$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cbwfIpZYdrbmWTN6W9d1r5n3ayA.roa File: cbwfIpZYdrbmWTN6W9d1r5n3ayA.roa (raw, json) Hash identifier: vMO7/4wNmmNtwERzeLIGjzYwET6bP//aA9TBhMzGcYo= Subject key identifier: 71:BC:1F:22:96:58:76:B6:E6:59:33:7A:5B:D7:75:AF:99:F7:6B:20 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1580 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cbwfIpZYdrbmWTN6W9d1r5n3ayA.roa Signing time: Tue 31 Mar 2026 07:59:45 +0000 ROA not before: Tue 31 Mar 2026 07:59:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.77.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5504 (0x1580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=71BC1F22965876B6E659337A5BD775AF99F76B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:4e:5a:b9:c0:4b:85:fb:ff:21:65:f2:2e: f0:c2:5a:6c:da:1d:1c:65:a4:0e:68:9a:31:64:0d: 94:c4:3b:a5:e2:e7:33:30:6e:d5:78:4b:0d:e5:9c: ec:f0:0a:a3:8b:66:29:02:4e:28:4d:0b:02:21:24: ab:f2:cd:bf:94:ea:31:7c:80:89:d4:33:00:2a:16: 06:28:c0:58:9e:9e:3b:b4:30:59:e5:f1:2f:49:c6: 21:60:e7:51:d8:74:4d:c0:0b:f6:05:c1:0c:a1:29: 71:60:1a:43:a9:08:e2:e9:1c:c5:da:8f:da:55:91: 5e:9e:38:ab:44:fe:c8:d4:0f:6c:ef:58:96:be:29: 1a:c1:5c:66:22:63:21:c2:2a:ed:28:74:28:8e:89: 8f:01:96:44:14:d0:25:c1:a4:2e:ea:5f:bb:69:b9: c3:a2:77:fa:b3:38:4c:fb:7b:c1:ea:76:29:62:ac: 09:1f:b5:26:ab:85:b7:0d:d9:20:b9:54:21:29:88: e4:fc:bb:00:fd:87:c4:5f:2c:3f:eb:f2:cc:f8:68: 9c:34:f4:52:f7:a4:4a:19:79:01:9b:32:c9:9e:ba: 15:b8:ef:23:a2:ec:bc:27:7c:63:9e:3e:fa:67:79: b0:48:0c:e7:ca:d0:91:21:9b:3d:fa:37:c4:69:e0: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BC:1F:22:96:58:76:B6:E6:59:33:7A:5B:D7:75:AF:99:F7:6B:20 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cbwfIpZYdrbmWTN6W9d1r5n3ayA.roa sbgp-ipAddrBlock: critical IPv4: 1.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:08:1b:b0:b3:af:f6:70:d7:6f:9a:7a:68:e5:9e:b1:e0:e7: 71:8d:19:10:2e:e8:83:a5:84:a6:21:e3:14:78:d0:34:c3:dc: fe:14:3c:dd:f4:f5:f2:36:29:56:0e:68:d0:c6:e9:8d:36:45: d3:65:5f:25:0d:fa:14:88:7f:2e:a4:18:29:26:7f:5b:df:eb: de:d1:13:2b:74:27:52:77:3d:3e:f2:5d:37:fe:2c:f1:1e:9e: fa:4a:5b:7f:ad:1b:a4:6d:a8:7b:3f:94:38:53:67:6e:3c:25: 0a:c5:05:89:c5:16:1b:98:6a:55:d4:c2:b0:1a:e5:ae:9c:09: 97:38:d3:17:d5:92:bb:bc:b3:44:69:f4:64:80:9a:ee:fe:42: c0:57:42:34:20:21:68:e1:16:34:9b:ef:79:9b:d8:22:b2:77: 06:d3:a3:21:23:b3:64:96:52:49:d2:29:38:5f:9d:73:9c:47: 77:53:5d:e4:2d:98:28:41:eb:56:7e:8c:1d:66:67:d6:7b:f7: cb:db:ae:0c:c4:89:6a:ef:e3:c1:bf:45:c4:fd:77:dd:73:52: c2:4a:32:6d:13:4c:42:e4:67:63:52:9e:e5:db:50:34:9b:0d: 48:c0:a5:e0:a6:bf:1e:d9:50:00:09:3a:1c:81:71:fd:e2:ce: 11:10:77:a2 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICFYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5NDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcxQkMxRjIyOTY1ODc2 QjZFNjU5MzM3QTVCRDc3NUFGOTlGNzZCMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh5E5aucBLhfv/IWXyLvDCWmzaHRxlpA5omjFkDZTEO6Xi5zMw btV4Sw3lnOzwCqOLZikCTihNCwIhJKvyzb+U6jF8gInUMwAqFgYowFienju0MFnl 8S9JxiFg51HYdE3AC/YFwQyhKXFgGkOpCOLpHMXaj9pVkV6eOKtE/sjUD2zvWJa+ KRrBXGYiYyHCKu0odCiOiY8BlkQU0CXBpC7qX7tpucOid/qzOEz7e8HqdilirAkf tSarhbcN2SC5VCEpiOT8uwD9h8RfLD/r8sz4aJw09FL3pEoZeQGbMsmeuhW47yOi 7LwnfGOePvpnebBIDOfK0JEhmz36N8Rp4C6nAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUcbwfIpZYdrbmWTN6W9d1r5n3ayAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2Nid2ZJcFpZZHJibVdUTjZXOWQxcjVuM2F5QS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwABTTANBgkqhkiG9w0BAQsFAAOCAQEA qQgbsLOv9nDXb5p6aOWeseDncY0ZEC7og6WEpiHjFHjQNMPc/hQ83fT18jYpVg5o 0MbpjTZF02VfJQ36FIh/LqQYKSZ/W9/r3tETK3QnUnc9PvJdN/4s8R6e+kpbf60b pG2oez+UOFNnbjwlCsUFicUWG5hqVdTCsBrlrpwJlzjTF9WSu7yzRGn0ZICa7v5C wFdCNCAhaOEWNJvveZvYIrJ3BtOjISOzZJZSSdIpOF+dc5xHd1Nd5C2YKEHrVn6M HWZn1nv3y9uuDMSJau/jwb9FxP133XNSwkoybRNMQuRnY1Ke5dtQNJsNSMCl4Ka/ HtlQAAk6HIFx/eLOERB3og== -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:18 2026 by rpki-client