$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rPBkSIu20o0Qnsp34Tc3Y-9CIa4.roa File: rPBkSIu20o0Qnsp34Tc3Y-9CIa4.roa (raw, json) Hash identifier: 5/SdSCHUTutW8WfSZGFanEtmZ1M4Lz7WdRVD7HufPeI= Subject key identifier: AC:F0:64:48:8B:B6:D2:8D:10:9E:CA:77:E1:37:37:63:EF:42:21:AE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 151A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rPBkSIu20o0Qnsp34Tc3Y-9CIa4.roa Signing time: Tue 31 Mar 2026 07:58:56 +0000 ROA not before: Tue 31 Mar 2026 07:58:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5402 (0x151a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=ACF064488BB6D28D109ECA77E1373763EF4221AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:f2:6b:15:27:9c:6a:ae:4a:ca:64:0d:1d: 33:bf:ca:03:dd:52:2e:1e:23:2b:12:95:19:a6:8f: 22:f1:6d:72:e5:ee:f2:69:86:54:64:18:29:4d:0a: 00:56:6c:7e:34:25:b6:30:15:57:ec:9e:1d:ff:5e: 0c:85:f6:2a:c6:b1:a4:ad:a2:8d:89:94:48:5b:c0: 01:e3:19:6c:cd:69:f2:6a:35:4a:90:75:44:d7:65: fc:bf:da:ab:a4:65:c9:40:b8:cd:5c:3b:b9:50:e9: 3a:f3:ac:21:19:14:da:8f:f9:17:ee:a6:b1:bd:14: 34:2c:68:3c:dd:99:62:a6:9c:c5:3a:99:ab:c0:51: af:4a:a8:54:50:d9:b1:90:95:ef:80:50:fd:bf:5a: c6:80:8d:d5:2b:dd:51:a4:68:ff:ce:be:af:24:5f: 39:25:d5:66:48:52:74:08:1e:fe:23:4d:8d:9f:2f: 65:26:9d:d7:d0:f8:e1:52:60:34:23:1f:ed:a6:97: d4:2f:ca:24:5b:47:b0:b1:ce:eb:84:80:65:f5:cd: 37:b9:f5:e6:03:55:87:11:0a:43:8d:c4:04:13:39: d4:85:10:df:6d:1e:3e:11:60:60:e6:0c:27:1f:2e: ec:bb:50:5f:c3:be:9d:cd:0f:ce:74:73:15:6a:4b: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F0:64:48:8B:B6:D2:8D:10:9E:CA:77:E1:37:37:63:EF:42:21:AE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rPBkSIu20o0Qnsp34Tc3Y-9CIa4.roa sbgp-ipAddrBlock: critical IPv4: 1.78.127.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:92:73:0f:3b:d9:df:79:3f:3e:c7:02:5a:45:55:58:0f:05: c4:e1:45:27:5c:7c:cc:a3:2c:97:1d:a2:a0:93:94:ee:49:c0: 59:27:48:a3:e6:8b:04:a6:79:be:49:49:4c:c8:af:3c:b4:fa: 4d:c1:b3:ce:5f:c3:04:71:f4:63:ee:b5:71:53:cd:35:44:e8: 08:5f:16:d6:9f:87:ab:f3:f5:0c:55:09:09:4d:93:c8:c0:55: e4:94:d1:91:5f:a9:07:82:09:e3:02:e5:09:2a:d6:34:8a:b0: 89:82:a5:e6:3d:fc:c2:93:7a:60:bb:ef:01:e4:00:19:cd:d5: db:de:b2:f9:17:50:b2:26:14:f7:14:5d:2c:c0:11:ee:9a:c5: c4:d3:e2:e3:22:76:da:3d:17:3f:61:bf:7b:89:9f:16:64:7b: 93:81:1a:65:1e:5c:a8:be:63:36:a4:dc:44:a3:19:59:28:9b: 44:2c:6d:c6:4d:7e:07:b7:a4:7a:4f:3f:5b:b2:c9:95:a3:f1: 7d:42:aa:67:75:3a:9b:19:95:bb:25:71:e1:34:e3:95:5b:c4: 96:16:d4:dc:98:93:43:15:2e:18:b8:27:4b:cf:ff:64:d1:d2: 57:87:20:df:f8:62:9b:c5:bc:3a:65:ad:56:37:ac:25:b5:f8: 23:90:f0:11 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDRjA2NDQ4OEJCNkQy OEQxMDlFQ0E3N0UxMzczNzYzRUY0MjIxQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWO/JrFSecaq5KymQNHTO/ygPdUi4eIysSlRmmjyLxbXLl7vJp hlRkGClNCgBWbH40JbYwFVfsnh3/XgyF9irGsaStoo2JlEhbwAHjGWzNafJqNUqQ dUTXZfy/2qukZclAuM1cO7lQ6TrzrCEZFNqP+RfuprG9FDQsaDzdmWKmnMU6mavA Ua9KqFRQ2bGQle+AUP2/WsaAjdUr3VGkaP/Ovq8kXzkl1WZIUnQIHv4jTY2fL2Um ndfQ+OFSYDQjH+2ml9QvyiRbR7CxzuuEgGX1zTe59eYDVYcRCkONxAQTOdSFEN9t Hj4RYGDmDCcfLuy7UF/Dvp3ND850cxVqS0dLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUrPBkSIu20o0Qnsp34Tc3Y+9CIa4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3JQQmtTSXUyMG8wUW5zcDM0VGMzWS05Q0lhNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTn8wDQYJKoZIhvcNAQELBQADggEB AFyScw872d95Pz7HAlpFVVgPBcThRSdcfMyjLJcdoqCTlO5JwFknSKPmiwSmeb5J SUzIrzy0+k3Bs85fwwRx9GPutXFTzTVE6AhfFtafh6vz9QxVCQlNk8jAVeSU0ZFf qQeCCeMC5Qkq1jSKsImCpeY9/MKTemC77wHkABnN1dvesvkXULImFPcUXSzAEe6a xcTT4uMidto9Fz9hv3uJnxZke5OBGmUeXKi+Yzak3ESjGVkom0QsbcZNfge3pHpP P1uyyZWj8X1Cqmd1OpsZlbslceE045VbxJYW1NyYk0MVLhi4J0vP/2TR0leHIN/4 YpvFvDplrVY3rCW1+COQ8BE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:01 2026 by rpki-client