$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cC4lzQAi1knIZ6wlMIBM3rPufS8.roa File: cC4lzQAi1knIZ6wlMIBM3rPufS8.roa (raw, json) Hash identifier: Dkw4kiih+tKMAlwtniYzM8adIfO/yGn9MET2DGD4Kgg= Subject key identifier: 70:2E:25:CD:00:22:D6:49:C8:67:AC:25:30:80:4C:DE:B3:EE:7D:2F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 175B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cC4lzQAi1knIZ6wlMIBM3rPufS8.roa Signing time: Tue 31 Mar 2026 08:03:39 +0000 ROA not before: Tue 31 Mar 2026 08:03:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5979 (0x175b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=702E25CD0022D649C867AC2530804CDEB3EE7D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:b8:5b:aa:f2:d0:a6:3d:2d:5c:98:e5:2a: 76:1f:37:4c:8b:9d:ab:02:fd:4f:2e:87:f4:2e:fa: 45:8c:94:b5:8a:60:15:9a:2e:22:2f:00:04:00:92: a5:0c:26:72:c1:11:ef:59:15:4c:d5:82:75:d1:d3: 9e:e5:0e:8a:d3:f7:c5:4e:25:ca:fb:4f:c1:c0:00: 10:94:bb:ef:a4:b0:88:42:a6:34:de:82:b4:86:7b: 85:72:fd:c1:18:25:00:d4:61:e3:f4:53:7b:d5:43: 71:f1:17:bc:3f:08:c5:ff:77:94:f6:fc:59:de:c6: f9:50:32:e2:2e:f2:57:40:1c:55:6e:f1:dc:cb:0d: f7:e7:65:ef:a4:40:90:de:ff:2d:c0:af:0c:07:8a: 45:08:8c:e5:23:e0:c9:28:0b:84:c9:f5:8d:6f:55: d0:1f:9f:10:1d:77:17:53:5e:93:45:3b:10:56:ea: 00:ad:7f:40:d9:d6:e6:2d:52:4f:5a:ab:0c:f1:c6: f2:36:cc:92:08:32:07:c9:fe:2b:bf:e8:90:78:a8: e3:52:ed:bc:3a:64:9d:f8:aa:b4:39:46:a6:df:a4: c8:fd:de:e3:3a:d3:a6:02:6c:1e:7e:c4:01:9c:a2: f5:76:49:b4:13:77:25:1a:7a:7c:18:a2:f6:47:33: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2E:25:CD:00:22:D6:49:C8:67:AC:25:30:80:4C:DE:B3:EE:7D:2F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cC4lzQAi1knIZ6wlMIBM3rPufS8.roa sbgp-ipAddrBlock: critical IPv4: 1.72.32.0/20 Signature Algorithm: sha256WithRSAEncryption 64:8a:9a:97:17:39:c2:8c:a7:1c:d8:08:44:71:58:6b:fa:ad: e3:c0:f6:fd:92:b8:1a:1a:44:10:dc:b3:da:5e:c9:05:7c:a5: 5a:29:b1:32:08:f3:e4:e2:8c:5c:af:d7:86:06:58:1d:42:98: a2:97:32:73:58:c9:a8:4d:f4:31:25:d0:67:11:c5:9c:26:d8: 0f:6f:dd:75:c2:3a:dd:c4:24:f4:b4:62:8c:5a:19:5d:ce:9e: 2e:de:17:23:3c:0b:62:1c:e3:e0:b2:58:ae:03:f0:39:78:7e: 0d:4f:9a:24:fe:e6:b1:92:a9:05:b2:c6:80:69:3f:e8:93:8e: 78:d2:60:05:96:63:e4:ff:2b:b0:2a:4f:dc:eb:47:53:e0:c6: a8:55:7a:d6:30:1c:ba:59:f9:11:7a:98:99:4f:9e:01:b9:b4: 19:0f:6e:79:d1:d9:2b:55:13:15:52:64:16:44:89:d4:a2:30: c9:3f:73:51:1d:40:bf:f9:6c:d7:6f:78:fd:8a:97:7b:29:58: b9:c9:a3:4c:15:df:cf:e2:49:0f:a2:ed:85:ec:d4:6b:94:16: 78:95:65:ea:5f:b5:4b:e8:eb:2d:5f:67:2b:89:a3:13:da:53: db:f0:e4:c4:e3:79:8d:6e:61:33:82:73:10:13:fb:69:91:9b: e7:b0:e5:8d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwMkUyNUNEMDAyMkQ2 NDlDODY3QUMyNTMwODA0Q0RFQjNFRTdEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM8LhbqvLQpj0tXJjlKnYfN0yLnasC/U8uh/Qu+kWMlLWKYBWa LiIvAAQAkqUMJnLBEe9ZFUzVgnXR057lDorT98VOJcr7T8HAABCUu++ksIhCpjTe grSGe4Vy/cEYJQDUYeP0U3vVQ3HxF7w/CMX/d5T2/FnexvlQMuIu8ldAHFVu8dzL DffnZe+kQJDe/y3ArwwHikUIjOUj4MkoC4TJ9Y1vVdAfnxAddxdTXpNFOxBW6gCt f0DZ1uYtUk9aqwzxxvI2zJIIMgfJ/iu/6JB4qONS7bw6ZJ34qrQ5RqbfpMj93uM6 06YCbB5+xAGcovV2SbQTdyUaenwYovZHM5CjAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcC4lzQAi1knIZ6wlMIBM3rPufS8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2NDNGx6UUFpMWtuSVo2d2xNSUJNM3JQdWZTOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQBSCAwDQYJKoZIhvcNAQELBQADggEB AGSKmpcXOcKMpxzYCERxWGv6rePA9v2SuBoaRBDcs9peyQV8pVopsTII8+TijFyv 14YGWB1CmKKXMnNYyahN9DEl0GcRxZwm2A9v3XXCOt3EJPS0YoxaGV3Oni7eFyM8 C2Ic4+CyWK4D8Dl4fg1PmiT+5rGSqQWyxoBpP+iTjnjSYAWWY+T/K7AqT9zrR1Pg xqhVetYwHLpZ+RF6mJlPngG5tBkPbnnR2StVExVSZBZEidSiMMk/c1EdQL/5bNdv eP2Kl3spWLnJo0wV38/iSQ+i7YXs1GuUFniVZepftUvo6y1fZyuJoxPaU9vw5MTj eY1uYTOCcxAT+2mRm+ew5Y0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:22 2026 by rpki-client