$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYC5SVHQ3HOWXYihMfgd9wKhs_Q.roa File: ZYC5SVHQ3HOWXYihMfgd9wKhs_Q.roa (raw, json) Hash identifier: XGGK16efx/3wKseG45JTcHx5bl6Z43OMF75XkTUCAzg= Subject key identifier: 65:80:B9:49:51:D0:DC:73:96:5D:88:A1:31:F8:1D:F7:02:A1:B3:F4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14CD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYC5SVHQ3HOWXYihMfgd9wKhs_Q.roa Signing time: Tue 31 Mar 2026 07:58:19 +0000 ROA not before: Tue 31 Mar 2026 07:58:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5325 (0x14cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6580B94951D0DC73965D88A131F81DF702A1B3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:99:be:2e:13:ca:c1:df:bc:53:db:ed:a2: ea:19:5d:9d:21:3a:e8:29:3b:fe:16:0f:cc:ff:72: 3c:41:86:65:f4:7a:d0:eb:80:e8:4e:61:b7:42:6c: c4:16:97:63:3b:bf:0e:ad:78:0d:0d:de:30:6b:b2: 6a:07:e4:7f:56:85:17:62:70:51:5d:05:5a:5c:02: 42:47:d9:97:d5:bb:54:2c:84:76:e5:33:af:ba:ab: e7:7d:0c:05:a2:df:43:ca:71:3f:c8:76:09:26:7c: c9:75:f7:15:c1:ce:f0:86:fc:ab:81:65:d9:59:42: 51:10:78:d7:af:6e:c5:83:28:38:9f:70:ab:96:4c: aa:b4:9a:61:d1:88:b7:1d:26:94:76:a0:ed:a1:fb: ba:5d:5f:29:d0:62:97:0a:f1:09:7e:16:dd:da:72: f7:a1:58:dc:1c:f9:f1:e4:8d:71:d5:6c:ae:cf:90: ea:de:46:98:79:ec:c1:f3:ed:c2:8b:8c:9b:bd:e1: 67:57:af:5c:35:ea:dc:f1:f5:eb:8c:c3:29:20:f4: fb:63:c9:7b:67:a3:14:39:32:0f:68:a3:12:ff:e7: fe:38:cc:86:82:78:5a:48:e0:64:52:c2:46:6c:97: de:84:0b:0c:54:4a:71:a2:8c:86:2d:eb:b5:37:6b: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:B9:49:51:D0:DC:73:96:5D:88:A1:31:F8:1D:F7:02:A1:B3:F4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYC5SVHQ3HOWXYihMfgd9wKhs_Q.roa sbgp-ipAddrBlock: critical IPv4: 1.79.88.0/23 Signature Algorithm: sha256WithRSAEncryption 57:4f:62:45:e4:49:7b:1b:c6:5c:8e:68:e8:85:0b:ea:88:e4: 71:e0:0e:5b:13:52:9e:17:03:6e:61:32:04:51:ed:e8:65:c5: 0d:bf:88:d8:fa:2d:d7:63:c1:88:6d:e6:d0:b9:df:e8:3a:06: 47:14:70:c8:5d:dc:41:cb:3a:69:de:c3:e7:fc:a4:48:92:96: d9:72:7b:f0:84:82:dc:dc:54:66:52:6b:04:d6:df:e5:d5:6e: f4:cb:7d:3e:d9:2d:f3:5b:52:a8:55:7c:87:77:e6:38:a6:bb: ba:75:76:95:4b:32:5b:76:44:2e:be:86:16:77:56:6f:96:79: bf:4c:79:3c:8c:aa:0c:8a:27:72:39:1b:d1:18:52:98:5c:a9: c9:70:14:dd:db:80:5a:48:ec:93:c5:15:72:ee:2d:7a:fb:66: 2e:14:24:c0:e0:92:23:7d:fe:59:84:d1:fb:4a:1d:6d:c3:17: 31:ed:1f:2e:ce:61:7e:7c:8d:95:cc:ef:5f:c9:7b:db:e2:bc: 80:11:13:0f:41:30:c0:cc:64:b3:aa:34:7d:50:3f:af:32:e9: 0b:6e:29:e9:96:b5:9e:ef:88:34:03:62:1a:ef:26:67:94:34: 15:89:a7:df:6b:0d:76:43:2c:3e:7d:3a:84:38:40:7c:05:45: 0b:c5:e2:80 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1ODBCOTQ5NTFEMERD NzM5NjVEODhBMTMxRjgxREY3MDJBMUIzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnA5m+LhPKwd+8U9vtouoZXZ0hOugpO/4WD8z/cjxBhmX0etDr gOhOYbdCbMQWl2M7vw6teA0N3jBrsmoH5H9WhRdicFFdBVpcAkJH2ZfVu1QshHbl M6+6q+d9DAWi30PKcT/IdgkmfMl19xXBzvCG/KuBZdlZQlEQeNevbsWDKDifcKuW TKq0mmHRiLcdJpR2oO2h+7pdXynQYpcK8Ql+Ft3acvehWNwc+fHkjXHVbK7PkOre Rph57MHz7cKLjJu94WdXr1w16tzx9euMwykg9PtjyXtnoxQ5Mg9ooxL/5/44zIaC eFpI4GRSwkZsl96ECwxUSnGijIYt67U3a9plAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUZYC5SVHQ3HOWXYihMfgd9wKhs/QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1pZQzVTVkhRM0hPV1hZaWhNZmdkOXdLaHNfUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBT1gwDQYJKoZIhvcNAQELBQADggEB AFdPYkXkSXsbxlyOaOiFC+qI5HHgDlsTUp4XA25hMgRR7ehlxQ2/iNj6LddjwYht 5tC53+g6BkcUcMhd3EHLOmnew+f8pEiSltlye/CEgtzcVGZSawTW3+XVbvTLfT7Z LfNbUqhVfId35jimu7p1dpVLMlt2RC6+hhZ3Vm+Web9MeTyMqgyKJ3I5G9EYUphc qclwFN3bgFpI7JPFFXLuLXr7Zi4UJMDgkiN9/lmE0ftKHW3DFzHtHy7OYX58jZXM 71/Je9vivIAREw9BMMDMZLOqNH1QP68y6QtuKemWtZ7viDQDYhrvJmeUNBWJp99r DXZDLD59OoQ4QHwFRQvF4oA= -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:08 2026 by rpki-client