$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGhXT-Qm3yotO4mcWpCU6mqLy_o.roa File: HGhXT-Qm3yotO4mcWpCU6mqLy_o.roa (raw, json) Hash identifier: QEiYCTg7AyQXYHVQ1gvSFAge08lT0V+Vr3gdUc/VgAI= Subject key identifier: 1C:68:57:4F:E4:26:DF:2A:2D:3B:89:9C:5A:90:94:EA:6A:8B:CB:FA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 181A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGhXT-Qm3yotO4mcWpCU6mqLy_o.roa Signing time: Tue 31 Mar 2026 08:05:17 +0000 ROA not before: Tue 31 Mar 2026 08:05:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6170 (0x181a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1C68574FE426DF2A2D3B899C5A9094EA6A8BCBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7a:f6:92:69:1e:e4:2e:5f:3f:6a:6f:66:9b: ba:a8:64:86:69:db:6c:26:b7:e2:2b:d1:2b:0c:03: 8a:8c:da:7d:56:eb:3d:39:2e:0e:f7:fc:ed:1e:cf: b6:60:a9:1a:c1:dc:1d:27:26:a5:dc:e1:4e:e5:b8: ad:b5:e5:20:5f:fd:32:79:76:96:72:58:63:5e:ac: 4f:45:51:fa:25:0f:18:df:ca:21:6c:9a:f3:c5:01: fa:fa:22:da:0f:9b:26:4d:5e:76:b6:4e:e7:8a:3f: e6:94:2a:79:55:17:94:0d:40:ba:8b:00:81:a9:46: c8:19:bb:57:01:d9:c0:f5:ca:4f:1f:81:8a:95:c7: 8c:cf:52:93:9d:ea:89:a8:9b:f7:20:5c:a3:0b:bd: a2:10:14:71:98:ab:28:5d:0d:d3:d5:69:9e:04:1b: b7:16:93:64:57:3e:b8:0d:2a:db:94:91:11:55:78: 17:ee:01:d0:85:f7:7a:10:2d:7a:74:86:3b:3a:2a: fc:c1:42:d5:e1:1d:c2:05:18:cb:5e:92:be:88:6f: 68:76:91:2f:e2:b2:28:e3:90:ed:03:86:d3:70:fa: 5e:0e:51:3a:c6:5e:b6:69:e7:64:5a:1d:7c:e3:5f: f6:51:29:f0:41:73:07:75:ab:ca:e9:50:b0:9d:62: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:57:4F:E4:26:DF:2A:2D:3B:89:9C:5A:90:94:EA:6A:8B:CB:FA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HGhXT-Qm3yotO4mcWpCU6mqLy_o.roa sbgp-ipAddrBlock: critical IPv4: 220.159.62.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:ec:cc:95:47:3f:7a:e2:14:cc:6d:e5:e0:cd:3a:6e:bf:b3: aa:7c:0a:a1:a0:55:3d:b8:c3:28:f3:04:a6:b0:a7:6a:50:8e: c2:80:7f:af:bb:8a:76:f9:26:ad:bd:d7:da:dd:d6:b0:b1:c9: 42:64:ab:04:0f:e2:f0:dc:37:7e:b1:21:30:43:7d:06:53:a9: ae:e8:82:83:2f:cb:32:68:52:1c:de:ab:d5:b3:5f:2d:7e:5b: 99:c5:a0:35:14:29:1c:ea:45:58:93:8e:e9:cd:5a:3e:7e:a6: 0b:80:3c:9f:c7:f7:1f:26:89:ee:b8:46:e4:1b:b6:a9:ae:43: 54:9f:04:bd:e4:b9:e0:95:74:38:71:07:fc:76:44:86:be:7d: 0b:1c:ac:1c:2e:1d:59:9a:65:2c:1b:14:f5:85:e8:3e:80:44: a8:7f:ac:2a:7f:98:60:5a:1f:e2:f3:cd:23:83:39:42:f9:bd: 87:b1:f1:00:de:4d:52:cf:e2:af:73:22:79:3d:c8:df:1f:6e: 28:b4:21:76:13:3c:76:b7:75:13:bd:01:d1:16:3e:78:85:3e: b4:92:54:4e:33:f7:c2:fa:43:dc:5e:bb:f9:0c:91:a8:a7:33: d3:51:57:87:f4:c2:bb:18:5c:5c:b3:23:5a:cd:60:79:24:a1: 45:8c:75:d2 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDNjg1NzRGRTQyNkRG MkEyRDNCODk5QzVBOTA5NEVBNkE4QkNCRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpevaSaR7kLl8/am9mm7qoZIZp22wmt+Ir0SsMA4qM2n1W6z05 Lg73/O0ez7ZgqRrB3B0nJqXc4U7luK215SBf/TJ5dpZyWGNerE9FUfolDxjfyiFs mvPFAfr6ItoPmyZNXna2TueKP+aUKnlVF5QNQLqLAIGpRsgZu1cB2cD1yk8fgYqV x4zPUpOd6omom/cgXKMLvaIQFHGYqyhdDdPVaZ4EG7cWk2RXPrgNKtuUkRFVeBfu AdCF93oQLXp0hjs6KvzBQtXhHcIFGMtekr6Ib2h2kS/isijjkO0DhtNw+l4OUTrG XrZp52RaHXzjX/ZRKfBBcwd1q8rpULCdYlZrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUHGhXT+Qm3yotO4mcWpCU6mqLy/owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0hHaFhULVFtM3lvdE80bWNXcENVNm1xTHlfby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHcnz4wDQYJKoZIhvcNAQELBQADggEB ADvszJVHP3riFMxt5eDNOm6/s6p8CqGgVT24wyjzBKawp2pQjsKAf6+7inb5Jq29 19rd1rCxyUJkqwQP4vDcN36xITBDfQZTqa7ogoMvyzJoUhzeq9WzXy1+W5nFoDUU KRzqRViTjunNWj5+pguAPJ/H9x8mie64RuQbtqmuQ1SfBL3kueCVdDhxB/x2RIa+ fQscrBwuHVmaZSwbFPWF6D6ARKh/rCp/mGBaH+LzzSODOUL5vYex8QDeTVLP4q9z Ink9yN8fbii0IXYTPHa3dRO9AdEWPniFPrSSVE4z98L6Q9xeu/kMkainM9NRV4f0 wrsYXFyzI1rNYHkkoUWMddI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:44 2026 by rpki-client