85tK3WgJu7ZvTPqW8nyAbGIvyID+ckOth+yOsS 3NIw5HsJr0iusQkzDNhANVujizUclY09zq95fQj/XoJqVJGeAX57Voz5rBKdxnBx 6LHySaAKBVWbUYpJsbDpZAY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:41 2026 by rpki-client