$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cozNMmyGHab1urccGQlexPqaL1o.roa File: cozNMmyGHab1urccGQlexPqaL1o.roa (raw, json) Hash identifier: A+npYr63WX7loICc666WRBty8im/AiWPIAtJi1ITQ7Y= Subject key identifier: 72:8C:CD:32:6C:86:1D:A6:F5:BA:B7:1C:19:09:5E:C4:FA:9A:2F:5A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15BC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cozNMmyGHab1urccGQlexPqaL1o.roa Signing time: Tue 31 Mar 2026 08:00:19 +0000 ROA not before: Tue 31 Mar 2026 08:00:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 61.195.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5564 (0x15bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=728CCD326C861DA6F5BAB71C19095EC4FA9A2F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:54:1f:59:d9:f8:fe:42:e7:0d:18:31:e9: 1f:62:ff:0a:6d:c2:82:18:55:39:79:2a:d6:34:97: 11:84:d3:9e:ad:aa:15:6b:b4:41:1c:f8:c0:86:03: 48:55:68:7b:e8:34:e3:28:45:fc:9c:50:13:4e:e8: 0e:19:1d:42:54:97:b8:bc:37:0f:23:29:a0:bf:b9: 8e:ec:26:ea:19:c4:c3:a7:c2:dc:16:1f:a5:ae:ae: 2b:62:79:1a:79:1e:dd:31:59:2f:35:fa:95:b9:74: 2a:46:a1:b9:45:6e:04:cd:c5:06:89:03:b8:65:5f: 27:37:5b:5c:2e:73:10:2c:a6:01:b3:e8:41:90:6f: bd:16:8f:3c:cb:57:df:b7:1b:36:5a:af:40:a9:26: 27:fd:c7:08:ee:03:bf:c2:d6:3d:22:74:ce:88:d1: 8a:e0:e5:fa:14:fb:7a:bf:d2:db:40:43:a9:b0:f2: 56:06:a6:f1:28:d7:fc:4e:1e:1a:d2:d3:c6:51:89: b8:20:cf:75:ee:8a:10:d0:70:19:0f:31:03:2c:11: f7:53:64:a7:f9:9e:e1:09:f1:98:84:d7:db:11:f5: 86:7a:6d:b9:7d:f7:6c:8f:34:f1:08:64:54:d8:bd: a4:99:22:e9:a2:8d:93:d5:69:ed:fb:5c:f8:ed:a5: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8C:CD:32:6C:86:1D:A6:F5:BA:B7:1C:19:09:5E:C4:FA:9A:2F:5A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cozNMmyGHab1urccGQlexPqaL1o.roa sbgp-ipAddrBlock: critical IPv4: 61.195.208.0/21 Signature Algorithm: sha256WithRSAEncryption b2:73:3c:38:87:4b:a9:96:58:7d:fc:f1:40:e8:63:17:c4:57: 00:e9:25:be:eb:cb:96:81:f7:a5:b8:9d:ef:73:c6:eb:f8:84: 9b:aa:d2:8f:29:b1:93:9a:0d:4d:85:8f:86:76:0d:fa:7e:0a: 07:c3:4c:49:66:a0:80:65:47:8d:10:07:af:06:7d:58:6e:ea: d5:b5:9a:73:6d:61:d0:df:b2:18:ee:5e:06:1b:36:26:93:00: ff:a7:a3:48:f5:74:97:d3:67:bb:ae:2f:b7:c2:57:37:d8:d8: 5f:8a:b6:25:31:01:1d:9e:2c:13:14:4c:33:4d:a5:54:6d:7d: fb:11:14:26:8d:c7:c2:4c:5e:45:70:c5:be:81:6c:3c:f6:5e: 57:a1:13:72:0f:3c:cd:33:ea:e9:5a:ed:11:a6:92:b2:a3:7e: 28:2c:7e:91:1c:f3:c9:c7:16:af:73:33:72:f6:98:be:9c:1d: 81:75:4a:f6:0c:c1:3d:5b:56:21:45:36:07:f4:c8:c5:9e:cb: f8:b7:83:b9:b2:6e:e1:55:f7:06:af:2c:3f:18:63:4d:e9:41: 03:d2:9e:ce:cf:8a:ab:cd:32:85:1d:a4:e0:ff:d1:94:0c:f2: cf:d9:15:d6:01:14:13:36:78:c6:78:49:ba:67:6c:53:24:51: 06:21:06:cd -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyOENDRDMyNkM4NjFE QTZGNUJBQjcxQzE5MDk1RUM0RkE5QTJGNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUSVQfWdn4/kLnDRgx6R9i/wptwoIYVTl5KtY0lxGE056tqhVr tEEc+MCGA0hVaHvoNOMoRfycUBNO6A4ZHUJUl7i8Nw8jKaC/uY7sJuoZxMOnwtwW H6WuritieRp5Ht0xWS81+pW5dCpGoblFbgTNxQaJA7hlXyc3W1wucxAspgGz6EGQ b70WjzzLV9+3GzZar0CpJif9xwjuA7/C1j0idM6I0Yrg5foU+3q/0ttAQ6mw8lYG pvEo1/xOHhrS08ZRibggz3XuihDQcBkPMQMsEfdTZKf5nuEJ8ZiE19sR9YZ6bbl9 92yPNPEIZFTYvaSZIumijZPVae37XPjtpbkPAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcozNMmyGHab1urccGQlexPqaL1owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2Nvek5NbXlHSGFiMXVyY2NHUWxleFBxYUwxby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9w9AwDQYJKoZIhvcNAQELBQADggEB ALJzPDiHS6mWWH388UDoYxfEVwDpJb7ry5aB96W4ne9zxuv4hJuq0o8psZOaDU2F j4Z2Dfp+CgfDTElmoIBlR40QB68GfVhu6tW1mnNtYdDfshjuXgYbNiaTAP+no0j1 dJfTZ7uuL7fCVzfY2F+KtiUxAR2eLBMUTDNNpVRtffsRFCaNx8JMXkVwxb6BbDz2 XlehE3IPPM0z6ula7RGmkrKjfigsfpEc88nHFq9zM3L2mL6cHYF1SvYMwT1bViFF Ngf0yMWey/i3g7mybuFV9wavLD8YY03pQQPSns7PiqvNMoUdpOD/0ZQM8s/ZFdYB FBM2eMZ4SbpnbFMkUQYhBs0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:38 2026 by rpki-client