$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-sDDtpc2Pt1YrleVF6G-3S2SDI.roa File: j-sDDtpc2Pt1YrleVF6G-3S2SDI.roa (raw, json) Hash identifier: OKFRd4udazBXmX6diGNcdS7EFbVz0ZF0Z5JTLUQ3v1s= Subject key identifier: 8F:EB:03:0E:DA:5C:D8:FB:75:62:B9:5E:54:5E:86:FB:74:B6:48:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16DC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-sDDtpc2Pt1YrleVF6G-3S2SDI.roa Signing time: Tue 31 Mar 2026 08:02:38 +0000 ROA not before: Tue 31 Mar 2026 08:02:38 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5852 (0x16dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:38 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8FEB030EDA5CD8FB7562B95E545E86FB74B64832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:77:78:f8:f8:70:ed:ab:35:09:f0:5a:60: dc:40:62:f6:57:bd:ae:f4:16:0b:a0:fc:c7:ee:64: 0b:b8:1e:33:a0:a8:0d:71:12:a6:0c:da:79:72:94: cd:48:62:ab:7e:9b:ae:fa:d5:b5:6d:b6:f4:8d:c6: eb:24:52:1a:d3:bd:b4:42:bf:ec:c4:59:81:ea:7e: 18:b0:b1:32:71:62:d2:47:d7:e1:34:e9:06:bb:87: ad:63:42:56:65:c4:e1:78:2f:d5:96:64:63:d0:89: 83:de:bf:72:55:ce:80:9a:0d:14:81:2e:55:08:2b: a2:60:06:37:7c:ee:6f:cd:37:de:c8:18:2d:08:c1: d3:83:60:a2:07:18:a3:c8:ab:48:93:a4:28:7e:4e: 4c:21:5c:0f:1f:03:ab:39:64:98:aa:5b:36:21:c7: fb:c9:13:9b:ea:48:5e:91:37:da:57:61:c7:d3:bc: 09:6b:2e:e3:51:a2:8b:ab:0a:36:7b:44:7c:58:f2: d7:29:cb:1e:99:31:c6:ee:aa:d3:86:3c:0a:04:67: 28:e9:b5:c3:15:c5:5f:1c:6d:d5:65:64:ba:31:ec: 0a:63:a0:c2:4a:01:07:ee:fa:c4:a0:f7:2d:94:4a: cb:36:e2:e8:5c:d0:bb:f4:43:e4:92:f6:d5:ab:70: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:03:0E:DA:5C:D8:FB:75:62:B9:5E:54:5E:86:FB:74:B6:48:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-sDDtpc2Pt1YrleVF6G-3S2SDI.roa sbgp-ipAddrBlock: critical IPv4: 1.66.112.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:1e:63:52:31:3f:5a:be:75:e8:4d:0d:7d:45:f4:66:1c:87: 22:46:ef:5c:b5:9f:cb:a7:de:85:a7:a9:4a:f3:11:46:de:62: 2d:3c:8f:91:ee:11:e0:53:cc:34:2e:86:9f:82:a2:89:6b:11: 81:54:0e:eb:f4:b8:7a:71:a3:a1:b7:9e:ec:68:9e:8d:05:f3: b5:4e:33:ae:69:0e:7b:8b:b9:24:c7:b8:0f:cc:0a:15:36:55: d6:e4:d1:26:14:17:b7:11:3a:04:e3:0f:03:22:b5:26:67:11: 1f:10:c3:14:ea:b3:50:ef:ba:1f:15:03:de:82:bc:12:50:b1: dc:36:e5:5d:f4:c5:86:f2:a6:98:fe:77:d5:3c:d8:54:74:c8: 71:db:ad:5f:d9:e1:b3:8f:b7:68:60:9f:95:dc:6f:65:28:0a: c0:0c:fe:8c:dd:30:bc:5d:9e:2c:17:ae:d5:99:2a:cf:d2:2b: 3c:bd:ca:12:93:be:7b:1f:5b:07:92:2c:9e:a6:e1:69:b0:29: 7b:3a:09:9c:9f:ac:55:1a:b3:60:aa:81:ca:d3:87:58:16:c4: 11:29:a0:bc:4f:62:fd:e5:f9:22:37:e1:88:79:15:7a:99:6a: e1:08:0b:92:9d:81:27:ee:d3:87:5c:a5:f8:50:76:1f:74:f9: 7e:48:25:7d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGRUIwMzBFREE1Q0Q4 RkI3NTYyQjk1RTU0NUU4NkZCNzRCNjQ4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDarnd4+Phw7as1CfBaYNxAYvZXva70Fgug/MfuZAu4HjOgqA1x EqYM2nlylM1IYqt+m6761bVttvSNxuskUhrTvbRCv+zEWYHqfhiwsTJxYtJH1+E0 6Qa7h61jQlZlxOF4L9WWZGPQiYPev3JVzoCaDRSBLlUIK6JgBjd87m/NN97IGC0I wdODYKIHGKPIq0iTpCh+TkwhXA8fA6s5ZJiqWzYhx/vJE5vqSF6RN9pXYcfTvAlr LuNRoourCjZ7RHxY8tcpyx6ZMcbuqtOGPAoEZyjptcMVxV8cbdVlZLox7ApjoMJK AQfu+sSg9y2USss24uhc0Lv0Q+SS9tWrcALLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUj+sDDtpc2Pt1YrleVF6G+3S2SDIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2otc0REdHBjMlB0MVlybGVWRjZHLTNTMlNESS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMBQnAwDQYJKoZIhvcNAQELBQADggEB AB0eY1IxP1q+dehNDX1F9GYchyJG71y1n8un3oWnqUrzEUbeYi08j5HuEeBTzDQu hp+CoolrEYFUDuv0uHpxo6G3nuxono0F87VOM65pDnuLuSTHuA/MChU2Vdbk0SYU F7cROgTjDwMitSZnER8QwxTqs1Dvuh8VA96CvBJQsdw25V30xYbyppj+d9U82FR0 yHHbrV/Z4bOPt2hgn5Xcb2UoCsAM/ozdMLxdniwXrtWZKs/SKzy9yhKTvnsfWweS LJ6m4WmwKXs6CZyfrFUas2CqgcrTh1gWxBEpoLxPYv3l+SI34Yh5FXqZauEIC5Kd gSfu04dcpfhQdh90+X5IJX0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:32 2026 by rpki-client