$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K3qwDFqwdnpfDXbIH_7SA75zx80.roa File: K3qwDFqwdnpfDXbIH_7SA75zx80.roa (raw, json) Hash identifier: sAL86W6bj966CVtgJf5+myi0PtQ4VxmmzyB+iCjREow= Subject key identifier: 2B:7A:B0:0C:5A:B0:76:7A:5F:0D:76:C8:1F:FE:D2:03:BE:73:C7:CD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 13AC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K3qwDFqwdnpfDXbIH_7SA75zx80.roa Signing time: Tue 31 Mar 2026 07:56:03 +0000 ROA not before: Tue 31 Mar 2026 07:56:03 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5036 (0x13ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:03 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2B7AB00C5AB0767A5F0D76C81FFED203BE73C7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:75:7a:98:56:14:bd:51:97:f9:95:f0:a7: 38:61:ac:67:87:8c:bb:89:ec:df:ee:ce:d9:8c:ed: 57:19:d8:31:ec:65:0c:42:8c:72:9f:0a:77:49:e4: 8c:ce:04:9b:b1:d2:d6:9c:67:6e:14:91:9e:d9:32: 76:c6:1c:ee:1d:1e:ef:74:f0:9b:53:a1:f4:84:9c: 7c:f5:2a:d1:c5:a4:e8:61:f6:e5:42:fa:23:2d:73: a0:e1:78:b3:7e:14:36:8f:df:6a:a5:03:00:e7:38: bd:d6:15:0c:08:1f:e7:76:76:d3:41:c1:d6:c3:fb: b4:18:85:f4:4c:ad:1a:4a:dd:ee:d0:2f:fa:04:d0: 50:52:fe:f1:82:3a:5a:41:ce:45:3b:f5:85:9b:ed: fb:b2:37:bf:95:92:bb:e1:27:db:c7:df:c3:e8:11: 32:d2:05:59:9c:21:81:25:90:a8:20:95:0d:29:14: ae:c6:73:8c:2b:44:c4:30:88:6f:5c:e6:17:0c:d0: de:b9:80:ee:c6:6d:07:6b:3a:19:da:a3:98:ed:77: 86:6e:88:f6:07:c4:6b:97:ae:83:77:c8:06:25:a4: 7b:aa:a7:04:d6:5b:74:87:a5:52:cf:56:47:85:ae: 60:6e:24:44:be:44:cb:ec:36:95:7b:ee:86:14:26: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:B0:0C:5A:B0:76:7A:5F:0D:76:C8:1F:FE:D2:03:BE:73:C7:CD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K3qwDFqwdnpfDXbIH_7SA75zx80.roa sbgp-ipAddrBlock: critical IPv4: 1.72.0.0/22 Signature Algorithm: sha256WithRSAEncryption 75:67:21:10:5b:79:24:df:39:52:30:58:12:7c:02:2a:47:cc: 25:67:91:c1:7d:f8:37:af:80:2e:77:38:60:d6:95:1e:61:69: f5:a6:9e:bd:8d:2a:93:55:89:71:03:82:2a:e7:18:ed:3c:4a: f8:93:81:7a:d6:1a:66:f6:ae:04:ad:29:6e:55:76:49:29:92: 01:10:2f:65:c6:2e:7e:41:c1:81:82:b2:67:37:8d:23:af:a6: fe:7f:1a:05:8e:bb:67:53:d7:59:fb:61:22:16:9d:57:ce:49: 48:4b:99:df:db:29:41:7b:48:cc:19:66:d4:47:63:2f:49:c9: f3:07:55:bb:89:29:a5:03:e7:47:8f:45:b2:22:1d:5a:e9:0f: 6c:d1:05:cc:64:30:85:93:0f:d2:50:50:01:b6:0b:33:8e:22: 34:ec:1a:ad:9e:1a:b7:03:5b:a7:c7:d7:0b:bb:4c:8e:61:3a: ff:9d:03:fb:d8:22:f3:94:d2:cf:b1:bf:20:af:dd:f6:17:d5: cb:62:6b:ff:be:17:8f:8f:cf:de:de:ae:39:5e:13:22:ce:18: ac:0f:4c:a8:b9:85:09:8c:4b:74:9c:5b:bc:b3:06:f9:5c:5a: 2a:98:5a:4a:3c:ce:24:56:fd:14:74:59:82:fd:31:c4:84:88: e2:9d:bd:88 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2MDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCN0FCMDBDNUFCMDc2 N0E1RjBENzZDODFGRkVEMjAzQkU3M0M3Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsgXV6mFYUvVGX+ZXwpzhhrGeHjLuJ7N/uztmM7VcZ2DHsZQxC jHKfCndJ5IzOBJux0tacZ24UkZ7ZMnbGHO4dHu908JtTofSEnHz1KtHFpOhh9uVC +iMtc6DheLN+FDaP32qlAwDnOL3WFQwIH+d2dtNBwdbD+7QYhfRMrRpK3e7QL/oE 0FBS/vGCOlpBzkU79YWb7fuyN7+VkrvhJ9vH38PoETLSBVmcIYElkKgglQ0pFK7G c4wrRMQwiG9c5hcM0N65gO7GbQdrOhnao5jtd4ZuiPYHxGuXroN3yAYlpHuqpwTW W3SHpVLPVkeFrmBuJES+RMvsNpV77oYUJqWfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUK3qwDFqwdnpfDXbIH/7SA75zx80wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0szcXdERnF3ZG5wZkRYYklIXzdTQTc1eng4MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBSAAwDQYJKoZIhvcNAQELBQADggEB AHVnIRBbeSTfOVIwWBJ8AipHzCVnkcF9+DevgC53OGDWlR5hafWmnr2NKpNViXED girnGO08SviTgXrWGmb2rgStKW5VdkkpkgEQL2XGLn5BwYGCsmc3jSOvpv5/GgWO u2dT11n7YSIWnVfOSUhLmd/bKUF7SMwZZtRHYy9JyfMHVbuJKaUD50ePRbIiHVrp D2zRBcxkMIWTD9JQUAG2CzOOIjTsGq2eGrcDW6fH1wu7TI5hOv+dA/vYIvOU0s+x vyCv3fYX1ctia/++F4+Pz97erjleEyLOGKwPTKi5hQmMS3ScW7yzBvlcWiqYWko8 ziRW/RR0WYL9McSEiOKdvYg= -----END CERTIFICATE-----Generated at Tue Apr 7 21:07:01 2026 by rpki-client