$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GcPELldqfF4bI7WmxEXkMP1DAJw.roa File: GcPELldqfF4bI7WmxEXkMP1DAJw.roa (raw, json) Hash identifier: wyOItc1b5FjKs4cXxSzdTlPAy0dq/E4Ksg88uW7mVSg= Subject key identifier: 19:C3:C4:2E:57:6A:7C:5E:1B:23:B5:A6:C4:45:E4:30:FD:43:00:9C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1396 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GcPELldqfF4bI7WmxEXkMP1DAJw.roa Signing time: Tue 31 Mar 2026 07:55:54 +0000 ROA not before: Tue 31 Mar 2026 07:55:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5014 (0x1396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=19C3C42E576A7C5E1B23B5A6C445E430FD43009C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:da:8e:45:65:63:7b:f2:cb:be:90:13:fb: 6e:ea:18:3f:04:cb:a3:db:a8:93:e4:21:7e:bb:fc: 26:15:18:40:01:70:b2:bc:cc:9d:52:a3:19:5b:64: 80:b1:a1:1f:73:30:25:0b:44:46:18:2a:d0:3d:c3: 65:e5:bf:2a:90:48:cb:c0:5c:05:38:33:3c:e2:80: 9a:df:ae:2a:a7:d9:4f:49:c7:e6:68:9e:c1:43:c0: ca:c5:11:dc:71:40:ab:d8:29:8f:1a:0e:80:9f:fa: b2:1c:bf:bf:51:52:76:f7:aa:be:19:44:2e:f0:d4: d6:b1:56:83:ac:14:c1:e9:c3:91:1b:c4:2c:da:f7: 72:ed:c4:3a:e8:e0:3a:b8:16:b9:2f:dc:c1:77:98: d7:64:f3:26:85:67:1f:10:67:0d:d4:7d:61:08:1b: 6b:cf:1f:27:5e:e5:91:05:a4:8b:a1:78:ad:bf:00: 4c:9f:2e:4f:aa:f8:e1:ae:cf:ae:21:47:0d:90:d9: e5:57:51:d9:31:81:7e:8e:67:ef:20:c0:80:95:8c: 6f:52:9f:5e:01:56:8f:04:9c:cf:7c:37:9a:22:a6: 04:78:e8:d4:5e:bb:d5:07:e7:4a:a1:74:3c:d9:db: 4d:b4:8b:e6:18:26:d6:c6:88:37:5e:e1:ad:be:af: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C3:C4:2E:57:6A:7C:5E:1B:23:B5:A6:C4:45:E4:30:FD:43:00:9C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GcPELldqfF4bI7WmxEXkMP1DAJw.roa sbgp-ipAddrBlock: critical IPv4: 1.66.96.0/22 Signature Algorithm: sha256WithRSAEncryption 99:50:70:4e:0f:a6:fb:ef:68:97:86:da:a5:f7:68:a5:e8:99: 01:cc:ec:8b:86:97:cf:f2:02:bb:65:c3:5d:eb:0c:91:08:c7: 6c:ca:75:ec:45:d9:dd:f3:76:8d:68:aa:3f:f5:cd:01:20:ef: 64:a3:21:b1:e5:1f:08:2a:af:83:22:ad:ec:2f:88:94:40:f4: 54:88:23:5c:15:af:6d:e8:42:ee:2b:c5:5c:80:b1:0b:49:73: 71:af:da:d7:bc:cb:9c:28:3d:9d:d9:c2:8e:5d:8b:51:8a:57: 39:33:76:b3:cf:0f:82:7c:fe:a0:fc:f2:63:33:38:5b:cd:07: d4:1e:65:48:4d:99:e0:59:74:12:3d:0c:2e:a7:20:a7:48:b3: 1b:94:42:0a:2c:14:a2:17:dc:d6:f1:f2:e5:d3:5e:63:76:54: 84:1d:4f:11:5d:11:24:71:bc:5f:72:6f:99:0d:ac:51:64:f1: cb:d0:8b:08:56:cd:3e:61:11:09:0b:84:73:ff:76:4c:ac:71: 1a:3a:4e:6a:45:fd:c7:da:fe:6e:52:b3:64:7d:d2:a3:2c:9b: a2:f2:c7:8e:22:88:2d:5e:5f:22:23:fe:e3:0f:b7:59:dd:36: dd:62:52:3b:c7:50:51:ed:c2:ca:71:ac:20:b8:7c:c9:b8:0a: 64:01:18:5a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5QzNDNDJFNTc2QTdD NUUxQjIzQjVBNkM0NDVFNDMwRkQ0MzAwOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAldqORWVje/LLvpAT+27qGD8Ey6PbqJPkIX67/CYVGEABcLK8 zJ1SoxlbZICxoR9zMCULREYYKtA9w2XlvyqQSMvAXAU4MzzigJrfriqn2U9Jx+Zo nsFDwMrFEdxxQKvYKY8aDoCf+rIcv79RUnb3qr4ZRC7w1NaxVoOsFMHpw5EbxCza 93LtxDro4Dq4Frkv3MF3mNdk8yaFZx8QZw3UfWEIG2vPHyde5ZEFpIuheK2/AEyf Lk+q+OGuz64hRw2Q2eVXUdkxgX6OZ+8gwICVjG9Sn14BVo8EnM98N5oipgR46NRe u9UH50qhdDzZ2020i+YYJtbGiDde4a2+rzoRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUGcPELldqfF4bI7WmxEXkMP1DAJwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0djUEVMbGRxZkY0Ykk3V214RVhrTVAxREFKdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBQmAwDQYJKoZIhvcNAQELBQADggEB AJlQcE4PpvvvaJeG2qX3aKXomQHM7IuGl8/yArtlw13rDJEIx2zKdexF2d3zdo1o qj/1zQEg72SjIbHlHwgqr4MirewviJRA9FSII1wVr23oQu4rxVyAsQtJc3Gv2te8 y5woPZ3Zwo5di1GKVzkzdrPPD4J8/qD88mMzOFvNB9QeZUhNmeBZdBI9DC6nIKdI sxuUQgosFKIX3Nbx8uXTXmN2VIQdTxFdESRxvF9yb5kNrFFk8cvQiwhWzT5hEQkL hHP/dkyscRo6TmpF/cfa/m5Ss2R90qMsm6Lyx44iiC1eXyIj/uMPt1ndNt1iUjvH UFHtwspxrCC4fMm4CmQBGFo= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:56 2026 by rpki-client