$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_TtX2aY17fLwS4vYIYopdWbvN2g.roa File: _TtX2aY17fLwS4vYIYopdWbvN2g.roa (raw, json) Hash identifier: PsdNvTzxl+EmAZVwykJaEVSPCLJLUQlM+nLiMxjFTI4= Subject key identifier: FD:3B:57:D9:A6:35:ED:F2:F0:4B:8B:D8:21:8A:29:75:66:EF:37:68 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1544 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_TtX2aY17fLwS4vYIYopdWbvN2g.roa Signing time: Tue 31 Mar 2026 07:59:17 +0000 ROA not before: Tue 31 Mar 2026 07:59:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5444 (0x1544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=FD3B57D9A635EDF2F04B8BD8218A297566EF3768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:4c:14:04:2a:2f:8c:df:05:fc:48:0a:36: a4:87:0e:c8:eb:d4:d8:3c:c8:7e:6d:33:5d:e8:6e: 91:0b:8a:b2:bf:43:fb:8c:a1:a4:0f:93:36:13:5f: 53:c3:b8:ae:84:b8:d2:03:97:e1:cb:22:39:f2:25: dd:51:4d:76:26:32:57:d2:41:16:23:f0:e2:5c:ab: 77:17:2f:35:bf:7f:25:f2:df:f4:f9:b7:42:76:08: 93:1f:e9:43:5c:48:3d:bc:9c:92:90:c1:36:5c:49: 11:e0:90:0b:60:2e:8c:4c:27:f4:bf:8d:eb:0c:29: 03:94:2e:d1:b0:3b:68:52:1a:3d:83:81:6b:39:bb: 69:82:7f:46:7f:eb:61:a6:49:49:4e:c0:a5:a2:57: d4:bc:72:86:df:0c:e1:2c:d0:74:cf:5a:8e:18:95: 69:bf:e6:6a:d2:63:f6:2b:ec:11:49:36:66:67:ec: a1:61:9a:a7:ca:78:ec:b6:24:88:56:ed:42:59:df: 29:3a:c8:55:3e:51:ab:34:2a:79:bd:91:a1:72:e6: 7a:82:91:3a:15:dd:15:1b:82:5f:c4:4c:27:65:a1: 48:47:5d:22:ad:1f:ed:22:0e:79:ff:9e:1a:ea:e4: 82:51:a3:68:5a:87:3d:93:9f:70:36:53:54:60:44: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3B:57:D9:A6:35:ED:F2:F0:4B:8B:D8:21:8A:29:75:66:EF:37:68 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_TtX2aY17fLwS4vYIYopdWbvN2g.roa sbgp-ipAddrBlock: critical IPv4: 1.76.148.0/22 Signature Algorithm: sha256WithRSAEncryption 64:b6:4f:21:b8:b1:66:6d:01:f1:d3:4f:cc:bf:c7:a2:fb:d0: a1:48:8b:f1:8c:7a:99:8a:42:4e:51:42:d4:13:52:b9:b3:fc: ad:ee:2f:0d:55:cc:53:9a:bd:4d:f0:ac:a4:b4:b0:83:bd:ac: f3:37:45:9f:66:7f:69:b3:76:fc:7a:d0:38:44:0c:cb:1f:ba: 4e:b4:bf:3d:d7:b3:ea:71:53:43:d1:82:33:e7:60:b2:e5:fa: 32:12:06:c1:a1:84:8f:de:49:12:b1:94:63:27:ae:2e:7b:4a: e5:c2:b4:4f:ee:64:4d:32:a0:6f:fc:1c:a9:2c:c7:ef:16:d9: 7f:f6:6e:2b:94:91:1b:8f:6d:a9:6f:14:98:1b:c6:17:0c:c6: 0f:02:ec:a9:00:85:4c:ba:0f:0c:98:9f:18:8c:b2:05:69:b7: 34:bf:99:6f:83:33:9c:3c:d4:b5:97:96:19:6f:c3:ea:d8:e5: 00:7d:e1:d7:d8:65:2d:47:e1:07:75:93:56:cc:65:ec:a1:ff: b1:f2:12:bc:95:ce:49:b7:2b:ad:c5:d2:41:59:7b:cd:df:a1: 3e:db:1f:dc:5a:c4:e7:f9:83:39:ea:d1:1b:ae:f2:ce:c3:b8: 19:54:f1:dc:9f:82:27:f5:50:d1:a4:1b:52:2c:9a:4c:9c:0a: 5c:21:08:ae -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZEM0I1N0Q5QTYzNUVE RjJGMDRCOEJEODIxOEEyOTc1NjZFRjM3NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiLkwUBCovjN8F/EgKNqSHDsjr1Ng8yH5tM13obpELirK/Q/uM oaQPkzYTX1PDuK6EuNIDl+HLIjnyJd1RTXYmMlfSQRYj8OJcq3cXLzW/fyXy3/T5 t0J2CJMf6UNcSD28nJKQwTZcSRHgkAtgLoxMJ/S/jesMKQOULtGwO2hSGj2DgWs5 u2mCf0Z/62GmSUlOwKWiV9S8cobfDOEs0HTPWo4YlWm/5mrSY/Yr7BFJNmZn7KFh mqfKeOy2JIhW7UJZ3yk6yFU+Uas0Knm9kaFy5nqCkToV3RUbgl/ETCdloUhHXSKt H+0iDnn/nhrq5IJRo2hahz2Tn3A2U1RgREkjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU/TtX2aY17fLwS4vYIYopdWbvN2gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L19UdFgyYVkxN2ZMd1M0dllJWW9wZFdidk4yZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBTJQwDQYJKoZIhvcNAQELBQADggEB AGS2TyG4sWZtAfHTT8y/x6L70KFIi/GMepmKQk5RQtQTUrmz/K3uLw1VzFOavU3w rKS0sIO9rPM3RZ9mf2mzdvx60DhEDMsfuk60vz3Xs+pxU0PRgjPnYLLl+jISBsGh hI/eSRKxlGMnri57SuXCtE/uZE0yoG/8HKksx+8W2X/2biuUkRuPbalvFJgbxhcM xg8C7KkAhUy6DwyYnxiMsgVptzS/mW+DM5w81LWXlhlvw+rY5QB94dfYZS1H4Qd1 k1bMZeyh/7HyEryVzkm3K63F0kFZe83foT7bH9xaxOf5gznq0Ruu8s7DuBlU8dyf gif1UNGkG1IsmkycClwhCK4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:41 2026 by rpki-client