$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QOv65wdEt9DjQSd9X4GSEVZBskk.roa File: QOv65wdEt9DjQSd9X4GSEVZBskk.roa (raw, json) Hash identifier: 3Uj1vf0OcT01VmVgZqnx/X3iMYVcFoxaRv2AS6+W+fk= Subject key identifier: 40:EB:FA:E7:07:44:B7:D0:E3:41:27:7D:5F:81:92:11:56:41:B2:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14AC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QOv65wdEt9DjQSd9X4GSEVZBskk.roa Signing time: Tue 31 Mar 2026 07:58:01 +0000 ROA not before: Tue 31 Mar 2026 07:58:01 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5292 (0x14ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:01 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=40EBFAE70744B7D0E341277D5F8192115641B249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:0c:3d:be:79:f7:d0:1a:cc:e9:2e:1c:1f: 01:ed:73:ad:87:6f:e8:2d:be:47:48:65:ba:0e:78: ab:88:f7:eb:52:46:db:4d:10:3f:16:6b:ad:72:89: 37:f9:80:b6:35:54:59:ab:73:77:5b:5e:07:bc:d7: b6:7c:de:8e:3f:56:31:dd:36:c4:7b:e3:a6:eb:d2: 88:30:40:91:df:36:a3:b6:7b:17:64:00:06:d7:4b: 9f:a9:f4:e6:c5:f1:21:b1:f5:b9:4d:07:28:c4:be: 94:ba:d4:0c:d9:ea:fe:23:1a:0e:d1:ac:ec:2a:d3: a2:83:8a:15:86:4f:a3:30:0d:26:16:11:b0:80:e2: df:0e:9a:21:0e:97:a0:a9:5a:dc:85:0f:2f:de:d6: 14:74:8c:4c:42:e5:84:72:05:dc:fa:1d:50:3e:8d: 80:d1:0b:c7:d3:69:67:20:e8:c2:8a:4e:03:06:8b: 61:1c:ef:ce:42:6b:9a:2d:7a:35:7c:e8:e6:9d:f5: 3c:0a:6f:8a:95:01:3c:31:38:f4:91:ab:25:9d:62: 63:3d:46:3e:57:c2:bc:62:1e:19:6a:e9:76:d8:54: a1:3a:f2:a9:fe:62:fa:78:01:4f:b6:b7:c5:59:c5: d1:4f:c9:00:d8:59:29:51:96:36:7b:19:b6:f2:d9: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:FA:E7:07:44:B7:D0:E3:41:27:7D:5F:81:92:11:56:41:B2:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QOv65wdEt9DjQSd9X4GSEVZBskk.roa sbgp-ipAddrBlock: critical IPv4: 1.79.96.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:e5:74:ad:ac:17:7d:c9:d6:81:53:3f:fd:db:c3:e4:e9:de: 87:76:55:95:7e:00:aa:2f:6d:a9:b3:8a:ab:5e:6c:2d:df:4b: e3:6c:5d:70:27:2e:68:76:c8:b3:42:a5:07:37:86:ce:c0:5c: ea:ae:4b:13:9f:41:a9:d4:ce:5f:52:af:e9:ff:84:b6:f0:f9: 3e:18:ff:af:f8:f5:e9:8c:b2:e9:b9:78:18:c7:f5:a2:78:dd: ac:22:7f:71:6e:9f:97:3e:99:0c:71:20:08:21:29:9f:fe:4e: 19:32:71:28:3d:b9:42:d2:9f:10:48:a2:f7:4c:39:65:92:c6: a6:0d:1a:e4:e5:5e:8b:8f:1a:98:f1:0d:75:b0:b9:30:bc:28: 6a:c5:8f:2f:06:97:aa:ad:6a:7a:98:fe:bf:45:b9:6c:cc:65: 09:d0:2e:d7:56:84:d1:41:cd:ec:e3:da:7b:bb:f9:08:59:9a: 94:b5:21:43:06:47:e7:bf:f6:f2:f5:2b:7e:0f:74:1f:f4:d3: 17:3c:e9:a1:dd:64:2c:d0:5a:1a:bb:62:25:20:a0:41:ec:01: 8a:08:49:43:b9:a3:d0:28:ef:6f:a7:64:f5:76:b3:37:aa:05: e8:7c:a5:43:d9:f9:3d:0b:4f:bf:0e:a5:c2:3a:09:f0:5e:08: a2:e3:1c:95 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwRUJGQUU3MDc0NEI3 RDBFMzQxMjc3RDVGODE5MjExNTY0MUIyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDOQw9vnn30BrM6S4cHwHtc62Hb+gtvkdIZboOeKuI9+tSRttN ED8Wa61yiTf5gLY1VFmrc3dbXge817Z83o4/VjHdNsR746br0ogwQJHfNqO2exdk AAbXS5+p9ObF8SGx9blNByjEvpS61AzZ6v4jGg7RrOwq06KDihWGT6MwDSYWEbCA 4t8OmiEOl6CpWtyFDy/e1hR0jExC5YRyBdz6HVA+jYDRC8fTaWcg6MKKTgMGi2Ec 785Ca5otejV86Oad9TwKb4qVATwxOPSRqyWdYmM9Rj5XwrxiHhlq6XbYVKE68qn+ Yvp4AU+2t8VZxdFPyQDYWSlRljZ7Gbby2WNjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQOv65wdEt9DjQSd9X4GSEVZBskkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1FPdjY1d2RFdDlEalFTZDlYNEdTRVZaQnNray5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBT2AwDQYJKoZIhvcNAQELBQADggEB ABzldK2sF33J1oFTP/3bw+Tp3od2VZV+AKovbamziqtebC3fS+NsXXAnLmh2yLNC pQc3hs7AXOquSxOfQanUzl9Sr+n/hLbw+T4Y/6/49emMsum5eBjH9aJ43awif3Fu n5c+mQxxIAghKZ/+ThkycSg9uULSnxBIovdMOWWSxqYNGuTlXouPGpjxDXWwuTC8 KGrFjy8Gl6qtanqY/r9FuWzMZQnQLtdWhNFBzezj2nu7+QhZmpS1IUMGR+e/9vL1 K34PdB/00xc86aHdZCzQWhq7YiUgoEHsAYoISUO5o9Ao72+nZPV2szeqBeh8pUPZ +T0LT78OpcI6CfBeCKLjHJU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:36 2026 by rpki-client