$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SiMRcPYBKRH0_qfO0efu-dCoF8U.roa File: SiMRcPYBKRH0_qfO0efu-dCoF8U.roa (raw, json) Hash identifier: DK3sEJEgfQZgB069OPDxdYYaq2mhnF1isz5l9OFGFJM= Subject key identifier: 4A:23:11:70:F6:01:29:11:F4:FE:A7:CE:D1:E7:EE:F9:D0:A8:17:C5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1720 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SiMRcPYBKRH0_qfO0efu-dCoF8U.roa Signing time: Tue 31 Mar 2026 08:03:12 +0000 ROA not before: Tue 31 Mar 2026 08:03:12 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5920 (0x1720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:12 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4A231170F6012911F4FEA7CED1E7EEF9D0A817C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:3e:2e:7b:48:f3:46:de:48:32:d1:f4:c1: fa:d3:ca:51:ee:29:34:a6:da:01:c3:0d:ba:8e:8e: e1:e4:1a:1c:0b:81:a0:ee:c3:26:c4:b9:08:d8:d2: 50:17:8b:ac:a2:ab:ad:7e:42:df:42:b4:28:17:29: 2a:da:c3:6b:a3:39:e5:84:0e:36:7b:3c:7a:db:d0: db:c5:c5:b8:52:99:2a:73:74:63:30:5b:a4:49:ed: 9d:5c:d9:a5:0b:a5:ac:92:4f:29:8a:33:15:a6:73: 57:80:c7:3f:c3:67:6a:7e:7c:68:bc:42:41:2c:98: bc:aa:09:c3:59:d2:01:65:2e:30:c4:41:35:4d:4b: 4d:81:9a:aa:8c:1f:ea:4b:25:95:1d:bb:1c:33:1f: de:3c:e7:3b:64:fb:da:78:2d:1d:e8:20:7a:8c:b6: 64:30:22:ba:4e:2d:64:70:f0:bd:08:5a:02:1f:02: 37:a1:d9:d5:56:3f:d4:41:86:05:33:33:53:e8:be: 04:bc:47:7a:74:0c:66:01:ea:3d:80:6f:b5:eb:9c: 92:e0:39:65:e6:c3:75:e6:1f:6a:d6:7e:4a:ca:11: b7:94:05:58:a2:be:f0:77:61:5e:ba:7b:5e:3d:7e: 8d:72:d9:03:4d:44:99:bd:15:bf:98:18:fe:87:7c: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:23:11:70:F6:01:29:11:F4:FE:A7:CE:D1:E7:EE:F9:D0:A8:17:C5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SiMRcPYBKRH0_qfO0efu-dCoF8U.roa sbgp-ipAddrBlock: critical IPv4: 1.78.128.0/18 Signature Algorithm: sha256WithRSAEncryption 08:94:b8:4e:de:81:5e:91:e3:e2:b3:9f:38:b7:d5:f4:1c:af: b0:65:72:ed:62:44:99:bf:66:41:92:9f:67:b4:99:f6:4d:d6: b6:f2:67:bd:d1:bf:5c:d0:62:cf:c0:08:c2:1f:5a:da:43:5a: 75:29:a5:c6:7d:ed:cb:67:1c:0e:69:51:19:9b:87:aa:5b:a1: 6e:11:55:11:d3:41:a8:8b:9e:8f:a3:d8:dc:57:d4:9d:5d:85: 53:54:12:0f:76:f8:a6:a2:1d:70:f3:c2:18:19:cc:d8:e4:76: b0:8c:31:8f:87:9a:4a:6c:9c:20:ce:8b:91:5b:ad:4e:78:10: c5:3c:6a:4b:bb:6d:95:02:f8:7a:67:08:ec:37:4a:20:c1:12: 3e:9c:32:dc:a0:8f:40:3b:75:09:71:0e:7c:e2:4b:81:f9:d2: bc:b9:85:b6:46:96:a5:b1:7b:a8:89:1d:bb:d6:16:e6:65:1a: 1d:a7:c8:00:11:01:26:f1:22:ed:91:ce:c5:6f:df:38:24:9a: e2:99:08:f9:8c:98:0e:75:97:3b:e1:ea:da:fa:ec:57:a9:fa: 61:5d:6f:c0:d5:28:8b:68:85:d1:8a:07:d9:e5:cf:2a:59:55: 5e:0d:25:21:c1:86:c2:87:94:69:55:68:32:9c:95:61:4d:ea: f8:0c:7a:60 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRBMjMxMTcwRjYwMTI5 MTFGNEZFQTdDRUQxRTdFRUY5RDBBODE3QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/fT4ue0jzRt5IMtH0wfrTylHuKTSm2gHDDbqOjuHkGhwLgaDu wybEuQjY0lAXi6yiq61+Qt9CtCgXKSraw2ujOeWEDjZ7PHrb0NvFxbhSmSpzdGMw W6RJ7Z1c2aULpaySTymKMxWmc1eAxz/DZ2p+fGi8QkEsmLyqCcNZ0gFlLjDEQTVN S02BmqqMH+pLJZUduxwzH9485ztk+9p4LR3oIHqMtmQwIrpOLWRw8L0IWgIfAjeh 2dVWP9RBhgUzM1PovgS8R3p0DGYB6j2Ab7XrnJLgOWXmw3XmH2rWfkrKEbeUBVii vvB3YV66e149fo1y2QNNRJm9Fb+YGP6HfH0RAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUSiMRcPYBKRH0/qfO0efu+dCoF8UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1NpTVJjUFlCS1JIMF9xZk8wZWZ1LWRDb0Y4VS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYBToAwDQYJKoZIhvcNAQELBQADggEB AAiUuE7egV6R4+Kznzi31fQcr7Blcu1iRJm/ZkGSn2e0mfZN1rbyZ73Rv1zQYs/A CMIfWtpDWnUppcZ97ctnHA5pURmbh6pboW4RVRHTQaiLno+j2NxX1J1dhVNUEg92 +KaiHXDzwhgZzNjkdrCMMY+HmkpsnCDOi5FbrU54EMU8aku7bZUC+HpnCOw3SiDB Ej6cMtygj0A7dQlxDnziS4H50ry5hbZGlqWxe6iJHbvWFuZlGh2nyAARASbxIu2R zsVv3zgkmuKZCPmMmA51lzvh6tr67Fep+mFdb8DVKItohdGKB9nlzypZVV4NJSHB hsKHlGlVaDKclWFN6vgMemA= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:08 2026 by rpki-client