$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ih6qGMTGAcW92H3lbfRtkZBXcuo.roa File: Ih6qGMTGAcW92H3lbfRtkZBXcuo.roa (raw, json) Hash identifier: m4FK2Xe4QGFB5S+ughwdemCrpmi9bLS0seRYKXMRvKw= Subject key identifier: 22:1E:AA:18:C4:C6:01:C5:BD:D8:7D:E5:6D:F4:6D:91:90:57:72:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1415 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ih6qGMTGAcW92H3lbfRtkZBXcuo.roa Signing time: Tue 31 Mar 2026 07:56:50 +0000 ROA not before: Tue 31 Mar 2026 07:56:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5141 (0x1415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=221EAA18C4C601C5BDD87DE56DF46D91905772EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:84:8f:d5:30:30:c4:6f:8c:9c:6c:91:6f: c1:3d:36:c0:fa:26:9b:ce:99:02:90:dc:0b:3f:6c: d8:25:fa:bb:84:08:7f:d9:30:6d:0d:0d:ac:1f:89: dd:16:dd:93:37:67:42:91:e5:68:ee:c1:b5:fb:a5: 41:de:9a:03:cd:07:7e:41:1f:b6:6f:c7:0f:89:ef: 2f:40:82:e6:38:d9:e7:26:f6:41:46:c3:41:07:a0: 56:60:45:3f:7d:c5:1a:ab:ef:85:55:32:c6:37:2f: 36:74:ab:7c:02:5d:42:98:ff:d4:2a:d2:13:9f:d8: b2:79:07:4c:91:8e:e5:b5:0d:a4:91:e7:02:71:6c: 9f:15:27:e0:78:a1:c6:ac:1e:7d:40:1f:c1:bb:0c: e2:55:da:76:f2:f8:c3:44:dc:7e:81:56:20:65:d2: 7c:4a:5a:3b:53:af:9a:86:a1:0f:63:83:0d:5b:42: 2c:9a:e2:d8:1e:49:d2:ce:0f:87:b4:b6:80:ed:77: 5b:2d:16:41:9e:64:ee:5b:f4:04:10:91:d7:e5:68: 03:c8:3d:f2:ce:4d:6a:a7:b4:8c:62:a8:2d:55:30: 95:42:a8:da:bd:01:75:07:85:f6:01:c0:39:84:7c: 15:c0:22:4f:ab:83:fb:68:21:e0:42:53:17:9e:a9: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:AA:18:C4:C6:01:C5:BD:D8:7D:E5:6D:F4:6D:91:90:57:72:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ih6qGMTGAcW92H3lbfRtkZBXcuo.roa sbgp-ipAddrBlock: critical IPv4: 1.79.100.0/22 Signature Algorithm: sha256WithRSAEncryption 27:37:5f:c6:09:57:df:c2:64:f6:8d:c9:bc:67:1a:0d:01:97: 21:b6:f4:da:b1:77:bf:f6:c4:ea:34:04:20:27:c0:be:2d:08: 2b:05:90:f3:3a:3e:92:00:53:bb:2b:43:37:7b:a0:47:a9:16: cf:01:9d:f1:bc:ef:a2:f3:eb:25:64:d2:7d:bf:b9:aa:e3:80: 9c:7f:a7:bc:ff:06:b8:9b:a6:51:2c:79:3c:74:dc:64:64:a2: e8:2c:10:80:4e:60:9c:47:53:b4:44:11:5d:83:82:05:3e:f9: da:61:fd:41:c2:ab:95:d2:36:21:ae:b2:b8:a3:ae:f4:19:0a: ad:df:8b:c1:f2:23:b6:0d:b6:55:23:86:bc:a0:7e:d7:a4:c7: af:5a:f9:71:80:ea:2e:40:81:dc:6f:14:f6:23:66:1a:62:47: d7:62:34:0b:14:ae:b0:0b:25:08:8b:e9:1b:6c:e2:b6:99:ef: 0a:14:2a:21:17:f1:55:75:c9:5b:cc:9c:5a:46:e8:26:1f:89: 56:f4:18:37:a9:ff:0c:43:ec:b2:a0:14:53:f3:80:fc:a8:d7: 49:63:99:2f:4d:17:b8:70:83:52:c5:a6:99:5e:34:b7:2a:64: 8e:00:fe:84:6c:62:2c:3c:a5:91:2b:a9:47:de:1d:6b:56:26: 31:db:b5:ca -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyMUVBQTE4QzRDNjAx QzVCREQ4N0RFNTZERjQ2RDkxOTA1NzcyRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm74SP1TAwxG+MnGyRb8E9NsD6JpvOmQKQ3As/bNgl+ruECH/Z MG0NDawfid0W3ZM3Z0KR5WjuwbX7pUHemgPNB35BH7Zvxw+J7y9AguY42ecm9kFG w0EHoFZgRT99xRqr74VVMsY3LzZ0q3wCXUKY/9Qq0hOf2LJ5B0yRjuW1DaSR5wJx bJ8VJ+B4ocasHn1AH8G7DOJV2nby+MNE3H6BViBl0nxKWjtTr5qGoQ9jgw1bQiya 4tgeSdLOD4e0toDtd1stFkGeZO5b9AQQkdflaAPIPfLOTWqntIxiqC1VMJVCqNq9 AXUHhfYBwDmEfBXAIk+rg/toIeBCUxeeqR6vAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIh6qGMTGAcW92H3lbfRtkZBXcuowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0loNnFHTVRHQWNXOTJIM2xiZlJ0a1pCWGN1by5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBT2QwDQYJKoZIhvcNAQELBQADggEB ACc3X8YJV9/CZPaNybxnGg0BlyG29Nqxd7/2xOo0BCAnwL4tCCsFkPM6PpIAU7sr Qzd7oEepFs8BnfG876Lz6yVk0n2/uarjgJx/p7z/BribplEseTx03GRkougsEIBO YJxHU7REEV2DggU++dph/UHCq5XSNiGusrijrvQZCq3fi8HyI7YNtlUjhrygftek x69a+XGA6i5AgdxvFPYjZhpiR9diNAsUrrALJQiL6Rts4raZ7woUKiEX8VV1yVvM nFpG6CYfiVb0GDep/wxD7LKgFFPzgPyo10ljmS9NF7hwg1LFppleNLcqZI4A/oRs Yiw8pZErqUfeHWtWJjHbtco= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:55 2026 by rpki-client