$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h7b5GoPz-_pEfN_qKAba3TtpYU0.roa File: h7b5GoPz-_pEfN_qKAba3TtpYU0.roa (raw, json) Hash identifier: 8WdkjtX0bZ0mAPltvZj75gI6m43GoKBs7RCIjHO7kLY= Subject key identifier: 87:B6:F9:1A:83:F3:FB:FA:44:7C:DF:EA:28:06:DA:DD:3B:69:61:4D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1477 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h7b5GoPz-_pEfN_qKAba3TtpYU0.roa Signing time: Tue 31 Mar 2026 07:57:36 +0000 ROA not before: Tue 31 Mar 2026 07:57:36 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5239 (0x1477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:36 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=87B6F91A83F3FBFA447CDFEA2806DADD3B69614D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f8:28:a1:21:9c:a1:9e:02:18:10:8e:c6:38: b6:9d:1f:9f:94:5c:b4:64:af:82:08:c9:38:65:e4: fa:23:b8:57:da:95:60:f0:86:dd:bb:81:ca:31:3f: a9:ce:9c:6e:2f:5f:64:0b:fe:7f:dd:92:13:56:b8: f7:c0:d4:5e:e3:d0:e4:06:0b:db:65:8b:4b:7d:c4: ec:2f:a1:a3:68:bc:28:8f:e5:b7:61:1e:a5:f5:36: 09:53:ea:83:10:25:d0:ab:10:c2:7e:33:47:21:96: 13:14:55:0a:40:be:f5:10:db:2c:e7:19:95:4d:ad: 30:2f:29:ab:e3:a9:92:cc:6a:f3:d5:c2:69:d8:c8: 94:18:7f:4d:cc:cd:78:7f:2e:43:c8:fd:4f:19:96: 8d:a9:fb:d7:31:6d:7f:1b:6a:cf:a4:a1:03:27:11: 29:c5:83:93:8c:3d:23:7f:9c:19:0b:ea:25:eb:ec: 86:c5:02:d7:9d:37:22:07:e5:20:46:33:2a:72:d9: df:5d:58:96:02:58:de:97:54:e7:5b:32:e7:fd:b2: 33:5d:fd:a4:a9:6e:2a:6a:70:60:7b:0e:f7:eb:f4: 9a:14:d1:92:94:58:dd:28:29:a3:a8:a5:6d:c3:a9: 26:2c:33:83:45:9c:ee:f6:c3:e8:77:6a:08:25:f4: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B6:F9:1A:83:F3:FB:FA:44:7C:DF:EA:28:06:DA:DD:3B:69:61:4D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h7b5GoPz-_pEfN_qKAba3TtpYU0.roa sbgp-ipAddrBlock: critical IPv4: 1.78.8.0/23 Signature Algorithm: sha256WithRSAEncryption a8:f1:0a:23:75:7c:07:53:4f:64:56:5a:04:24:22:4c:6b:83: 56:c4:47:0a:1e:6e:66:e3:fa:5e:15:9f:4a:12:14:46:21:73: 70:5b:54:21:cc:32:30:a8:a6:c1:68:14:72:fe:09:e7:a6:79: c0:d3:99:40:47:b3:b1:9d:cb:a8:9d:e7:20:d3:c0:27:ff:e7: b0:9c:c9:c2:9f:4c:62:53:cb:26:4a:8d:10:ae:db:68:1a:fc: dc:6f:a5:50:b8:21:de:73:34:b8:02:1b:f5:cf:d4:46:39:63: 9b:61:1c:dc:35:75:b9:fe:f5:e4:e1:e3:f8:8c:c5:27:9c:a1: 87:89:82:44:f1:09:27:9f:63:b7:07:fe:5f:b7:c1:42:9c:bd: 34:a3:be:52:92:6e:a4:4f:40:44:e6:ac:71:38:81:c7:f2:3f: 1b:30:70:23:bc:b5:e3:75:e8:5c:3d:28:10:b4:92:38:82:05: af:c1:a1:0f:0f:4e:2c:10:4d:43:e6:5b:e1:13:8d:fa:d2:c2: f9:4b:16:59:c7:8c:1a:45:fa:98:f2:54:4e:59:3f:ab:39:b0: 21:06:e4:cf:ee:52:d3:61:d8:4e:9b:76:86:8c:6d:1f:95:74: 1d:e5:63:af:77:ff:d2:dc:66:b5:cd:98:41:c5:11:2f:a1:5e: c2:82:f9:76 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3QjZGOTFBODNGM0ZC RkE0NDdDREZFQTI4MDZEQUREM0I2OTYxNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4+CihIZyhngIYEI7GOLadH5+UXLRkr4IIyThl5PojuFfalWDw ht27gcoxP6nOnG4vX2QL/n/dkhNWuPfA1F7j0OQGC9tli0t9xOwvoaNovCiP5bdh HqX1NglT6oMQJdCrEMJ+M0chlhMUVQpAvvUQ2yznGZVNrTAvKavjqZLMavPVwmnY yJQYf03MzXh/LkPI/U8Zlo2p+9cxbX8bas+koQMnESnFg5OMPSN/nBkL6iXr7IbF AtedNyIH5SBGMypy2d9dWJYCWN6XVOdbMuf9sjNd/aSpbipqcGB7Dvfr9JoU0ZKU WN0oKaOopW3DqSYsM4NFnO72w+h3aggl9PGvAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUh7b5GoPz+/pEfN/qKAba3TtpYU0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2g3YjVHb1B6LV9wRWZOX3FLQWJhM1R0cFlVMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTggwDQYJKoZIhvcNAQELBQADggEB AKjxCiN1fAdTT2RWWgQkIkxrg1bERwoebmbj+l4Vn0oSFEYhc3BbVCHMMjCopsFo FHL+CeemecDTmUBHs7Gdy6id5yDTwCf/57CcycKfTGJTyyZKjRCu22ga/NxvpVC4 Id5zNLgCG/XP1EY5Y5thHNw1dbn+9eTh4/iMxSecoYeJgkTxCSefY7cH/l+3wUKc vTSjvlKSbqRPQETmrHE4gcfyPxswcCO8teN16Fw9KBC0kjiCBa/BoQ8PTiwQTUPm W+ETjfrSwvlLFlnHjBpF+pjyVE5ZP6s5sCEG5M/uUtNh2E6bdoaMbR+VdB3lY693 /9LcZrXNmEHFES+hXsKC+XY= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:59 2026 by rpki-client