$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gtFCRgZkD4qQp1fxjE0erlUlTMY.roa File: gtFCRgZkD4qQp1fxjE0erlUlTMY.roa (raw, json) Hash identifier: 1r5D7eH/S/IBHmASNvT/u6xpwHQ5waCTHDIf7x1fniU= Subject key identifier: 82:D1:42:46:06:64:0F:8A:90:A7:57:F1:8C:4D:1E:AE:55:25:4C:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1543 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gtFCRgZkD4qQp1fxjE0erlUlTMY.roa Signing time: Tue 31 Mar 2026 07:59:17 +0000 ROA not before: Tue 31 Mar 2026 07:59:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5443 (0x1543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=82D1424606640F8A90A757F18C4D1EAE55254CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:f9:5c:2b:44:db:c8:03:65:6a:96:f3:c8: f8:63:81:b6:71:ea:a8:79:f2:4c:b8:ba:cb:af:5f: 50:09:f8:e4:7c:be:53:35:0a:47:a7:d3:a1:23:07: 37:2f:2e:e1:6c:b1:96:1a:b1:51:3c:a0:ac:80:6f: 9c:6f:76:03:1f:4c:40:42:25:81:62:a0:78:4b:a6: 9b:98:55:3d:25:cb:42:2f:2c:90:72:c8:b3:e1:ca: 11:32:d9:93:8f:7d:91:8a:c9:14:72:8c:dc:d6:d1: f8:c3:9b:59:ae:6d:bc:90:ab:27:2b:25:67:b2:2f: 11:02:85:9b:b3:4d:70:09:4f:02:16:d1:75:c4:dd: 2c:d5:af:ae:ef:ed:2b:f4:38:d0:18:59:c1:7e:11: 8c:19:47:ea:06:d4:c5:ef:45:13:d1:35:05:db:54: 39:3e:c3:40:de:2d:90:ae:b0:7c:69:ae:2c:2a:8b: 70:5f:2b:b3:8f:d2:a9:24:6c:20:a1:c1:d5:c2:cf: 9d:9d:18:8f:b3:28:86:8a:f6:3d:39:93:e4:4e:20: e7:a3:d3:fc:b9:0d:4e:f6:0d:a7:10:d1:e2:47:dc: 1d:73:37:bb:50:e4:17:5f:16:b3:9c:76:b8:4a:73: 02:e8:d1:07:d1:e3:a8:90:cb:bf:dd:19:80:df:6e: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D1:42:46:06:64:0F:8A:90:A7:57:F1:8C:4D:1E:AE:55:25:4C:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gtFCRgZkD4qQp1fxjE0erlUlTMY.roa sbgp-ipAddrBlock: critical IPv4: 1.76.4.0/22 Signature Algorithm: sha256WithRSAEncryption 68:cc:09:74:9a:67:55:9a:af:20:2f:96:35:44:33:16:6c:d7: 99:74:70:e1:9d:81:c9:44:a9:57:cb:fb:fe:a0:97:3f:54:94: 4f:28:79:0b:2e:35:28:58:78:2d:cb:6a:b3:a5:2f:70:b5:99: f7:cf:35:a2:b4:8f:78:b8:52:00:77:f1:d1:a1:ba:3b:8f:f2: 7b:59:d5:c6:8b:58:23:0d:da:a6:ef:eb:69:a7:96:a3:8d:3a: de:51:77:c3:6e:a7:37:51:f5:ea:01:c6:83:d9:63:26:ef:5f: 35:34:2c:57:29:63:1a:c2:9e:68:30:64:10:f2:bc:2e:f5:5c: 0d:a0:13:2b:91:a4:97:a8:d7:45:84:c8:24:a3:9b:0a:2c:76: a0:94:fe:fe:cd:1c:a9:29:5f:29:ee:3f:b0:26:c2:fb:16:c5: 9c:43:e7:19:ce:b3:fb:6c:82:79:c3:15:6d:12:16:b6:52:a3: ab:66:47:92:c4:75:24:cb:86:55:85:d9:c8:15:2d:24:88:74: 36:15:1b:87:c7:cd:6a:1c:b8:4a:3c:55:cb:ed:74:db:ce:22: da:44:4a:a7:04:00:a4:c5:6a:42:71:6e:db:6d:8f:72:8b:94: 4a:3f:eb:c7:42:3f:5f:98:c0:09:de:01:9f:8f:08:ba:6d:d5: e0:48:c6:36 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyRDE0MjQ2MDY2NDBG OEE5MEE3NTdGMThDNEQxRUFFNTUyNTRDQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq0/lcK0TbyANlapbzyPhjgbZx6qh58ky4usuvX1AJ+OR8vlM1 Cken06EjBzcvLuFssZYasVE8oKyAb5xvdgMfTEBCJYFioHhLppuYVT0ly0IvLJBy yLPhyhEy2ZOPfZGKyRRyjNzW0fjDm1mubbyQqycrJWeyLxEChZuzTXAJTwIW0XXE 3SzVr67v7Sv0ONAYWcF+EYwZR+oG1MXvRRPRNQXbVDk+w0DeLZCusHxpriwqi3Bf K7OP0qkkbCChwdXCz52dGI+zKIaK9j05k+ROIOej0/y5DU72DacQ0eJH3B1zN7tQ 5BdfFrOcdrhKcwLo0QfR46iQy7/dGYDfbpuDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUgtFCRgZkD4qQp1fxjE0erlUlTMYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2d0RkNSZ1prRDRxUXAxZnhqRTBlcmxVbFRNWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBTAQwDQYJKoZIhvcNAQELBQADggEB AGjMCXSaZ1WaryAvljVEMxZs15l0cOGdgclEqVfL+/6glz9UlE8oeQsuNShYeC3L arOlL3C1mffPNaK0j3i4UgB38dGhujuP8ntZ1caLWCMN2qbv62mnlqONOt5Rd8Nu pzdR9eoBxoPZYybvXzU0LFcpYxrCnmgwZBDyvC71XA2gEyuRpJeo10WEyCSjmwos dqCU/v7NHKkpXynuP7AmwvsWxZxD5xnOs/tsgnnDFW0SFrZSo6tmR5LEdSTLhlWF 2cgVLSSIdDYVG4fHzWocuEo8VcvtdNvOItpESqcEAKTFakJxbtttj3KLlEo/68dC P1+YwAneAZ+PCLpt1eBIxjY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:51 2026 by rpki-client