$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r0fMaKuQX0U-q00pfk7r50adUTY.roa File: r0fMaKuQX0U-q00pfk7r50adUTY.roa (raw, json) Hash identifier: thz5HB+Hjbg4x7rOwgK+KYFL0SGSOH8u5gX7W/BIkWc= Subject key identifier: AF:47:CC:68:AB:90:5F:45:3E:AB:4D:29:7E:4E:EB:E7:46:9D:51:36 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 145A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r0fMaKuQX0U-q00pfk7r50adUTY.roa Signing time: Tue 31 Mar 2026 07:57:23 +0000 ROA not before: Tue 31 Mar 2026 07:57:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5210 (0x145a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=AF47CC68AB905F453EAB4D297E4EEBE7469D5136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:e6:8a:6b:dc:0f:a3:9f:97:26:57:be:48: e2:7c:74:af:c9:5a:8f:43:ad:58:8d:d0:95:24:01: e3:05:4b:de:0e:05:3c:d6:fc:1f:04:b7:dc:ec:7f: b5:66:63:d0:fd:04:53:3d:a7:78:78:c6:b3:95:2c: 22:0a:c7:8d:9d:9d:7c:dc:a9:0b:14:31:f5:8b:b4: 53:89:e9:89:d1:60:98:61:ab:9f:23:69:4a:2b:34: bd:ff:e6:f4:4a:fd:d8:b7:ab:a0:bb:15:39:13:00: d9:b3:25:f0:83:fa:16:b1:51:1e:38:83:d0:42:d1: ce:cd:32:33:7d:f9:28:ed:d4:7f:7f:45:39:f2:d5: 2d:ef:d6:d6:8b:33:90:80:10:d3:22:0d:ec:b8:45: c5:81:13:d8:e8:c1:c1:43:e4:dd:d5:45:8f:71:2e: 29:95:89:2a:6b:fe:a8:58:77:da:98:8f:42:fa:a2: d1:d6:c0:4c:3c:45:44:67:eb:72:d5:eb:89:01:54: 6e:d0:ce:0f:e0:b5:ec:50:95:8d:6f:f6:8b:8b:73: 9f:6f:06:cf:48:54:f8:60:35:e7:d9:47:c1:ff:a9: d8:7e:6d:66:63:a0:bb:e7:72:36:02:52:53:24:41: 2b:52:ae:c8:1c:15:fe:b1:e9:be:68:b0:7f:5b:4d: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:47:CC:68:AB:90:5F:45:3E:AB:4D:29:7E:4E:EB:E7:46:9D:51:36 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r0fMaKuQX0U-q00pfk7r50adUTY.roa sbgp-ipAddrBlock: critical IPv4: 1.79.7.0/24 Signature Algorithm: sha256WithRSAEncryption c5:b5:69:9f:45:01:be:9f:0d:ae:d0:a6:2a:01:44:86:67:76: 4b:b8:9b:6e:69:5f:96:2a:95:56:0f:5a:a7:69:3e:45:ea:ad: 7f:37:b6:79:f0:d9:60:c8:38:d8:af:14:48:d8:15:10:e7:29: 61:30:ce:3d:40:ca:df:28:d7:d9:2c:d1:6b:45:d9:5c:43:6e: da:28:89:57:f7:4e:71:61:83:b2:b2:ff:69:26:6b:01:4a:74: 0f:64:87:fe:5e:86:49:98:36:14:6c:e2:3b:aa:23:02:8d:07: 45:32:77:ec:dc:12:02:6e:cc:48:76:4c:a1:37:07:75:81:9d: 38:91:dc:cc:11:5c:a0:0e:0e:80:61:16:17:09:69:d7:d4:d4: 6d:35:08:40:2a:c4:58:c3:b3:d8:f8:d8:c7:0f:8d:be:1c:e0: ba:17:b6:fe:51:d2:77:3c:90:a3:e4:fc:5e:c8:48:a1:f1:25: 81:23:91:07:d6:39:a3:63:7f:2c:2b:e6:04:1c:79:6c:db:40: 3a:9e:55:53:8c:75:5e:d1:41:97:7e:b6:1c:3b:cf:f3:bc:5b: a7:13:41:99:71:c0:d1:9e:0a:1c:10:63:f1:42:29:47:07:e2: 82:00:03:b1:57:2e:49:d6:86:2a:cc:cd:16:4a:6c:22:c7:a8: b2:59:fd:e6 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGNDdDQzY4QUI5MDVG NDUzRUFCNEQyOTdFNEVFQkU3NDY5RDUxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe2OaKa9wPo5+XJle+SOJ8dK/JWo9DrViN0JUkAeMFS94OBTzW /B8Et9zsf7VmY9D9BFM9p3h4xrOVLCIKx42dnXzcqQsUMfWLtFOJ6YnRYJhhq58j aUorNL3/5vRK/di3q6C7FTkTANmzJfCD+haxUR44g9BC0c7NMjN9+Sjt1H9/RTny 1S3v1taLM5CAENMiDey4RcWBE9jowcFD5N3VRY9xLimViSpr/qhYd9qYj0L6otHW wEw8RURn63LV64kBVG7Qzg/gtexQlY1v9ouLc59vBs9IVPhgNefZR8H/qdh+bWZj oLvncjYCUlMkQStSrsgcFf6x6b5osH9bTfEFAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUr0fMaKuQX0U+q00pfk7r50adUTYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3IwZk1hS3VRWDBVLXEwMHBmazdyNTBhZFVUWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTwcwDQYJKoZIhvcNAQELBQADggEB AMW1aZ9FAb6fDa7QpioBRIZndku4m25pX5YqlVYPWqdpPkXqrX83tnnw2WDIONiv FEjYFRDnKWEwzj1Ayt8o19ks0WtF2VxDbtooiVf3TnFhg7Ky/2kmawFKdA9kh/5e hkmYNhRs4juqIwKNB0Uyd+zcEgJuzEh2TKE3B3WBnTiR3MwRXKAODoBhFhcJadfU 1G01CEAqxFjDs9j42McPjb4c4LoXtv5R0nc8kKPk/F7ISKHxJYEjkQfWOaNjfywr 5gQceWzbQDqeVVOMdV7RQZd+thw7z/O8W6cTQZlxwNGeChwQY/FCKUcH4oIAA7FX LknWhirMzRZKbCLHqLJZ/eY= -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:40 2026 by rpki-client