$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DBp7bFPbhjbe7jGmz3YB-v69g3w.roa File: DBp7bFPbhjbe7jGmz3YB-v69g3w.roa (raw, json) Hash identifier: oCLFWzwpMGcbwAkBd71eApaSWpDEVdKd6DXhbQNPtiM= Subject key identifier: 0C:1A:7B:6C:53:DB:86:36:DE:EE:31:A6:CF:76:01:FA:FE:BD:83:7C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13A7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DBp7bFPbhjbe7jGmz3YB-v69g3w.roa Signing time: Tue 31 Mar 2026 07:56:01 +0000 ROA not before: Tue 31 Mar 2026 07:56:01 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5031 (0x13a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:01 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=0C1A7B6C53DB8636DEEE31A6CF7601FAFEBD837C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:af:b6:b2:01:80:aa:fb:f1:1b:83:14:b4: 1b:d2:50:70:45:4e:85:d0:65:f2:06:a9:71:e8:53: f4:55:2a:1c:50:63:d1:76:30:33:72:b2:5f:62:30: ae:21:bf:4c:6c:67:16:e6:bd:f5:73:4b:7c:10:eb: a7:cd:9e:e3:0b:1c:4b:5b:d6:5f:ac:bf:ff:1a:d1: bf:15:b9:20:d4:db:0e:5e:e7:82:d3:5a:f9:60:b4: ab:bb:69:e5:fc:d5:8d:c5:15:62:a7:12:bd:07:54: c9:da:bd:73:b0:f8:29:67:e3:a7:51:00:b5:e7:66: 39:a1:50:80:4b:59:f7:34:44:f6:a6:e1:09:eb:8c: 97:d5:98:cc:72:6b:4b:ca:da:2f:ca:2f:60:39:43: 18:0f:a8:00:60:61:5f:13:2a:bd:52:38:2a:fc:e0: 17:07:28:a0:ac:6c:45:5b:73:84:3c:0f:2e:5a:fb: 41:69:59:2b:2e:27:f7:b4:b1:44:4e:6d:07:42:73: 88:d1:9d:6d:d7:4c:b8:fe:32:16:b1:98:f4:5f:b4: 56:7b:1c:83:4b:fc:be:66:f1:cd:4c:f3:3f:43:a9: 80:53:ac:df:9d:f3:a2:5f:c6:14:85:96:4e:77:cb: b1:3c:ea:2b:5e:43:d0:70:8f:41:eb:59:a5:80:63: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1A:7B:6C:53:DB:86:36:DE:EE:31:A6:CF:76:01:FA:FE:BD:83:7C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DBp7bFPbhjbe7jGmz3YB-v69g3w.roa sbgp-ipAddrBlock: critical IPv4: 1.72.8.0/24 Signature Algorithm: sha256WithRSAEncryption 80:9e:0b:42:97:03:49:4f:0f:a2:16:a8:0a:53:77:8b:f5:1e: 43:20:71:8b:62:9c:e8:a0:1e:b9:43:b8:6b:cb:e9:8d:09:1d: 3d:69:d2:79:cf:9e:7a:e9:c2:15:33:32:3f:38:a0:67:3c:c5: ef:22:70:cd:ce:90:e7:a6:3b:16:94:55:7b:41:43:62:e0:e3: 54:9b:6d:22:94:80:a7:65:26:4e:78:b8:fc:ed:e5:27:bc:ad: 96:3e:dd:8c:f6:7c:08:23:e7:17:c8:fd:06:a6:0b:80:78:c7: e8:30:40:0e:48:c9:3e:1d:6b:49:56:b0:51:39:dc:72:da:90: fa:15:10:80:11:83:4d:0a:9b:ee:e9:c9:7e:0f:4f:01:47:15: 54:d0:eb:f9:c0:be:1e:c2:b4:0d:2c:db:cd:ff:f1:b9:0d:3b: 12:81:aa:82:56:a6:47:75:37:4d:26:b5:2e:82:a7:61:ca:9a: dc:96:14:40:91:73:cc:3a:2b:cb:db:29:51:ff:8d:31:03:2a: 9c:2c:b3:f3:d5:87:0c:5a:2a:5e:1f:80:ad:8e:60:5a:e0:6f: 09:17:32:b0:2c:e1:28:bb:c6:0d:71:2c:f5:d8:6f:32:e7:43: 07:76:eb:89:90:c8:eb:ea:39:54:12:29:f0:b0:12:8b:f8:35: a0:17:ce:43 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDMUE3QjZDNTNEQjg2 MzZERUVFMzFBNkNGNzYwMUZBRkVCRDgzN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCK6+2sgGAqvvxG4MUtBvSUHBFToXQZfIGqXHoU/RVKhxQY9F2 MDNysl9iMK4hv0xsZxbmvfVzS3wQ66fNnuMLHEtb1l+sv/8a0b8VuSDU2w5e54LT WvlgtKu7aeX81Y3FFWKnEr0HVMnavXOw+Cln46dRALXnZjmhUIBLWfc0RPam4Qnr jJfVmMxya0vK2i/KL2A5QxgPqABgYV8TKr1SOCr84BcHKKCsbEVbc4Q8Dy5a+0Fp WSsuJ/e0sURObQdCc4jRnW3XTLj+MhaxmPRftFZ7HINL/L5m8c1M8z9DqYBTrN+d 86JfxhSFlk53y7E86iteQ9Bwj0HrWaWAYyg/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUDBp7bFPbhjbe7jGmz3YB+v69g3wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0RCcDdiRlBiaGpiZTdqR216M1lCLXY2OWczdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSAgwDQYJKoZIhvcNAQELBQADggEB AICeC0KXA0lPD6IWqApTd4v1HkMgcYtinOigHrlDuGvL6Y0JHT1p0nnPnnrpwhUz Mj84oGc8xe8icM3OkOemOxaUVXtBQ2Lg41SbbSKUgKdlJk54uPzt5Se8rZY+3Yz2 fAgj5xfI/QamC4B4x+gwQA5IyT4da0lWsFE53HLakPoVEIARg00Km+7pyX4PTwFH FVTQ6/nAvh7CtA0s283/8bkNOxKBqoJWpkd1N00mtS6Cp2HKmtyWFECRc8w6K8vb KVH/jTEDKpwss/PVhwxaKl4fgK2OYFrgbwkXMrAs4Si7xg1xLPXYbzLnQwd264mQ yOvqOVQSKfCwEov4NaAXzkM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:42 2026 by rpki-client