$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHqcIDnqrfxr20Za8NXTB3nd8mc.roa File: vHqcIDnqrfxr20Za8NXTB3nd8mc.roa (raw, json) Hash identifier: YZ7lf7svax5GjiakAAvgGS+ipp9+fCKEj4H6qpyj4Vc= Subject key identifier: BC:7A:9C:20:39:EA:AD:FC:6B:DB:46:5A:F0:D5:D3:07:79:DD:F2:67 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14AE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHqcIDnqrfxr20Za8NXTB3nd8mc.roa Signing time: Tue 31 Mar 2026 07:58:02 +0000 ROA not before: Tue 31 Mar 2026 07:58:02 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5294 (0x14ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:02 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=BC7A9C2039EAADFC6BDB465AF0D5D30779DDF267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:14:c0:84:68:2f:80:d1:d8:96:f1:d4:77: dc:1d:07:33:12:17:d8:16:74:18:42:1a:52:cc:5c: d9:7d:e2:17:8b:a4:88:b9:a4:53:cd:68:3e:f2:96: b5:2f:a7:e9:43:8b:56:ce:53:aa:02:ba:2b:ee:ed: 3c:d5:2a:c7:6e:07:0a:76:62:ab:5c:05:5f:89:54: cb:7b:61:de:cd:a6:5f:e3:f8:b5:b7:af:0a:7c:9f: e0:7e:63:ba:f5:6a:5c:c2:c2:9a:3e:8b:3f:c3:d4: b2:af:ae:99:46:2d:6b:6e:a4:8b:b0:ba:72:18:1c: 5d:94:49:d9:95:23:71:6e:68:89:04:a0:d5:6d:f7: 13:20:6f:7b:f2:8e:54:89:ff:7e:0f:ab:e3:3a:bf: 15:64:37:46:5c:08:ef:e9:ee:19:ea:14:83:35:5f: b6:e7:96:d9:c1:22:5b:60:28:7e:7b:ff:a2:65:95: 13:77:b2:d5:1e:f1:55:07:75:ea:0d:93:2e:2c:80: 8f:a9:bc:3d:3b:aa:31:12:c4:35:2f:4b:5e:e3:e7: 45:7d:db:41:73:c4:57:79:5a:f5:02:52:b3:a7:8e: 92:80:2e:5d:20:17:ac:d0:8a:d3:a4:6d:88:10:87: 90:3c:8e:69:c9:9b:94:4a:16:78:15:27:8a:bf:6a: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7A:9C:20:39:EA:AD:FC:6B:DB:46:5A:F0:D5:D3:07:79:DD:F2:67 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vHqcIDnqrfxr20Za8NXTB3nd8mc.roa sbgp-ipAddrBlock: critical IPv4: 1.79.32.0/22 Signature Algorithm: sha256WithRSAEncryption af:78:31:d4:6c:7b:7c:6f:e6:c7:f4:ac:a5:06:b9:f4:42:f9: cb:40:76:96:4c:e6:d9:8d:d8:96:09:53:15:87:6d:d0:25:40: d6:25:f4:c3:ec:4d:82:70:c0:33:c8:b7:bb:e4:a5:4a:58:09: d8:e6:9d:81:65:94:7b:f8:55:87:c5:7e:94:4a:11:90:2d:bb: 7a:41:6a:f9:64:8b:a7:92:78:e8:08:e1:6e:78:57:ba:b0:d0: 45:54:11:6a:a1:b3:ec:29:f6:1d:22:a6:1f:8d:39:be:2b:37: 07:41:8b:e3:73:fb:e8:51:e1:52:7e:71:53:ff:73:57:7f:79: 7e:b6:90:c8:52:6c:89:b1:d9:93:91:ac:b2:83:96:5d:6a:c6: 36:03:a6:50:21:ee:b6:b9:ad:01:0c:bd:2f:36:52:ad:f4:de: 15:db:d6:26:4a:83:96:a3:3b:2d:29:cc:b3:99:92:1d:fd:d4: 87:3a:93:70:e4:ab:79:2b:55:99:d6:c2:40:f3:9c:c1:b0:d1: 3f:a9:d4:f4:9b:0c:84:4b:14:54:c0:00:23:d9:27:cf:a4:05: 6d:14:60:15:5e:1d:b2:d4:97:d0:c1:00:05:c0:6f:40:8e:34: 5d:31:77:77:24:d9:c5:80:53:3b:77:11:8f:67:8f:08:16:38: 10:a7:be:c5 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDN0E5QzIwMzlFQUFE RkM2QkRCNDY1QUYwRDVEMzA3NzlEREYyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAbRTAhGgvgNHYlvHUd9wdBzMSF9gWdBhCGlLMXNl94heLpIi5 pFPNaD7ylrUvp+lDi1bOU6oCuivu7TzVKsduBwp2YqtcBV+JVMt7Yd7Npl/j+LW3 rwp8n+B+Y7r1alzCwpo+iz/D1LKvrplGLWtupIuwunIYHF2USdmVI3FuaIkEoNVt 9xMgb3vyjlSJ/34Pq+M6vxVkN0ZcCO/p7hnqFIM1X7bnltnBIltgKH57/6JllRN3 stUe8VUHdeoNky4sgI+pvD07qjESxDUvS17j50V920FzxFd5WvUCUrOnjpKALl0g F6zQitOkbYgQh5A8jmnJm5RKFngVJ4q/ahYZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUvHqcIDnqrfxr20Za8NXTB3nd8mcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3ZIcWNJRG5xcmZ4cjIwWmE4TlhUQjNuZDhtYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBTyAwDQYJKoZIhvcNAQELBQADggEB AK94MdRse3xv5sf0rKUGufRC+ctAdpZM5tmN2JYJUxWHbdAlQNYl9MPsTYJwwDPI t7vkpUpYCdjmnYFllHv4VYfFfpRKEZAtu3pBavlki6eSeOgI4W54V7qw0EVUEWqh s+wp9h0iph+NOb4rNwdBi+Nz++hR4VJ+cVP/c1d/eX62kMhSbImx2ZORrLKDll1q xjYDplAh7ra5rQEMvS82Uq303hXb1iZKg5ajOy0pzLOZkh391Ic6k3Dkq3krVZnW wkDznMGw0T+p1PSbDIRLFFTAACPZJ8+kBW0UYBVeHbLUl9DBAAXAb0CONF0xd3ck 2cWAUzt3EY9njwgWOBCnvsU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:59 2026 by rpki-client