$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j_Ldzy35PfV9CT81H0_iImSI8u0.roa File: j_Ldzy35PfV9CT81H0_iImSI8u0.roa (raw, json) Hash identifier: J2k7zSJKgwVatBTqb053Y1+bN2G44TTY0hSLDSX4K7w= Subject key identifier: 8F:F2:DD:CF:2D:F9:3D:F5:7D:09:3F:35:1F:4F:E2:22:64:88:F2:ED Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 174B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j_Ldzy35PfV9CT81H0_iImSI8u0.roa Signing time: Tue 31 Mar 2026 08:03:32 +0000 ROA not before: Tue 31 Mar 2026 08:03:32 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.67.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5963 (0x174b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=8FF2DDCF2DF93DF57D093F351F4FE2226488F2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:3c:c4:16:c0:cb:34:e7:6d:da:55:ae:52: d4:6b:1f:50:3f:83:56:1f:89:dc:38:40:d7:30:a6: 91:15:d6:10:b6:67:60:ab:7c:53:17:9d:30:52:f7: 4d:66:05:13:b9:3c:57:6c:66:f7:11:df:89:1c:0b: 3a:45:c4:be:fd:aa:fe:79:d2:b6:9a:a4:ef:c1:e8: 2f:6d:29:af:d0:27:6f:f1:e9:cd:21:a9:46:8a:f4: 24:8b:67:bc:e3:00:19:31:99:45:fa:88:a8:bb:30: 92:ee:bb:2a:f3:fb:88:40:78:40:12:7b:cf:40:9f: 4d:d6:f0:fb:8a:05:29:85:f7:38:ca:de:a3:6f:28: 9d:c1:68:59:93:31:2f:8f:f9:58:68:89:be:f5:3c: 1a:fc:85:b2:2c:79:73:7b:78:11:0c:6a:6c:81:b3: 0f:1f:db:ea:45:48:0c:3e:7e:83:0e:aa:dd:20:59: 3b:f6:00:63:eb:f5:97:eb:6c:d8:e0:2d:76:e6:a2: 68:2c:57:ee:22:39:08:1b:a5:59:27:8e:7b:6c:dc: 0b:92:6b:25:8f:93:ba:5e:0d:4e:64:48:4c:3e:cb: 0b:5b:1d:0b:fe:16:75:02:29:34:cf:13:bd:c2:ee: 98:f8:49:32:8e:01:2a:2f:bb:53:d3:15:49:2a:10: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:DD:CF:2D:F9:3D:F5:7D:09:3F:35:1F:4F:E2:22:64:88:F2:ED X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j_Ldzy35PfV9CT81H0_iImSI8u0.roa sbgp-ipAddrBlock: critical IPv4: 1.67.64.0/18 Signature Algorithm: sha256WithRSAEncryption 58:b2:62:8d:ea:1e:b4:06:5d:48:39:df:62:cc:8d:60:fe:b7: f2:11:e1:a0:a2:54:e1:e7:79:00:c0:e1:44:aa:9a:91:e1:1a: 5f:46:1e:6f:65:9d:6f:67:5a:61:ec:e4:3c:1f:9f:9f:d7:98: c4:53:f9:03:92:f6:e5:ab:f2:fb:a1:78:fe:dd:07:e7:93:58: c6:8b:29:34:52:8a:20:92:90:3d:29:85:d0:7d:21:0f:be:60: bd:b8:ef:05:8a:da:74:8e:49:b9:b2:f3:96:b8:32:5b:3a:30: e7:77:0b:0c:9c:a2:cc:2e:45:9e:96:5a:16:2c:b7:ca:03:9d: 64:9e:d5:ba:b2:fc:8b:dc:50:36:d7:11:8d:5c:b5:68:98:4b: 1d:95:de:86:cb:8c:62:f7:7c:2e:04:dd:1f:38:95:c5:ba:83: 01:2b:14:21:a8:be:fe:d6:94:ee:b3:e9:60:a8:ef:5d:04:1e: 74:2c:0c:3b:c6:cd:03:a4:a1:59:ff:8d:7b:4e:0e:a3:13:cf: 62:17:3f:8a:c9:43:35:22:80:56:2e:8a:67:7c:59:98:dc:c4: e7:71:19:82:de:8d:10:71:01:7e:a5:e2:bd:78:ce:b8:9a:86: 6f:52:dd:1e:35:97:98:c4:74:b9:b7:f2:f4:f9:06:62:23:18: 55:f8:f4:69 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzMzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGRjJERENGMkRGOTNE RjU3RDA5M0YzNTFGNEZFMjIyNjQ4OEYyRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAWDzEFsDLNOdt2lWuUtRrH1A/g1Yfidw4QNcwppEV1hC2Z2Cr fFMXnTBS901mBRO5PFdsZvcR34kcCzpFxL79qv550raapO/B6C9tKa/QJ2/x6c0h qUaK9CSLZ7zjABkxmUX6iKi7MJLuuyrz+4hAeEASe89An03W8PuKBSmF9zjK3qNv KJ3BaFmTMS+P+Vhoib71PBr8hbIseXN7eBEMamyBsw8f2+pFSAw+foMOqt0gWTv2 AGPr9ZfrbNjgLXbmomgsV+4iOQgbpVknjnts3AuSayWPk7peDU5kSEw+ywtbHQv+ FnUCKTTPE73C7pj4STKOASovu1PTFUkqEKidAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUj/Ldzy35PfV9CT81H0/iImSI8u0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2pfTGR6eTM1UGZWOUNUODFIMF9pSW1TSTh1MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYBQ0AwDQYJKoZIhvcNAQELBQADggEB AFiyYo3qHrQGXUg532LMjWD+t/IR4aCiVOHneQDA4USqmpHhGl9GHm9lnW9nWmHs 5Dwfn5/XmMRT+QOS9uWr8vuheP7dB+eTWMaLKTRSiiCSkD0phdB9IQ++YL247wWK 2nSOSbmy85a4Mls6MOd3CwycoswuRZ6WWhYst8oDnWSe1bqy/IvcUDbXEY1ctWiY Sx2V3obLjGL3fC4E3R84lcW6gwErFCGovv7WlO6z6WCo710EHnQsDDvGzQOkoVn/ jXtODqMTz2IXP4rJQzUigFYuimd8WZjcxOdxGYLejRBxAX6l4r14zriahm9S3R41 l5jEdLm38vT5BmIjGFX49Gk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:16 2026 by rpki-client