$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NP19nU_R4oMZOXJS2zIaRx_Jifk.roa File: NP19nU_R4oMZOXJS2zIaRx_Jifk.roa (raw, json) Hash identifier: ZNjNzgu5LnF9zj2XELTEo6dZuvYKrXlKAYdpx/RtKU8= Subject key identifier: 34:FD:7D:9D:4F:D1:E2:83:19:39:72:52:DB:32:1A:47:1F:C9:89:F9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15BB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NP19nU_R4oMZOXJS2zIaRx_Jifk.roa Signing time: Tue 31 Mar 2026 08:00:18 +0000 ROA not before: Tue 31 Mar 2026 08:00:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5563 (0x15bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=34FD7D9D4FD1E28319397252DB321A471FC989F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:d4:46:54:18:fb:b5:d5:00:91:92:1e:de: f2:fe:72:a3:e6:b4:6e:f7:b7:72:26:6d:6f:4e:3f: 34:cd:67:bd:02:8e:37:ef:b0:16:98:bc:2b:37:68: 04:7c:eb:49:29:1f:ba:f6:78:ef:5a:ee:ed:5d:99: a5:6f:79:a0:c6:9b:ec:ab:96:d7:53:dd:a7:8f:4d: 40:92:96:10:cf:b8:b3:07:6b:a1:77:72:2b:b9:09: fc:81:92:da:c9:34:d1:dd:b3:d9:82:c2:f2:2c:40: 49:1b:7e:a0:39:16:5a:f9:07:8e:ba:c6:3a:99:2c: 1e:f7:2c:02:48:e5:1c:ea:5f:f6:48:c7:f6:f9:22: df:f2:a7:59:17:8e:fa:5a:26:8a:e1:9c:72:f8:8d: a9:8d:82:14:46:2f:01:27:8f:03:06:30:c2:52:6f: e5:97:70:6c:a7:3b:64:a1:2d:ab:f1:22:7a:81:8d: 17:fb:18:19:f4:af:8e:6a:4a:ce:3e:ef:9b:19:63: 86:10:99:3f:80:59:4f:2a:4e:22:42:95:fa:52:3e: dd:3b:61:df:94:7e:56:01:eb:65:30:8b:a2:35:48: a0:fc:63:9f:3f:0e:40:33:cb:ed:a4:09:14:21:57: d7:79:34:10:1b:43:4e:1c:f7:37:2f:81:0d:f1:56: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:7D:9D:4F:D1:E2:83:19:39:72:52:DB:32:1A:47:1F:C9:89:F9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NP19nU_R4oMZOXJS2zIaRx_Jifk.roa sbgp-ipAddrBlock: critical IPv4: 220.159.232.0/23 Signature Algorithm: sha256WithRSAEncryption a4:74:24:c2:63:3b:42:30:ee:7b:7a:12:cd:18:a5:96:1a:85: 3c:cd:eb:72:7c:87:12:ac:ea:2c:80:19:a5:6f:08:cc:9e:83: f1:9d:29:cd:4f:51:ae:e9:4d:c7:e6:60:25:0f:37:46:c8:b6: 5e:0a:e4:24:96:30:75:7b:5f:ed:4e:bf:13:9f:6d:01:bf:fa: 55:b5:58:61:bc:c1:16:92:2e:57:de:d7:7c:77:f1:0d:39:73: 38:6b:76:77:5c:86:05:0a:be:d9:b8:9e:f3:ce:e4:46:cc:cf: d9:db:89:bd:b1:26:41:e7:39:80:ab:f7:31:19:2b:17:67:53: ea:76:cf:22:d6:89:9b:80:ba:47:e1:e4:3a:90:08:e4:1c:59: 8d:62:36:34:9c:c0:df:1e:68:36:68:9c:aa:17:78:a9:ca:0f: 62:e5:7e:08:25:83:7d:db:c1:da:90:c4:38:5a:71:b2:00:73: 9e:53:6a:68:00:f2:d3:ef:9d:c8:fa:e8:20:61:ec:93:e7:a8: 84:79:4e:67:0f:a5:a3:66:d4:c0:7e:32:24:e6:82:03:13:ba: ea:fb:7f:2d:df:90:e6:0f:57:c5:7b:41:5a:12:05:d8:78:c2: 38:11:58:51:14:91:15:a8:8a:64:aa:12:80:2d:27:43:09:a9: 07:f0:af:45 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0RkQ3RDlENEZEMUUy ODMxOTM5NzI1MkRCMzIxQTQ3MUZDOTg5RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsz9RGVBj7tdUAkZIe3vL+cqPmtG73t3ImbW9OPzTNZ70Cjjfv sBaYvCs3aAR860kpH7r2eO9a7u1dmaVveaDGm+yrltdT3aePTUCSlhDPuLMHa6F3 ciu5CfyBktrJNNHds9mCwvIsQEkbfqA5Flr5B466xjqZLB73LAJI5RzqX/ZIx/b5 It/yp1kXjvpaJorhnHL4jamNghRGLwEnjwMGMMJSb+WXcGynO2ShLavxInqBjRf7 GBn0r45qSs4+75sZY4YQmT+AWU8qTiJClfpSPt07Yd+UflYB62Uwi6I1SKD8Y58/ DkAzy+2kCRQhV9d5NBAbQ04c9zcvgQ3xVrCZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUNP19nU/R4oMZOXJS2zIaRx/JifkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L05QMTluVV9SNG9NWk9YSlMyeklhUnhfSmlmay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHcn+gwDQYJKoZIhvcNAQELBQADggEB AKR0JMJjO0Iw7nt6Es0YpZYahTzN63J8hxKs6iyAGaVvCMyeg/GdKc1PUa7pTcfm YCUPN0bItl4K5CSWMHV7X+1OvxOfbQG/+lW1WGG8wRaSLlfe13x38Q05czhrdndc hgUKvtm4nvPO5EbMz9nbib2xJkHnOYCr9zEZKxdnU+p2zyLWiZuAukfh5DqQCOQc WY1iNjScwN8eaDZonKoXeKnKD2Llfgglg33bwdqQxDhacbIAc55TamgA8tPvncj6 6CBh7JPnqIR5TmcPpaNm1MB+MiTmggMTuur7fy3fkOYPV8V7QVoSBdh4wjgRWFEU kRWoimSqEoAtJ0MJqQfwr0U= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:38 2026 by rpki-client