$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IwuU3nDo5-pcWRLedHt_fO7y3EU.roa File: IwuU3nDo5-pcWRLedHt_fO7y3EU.roa (raw, json) Hash identifier: Gx11KcTrvuw/Gr6fgTdXpDjWTfO4gyd5dzCkGYHYSQQ= Subject key identifier: 23:0B:94:DE:70:E8:E7:EA:5C:59:12:DE:74:7B:7F:7C:EE:F2:DC:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1587 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IwuU3nDo5-pcWRLedHt_fO7y3EU.roa Signing time: Tue 31 Mar 2026 07:59:48 +0000 ROA not before: Tue 31 Mar 2026 07:59:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5511 (0x1587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=230B94DE70E8E7EA5C5912DE747B7F7CEEF2DC45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:fe:f5:f0:f5:43:0c:50:06:63:9c:ef:d8: fa:82:bb:69:48:e2:04:1d:ca:88:ae:62:dd:1a:14: dc:13:c4:99:bd:a4:98:c3:16:11:4c:36:18:ee:eb: cf:96:df:b7:83:65:71:7f:94:85:26:3e:65:71:ed: 0a:de:3c:99:22:44:52:cd:88:1d:b0:c6:4b:d5:d4: 7f:a1:7e:aa:ff:18:2b:eb:70:a4:a4:f0:82:11:ff: a9:79:a0:b3:0a:53:ff:13:7a:8f:32:81:4d:fe:65: 61:b3:2e:b8:d8:95:17:21:0d:87:22:cf:f1:45:9d: e7:69:0c:fe:f3:ca:0e:ef:a0:17:c3:9e:5f:65:5e: ef:56:9b:2b:79:11:c4:c2:04:64:92:a5:ce:39:92: 8e:28:f0:31:cf:9f:8d:09:e9:76:54:e4:ce:8f:77: 79:30:89:3e:9c:55:69:37:b5:f9:de:fd:67:bf:cb: 27:c6:eb:2d:5e:5d:93:7e:82:c2:46:61:83:87:8b: 65:d0:6a:2a:29:16:00:7c:d5:1c:8f:7a:03:8f:23: 91:8a:af:34:cd:1e:f7:f2:6d:0a:a3:72:9f:4a:aa: 7b:d4:eb:88:e4:ef:0b:40:09:bc:4f:d1:47:0b:c3: ea:c8:49:6c:0d:e4:61:4a:7b:85:b1:b4:ee:f1:6e: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:94:DE:70:E8:E7:EA:5C:59:12:DE:74:7B:7F:7C:EE:F2:DC:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IwuU3nDo5-pcWRLedHt_fO7y3EU.roa sbgp-ipAddrBlock: critical IPv4: 220.159.216.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:57:b1:c7:1a:98:19:5d:c4:63:78:10:1d:09:90:3e:ef:e7: bc:7b:dc:e5:e1:99:b9:b9:00:e6:79:5a:43:8f:d0:b3:c8:24: 42:8a:8b:34:a9:f7:6d:56:c0:76:25:29:a7:ac:3f:e4:29:1a: 05:68:98:6d:af:b1:73:2d:04:e2:72:02:ed:f5:c1:7c:7e:14: d6:65:e1:a0:73:b2:07:3b:d2:28:3a:ea:9a:1b:f2:39:5d:20: d5:3e:81:27:cf:3a:20:f2:4e:ba:f5:ee:cf:99:1c:43:86:d5: ab:3e:45:1a:50:0f:c0:52:a4:fb:1c:ca:65:26:45:a4:c7:ed: ff:b3:76:6d:af:58:e5:50:71:56:36:f5:ed:e2:21:c7:49:63: fb:5a:79:44:5f:46:83:f2:f1:d3:7f:8e:72:aa:33:3d:a7:b2: 2b:aa:d7:39:4f:cb:8a:e3:4e:89:94:73:dd:4c:81:aa:ed:14: 7b:1e:6d:97:ba:c2:d8:c9:a6:f2:57:21:33:0d:b9:ec:f2:ee: 52:a0:a5:9c:21:3f:6f:3a:a3:59:c4:e5:08:b2:65:59:43:34: 2b:77:ef:9a:70:2b:35:4a:ce:09:dd:23:a0:f5:09:17:90:25: a2:bd:37:1f:c9:90:36:90:e4:91:71:a8:99:3d:90:70:cc:0c: 2b:93:24:45 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzMEI5NERFNzBFOEU3 RUE1QzU5MTJERTc0N0I3RjdDRUVGMkRDNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDawP718PVDDFAGY5zv2PqCu2lI4gQdyoiuYt0aFNwTxJm9pJjD FhFMNhju68+W37eDZXF/lIUmPmVx7QrePJkiRFLNiB2wxkvV1H+hfqr/GCvrcKSk 8IIR/6l5oLMKU/8Teo8ygU3+ZWGzLrjYlRchDYciz/FFnedpDP7zyg7voBfDnl9l Xu9Wmyt5EcTCBGSSpc45ko4o8DHPn40J6XZU5M6Pd3kwiT6cVWk3tfne/We/yyfG 6y1eXZN+gsJGYYOHi2XQaiopFgB81RyPegOPI5GKrzTNHvfybQqjcp9KqnvU64jk 7wtACbxP0UcLw+rISWwN5GFKe4WxtO7xbgXFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIwuU3nDo5+pcWRLedHt/fO7y3EUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0l3dVUzbkRvNS1wY1dSTGVkSHRfZk83eTNFVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPcn9gwDQYJKoZIhvcNAQELBQADggEB AB1XsccamBldxGN4EB0JkD7v57x73OXhmbm5AOZ5WkOP0LPIJEKKizSp921WwHYl KaesP+QpGgVomG2vsXMtBOJyAu31wXx+FNZl4aBzsgc70ig66pob8jldINU+gSfP OiDyTrr17s+ZHEOG1as+RRpQD8BSpPscymUmRaTH7f+zdm2vWOVQcVY29e3iIcdJ Y/taeURfRoPy8dN/jnKqMz2nsiuq1zlPy4rjTomUc91MgartFHsebZe6wtjJpvJX ITMNuezy7lKgpZwhP286o1nE5QiyZVlDNCt375pwKzVKzgndI6D1CReQJaK9Nx/J kDaQ5JFxqJk9kHDMDCuTJEU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:59 2026 by rpki-client