$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/khn4nYMPcfsaOZEEjDHL5J3rVUY.roa File: khn4nYMPcfsaOZEEjDHL5J3rVUY.roa (raw, json) Hash identifier: u7Sp0lesuI88K5NQ4FYhUcBvYj5AMvuh62tph8hNsvQ= Subject key identifier: 92:19:F8:9D:83:0F:71:FB:1A:39:91:04:8C:31:CB:E4:9D:EB:55:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1365 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/khn4nYMPcfsaOZEEjDHL5J3rVUY.roa Signing time: Tue 31 Mar 2026 07:55:28 +0000 ROA not before: Tue 31 Mar 2026 07:55:28 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4965 (0x1365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:55:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9219F89D830F71FB1A3991048C31CBE49DEB5546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:37:36:fa:0e:4b:d5:b2:28:c3:11:a4:18: f2:5d:91:88:6d:ff:23:59:6b:6b:9c:11:67:9b:66: 5d:7d:e0:3a:f9:a5:0a:93:07:8d:9b:b1:9a:d7:0a: 5c:ad:95:35:4a:00:c5:62:29:b8:d4:1f:aa:38:d8: 7f:be:3e:0b:25:e1:a9:12:d2:72:3c:fa:fa:f9:36: a9:4f:73:c6:6a:ca:28:50:bb:67:6f:32:4a:5f:18: cb:50:f5:fc:09:bf:e2:62:fe:79:ce:8d:4f:53:18: 3c:40:39:af:11:20:0c:7d:ad:2e:5a:13:92:1b:f0: b2:32:dd:7a:f7:4f:d6:d2:c1:52:d1:af:db:f2:c2: 1a:4f:68:74:1a:91:c6:21:9c:4b:4a:33:43:ea:1b: d9:40:90:32:1e:70:47:7b:b1:8e:f0:ac:ec:f7:6d: ab:4e:e6:0b:04:ce:a6:e8:45:b2:07:a5:62:c3:01: 89:02:38:8b:8c:f4:6f:9b:42:8b:46:f7:66:9a:d4: 05:fc:98:74:c0:75:7a:83:29:96:c9:09:39:d2:4c: 6e:c0:23:39:a2:2c:ea:f4:ed:5b:45:d8:8e:2a:a0: 86:4d:b1:6f:30:d5:d5:49:43:77:54:49:f2:23:91: 83:c9:bc:75:10:f7:ad:d1:92:26:f3:a7:d5:44:e0: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:19:F8:9D:83:0F:71:FB:1A:39:91:04:8C:31:CB:E4:9D:EB:55:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/khn4nYMPcfsaOZEEjDHL5J3rVUY.roa sbgp-ipAddrBlock: critical IPv4: 1.73.74.0/24 Signature Algorithm: sha256WithRSAEncryption d8:31:27:4a:97:3f:c9:2b:c7:33:35:6d:c2:77:8d:58:c3:47: ca:d9:3d:88:00:ec:0a:f5:24:9f:39:95:58:18:ea:bf:a4:c8: 9a:e3:b5:34:e9:33:07:28:3d:4a:96:2c:fb:01:ef:f2:d7:0a: d8:a8:82:88:29:62:7b:f9:4e:18:e7:22:e5:b8:fe:11:8d:11: d1:3c:07:2a:9b:0b:f6:81:ad:b6:69:de:f2:37:8d:9e:74:44: 88:69:24:f5:37:35:f5:5e:5c:53:21:e8:0a:08:ff:e2:33:44: 4f:c2:ea:8c:bb:0d:6a:d5:e9:d3:ca:94:e8:ac:bb:da:8a:7c: 24:e6:c3:72:49:ab:98:cd:4d:f9:ff:35:4b:ef:52:a4:b3:6a: b9:c1:49:b5:9f:97:7a:dc:6b:d4:50:2d:08:e4:be:b2:dd:77: c1:df:2b:dd:7b:94:84:51:34:24:68:a7:04:45:c1:ab:d7:7e: 9e:28:f0:04:72:97:8b:3c:23:1e:0d:57:a1:1f:e5:3d:44:3b: 8c:21:fd:88:2f:92:ef:01:57:a0:42:40:ce:f0:52:66:7c:08: ec:33:1a:b1:31:b5:15:76:79:12:b5:da:2d:c5:21:07:04:0d: 48:70:bb:da:60:9c:88:ce:5b:04:d1:59:b7:e1:58:ff:3f:df: 60:61:43:5d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICE2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU1MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyMTlGODlEODMwRjcx RkIxQTM5OTEwNDhDMzFDQkU0OURFQjU1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIXTc2+g5L1bIowxGkGPJdkYht/yNZa2ucEWebZl194Dr5pQqT B42bsZrXClytlTVKAMViKbjUH6o42H++Pgsl4akS0nI8+vr5NqlPc8ZqyihQu2dv MkpfGMtQ9fwJv+Ji/nnOjU9TGDxAOa8RIAx9rS5aE5Ib8LIy3Xr3T9bSwVLRr9vy whpPaHQakcYhnEtKM0PqG9lAkDIecEd7sY7wrOz3batO5gsEzqboRbIHpWLDAYkC OIuM9G+bQotG92aa1AX8mHTAdXqDKZbJCTnSTG7AIzmiLOr07VtF2I4qoIZNsW8w 1dVJQ3dUSfIjkYPJvHUQ963Rkibzp9VE4GHNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkhn4nYMPcfsaOZEEjDHL5J3rVUYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2tobjRuWU1QY2ZzYU9aRUVqREhMNUozclZVWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABSUowDQYJKoZIhvcNAQELBQADggEB ANgxJ0qXP8krxzM1bcJ3jVjDR8rZPYgA7Ar1JJ85lVgY6r+kyJrjtTTpMwcoPUqW LPsB7/LXCtiogogpYnv5ThjnIuW4/hGNEdE8ByqbC/aBrbZp3vI3jZ50RIhpJPU3 NfVeXFMh6AoI/+IzRE/C6oy7DWrV6dPKlOisu9qKfCTmw3JJq5jNTfn/NUvvUqSz arnBSbWfl3rca9RQLQjkvrLdd8HfK917lIRRNCRopwRFwavXfp4o8ARyl4s8Ix4N V6Ef5T1EO4wh/Ygvku8BV6BCQM7wUmZ8COwzGrExtRV2eRK12i3FIQcEDUhwu9pg nIjOWwTRWbfhWP8/32BhQ10= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:08 2026 by rpki-client