$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fgZDRbPkn7AXLyWXhQcX1U8xlZQ.roa File: fgZDRbPkn7AXLyWXhQcX1U8xlZQ.roa (raw, json) Hash identifier: JV1ftB631Ap21KGxI9bzNuMATO+nyTpAco/HfgoD2sw= Subject key identifier: 7E:06:43:45:B3:E4:9F:B0:17:2F:25:97:85:07:17:D5:4F:31:95:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1392 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fgZDRbPkn7AXLyWXhQcX1U8xlZQ.roa Signing time: Tue 31 Mar 2026 07:55:52 +0000 ROA not before: Tue 31 Mar 2026 07:55:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5010 (0x1392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=7E064345B3E49FB0172F2597850717D54F319594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:eb:cb:e8:2a:8c:03:8e:ff:89:4b:f6:d1:fe: dd:14:ac:d6:0f:1f:d9:6c:4e:7a:20:5b:6f:43:12: ac:79:b9:ef:5b:50:5b:1d:c6:e1:d4:bb:44:5e:88: 1d:44:e0:6d:88:29:a1:51:d0:73:be:8a:f6:4a:cc: 0e:0d:9a:00:dd:e4:cd:25:73:d0:e5:9b:e6:2c:bf: 8c:63:63:8c:07:bf:7f:3f:27:85:83:2e:df:eb:c6: 9c:30:9f:3a:75:ab:71:a4:78:cf:b6:96:0a:26:f1: da:ad:b1:76:f3:1a:a4:cc:7f:7e:ac:53:d0:4a:72: 1f:68:29:63:52:9d:c3:aa:32:e9:1a:10:7e:9f:fa: 66:94:ec:72:00:dc:35:10:f1:f7:58:23:7e:23:a5: e6:b9:34:3a:1f:2b:ef:6a:e8:a3:12:48:21:8c:ac: 28:f8:8b:71:bb:d9:ac:1d:83:92:81:72:a6:dd:d7: 72:b0:cb:6c:0b:8a:3b:5a:d5:b2:94:05:c7:26:d0: b3:fe:2d:63:14:e9:3a:7a:54:e1:7d:a9:6f:1a:1d: fc:b3:d4:78:bf:26:64:66:9b:03:9d:df:7a:08:2c: fd:42:fe:3e:a6:4b:98:93:6f:ff:91:da:89:df:69: 59:31:af:43:fe:17:17:ae:b8:1a:f3:02:13:8e:95: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:06:43:45:B3:E4:9F:B0:17:2F:25:97:85:07:17:D5:4F:31:95:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fgZDRbPkn7AXLyWXhQcX1U8xlZQ.roa sbgp-ipAddrBlock: critical IPv4: 1.75.228.0/24 Signature Algorithm: sha256WithRSAEncryption b8:ff:f7:be:5f:f9:6a:76:9c:be:f7:19:0d:75:b9:ef:b0:05: 59:ba:3b:83:c0:80:7c:1c:e9:af:a4:5e:f0:bb:85:1f:62:b4: 21:68:43:8e:d4:7c:9c:cc:65:42:a8:91:b2:4f:1e:13:2a:9f: c1:cc:06:97:45:84:a5:93:67:79:25:45:5f:a8:13:db:9e:6b: 10:af:87:08:74:4d:c6:14:f2:73:da:bf:24:ab:4b:59:71:47: 42:0c:cd:8a:3a:48:22:2f:59:d5:3a:1f:8f:69:1e:fb:b9:5f: 1e:71:7f:0e:1c:f1:e1:10:e1:5f:c0:63:89:4f:ef:ba:a5:5d: dc:98:17:b8:24:84:a0:21:8b:74:e4:62:49:42:71:50:d4:0a: c8:dd:b8:5c:36:b0:42:e1:c6:54:25:32:57:67:0d:1a:53:a8: 3b:24:26:02:11:61:22:5f:69:8b:a8:6f:c7:5c:2b:f8:6a:09: 3c:69:aa:8e:c5:28:88:87:62:bd:a5:3b:9a:59:be:a5:1e:cc: f9:aa:3d:b1:f0:37:b1:b5:52:62:a3:e7:76:14:7d:a1:5c:9c: f8:1e:9a:a1:0b:9a:81:d4:07:cb:cd:4b:a8:f0:78:b1:1e:dd: 1b:39:b2:92:b4:1a:d8:a1:f1:8e:b8:4f:db:d7:1c:67:16:1f: d3:a8:4f:6d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdFMDY0MzQ1QjNFNDlG QjAxNzJGMjU5Nzg1MDcxN0Q1NEYzMTk1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD268voKowDjv+JS/bR/t0UrNYPH9lsTnogW29DEqx5ue9bUFsd xuHUu0ReiB1E4G2IKaFR0HO+ivZKzA4NmgDd5M0lc9Dlm+Ysv4xjY4wHv38/J4WD Lt/rxpwwnzp1q3GkeM+2lgom8dqtsXbzGqTMf36sU9BKch9oKWNSncOqMukaEH6f +maU7HIA3DUQ8fdYI34jpea5NDofK+9q6KMSSCGMrCj4i3G72awdg5KBcqbd13Kw y2wLijta1bKUBccm0LP+LWMU6Tp6VOF9qW8aHfyz1Hi/JmRmmwOd33oILP1C/j6m S5iTb/+R2onfaVkxr0P+FxeuuBrzAhOOlRrHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUfgZDRbPkn7AXLyWXhQcX1U8xlZQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2ZnWkRSYlBrbjdBWEx5V1hoUWNYMVU4eGxaUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABS+QwDQYJKoZIhvcNAQELBQADggEB ALj/975f+Wp2nL73GQ11ue+wBVm6O4PAgHwc6a+kXvC7hR9itCFoQ47UfJzMZUKo kbJPHhMqn8HMBpdFhKWTZ3klRV+oE9ueaxCvhwh0TcYU8nPavySrS1lxR0IMzYo6 SCIvWdU6H49pHvu5Xx5xfw4c8eEQ4V/AY4lP77qlXdyYF7gkhKAhi3TkYklCcVDU CsjduFw2sELhxlQlMldnDRpTqDskJgIRYSJfaYuob8dcK/hqCTxpqo7FKIiHYr2l O5pZvqUezPmqPbHwN7G1UmKj53YUfaFcnPgemqELmoHUB8vNS6jweLEe3Rs5spK0 Gtih8Y64T9vXHGcWH9OoT20= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:12 2026 by rpki-client