$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZdFkB9Xv41IkvdPEOHIvfNKk2Y.roa File: sZdFkB9Xv41IkvdPEOHIvfNKk2Y.roa (raw, json) Hash identifier: nRvylEsA98Qh+Z49UMT7FRpbO0EpOsy7bL5deId4Tcs= Subject key identifier: B1:97:45:90:1F:57:BF:8D:48:92:F7:4F:10:E1:C8:BD:F3:4A:93:66 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 16BA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZdFkB9Xv41IkvdPEOHIvfNKk2Y.roa Signing time: Tue 31 Mar 2026 08:02:23 +0000 ROA not before: Tue 31 Mar 2026 08:02:23 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5818 (0x16ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:02:23 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B19745901F57BF8D4892F74F10E1C8BDF34A9366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:84:f1:69:b4:67:c4:3c:cb:50:16:19:db: 9c:4b:f2:fe:6c:4f:b7:3b:3f:54:91:44:bf:ea:15: 47:60:f4:b2:e9:8c:b7:db:97:25:c2:da:d8:49:0b: 7a:c7:29:6f:0c:d6:a0:b8:25:e4:ba:fb:71:e2:75: e2:18:e0:ae:1d:b8:3a:3a:d2:d9:74:11:65:9b:d4: fc:81:64:f6:2c:a6:88:c3:18:b2:5a:55:b4:94:ce: df:f4:51:c1:23:94:2f:42:5a:9b:e7:fa:9e:b8:50: 20:a7:81:e7:73:46:2d:7e:ef:00:69:46:15:72:6c: 70:1d:3f:6e:db:c8:22:6d:37:51:87:02:27:fd:a4: 71:da:79:ba:88:1f:7c:5e:6d:b6:ec:cb:65:f9:52: f1:ad:a6:5f:70:ae:36:c4:e6:1d:0f:ce:80:22:ae: a8:e7:68:3c:88:09:81:b2:89:6d:52:57:f1:77:a4: 91:85:ee:92:d1:92:31:74:57:dc:2c:52:6e:13:38: 38:0e:03:c4:cc:33:c4:b0:03:8e:b8:b3:ed:50:35: be:be:8e:ee:df:48:df:8a:70:23:ff:3e:10:22:a1: 49:c4:fe:b9:0d:71:b9:06:52:4c:51:cf:c8:7b:0f: 1c:35:39:20:32:92:31:a6:69:51:ea:15:fb:24:37: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:97:45:90:1F:57:BF:8D:48:92:F7:4F:10:E1:C8:BD:F3:4A:93:66 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZdFkB9Xv41IkvdPEOHIvfNKk2Y.roa sbgp-ipAddrBlock: critical IPv4: 220.159.239.0/24 Signature Algorithm: sha256WithRSAEncryption 30:05:f2:8e:45:bf:5e:e5:c4:cf:8d:a2:98:b9:cc:ad:10:a0: 7f:29:91:ff:e5:0c:b9:74:7b:a9:80:ce:67:fb:d5:a3:7d:6d: 3d:93:10:b3:db:45:4d:bb:ec:f7:bf:4b:93:6e:f8:dc:ee:05: ad:34:ad:04:f9:cc:f0:cf:d6:89:7c:9f:e6:5c:82:66:68:72: 8f:6b:72:a0:72:47:a9:c6:97:68:ee:34:a3:aa:50:ad:13:0b: 61:c9:ef:7c:73:87:19:1c:e4:e9:ca:db:d2:9b:84:8b:ca:56: 13:41:80:89:4a:ba:a9:59:67:95:e2:76:1b:3d:ad:f8:5e:ba: f7:fa:e8:e4:1d:d2:e6:73:9f:da:fe:90:16:26:51:e8:aa:90: d5:51:fb:d2:84:dd:92:28:ab:03:b0:b0:f6:5d:12:49:c8:9d: 77:b2:52:92:44:dd:d4:6b:97:c3:a8:b0:94:47:ca:24:9d:dd: 71:e8:a8:6d:cf:0a:70:fe:94:5f:c4:9c:ae:6c:fd:99:2a:47: 4f:66:39:cf:d7:95:29:ab:40:20:b9:ab:45:35:6d:9e:0f:48: 03:cf:71:01:23:c8:b7:54:48:a4:6a:fd:4d:b8:28:f9:ef:2e: b1:f0:cc:04:c7:c3:15:09:a2:e6:0d:4d:84:6a:71:07:42:b9: a3:3c:91:bd -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAyMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxOTc0NTkwMUY1N0JG OEQ0ODkyRjc0RjEwRTFDOEJERjM0QTkzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+L4TxabRnxDzLUBYZ25xL8v5sT7c7P1SRRL/qFUdg9LLpjLfb lyXC2thJC3rHKW8M1qC4JeS6+3HideIY4K4duDo60tl0EWWb1PyBZPYspojDGLJa VbSUzt/0UcEjlC9CWpvn+p64UCCngedzRi1+7wBpRhVybHAdP27byCJtN1GHAif9 pHHaebqIH3xebbbsy2X5UvGtpl9wrjbE5h0PzoAirqjnaDyICYGyiW1SV/F3pJGF 7pLRkjF0V9wsUm4TODgOA8TMM8SwA464s+1QNb6+ju7fSN+KcCP/PhAioUnE/rkN cbkGUkxRz8h7Dxw1OSAykjGmaVHqFfskN2k7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUsZdFkB9Xv41IkvdPEOHIvfNKk2YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3NaZEZrQjlYdjQxSWt2ZFBFT0hJdmZOS2syWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADcn+8wDQYJKoZIhvcNAQELBQADggEB ADAF8o5Fv17lxM+Nopi5zK0QoH8pkf/lDLl0e6mAzmf71aN9bT2TELPbRU277Pe/ S5Nu+NzuBa00rQT5zPDP1ol8n+ZcgmZoco9rcqByR6nGl2juNKOqUK0TC2HJ73xz hxkc5OnK29KbhIvKVhNBgIlKuqlZZ5Xidhs9rfheuvf66OQd0uZzn9r+kBYmUeiq kNVR+9KE3ZIoqwOwsPZdEknInXeyUpJE3dRrl8OosJRHyiSd3XHoqG3PCnD+lF/E nK5s/ZkqR09mOc/XlSmrQCC5q0U1bZ4PSAPPcQEjyLdUSKRq/U24KPnvLrHwzATH wxUJouYNTYRqcQdCuaM8kb0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:20 2026 by rpki-client