$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrBOcXsnA3cNl4MFgUKsjX0K6AY.roa File: ZrBOcXsnA3cNl4MFgUKsjX0K6AY.roa (raw, json) Hash identifier: I3tEHHP2YHVgTuxJO7XI7ca51R/kPez4QR9kPI2Eglc= Subject key identifier: 66:B0:4E:71:7B:27:03:77:0D:97:83:05:81:42:AC:8D:7D:0A:E8:06 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 152E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrBOcXsnA3cNl4MFgUKsjX0K6AY.roa Signing time: Tue 31 Mar 2026 07:59:07 +0000 ROA not before: Tue 31 Mar 2026 07:59:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5422 (0x152e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=66B04E717B2703770D9783058142AC8D7D0AE806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:9b:a2:96:7f:c5:06:df:d6:01:29:0c:47: b8:ae:5a:97:10:36:d2:10:85:dd:8f:c5:bd:65:4e: 8b:e8:13:22:84:7a:e6:9b:ee:bc:26:51:4a:ac:f3: c3:f4:20:bb:93:33:ce:32:a8:a4:8d:4b:98:96:c0: 44:86:b5:cb:e8:ca:39:e9:42:7d:29:b3:04:37:2b: 0d:5a:e2:dd:40:6a:fe:4b:b5:07:ac:cf:4c:bd:f1: 47:cc:f5:e7:55:1a:67:84:5d:4c:99:24:f2:5f:c9: 6c:fa:0d:56:a7:42:ae:1e:22:a5:6f:91:b4:bd:ad: 1a:64:f0:c1:c9:d3:00:40:85:a0:14:58:98:a2:f0: f1:35:ae:a0:24:c4:03:40:44:2b:4d:9c:6f:3d:06: 47:46:6d:15:be:e9:c4:be:3e:e8:10:06:f4:2f:ef: b3:ba:e5:9a:be:51:c4:d9:46:0a:01:d0:32:ae:fd: f2:e8:fb:28:18:60:2c:94:73:86:20:b7:58:c1:66: 54:0d:43:fc:a9:b5:1d:42:ed:f3:06:26:03:88:11: a3:dd:94:0e:d3:f4:6d:48:88:64:66:4b:d3:f4:53: 92:f8:b2:aa:20:00:80:30:99:76:07:a0:9c:1d:a8: 66:f8:48:22:bc:59:34:4a:8a:b0:00:ce:ce:a4:eb: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:4E:71:7B:27:03:77:0D:97:83:05:81:42:AC:8D:7D:0A:E8:06 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZrBOcXsnA3cNl4MFgUKsjX0K6AY.roa sbgp-ipAddrBlock: critical IPv4: 220.210.112.0/20 Signature Algorithm: sha256WithRSAEncryption d6:81:f5:f5:2c:e5:d8:33:99:7b:c0:15:bc:ad:11:bd:be:4f: 8d:b8:c4:cb:79:0e:9d:fa:4f:1a:70:92:5d:22:e2:a7:ca:7e: 90:7f:a8:54:af:94:62:de:ef:6c:e7:fb:a1:cb:4a:70:36:67: b8:fb:f4:94:9d:5e:12:08:6b:67:fa:60:5b:53:cc:75:e1:c6: 07:b9:a1:6e:18:b6:51:47:05:0e:a2:75:b1:6f:f5:32:9b:f0: 8c:2a:49:45:a2:bb:78:bc:23:51:57:f5:b6:d8:5b:3d:2c:e4: 34:7b:3e:41:79:d2:b1:c5:1f:89:95:2c:ca:25:c5:1b:48:3b: 89:27:ba:6c:d9:aa:74:5f:d3:98:83:c6:85:8f:70:2d:22:84: e7:fa:79:a2:fd:01:3e:47:cc:f6:d1:f3:eb:6e:85:ab:c0:02: 8e:bc:89:c0:6c:8d:19:a6:cc:43:58:68:ba:c6:49:86:0a:13: d7:6c:5a:3c:68:8e:d0:b3:98:9f:74:b7:c8:54:17:a7:fc:a1: 2d:da:48:c3:95:d2:be:49:c1:83:b9:40:7e:7d:24:42:45:ff: f1:61:9a:25:67:05:0f:7f:3e:d4:3b:7d:99:74:0a:5f:7a:ed: 35:5f:d2:2a:e1:99:be:af:59:0e:61:f2:4e:1a:83:be:76:4c: ce:55:6e:48 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY2QjA0RTcxN0IyNzAz NzcwRDk3ODMwNTgxNDJBQzhEN0QwQUU4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYEZuiln/FBt/WASkMR7iuWpcQNtIQhd2Pxb1lTovoEyKEeuab 7rwmUUqs88P0ILuTM84yqKSNS5iWwESGtcvoyjnpQn0pswQ3Kw1a4t1Aav5LtQes z0y98UfM9edVGmeEXUyZJPJfyWz6DVanQq4eIqVvkbS9rRpk8MHJ0wBAhaAUWJii 8PE1rqAkxANARCtNnG89BkdGbRW+6cS+PugQBvQv77O65Zq+UcTZRgoB0DKu/fLo +ygYYCyUc4Ygt1jBZlQNQ/yptR1C7fMGJgOIEaPdlA7T9G1IiGRmS9P0U5L4sqog AIAwmXYHoJwdqGb4SCK8WTRKirAAzs6k630BAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUZrBOcXsnA3cNl4MFgUKsjX0K6AYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1pyQk9jWHNuQTNjTmw0TUZnVUtzalgwSzZBWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATc0nAwDQYJKoZIhvcNAQELBQADggEB ANaB9fUs5dgzmXvAFbytEb2+T424xMt5Dp36Txpwkl0i4qfKfpB/qFSvlGLe72zn +6HLSnA2Z7j79JSdXhIIa2f6YFtTzHXhxge5oW4YtlFHBQ6idbFv9TKb8IwqSUWi u3i8I1FX9bbYWz0s5DR7PkF50rHFH4mVLMolxRtIO4knumzZqnRf05iDxoWPcC0i hOf6eaL9AT5HzPbR8+tuhavAAo68icBsjRmmzENYaLrGSYYKE9dsWjxojtCzmJ90 t8hUF6f8oS3aSMOV0r5JwYO5QH59JEJF//FhmiVnBQ9/PtQ7fZl0Cl967TVf0irh mb6vWQ5h8k4ag752TM5Vbkg= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:25 2026 by rpki-client