$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IuA-QUgKRtL3WHIZ62MCJyu6Tx0.roa File: IuA-QUgKRtL3WHIZ62MCJyu6Tx0.roa (raw, json) Hash identifier: NziTFK9pBkoeD2cs4ywcFbJTIwCCg2g8UdMESmsdAFY= Subject key identifier: 22:E0:3E:41:48:0A:46:D2:F7:58:72:19:EB:63:02:27:2B:BA:4F:1D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1508 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IuA-QUgKRtL3WHIZ62MCJyu6Tx0.roa Signing time: Tue 31 Mar 2026 07:58:47 +0000 ROA not before: Tue 31 Mar 2026 07:58:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5384 (0x1508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=22E03E41480A46D2F7587219EB6302272BBA4F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:1d:f2:10:bb:cc:78:e2:9d:f1:b1:4e:c7: 0e:39:6d:e6:99:93:7e:0e:cb:46:75:ac:05:03:21: 76:7e:7f:66:7b:eb:25:f3:ad:5a:d3:24:f3:63:24: d4:3d:9c:83:fe:de:4b:bd:4c:c8:4f:ce:83:7d:02: f3:73:37:51:05:80:ba:89:b9:3c:67:eb:08:5e:ec: de:5e:10:64:60:f7:7f:9b:59:e5:9c:44:70:80:e6: 6d:bb:85:94:23:b1:b5:cb:36:7c:73:d3:66:fe:c3: 2d:5e:f3:14:a2:54:39:c7:9b:07:a5:ee:2c:75:ba: e3:da:c2:e1:53:6b:16:93:9b:0e:47:1d:23:a9:83: 7e:00:83:bb:b5:09:c5:6d:6d:f7:ad:ea:91:8d:6c: 9a:6c:64:e1:e4:0c:95:09:82:a6:fa:3f:8b:af:22: 68:de:7f:73:2b:f3:73:36:49:fc:d1:81:3e:fd:24: f8:4b:48:67:0d:f6:23:1b:d5:e1:57:af:b3:7d:38: 69:cb:f5:c1:23:37:d6:83:f8:08:0b:04:93:18:cb: 63:45:7a:7b:25:b2:b4:8f:5e:f1:28:28:55:b6:92: 5d:4c:20:3c:2a:aa:3c:94:b8:fb:a0:31:9e:24:91: 68:44:07:5a:9a:3b:d4:01:0e:30:95:f3:10:df:57: 75:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:3E:41:48:0A:46:D2:F7:58:72:19:EB:63:02:27:2B:BA:4F:1D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IuA-QUgKRtL3WHIZ62MCJyu6Tx0.roa sbgp-ipAddrBlock: critical IPv4: 1.67.128.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:d0:9d:98:08:a8:bd:73:dc:d2:95:26:3a:86:4d:58:56:d3: 85:0e:69:e8:96:fb:5b:4c:c8:ed:0a:35:5c:f2:64:0b:cd:92: c1:cc:b2:c9:6a:79:70:41:53:a1:6a:9b:41:35:69:fd:56:af: 34:42:66:b7:00:0d:a7:ac:54:9e:dc:09:7d:33:f6:b9:2b:36: 22:09:8e:14:7a:7f:dc:b5:78:36:bb:5d:28:5e:a4:16:1e:df: bd:34:b8:4a:9a:b9:bd:02:c4:33:ac:3a:dc:20:1d:f9:33:19: 79:ec:01:f4:4c:55:e5:ff:fc:0f:93:d8:56:6c:5e:46:03:0f: 5e:e2:6c:32:a5:ae:8c:3a:2a:80:40:06:fc:d4:6f:5f:3f:cc: 07:f6:53:5c:11:de:e5:38:1b:20:2f:df:52:0d:1f:ef:98:7b: 69:2c:07:1b:e8:c8:87:18:b8:86:ac:fd:4e:ab:e1:b1:dc:98: 7e:3f:01:67:98:6b:4a:98:30:fb:57:1e:69:51:e7:c3:f7:9e: ed:ea:38:7c:d1:f9:70:0f:12:4e:69:3d:b7:2d:51:1d:08:7a: ce:de:7a:34:9c:8d:f6:e4:17:8c:f7:fc:5d:52:5b:bf:f1:ee: 74:ef:9c:bb:90:35:fd:20:ac:ee:9f:2b:bd:1b:f3:f6:8b:c2: 72:a8:9d:a0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyRTAzRTQxNDgwQTQ2 RDJGNzU4NzIxOUVCNjMwMjI3MkJCQTRGMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2uh3yELvMeOKd8bFOxw45beaZk34Oy0Z1rAUDIXZ+f2Z76yXz rVrTJPNjJNQ9nIP+3ku9TMhPzoN9AvNzN1EFgLqJuTxn6whe7N5eEGRg93+bWeWc RHCA5m27hZQjsbXLNnxz02b+wy1e8xSiVDnHmwel7ix1uuPawuFTaxaTmw5HHSOp g34Ag7u1CcVtbfet6pGNbJpsZOHkDJUJgqb6P4uvImjef3Mr83M2SfzRgT79JPhL SGcN9iMb1eFXr7N9OGnL9cEjN9aD+AgLBJMYy2NFenslsrSPXvEoKFW2kl1MIDwq qjyUuPugMZ4kkWhEB1qaO9QBDjCV8xDfV3UxAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIuA+QUgKRtL3WHIZ62MCJyu6Tx0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0l1QS1RVWdLUnRMM1dISVo2Mk1DSnl1NlR4MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYBQ4AwDQYJKoZIhvcNAQELBQADggEB AGrQnZgIqL1z3NKVJjqGTVhW04UOaeiW+1tMyO0KNVzyZAvNksHMsslqeXBBU6Fq m0E1af1WrzRCZrcADaesVJ7cCX0z9rkrNiIJjhR6f9y1eDa7XShepBYe3700uEqa ub0CxDOsOtwgHfkzGXnsAfRMVeX//A+T2FZsXkYDD17ibDKlrow6KoBABvzUb18/ zAf2U1wR3uU4GyAv31INH++Ye2ksBxvoyIcYuIas/U6r4bHcmH4/AWeYa0qYMPtX HmlR58P3nu3qOHzR+XAPEk5pPbctUR0Ies7eejScjfbkF4z3/F1SW7/x7nTvnLuQ Nf0grO6fK70b8/aLwnKonaA= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:21 2026 by rpki-client