$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lu88g86bW6UTXWUpJIGdql3qptM.roa File: lu88g86bW6UTXWUpJIGdql3qptM.roa (raw, json) Hash identifier: 08HYSycrN1r3Cu0T3RelL8z2PZ/mwjnS9Nhe6C2lx04= Subject key identifier: 96:EF:3C:83:CE:9B:5B:A5:13:5D:65:29:24:81:9D:AA:5D:EA:A6:D3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 177F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lu88g86bW6UTXWUpJIGdql3qptM.roa Signing time: Tue 31 Mar 2026 08:03:56 +0000 ROA not before: Tue 31 Mar 2026 08:03:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6015 (0x177f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:03:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=96EF3C83CE9B5BA5135D652924819DAA5DEAA6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:d5:a1:06:d7:18:fe:b5:7e:b0:65:d6:3b: 37:10:f5:5d:4b:85:18:93:1b:98:d8:c3:1e:a4:d1: 2e:0b:f7:3d:cb:37:03:93:4b:83:6c:51:fe:32:bf: 24:a9:8f:1e:21:46:61:18:d9:09:ec:fb:b9:85:fb: d7:3a:28:a6:62:0c:15:a5:02:5c:7f:c2:21:ff:8b: a9:c4:1f:c1:f2:5d:3b:21:47:63:c8:02:4e:80:58: 92:46:28:b3:0d:f5:b8:95:63:01:81:5d:13:48:81: 73:9b:68:65:d2:20:7b:ea:32:ae:69:7e:2f:a1:a1: 08:5f:5c:9a:df:3d:7a:2d:5d:33:f1:02:c0:91:3c: 4b:bb:fe:c8:59:01:21:30:3f:de:57:b9:d4:89:e5: 2c:a3:72:61:74:ee:f4:8c:08:75:87:95:01:7d:49: 67:f7:25:38:83:60:fb:08:b2:02:5c:89:c0:0c:7a: 81:e9:83:8d:8c:15:fb:d0:c3:b5:1e:04:1d:7a:cc: 0c:f4:4d:6f:6e:3b:84:89:57:06:3d:de:5d:eb:a4: 26:8f:2c:14:57:30:70:20:eb:b5:8a:d2:2d:d0:b9: 82:b0:34:a3:01:f6:14:db:6a:91:94:bc:cb:63:1a: b2:38:df:18:9b:de:1c:c8:14:30:90:50:f9:2a:76: a7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EF:3C:83:CE:9B:5B:A5:13:5D:65:29:24:81:9D:AA:5D:EA:A6:D3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lu88g86bW6UTXWUpJIGdql3qptM.roa sbgp-ipAddrBlock: critical IPv4: 220.210.56.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:c5:a9:e7:59:5f:8a:1d:a4:b3:26:35:7e:f9:c6:4e:f3:93: 79:fd:1a:c0:6c:0a:25:89:c1:0b:33:33:cc:28:9f:0b:51:de: 85:ab:8c:e5:c5:06:8c:71:92:00:e1:0c:0b:b5:43:18:74:16: a3:d8:62:58:77:83:ee:fe:ee:fd:70:53:d0:c9:b5:c7:9e:ff: 0c:ec:df:3f:85:19:c2:d5:57:bd:88:b9:82:cc:d4:bf:0f:ab: 71:83:10:17:12:b3:88:b3:7b:6c:d6:78:d9:e7:21:1b:d2:70: 6b:bc:80:26:c6:e0:2b:46:e8:1f:6b:a4:85:70:e3:cb:2b:6b: d8:52:73:bc:6d:80:55:34:b1:6c:46:71:e1:b0:8a:39:cf:9d: aa:41:25:27:47:dc:1c:c8:7c:2c:2a:a3:89:8a:e4:5a:1c:53: b8:1f:97:b4:1a:78:ef:bf:55:42:9c:93:95:cf:2d:ae:67:3f: 1a:cd:1f:a3:c2:a0:b9:8f:0e:b6:cb:7c:37:12:a5:33:c1:9c: 4b:c5:52:94:19:ce:e6:44:95:e5:f1:70:7a:34:13:58:e0:f9: f3:05:e6:5e:9e:da:f6:10:a5:af:0b:98:fb:81:c9:94:76:27: d7:a0:0b:43:d4:87:3b:10:3d:7d:5a:d4:fd:6a:24:20:0f:6b: 0e:09:45:8c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAzNTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2RUYzQzgzQ0U5QjVC QTUxMzVENjUyOTI0ODE5REFBNURFQUE2RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv0NWhBtcY/rV+sGXWOzcQ9V1LhRiTG5jYwx6k0S4L9z3LNwOT S4NsUf4yvySpjx4hRmEY2Qns+7mF+9c6KKZiDBWlAlx/wiH/i6nEH8HyXTshR2PI Ak6AWJJGKLMN9biVYwGBXRNIgXObaGXSIHvqMq5pfi+hoQhfXJrfPXotXTPxAsCR PEu7/shZASEwP95XudSJ5SyjcmF07vSMCHWHlQF9SWf3JTiDYPsIsgJcicAMeoHp g42MFfvQw7UeBB16zAz0TW9uO4SJVwY93l3rpCaPLBRXMHAg67WK0i3QuYKwNKMB 9hTbapGUvMtjGrI43xib3hzIFDCQUPkqdqenAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUlu88g86bW6UTXWUpJIGdql3qptMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L2x1ODhnODZiVzZVVFhXVXBKSUdkcWwzcXB0TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHc0jgwDQYJKoZIhvcNAQELBQADggEB AErFqedZX4odpLMmNX75xk7zk3n9GsBsCiWJwQszM8wonwtR3oWrjOXFBoxxkgDh DAu1Qxh0FqPYYlh3g+7+7v1wU9DJtcee/wzs3z+FGcLVV72IuYLM1L8Pq3GDEBcS s4ize2zWeNnnIRvScGu8gCbG4CtG6B9rpIVw48sra9hSc7xtgFU0sWxGceGwijnP napBJSdH3BzIfCwqo4mK5FocU7gfl7QaeO+/VUKck5XPLa5nPxrNH6PCoLmPDrbL fDcSpTPBnEvFUpQZzuZEleXxcHo0E1jg+fMF5l6e2vYQpa8LmPuByZR2J9egC0PU hzsQPX1a1P1qJCAPaw4JRYw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:39 2026 by rpki-client