$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XPeHvGsdS_UcmqWQdDpUM8oL_1E.roa File: XPeHvGsdS_UcmqWQdDpUM8oL_1E.roa (raw, json) Hash identifier: iTXM7rnSIE+wePkY2eOnC6prPo3jCkc+X1W7Z08yGzo= Subject key identifier: 5C:F7:87:BC:6B:1D:4B:F5:1C:9A:A5:90:74:3A:54:33:CA:0B:FF:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16D6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XPeHvGsdS_UcmqWQdDpUM8oL_1E.roa Signing time: Tue 31 Mar 2026 08:02:36 +0000 ROA not before: Tue 31 Mar 2026 08:02:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5846 (0x16d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5CF787BC6B1D4BF51C9AA590743A5433CA0BFF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:da:26:ad:d7:12:e9:9f:0a:b9:f0:0e:ff: 5b:8c:42:bb:de:39:78:e2:88:83:fc:99:ff:98:ca: ba:64:e8:b9:27:d0:d6:0a:b4:6a:58:9b:7b:eb:6b: c2:fa:4f:84:f3:6e:fc:4a:50:b7:fa:3b:ca:c0:4c: d8:93:de:68:4f:44:4b:c7:27:0f:ec:7a:83:60:b6: 3b:6f:12:95:67:44:87:a4:50:d1:9c:d1:97:35:52: fc:53:cd:e1:0a:ae:e3:d7:d6:4b:82:fe:41:7c:fd: e7:17:ae:6d:f8:39:a0:4d:e6:be:46:9f:eb:1e:d2: 53:a5:63:f5:26:70:f4:2f:3e:13:10:a3:c6:ea:89: c1:bf:3c:48:ec:7c:a3:70:77:56:4d:27:f2:2d:b7: 52:26:61:6b:5e:c2:6e:ea:ad:26:ff:9b:58:e4:63: ad:f1:10:2a:6f:ed:17:d7:b8:61:92:bf:01:47:5c: 32:0c:d5:77:b9:8d:31:c8:0d:d2:d6:48:ea:07:9e: fe:6a:85:74:cc:54:e7:31:bb:23:8f:1f:73:8a:d8: 30:1c:bb:de:7f:0d:21:e6:a6:62:cf:77:52:45:6d: 0c:0f:ff:b2:2f:6a:23:5f:b0:cc:00:ca:5e:2d:3b: 9d:87:2d:bd:14:3d:af:cf:22:dd:cc:a8:06:37:c7: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:87:BC:6B:1D:4B:F5:1C:9A:A5:90:74:3A:54:33:CA:0B:FF:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XPeHvGsdS_UcmqWQdDpUM8oL_1E.roa sbgp-ipAddrBlock: critical IPv4: 1.66.106.0/24 Signature Algorithm: sha256WithRSAEncryption a6:d1:f4:54:05:60:51:1f:b3:0b:d1:ff:f8:b9:2f:9f:70:11: e4:2f:3d:22:0b:74:d6:6d:01:da:9b:50:54:79:22:79:68:d4: 11:81:01:97:74:81:97:cb:c9:fb:e5:54:6c:1d:62:ac:60:42: 07:8e:f8:c1:12:c0:98:ca:b2:fa:40:df:eb:d0:a6:19:66:64: 61:c2:c7:e0:95:59:40:3d:cc:57:20:05:3f:7c:8a:2c:17:0d: 11:e6:67:fd:66:9f:5a:c7:d2:e7:b4:da:a4:c1:ee:64:22:91: 63:bb:a9:dd:e8:2b:21:42:97:04:23:52:04:ee:7e:49:c3:f7: 29:d1:d8:98:fb:03:a8:16:a6:de:bf:e0:c8:6a:8c:67:c3:96: e3:1b:60:a7:25:5d:0f:a2:c3:88:83:b1:68:b1:e7:28:12:69: 07:94:f4:15:e7:78:d2:e9:20:24:b8:ba:c7:f0:3c:62:01:a0: 9e:63:bb:c9:61:ea:de:4a:64:b6:79:33:c4:fe:86:57:60:66: 66:51:a2:04:03:40:18:d9:fb:71:10:a8:40:e9:23:7c:ea:f4: f0:5e:23:65:3b:46:89:a0:87:16:60:a9:c1:30:98:b5:7b:94: fd:de:eb:15:bf:ef:73:62:d8:8d:62:13:0f:0c:d2:ed:50:90: 15:24:64:14 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDRjc4N0JDNkIxRDRC RjUxQzlBQTU5MDc0M0E1NDMzQ0EwQkZGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzV9omrdcS6Z8KufAO/1uMQrveOXjiiIP8mf+Yyrpk6Lkn0NYK tGpYm3vra8L6T4TzbvxKULf6O8rATNiT3mhPREvHJw/seoNgtjtvEpVnRIekUNGc 0Zc1UvxTzeEKruPX1kuC/kF8/ecXrm34OaBN5r5Gn+se0lOlY/UmcPQvPhMQo8bq icG/PEjsfKNwd1ZNJ/Itt1ImYWtewm7qrSb/m1jkY63xECpv7RfXuGGSvwFHXDIM 1Xe5jTHIDdLWSOoHnv5qhXTMVOcxuyOPH3OK2DAcu95/DSHmpmLPd1JFbQwP/7Iv aiNfsMwAyl4tO52HLb0UPa/PIt3MqAY3x46RAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXPeHvGsdS/UcmqWQdDpUM8oL/1EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1hQZUh2R3NkU19VY21xV1FkRHBVTThvTF8xRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABQmowDQYJKoZIhvcNAQELBQADggEB AKbR9FQFYFEfswvR//i5L59wEeQvPSILdNZtAdqbUFR5Inlo1BGBAZd0gZfLyfvl VGwdYqxgQgeO+MESwJjKsvpA3+vQphlmZGHCx+CVWUA9zFcgBT98iiwXDRHmZ/1m n1rH0ue02qTB7mQikWO7qd3oKyFClwQjUgTufknD9ynR2Jj7A6gWpt6/4MhqjGfD luMbYKclXQ+iw4iDsWix5ygSaQeU9BXneNLpICS4usfwPGIBoJ5ju8lh6t5KZLZ5 M8T+hldgZmZRogQDQBjZ+3EQqEDpI3zq9PBeI2U7RomghxZgqcEwmLV7lP3e6xW/ 73Ni2I1iEw8M0u1QkBUkZBQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:45 2026 by rpki-client