$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K7uq-kb6nlhA6_9g28m3y65t0wc.roa File: K7uq-kb6nlhA6_9g28m3y65t0wc.roa (raw, json) Hash identifier: k9f43RGE5cGDkfl7M8XfYnfrxetaZOxe3EkU3LUIxwI= Subject key identifier: 2B:BB:AA:FA:46:FA:9E:58:40:EB:FF:60:DB:C9:B7:CB:AE:6D:D3:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1803 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K7uq-kb6nlhA6_9g28m3y65t0wc.roa Signing time: Tue 31 Mar 2026 08:04:59 +0000 ROA not before: Tue 31 Mar 2026 08:04:59 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6147 (0x1803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:59 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2BBBAAFA46FA9E5840EBFF60DBC9B7CBAE6DD307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:b7:dc:53:e1:94:8a:b9:71:73:e6:22:3a: 51:67:74:6c:0d:53:8d:fa:df:2c:32:94:da:be:71: fa:d5:02:2a:1c:70:da:da:52:63:17:a2:36:4a:22: 4a:5c:cf:7d:1a:60:5b:c9:bc:da:c6:58:b5:b0:29: d1:1d:d2:c5:cd:40:5b:d8:6f:e7:0d:26:e2:6b:b4: b6:fa:f8:d9:3f:41:10:23:c1:3d:92:92:51:ec:b8: 14:76:97:f0:16:15:49:d6:30:51:8a:43:f1:42:ad: 83:b2:b3:7c:bd:d8:38:97:02:64:b4:47:e6:e2:27: 3b:b0:bc:60:28:a4:62:b0:31:8c:b6:5a:83:3f:96: 71:77:6b:d5:fb:3d:5c:e2:d3:14:e8:f1:96:2e:58: ef:22:aa:1a:c3:fa:57:15:51:6f:82:ce:47:82:0e: 62:17:05:ef:36:d6:6e:5a:65:49:6a:a9:7c:20:42: a2:1a:28:e7:c6:11:35:b4:09:e0:67:f0:21:ab:c1: 04:c3:da:d0:04:4e:76:11:c1:fe:5d:99:03:af:c8: 11:a1:a3:e9:ee:8b:69:21:10:b5:1c:27:3c:41:6c: c7:80:56:4c:cc:2b:14:53:97:96:de:7d:a8:50:ac: 10:0b:64:13:6f:b8:31:3b:dd:98:f6:c6:0c:3f:ca: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BB:AA:FA:46:FA:9E:58:40:EB:FF:60:DB:C9:B7:CB:AE:6D:D3:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K7uq-kb6nlhA6_9g28m3y65t0wc.roa sbgp-ipAddrBlock: critical IPv4: 27.230.72.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:26:dd:03:58:fb:9d:56:ac:45:0a:b9:6e:34:d9:0b:fb:02: f5:ef:ef:6a:cf:d9:9c:b7:54:8a:25:33:55:a9:2d:a3:23:60: 64:22:75:f1:9e:5b:5c:d5:4b:3c:8a:64:19:69:aa:79:9f:5e: e3:1d:18:a4:50:aa:31:af:08:ca:74:b5:7b:6b:09:48:36:16: b4:e4:4a:45:55:55:60:5c:09:74:81:c2:11:21:05:b0:fa:62: 08:d1:25:68:43:f2:c4:70:1c:b2:a4:2f:5d:d7:3e:96:7d:09: d4:ef:bf:e0:10:cb:5d:43:5a:1e:93:e7:0f:d9:d1:ac:95:ee: b8:d5:cc:0b:ef:fa:de:96:79:c3:54:6e:da:73:a6:6c:7b:9f: 01:0a:2e:cc:d1:ac:e0:e9:f9:3f:2b:af:d6:03:89:2f:d1:55: 27:e7:ab:24:0e:4f:2f:42:00:bf:d9:c9:53:62:97:a2:66:bf: 0e:8b:d1:79:ea:7d:3e:44:cd:f6:6a:b3:dc:15:b6:cc:c5:e2: 36:94:72:d2:f3:4b:8d:82:46:ab:a8:d4:36:6c:4c:9c:f1:d3: 72:b6:30:cc:f9:3d:c9:af:09:8b:8e:d8:2a:9d:ef:ee:13:8c: 3f:3e:5e:bc:3f:24:7f:a7:48:cb:ad:50:a0:6d:69:06:4b:40: 7e:fb:42:e5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCQkJBQUZBNDZGQTlF NTg0MEVCRkY2MERCQzlCN0NCQUU2REQzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnS7fcU+GUirlxc+YiOlFndGwNU4363ywylNq+cfrVAioccNra UmMXojZKIkpcz30aYFvJvNrGWLWwKdEd0sXNQFvYb+cNJuJrtLb6+Nk/QRAjwT2S klHsuBR2l/AWFUnWMFGKQ/FCrYOys3y92DiXAmS0R+biJzuwvGAopGKwMYy2WoM/ lnF3a9X7PVzi0xTo8ZYuWO8iqhrD+lcVUW+CzkeCDmIXBe821m5aZUlqqXwgQqIa KOfGETW0CeBn8CGrwQTD2tAETnYRwf5dmQOvyBGho+nui2khELUcJzxBbMeAVkzM KxRTl5befahQrBALZBNvuDE73Zj2xgw/yhSvAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUK7uq+kb6nlhA6/9g28m3y65t0wcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0s3dXEta2I2bmxoQTZfOWcyOG0zeTY1dDB3Yy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMb5kgwDQYJKoZIhvcNAQELBQADggEB AE0m3QNY+51WrEUKuW402Qv7AvXv72rP2Zy3VIolM1WpLaMjYGQidfGeW1zVSzyK ZBlpqnmfXuMdGKRQqjGvCMp0tXtrCUg2FrTkSkVVVWBcCXSBwhEhBbD6YgjRJWhD 8sRwHLKkL13XPpZ9CdTvv+AQy11DWh6T5w/Z0ayV7rjVzAvv+t6WecNUbtpzpmx7 nwEKLszRrODp+T8rr9YDiS/RVSfnqyQOTy9CAL/ZyVNil6Jmvw6L0XnqfT5EzfZq s9wVtszF4jaUctLzS42CRquo1DZsTJzx03K2MMz5PcmvCYuO2Cqd7+4TjD8+Xrw/ JH+nSMutUKBtaQZLQH77QuU= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:21 2026 by rpki-client