$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JZGNlwIpzdf8jogxD6bQ3zOeQ64.roa File: JZGNlwIpzdf8jogxD6bQ3zOeQ64.roa (raw, json) Hash identifier: KzTqAz+UuVRWJyeiZwP4jJSi/nUfpCgVr2XpCU0xL3s= Subject key identifier: 25:91:8D:97:02:29:CD:D7:FC:8E:88:31:0F:A6:D0:DF:33:9E:43:AE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1489 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JZGNlwIpzdf8jogxD6bQ3zOeQ64.roa Signing time: Tue 31 Mar 2026 07:57:44 +0000 ROA not before: Tue 31 Mar 2026 07:57:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5257 (0x1489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=25918D970229CDD7FC8E88310FA6D0DF339E43AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:1f:52:8b:86:c6:d7:02:a1:21:a7:58:73: 18:a5:39:5c:8a:2d:1b:d7:f0:c1:03:c0:b0:07:b3: bb:1d:9d:09:38:04:5a:60:ab:e6:af:e5:03:cf:ed: bf:62:d4:26:63:aa:a9:73:71:f6:b6:4b:be:b5:67: e9:25:17:d5:bb:b1:80:d3:dd:16:a4:7c:a3:88:a4: 66:7a:f1:fe:0c:b8:47:5e:6a:75:30:a1:f7:1c:3e: fc:83:4e:b2:98:5e:b0:fb:10:9d:84:7b:48:0f:87: a9:98:e0:3f:d0:24:b4:11:ca:4e:64:be:29:38:64: 0a:da:28:bc:79:40:4e:6d:8b:3b:ea:96:f4:cb:d4: dc:37:79:80:43:de:34:81:94:11:be:0e:3c:84:cf: 8b:72:e8:6c:c1:7a:6b:9f:ee:2c:32:87:a7:75:c8: 72:48:e9:ce:76:4e:e7:2d:b5:2e:bc:35:5e:1f:45: 6c:07:e3:d1:87:47:ea:75:6b:25:fe:29:ae:ff:3f: e5:6d:8b:f2:67:78:6a:4a:db:78:71:ae:e9:f9:27: 7f:6c:18:a6:06:ec:7f:ce:09:4c:6f:51:cf:30:6d: cf:b2:90:0b:e0:65:8e:2c:9d:5c:9b:9a:9d:b1:10: 9b:01:6d:16:77:9c:23:35:aa:75:32:ab:85:45:34: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:91:8D:97:02:29:CD:D7:FC:8E:88:31:0F:A6:D0:DF:33:9E:43:AE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JZGNlwIpzdf8jogxD6bQ3zOeQ64.roa sbgp-ipAddrBlock: critical IPv4: 1.79.86.0/23 Signature Algorithm: sha256WithRSAEncryption 02:ce:3c:17:e2:d2:fd:ab:19:ba:68:00:96:b7:5c:e4:85:c4: 9c:ba:79:3c:a8:2c:1c:81:f4:fa:8f:ce:42:04:52:da:ca:c6: 4e:82:1d:22:8d:b6:7d:24:96:13:ed:cb:f1:d7:59:1c:64:d9: 47:e6:6e:68:f9:60:83:c2:5a:27:9d:11:41:e0:86:34:88:f5: 71:1a:c1:e8:86:d3:10:2f:e1:ec:a9:20:4c:3b:bf:ad:11:ac: 9e:f2:ea:56:2a:33:52:fb:e4:11:fe:a5:6a:c1:3c:c3:5c:bf: 14:df:93:39:c7:77:a4:62:f0:cb:a9:6b:29:da:a3:a5:25:92: 85:f6:80:30:35:12:7a:1d:9b:ca:75:00:5b:d7:3c:ec:d9:2b: 50:2b:04:d0:36:1f:b3:4e:18:1a:bc:27:3e:3a:53:0a:42:be: c3:15:d5:42:2f:96:1b:d0:40:cb:a9:9b:6a:5b:a1:b8:cd:c4: e9:70:99:b5:5d:b1:8d:b3:2f:d0:44:1a:5e:6a:98:42:c8:13: 4e:61:ef:0b:09:b3:5f:12:48:55:b6:d1:ae:f7:f6:6f:cf:25: 39:5c:c3:e8:fe:15:02:00:e8:83:00:5c:b5:7a:72:c8:63:ab: f0:75:ac:74:92:51:4e:5c:f0:3c:10:ad:c3:af:44:9f:fd:b9: 73:3d:98:64 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI1OTE4RDk3MDIyOUNE RDdGQzhFODgzMTBGQTZEMERGMzM5RTQzQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzeh9Si4bG1wKhIadYcxilOVyKLRvX8MEDwLAHs7sdnQk4BFpg q+av5QPP7b9i1CZjqqlzcfa2S761Z+klF9W7sYDT3RakfKOIpGZ68f4MuEdeanUw ofccPvyDTrKYXrD7EJ2Ee0gPh6mY4D/QJLQRyk5kvik4ZAraKLx5QE5tizvqlvTL 1Nw3eYBD3jSBlBG+DjyEz4ty6GzBemuf7iwyh6d1yHJI6c52TucttS68NV4fRWwH 49GHR+p1ayX+Ka7/P+Vti/JneGpK23hxrun5J39sGKYG7H/OCUxvUc8wbc+ykAvg ZY4snVybmp2xEJsBbRZ3nCM1qnUyq4VFNHPFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUJZGNlwIpzdf8jogxD6bQ3zOeQ64wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0paR05sd0lwemRmOGpvZ3hENmJRM3pPZVE2NC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBT1YwDQYJKoZIhvcNAQELBQADggEB AALOPBfi0v2rGbpoAJa3XOSFxJy6eTyoLByB9PqPzkIEUtrKxk6CHSKNtn0klhPt y/HXWRxk2Ufmbmj5YIPCWiedEUHghjSI9XEaweiG0xAv4eypIEw7v60RrJ7y6lYq M1L75BH+pWrBPMNcvxTfkznHd6Ri8Mupaynao6UlkoX2gDA1Enodm8p1AFvXPOzZ K1ArBNA2H7NOGBq8Jz46UwpCvsMV1UIvlhvQQMupm2pbobjNxOlwmbVdsY2zL9BE Gl5qmELIE05h7wsJs18SSFW20a739m/PJTlcw+j+FQIA6IMAXLV6cshjq/B1rHSS UU5c8DwQrcOvRJ/9uXM9mGQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:30 2026 by rpki-client