$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n1KU6qcjBWgWL3ydH-ASU0MgKE0.roa File: n1KU6qcjBWgWL3ydH-ASU0MgKE0.roa (raw, json) Hash identifier: X4UjlG3CDN0jcBqMlgcegYJw6YcaXkz2aEddgCmMnq4= Subject key identifier: 9F:52:94:EA:A7:23:05:68:16:2F:7C:9D:1F:E0:12:53:43:20:28:4D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16F6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n1KU6qcjBWgWL3ydH-ASU0MgKE0.roa Signing time: Tue 31 Mar 2026 08:02:51 +0000 ROA not before: Tue 31 Mar 2026 08:02:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.228.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5878 (0x16f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9F5294EAA7230568162F7C9D1FE012534320284D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:0a:c1:5b:ae:00:fe:52:20:04:6e:85:94: be:e7:43:41:91:5a:d9:f8:45:03:9f:bc:1b:00:82: 2b:88:93:43:6e:0d:56:4b:49:f8:cb:f8:c0:7c:86: 81:e2:f6:ff:83:0d:7d:ba:7b:95:72:1a:e6:35:64: eb:4d:3b:bb:a3:4f:6b:a2:aa:7a:f5:e3:aa:b9:9c: 36:e4:ff:ac:25:39:e4:5a:e2:e0:8b:51:7d:2c:75: 10:38:58:5f:8b:c4:5f:25:70:b0:2d:4b:ee:b7:c5: a9:3f:8f:4c:f4:20:b5:0e:81:04:82:83:98:65:76: a6:c6:b3:3b:c8:3c:3a:3d:55:f2:85:c8:56:da:47: ea:15:ab:0a:02:5f:55:b7:aa:86:ae:2c:12:30:87: 2c:ff:e8:6e:f8:72:91:ff:de:3f:f8:46:3c:f8:54: 79:6f:b2:cd:9b:4e:bc:b7:3c:c2:1a:92:cd:42:2f: 6b:92:56:d1:d1:49:1e:5f:fb:cb:4a:8d:83:b6:ea: 2b:ab:e6:36:56:40:fb:12:fb:c8:30:11:c4:80:8e: e5:db:cb:54:67:bd:9b:19:0f:b8:14:fa:79:00:a3: 45:2d:18:93:00:4b:c8:34:a7:8f:2a:fc:4b:b8:aa: 9c:fd:31:d5:0d:b0:3f:d8:69:de:a9:96:1a:14:51: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:52:94:EA:A7:23:05:68:16:2F:7C:9D:1F:E0:12:53:43:20:28:4D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n1KU6qcjBWgWL3ydH-ASU0MgKE0.roa sbgp-ipAddrBlock: critical IPv4: 27.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:fc:d8:fb:88:02:aa:a4:77:c0:86:f7:81:11:6d:9e:b5:cb: a8:21:27:de:fb:f8:b7:d6:9a:9e:66:f0:7a:b6:cb:55:79:6e: 19:84:53:0d:1d:1b:49:61:48:9b:ca:2e:3a:d0:dc:b3:0a:23: 55:31:16:a4:9d:8f:3e:e5:92:b9:bf:37:29:47:97:5a:e0:cc: 11:b6:5a:a9:da:d7:b0:a6:94:4b:73:61:23:00:71:ed:95:f6: 34:b7:90:ea:0c:a4:4d:ee:e1:8b:23:a5:ae:8d:b5:b8:d6:9a: 84:1b:44:30:5f:22:d0:1d:6d:a5:68:d3:42:af:95:71:61:8c: 34:e7:e9:a1:fb:83:ea:99:a1:42:83:30:a1:fc:7c:39:12:03: fc:d4:3b:06:19:68:f2:85:43:95:83:5b:39:b2:d3:e7:12:a3: 4f:05:df:dd:3a:0b:0f:92:95:4e:fb:78:b8:68:5d:e8:8e:3f: 3b:f2:4f:f8:1a:5b:03:41:23:16:56:93:f2:54:b3:5d:1f:bc: ae:d6:06:40:33:e4:dc:c6:d6:98:fb:64:f8:98:da:e8:c9:d6: 41:fa:91:27:70:bb:ca:c1:81:5f:a8:a9:0d:68:e8:4e:32:04: ee:60:bb:53:7b:43:30:ba:88:ff:4e:8c:e9:e1:2a:5f:a9:5a: bd:70:74:51 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICFvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyNTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlGNTI5NEVBQTcyMzA1 NjgxNjJGN0M5RDFGRTAxMjUzNDMyMDI4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBTArBW64A/lIgBG6FlL7nQ0GRWtn4RQOfvBsAgiuIk0NuDVZL SfjL+MB8hoHi9v+DDX26e5VyGuY1ZOtNO7ujT2uiqnr146q5nDbk/6wlOeRa4uCL UX0sdRA4WF+LxF8lcLAtS+63xak/j0z0ILUOgQSCg5hldqbGszvIPDo9VfKFyFba R+oVqwoCX1W3qoauLBIwhyz/6G74cpH/3j/4Rjz4VHlvss2bTry3PMIaks1CL2uS VtHRSR5f+8tKjYO26iur5jZWQPsS+8gwEcSAjuXby1RnvZsZD7gU+nkAo0UtGJMA S8g0p48q/Eu4qpz9MdUNsD/Yad6plhoUUaEtAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUn1KU6qcjBWgWL3ydH+ASU0MgKE0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L24xS1U2cWNqQldnV0wzeWRILUFTVTBNZ0tFMC5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAb5DANBgkqhkiG9w0BAQsFAAOCAQEA hfzY+4gCqqR3wIb3gRFtnrXLqCEn3vv4t9aanmbwerbLVXluGYRTDR0bSWFIm8ou OtDcswojVTEWpJ2PPuWSub83KUeXWuDMEbZaqdrXsKaUS3NhIwBx7ZX2NLeQ6gyk Te7hiyOlro21uNaahBtEMF8i0B1tpWjTQq+VcWGMNOfpofuD6pmhQoMwofx8ORID /NQ7Bhlo8oVDlYNbObLT5xKjTwXf3ToLD5KVTvt4uGhd6I4/O/JP+BpbA0EjFlaT 8lSzXR+8rtYGQDPk3MbWmPtk+Jja6MnWQfqRJ3C7ysGBX6ipDWjoTjIE7mC7U3tD MLqI/06M6eEqX6lavXB0UQ== -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:21 2026 by rpki-client