$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jGphRrl89HWVOQx1F9W8709_3MM.roa File: jGphRrl89HWVOQx1F9W8709_3MM.roa (raw, json) Hash identifier: B65adloucOLYwQOJD7RuPYU5T3Q7VSrcPpiIptD3U5o= Subject key identifier: 8C:6A:61:46:B9:7C:F4:75:95:39:0C:75:17:D5:BC:EF:4F:7F:DC:C3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 17DC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jGphRrl89HWVOQx1F9W8709_3MM.roa Signing time: Tue 31 Mar 2026 08:04:41 +0000 ROA not before: Tue 31 Mar 2026 08:04:41 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6108 (0x17dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:41 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8C6A6146B97CF47595390C7517D5BCEF4F7FDCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f0:77:2b:18:42:e5:43:4d:71:fa:61:4d:9e: ff:24:b7:3f:da:31:20:a8:65:4b:f3:01:3d:cf:22: f1:24:4d:a7:0b:78:dc:d1:e4:c4:52:67:ff:18:36: aa:d7:f0:81:0a:05:6e:8c:00:7b:d9:1d:8e:36:3c: 20:67:bc:53:90:e3:d3:65:fc:85:23:c7:f9:98:5f: ed:2a:bf:c1:b4:06:78:4e:c2:75:82:5f:c6:29:2d: 65:2a:3f:36:3e:13:a4:4d:7a:2d:6a:77:12:31:fa: 28:d4:d0:6a:ea:f6:ed:4d:84:5f:95:df:9a:64:7f: 55:6c:a9:9d:06:4b:a4:ce:65:0f:bd:e0:9d:b5:5c: 99:64:b4:30:6d:6b:03:90:f7:8f:76:39:75:dc:8e: 48:7a:17:2b:bc:34:28:69:d4:2f:38:11:b5:60:e1: c7:46:92:2a:fc:67:2a:9d:cf:fb:10:8f:bd:95:bb: 9b:20:12:4e:f1:4e:e5:62:be:ba:c8:b7:5c:89:71: 32:e4:ea:75:42:48:c2:69:19:89:6f:fb:93:14:12: 8c:b0:c6:40:e5:30:9e:8a:04:31:fe:3c:dc:2f:b9: cb:42:dc:fa:9a:26:da:4c:eb:62:38:9e:09:bc:58: 3b:59:d8:4c:c2:77:66:26:84:fb:8b:5a:4d:d8:5c: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6A:61:46:B9:7C:F4:75:95:39:0C:75:17:D5:BC:EF:4F:7F:DC:C3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jGphRrl89HWVOQx1F9W8709_3MM.roa sbgp-ipAddrBlock: critical IPv4: 220.210.16.0/23 Signature Algorithm: sha256WithRSAEncryption 51:7d:51:90:90:38:18:3b:a2:cf:2c:ca:a6:80:9c:84:85:e8: b1:22:26:aa:2c:91:20:cb:b9:28:e2:08:5d:05:da:c3:b0:3e: cb:99:3a:d9:18:96:3f:e2:4b:ee:87:51:b6:75:d3:27:bb:04: 9b:5f:65:c8:fd:f2:9d:35:8f:29:e9:f4:0f:80:ff:d0:54:15: 98:34:e1:84:99:e6:05:22:94:d1:9e:9e:20:c2:19:a5:13:8a: e5:f4:ed:c2:d2:c5:28:87:5a:48:c2:9b:eb:bc:73:6e:1f:56: 60:18:d5:87:86:80:14:6c:8d:2c:bc:27:6a:94:1f:13:59:84: f0:4a:39:1d:e1:69:af:52:9d:26:73:91:c8:3a:4e:db:1f:2d: bf:7b:c0:41:6b:f7:18:aa:0e:ac:57:2d:a3:d2:c6:77:0c:46: dd:eb:f0:ab:00:bb:ab:0c:0c:f3:af:31:ce:93:f8:3d:8b:0b: c7:b8:e6:15:fb:65:ff:a1:8d:b2:00:ce:78:15:ff:43:13:27: e9:f5:59:19:23:a4:37:a9:74:dc:7d:95:56:b0:24:8c:aa:04: a4:34:81:36:ec:70:f6:45:e7:d3:99:f3:03:8f:f7:dc:90:a5: 50:89:1e:8a:6c:a1:b0:31:f3:44:a1:3b:80:cb:1f:5d:ed:38: 35:97:60:4f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF9wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDNkE2MTQ2Qjk3Q0Y0 NzU5NTM5MEM3NTE3RDVCQ0VGNEY3RkRDQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq8HcrGELlQ01x+mFNnv8ktz/aMSCoZUvzAT3PIvEkTacLeNzR 5MRSZ/8YNqrX8IEKBW6MAHvZHY42PCBnvFOQ49Nl/IUjx/mYX+0qv8G0BnhOwnWC X8YpLWUqPzY+E6RNei1qdxIx+ijU0Grq9u1NhF+V35pkf1VsqZ0GS6TOZQ+94J21 XJlktDBtawOQ9492OXXcjkh6Fyu8NChp1C84EbVg4cdGkir8Zyqdz/sQj72Vu5sg Ek7xTuVivrrIt1yJcTLk6nVCSMJpGYlv+5MUEoywxkDlMJ6KBDH+PNwvuctC3Pqa JtpM62I4ngm8WDtZ2EzCd2YmhPuLWk3YXF4HAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUjGphRrl89HWVOQx1F9W8709/3MMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2pHcGhScmw4OUhXVk9ReDFGOVc4NzA5XzNNTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0hAwDQYJKoZIhvcNAQELBQADggEB AFF9UZCQOBg7os8syqaAnISF6LEiJqoskSDLuSjiCF0F2sOwPsuZOtkYlj/iS+6H UbZ10ye7BJtfZcj98p01jynp9A+A/9BUFZg04YSZ5gUilNGeniDCGaUTiuX07cLS xSiHWkjCm+u8c24fVmAY1YeGgBRsjSy8J2qUHxNZhPBKOR3haa9SnSZzkcg6Ttsf Lb97wEFr9xiqDqxXLaPSxncMRt3r8KsAu6sMDPOvMc6T+D2LC8e45hX7Zf+hjbIA zngV/0MTJ+n1WRkjpDepdNx9lVawJIyqBKQ0gTbscPZF59OZ8wOP99yQpVCJHops obAx80ShO4DLH13tODWXYE8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:21 2026 by rpki-client