$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KJUg43ieQtkHqE-z3QMwdhhO0UY.roa File: KJUg43ieQtkHqE-z3QMwdhhO0UY.roa (raw, json) Hash identifier: xCYmI6i0pDYg/FYinhayT8efqwmYx3m0D5TDCQhGdGM= Subject key identifier: 28:95:20:E3:78:9E:42:D9:07:A8:4F:B3:DD:03:30:76:18:4E:D1:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1426 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KJUg43ieQtkHqE-z3QMwdhhO0UY.roa Signing time: Tue 31 Mar 2026 07:56:56 +0000 ROA not before: Tue 31 Mar 2026 07:56:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5158 (0x1426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=289520E3789E42D907A84FB3DD033076184ED146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:40:f4:67:29:df:47:85:4b:4f:5b:e0:92: 6d:0d:b7:02:22:50:3c:79:2c:ec:47:70:16:2d:b1: fe:f9:25:59:15:3c:ba:2e:ff:a8:89:6c:99:01:ec: b2:e6:73:37:d9:08:b4:12:87:94:96:f5:e4:86:1d: 7e:4f:64:a6:3a:da:98:c0:70:3c:2f:19:31:fb:9d: e1:7a:ba:a3:f7:9c:56:e3:bb:ed:6d:6d:b3:d9:a4: 4e:a3:fd:c5:fa:58:91:36:f0:a1:fd:52:75:c3:4b: df:5c:e8:5d:d4:dc:db:9a:da:e1:3f:38:4e:e2:67: f3:20:96:ef:47:c9:81:7f:c4:4b:63:43:b4:bf:a4: 56:d6:23:f3:59:b9:5a:ca:65:5d:b0:ac:d7:ca:0a: 12:01:ff:0f:e8:c8:75:30:06:c2:fb:b3:1e:f1:03: 18:f6:b9:2a:2d:1a:98:3d:8d:85:de:bb:4a:39:c0: bb:c2:d0:4c:a4:7a:8c:71:42:dc:2b:30:93:3a:4f: 95:7e:17:5a:d2:42:a9:2c:ad:2b:ba:a2:76:4b:7d: 6f:6b:f5:3e:32:d4:8c:4b:20:53:98:d0:29:49:dd: dc:15:54:c7:09:af:d3:93:75:98:11:f9:89:c5:7a: 66:98:bf:d0:3a:93:55:4d:a0:79:84:41:20:4e:97: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:95:20:E3:78:9E:42:D9:07:A8:4F:B3:DD:03:30:76:18:4E:D1:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KJUg43ieQtkHqE-z3QMwdhhO0UY.roa sbgp-ipAddrBlock: critical IPv4: 1.79.31.0/24 Signature Algorithm: sha256WithRSAEncryption 59:bf:bf:cf:42:4a:bb:66:b1:4c:09:1e:96:4e:98:8b:d3:5b: 4d:18:e6:dc:b4:a7:0d:46:ac:6b:d9:c1:10:e6:fe:c7:87:5f: da:20:90:12:a9:78:dc:79:81:71:f7:a5:f8:36:b1:45:f5:d2: bb:f9:51:2d:66:66:24:20:ea:ce:43:8b:7d:c0:ae:11:df:0e: 9e:f8:85:71:bd:9f:eb:5f:ad:76:90:42:19:4c:6d:66:47:52: b8:9a:40:28:08:4d:19:9a:1a:00:39:f2:81:5d:49:59:02:dc: 85:8e:d1:82:d9:be:63:55:9b:98:63:18:dd:d1:2b:55:e6:5e: c7:dd:5f:00:9a:4c:29:e8:45:70:6e:ab:eb:5d:93:ad:b1:93: fa:1a:3f:92:c8:72:7a:a6:fb:74:9f:36:80:09:86:80:e9:f8: f4:72:78:e6:af:b3:9d:82:1c:62:86:99:58:60:86:19:af:63: ee:41:26:fe:d9:02:92:c7:5a:e1:97:75:01:36:1b:2e:1a:9c: 56:0a:5a:c0:4f:8e:3d:72:a2:ad:ca:b7:48:da:65:6a:bb:06: fd:d3:c6:a0:e9:03:0f:52:b9:07:21:3e:aa:09:aa:d2:bb:90: 56:69:69:e8:52:40:79:73:33:fe:fc:fb:a4:16:83:76:16:02: b1:be:ca:37 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4OTUyMEUzNzg5RTQy RDkwN0E4NEZCM0REMDMzMDc2MTg0RUQxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEO0D0ZynfR4VLT1vgkm0NtwIiUDx5LOxHcBYtsf75JVkVPLou /6iJbJkB7LLmczfZCLQSh5SW9eSGHX5PZKY62pjAcDwvGTH7neF6uqP3nFbju+1t bbPZpE6j/cX6WJE28KH9UnXDS99c6F3U3Nua2uE/OE7iZ/Mglu9HyYF/xEtjQ7S/ pFbWI/NZuVrKZV2wrNfKChIB/w/oyHUwBsL7sx7xAxj2uSotGpg9jYXeu0o5wLvC 0EykeoxxQtwrMJM6T5V+F1rSQqksrSu6onZLfW9r9T4y1IxLIFOY0ClJ3dwVVMcJ r9OTdZgR+YnFemaYv9A6k1VNoHmEQSBOl2HPAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUKJUg43ieQtkHqE+z3QMwdhhO0UYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0tKVWc0M2llUXRrSHFFLXozUU13ZGhoTzBVWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTx8wDQYJKoZIhvcNAQELBQADggEB AFm/v89CSrtmsUwJHpZOmIvTW00Y5ty0pw1GrGvZwRDm/seHX9ogkBKpeNx5gXH3 pfg2sUX10rv5US1mZiQg6s5Di33ArhHfDp74hXG9n+tfrXaQQhlMbWZHUriaQCgI TRmaGgA58oFdSVkC3IWO0YLZvmNVm5hjGN3RK1XmXsfdXwCaTCnoRXBuq+tdk62x k/oaP5LIcnqm+3SfNoAJhoDp+PRyeOavs52CHGKGmVhghhmvY+5BJv7ZApLHWuGX dQE2Gy4anFYKWsBPjj1yoq3Kt0jaZWq7Bv3TxqDpAw9SuQchPqoJqtK7kFZpaehS QHlzM/78+6QWg3YWArG+yjc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:06 2026 by rpki-client