$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aNd2RmOmvO2oLjuU48LsvM1zy70.roa File: aNd2RmOmvO2oLjuU48LsvM1zy70.roa (raw, json) Hash identifier: Cjtm+lSzSOb035ThV1dA2TuckIuh0H9cCdK8ldXRMjc= Subject key identifier: 68:D7:76:46:63:A6:BC:ED:A8:2E:3B:94:E3:C2:EC:BC:CD:73:CB:BD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1384 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aNd2RmOmvO2oLjuU48LsvM1zy70.roa Signing time: Tue 31 Mar 2026 07:55:44 +0000 ROA not before: Tue 31 Mar 2026 07:55:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4996 (0x1384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=68D7764663A6BCEDA82E3B94E3C2ECBCCD73CBBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:d3:e0:b1:f4:c8:cb:0e:87:df:e9:90:16: f2:9a:2c:91:6e:f2:b2:92:dc:b4:c0:e8:fa:ba:44: 28:49:3c:24:98:52:27:7f:9f:cb:f3:1c:97:f6:e9: 24:7f:81:cb:22:12:c5:3d:c3:66:28:ef:d2:22:56: 7a:b0:87:a7:8e:6f:c0:f2:c1:6c:95:bf:4e:c9:99: 24:b0:84:b9:75:06:cc:1e:b8:93:c2:85:14:b2:b9: 42:9b:37:b1:df:39:40:34:26:58:38:e1:7f:0e:49: c6:ac:81:a4:9a:c4:16:07:78:46:3a:be:3b:04:92: bc:84:2c:f6:bd:ea:54:aa:8d:33:87:a3:06:c1:02: 99:93:44:41:3f:08:fa:71:31:c8:74:0a:05:fe:7a: b4:2b:87:2a:d5:70:de:65:c0:7b:73:5f:13:90:dd: d7:6c:39:94:30:7a:84:88:6c:5b:8d:f9:35:bb:10: be:e0:dc:e1:20:a4:3f:2d:0e:c3:48:96:b9:c9:96: 05:72:7e:7e:49:4b:85:d5:fc:ca:ce:09:0a:0f:e5: 7c:37:5d:44:84:e1:eb:81:22:c1:14:79:bd:e4:1a: 3f:23:0e:ef:d2:02:08:e7:58:03:af:88:5f:fd:79: 3b:a8:85:43:07:b8:b2:f7:49:0e:bd:71:c2:0d:41: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:76:46:63:A6:BC:ED:A8:2E:3B:94:E3:C2:EC:BC:CD:73:CB:BD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aNd2RmOmvO2oLjuU48LsvM1zy70.roa sbgp-ipAddrBlock: critical IPv4: 1.72.7.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:8a:b0:38:54:41:2f:52:ac:b4:6a:7f:23:fd:ce:69:d2:3f: 39:ff:2c:ca:15:e2:69:ce:d5:c6:b8:02:03:01:d2:cb:1b:11: 57:0a:5b:b1:c0:37:ae:83:37:13:66:05:55:04:6f:c7:36:7b: ad:b0:10:77:e9:3f:ca:b9:6d:9a:70:5b:0a:df:20:c2:5f:9a: 5a:a1:f0:f1:55:13:c4:3c:b5:ea:bf:01:21:ab:2b:dc:67:56: de:04:93:02:de:e7:fd:80:ae:6d:3f:44:dd:cb:55:92:8a:db: de:ca:d3:57:14:1e:d1:38:de:75:b8:98:6a:ea:b2:a3:e9:a5: e4:27:22:2e:6b:aa:dd:ac:91:4e:80:d5:f2:18:a7:92:fd:e8: ec:a6:a9:1d:ba:73:20:c2:30:b2:35:d9:43:08:09:50:77:e9: d5:f1:f0:87:cc:8c:77:10:52:f4:bc:f3:a7:dd:f4:fb:15:ed: cb:90:39:ef:d5:a3:f2:4e:f6:20:11:b0:2d:84:f8:00:99:c8: ff:13:d3:04:3a:e1:f4:14:ff:66:94:46:4a:46:a2:54:fc:42: 41:3f:0c:21:52:07:20:3a:7f:fc:eb:63:12:06:45:66:66:13: 54:25:20:39:8b:e2:6d:a6:05:24:3a:36:0a:30:45:fa:a2:ca: 6f:62:a4:68 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY4RDc3NjQ2NjNBNkJD RURBODJFM0I5NEUzQzJFQ0JDQ0Q3M0NCQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXD9PgsfTIyw6H3+mQFvKaLJFu8rKS3LTA6Pq6RChJPCSYUid/ n8vzHJf26SR/gcsiEsU9w2Yo79IiVnqwh6eOb8DywWyVv07JmSSwhLl1BsweuJPC hRSyuUKbN7HfOUA0Jlg44X8OScasgaSaxBYHeEY6vjsEkryELPa96lSqjTOHowbB ApmTREE/CPpxMch0CgX+erQrhyrVcN5lwHtzXxOQ3ddsOZQweoSIbFuN+TW7EL7g 3OEgpD8tDsNIlrnJlgVyfn5JS4XV/MrOCQoP5Xw3XUSE4euBIsEUeb3kGj8jDu/S AgjnWAOviF/9eTuohUMHuLL3SQ69ccINQa7XAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUaNd2RmOmvO2oLjuU48LsvM1zy70wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2FOZDJSbU9tdk8yb0xqdVU0OExzdk0xenk3MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSAcwDQYJKoZIhvcNAQELBQADggEB AJuKsDhUQS9SrLRqfyP9zmnSPzn/LMoV4mnO1ca4AgMB0ssbEVcKW7HAN66DNxNm BVUEb8c2e62wEHfpP8q5bZpwWwrfIMJfmlqh8PFVE8Q8teq/ASGrK9xnVt4EkwLe 5/2Arm0/RN3LVZKK297K01cUHtE43nW4mGrqsqPppeQnIi5rqt2skU6A1fIYp5L9 6OymqR26cyDCMLI12UMICVB36dXx8IfMjHcQUvS886fd9PsV7cuQOe/Vo/JO9iAR sC2E+ACZyP8T0wQ64fQU/2aURkpGolT8QkE/DCFSByA6f/zrYxIGRWZmE1QlIDmL 4m2mBSQ6NgowRfqiym9ipGg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:05 2026 by rpki-client