$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NkW5_Kvl-yeytoQ-t7BC5AQlv3Q.roa File: NkW5_Kvl-yeytoQ-t7BC5AQlv3Q.roa (raw, json) Hash identifier: Yh3OxXX8tSnnTZlfPEzBdPkCwFrHF/8PwOx7qOLmUmA= Subject key identifier: 36:45:B9:FC:AB:E5:FB:27:B2:B6:84:3E:B7:B0:42:E4:04:25:BF:74 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1424 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NkW5_Kvl-yeytoQ-t7BC5AQlv3Q.roa Signing time: Tue 31 Mar 2026 07:56:55 +0000 ROA not before: Tue 31 Mar 2026 07:56:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5156 (0x1424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:56:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3645B9FCABE5FB27B2B6843EB7B042E40425BF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:70:49:45:42:fd:be:30:70:6a:c1:ca:89: cb:d6:df:59:61:b2:06:db:34:7e:2a:e2:79:c0:6c: e3:cc:b2:09:fa:1f:71:de:4d:7f:9e:f6:38:95:d7: cf:66:4f:b0:22:e0:3a:6e:35:78:ae:15:64:f3:eb: ff:0f:75:7d:e6:03:1a:b7:36:e1:b0:10:a9:16:f1: 56:fb:b3:a0:82:11:6d:8b:0c:18:85:6c:e0:b1:04: 7a:d7:8a:03:14:30:fe:7a:21:e7:59:20:b3:d9:d7: f4:64:d7:bc:63:8b:d0:1a:97:b2:5d:0e:67:9e:63: 19:bf:aa:c2:d1:66:43:fd:da:02:bc:65:51:94:04: 7e:b5:1f:ae:b9:2e:6b:74:53:37:a5:b4:22:a3:f0: 44:64:8b:25:c9:2a:e3:5a:96:f0:76:3b:63:7e:70: 22:96:03:af:09:1e:ff:19:88:88:89:06:45:58:2a: 02:5c:fe:a0:1f:d4:6d:26:0c:e4:75:3c:2b:59:66: 59:f6:61:55:43:ea:34:8a:9a:f7:c2:cb:71:bd:05: 94:06:a7:63:69:03:e6:50:65:f7:7e:98:f4:61:f6: 21:ba:5d:af:10:b8:ce:c9:5b:5a:e5:d6:44:9f:01: 42:79:9f:3d:d5:c8:be:44:39:7e:2d:e6:a7:3d:b3: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:B9:FC:AB:E5:FB:27:B2:B6:84:3E:B7:B0:42:E4:04:25:BF:74 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NkW5_Kvl-yeytoQ-t7BC5AQlv3Q.roa sbgp-ipAddrBlock: critical IPv4: 1.78.14.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:ef:bf:c8:a7:bc:26:12:80:08:dd:f3:0d:74:ec:ef:95:ef: 32:78:5e:a4:d2:c7:cc:00:2e:2a:0d:41:92:f7:77:32:e2:1c: 03:20:dd:22:81:a6:31:23:48:30:c2:c4:40:64:b4:60:ab:f5: d0:c8:64:e7:c6:97:88:24:1e:17:7a:c9:f3:b5:f8:52:0c:43: 8b:92:4b:09:28:98:88:a8:ee:e7:d3:51:a4:ee:31:89:51:fe: 57:74:7f:71:cf:2b:c3:ae:4e:9e:49:7a:fb:b9:b6:27:5d:2f: 5a:6d:ea:51:c2:61:c7:26:27:57:ba:72:59:b0:ad:d7:2e:d7: fa:ce:ca:0d:e7:75:51:6f:c8:55:51:5b:2f:ed:d1:8c:db:c6: 9b:db:d4:0c:34:62:0b:7f:6e:ad:fd:a1:05:64:40:c0:8e:61: 4f:c8:51:93:a9:ea:1c:f3:14:fb:02:00:20:b8:e4:ab:26:36: 63:96:eb:a2:a5:7f:8a:87:ae:fe:86:79:fb:ec:1b:51:d3:a5: 45:56:b1:1a:91:e0:71:0f:50:d6:f9:57:d9:f6:e0:4e:b4:95: 25:44:4e:51:6c:65:24:67:d4:bd:b2:1e:ce:87:5e:e0:82:cd: 73:2f:40:7d:a5:c0:b6:0f:22:92:57:1b:82:8b:48:68:58:8d: 2b:98:2b:ca -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU2NTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2NDVCOUZDQUJFNUZC MjdCMkI2ODQzRUI3QjA0MkU0MDQyNUJGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCikXBJRUL9vjBwasHKicvW31lhsgbbNH4q4nnAbOPMsgn6H3He TX+e9jiV189mT7Ai4DpuNXiuFWTz6/8PdX3mAxq3NuGwEKkW8Vb7s6CCEW2LDBiF bOCxBHrXigMUMP56IedZILPZ1/Rk17xji9Aal7JdDmeeYxm/qsLRZkP92gK8ZVGU BH61H665Lmt0UzeltCKj8ERkiyXJKuNalvB2O2N+cCKWA68JHv8ZiIiJBkVYKgJc /qAf1G0mDOR1PCtZZln2YVVD6jSKmvfCy3G9BZQGp2NpA+ZQZfd+mPRh9iG6Xa8Q uM7JW1rl1kSfAUJ5nz3VyL5EOX4t5qc9syJnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUNkW5/Kvl+yeytoQ+t7BC5AQlv3QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L05rVzVfS3ZsLXlleXRvUS10N0JDNUFRbHYzUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTg4wDQYJKoZIhvcNAQELBQADggEB AGrvv8invCYSgAjd8w107O+V7zJ4XqTSx8wALioNQZL3dzLiHAMg3SKBpjEjSDDC xEBktGCr9dDIZOfGl4gkHhd6yfO1+FIMQ4uSSwkomIio7ufTUaTuMYlR/ld0f3HP K8OuTp5Jevu5tiddL1pt6lHCYccmJ1e6clmwrdcu1/rOyg3ndVFvyFVRWy/t0Yzb xpvb1Aw0Ygt/bq39oQVkQMCOYU/IUZOp6hzzFPsCACC45KsmNmOW66Klf4qHrv6G efvsG1HTpUVWsRqR4HEPUNb5V9n24E60lSVETlFsZSRn1L2yHs6HXuCCzXMvQH2l wLYPIpJXG4KLSGhYjSuYK8o= -----END CERTIFICATE-----Generated at Tue Apr 7 19:48:10 2026 by rpki-client