$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xZT68BUsSCplkqo4u5Q-ne-qG6M.roa File: xZT68BUsSCplkqo4u5Q-ne-qG6M.roa (raw, json) Hash identifier: hIr9HWTWFtcdxjbNvwFYRUhAHoCUdUOXVmRMfmadZRU= Subject key identifier: C5:94:FA:F0:15:2C:48:2A:65:92:AA:38:BB:94:3E:9D:EF:AA:1B:A3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14D0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xZT68BUsSCplkqo4u5Q-ne-qG6M.roa Signing time: Tue 31 Mar 2026 07:58:21 +0000 ROA not before: Tue 31 Mar 2026 07:58:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5328 (0x14d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C594FAF0152C482A6592AA38BB943E9DEFAA1BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:0e:6d:55:f3:5a:1f:e0:b9:e6:e6:27:f0: dc:1d:0c:9d:73:55:92:a3:fb:2d:a7:19:10:98:3e: 2a:34:ad:0f:0d:32:3c:da:fe:d2:7b:93:8a:4b:e2: d5:24:21:c6:5a:8d:dc:c8:19:24:f8:48:01:a7:5d: 99:d8:19:21:aa:4d:6e:36:2e:1e:40:ab:28:86:f0: c2:d4:49:98:2d:f0:1e:a0:05:37:4f:12:85:72:e5: 0d:83:89:23:47:ef:6b:f7:a7:15:41:2c:ed:61:1c: 24:38:1e:2d:64:17:be:de:af:b1:a9:e6:d3:f8:74: 91:c8:1a:40:6f:ad:9b:d8:a9:aa:39:99:1a:6e:48: 19:dd:9d:23:ae:4e:ad:c6:27:b9:cd:f2:62:8c:4e: 28:3b:ed:1c:a6:ed:55:2b:36:dd:c6:a1:e3:f3:71: 3d:df:52:da:51:90:14:fc:96:c3:d0:3a:a9:25:b2: 07:40:35:f1:e2:e7:3e:5d:b9:75:f3:77:ff:46:f6: 6d:35:cd:d7:c1:6e:8d:4a:35:34:e2:4c:df:49:35: 67:68:7c:5c:a7:e2:e8:c1:1f:5a:05:92:5c:d3:8b: 75:e0:2d:93:7d:48:d8:8d:d6:93:3e:91:d6:9d:b7: 4f:41:09:67:71:d6:5b:d8:7e:33:57:dd:f5:bd:c6: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:FA:F0:15:2C:48:2A:65:92:AA:38:BB:94:3E:9D:EF:AA:1B:A3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xZT68BUsSCplkqo4u5Q-ne-qG6M.roa sbgp-ipAddrBlock: critical IPv4: 1.79.84.0/22 Signature Algorithm: sha256WithRSAEncryption 29:58:ab:8e:2a:b3:3c:ed:fb:9c:fd:e2:87:6f:00:31:2c:ba: 49:87:c6:13:01:07:35:0d:db:d1:dd:90:a9:60:ed:a6:9d:9e: ad:57:83:3d:e9:34:74:9a:c8:c1:67:20:57:ac:36:df:f7:fe: da:85:a9:83:77:cd:0d:be:eb:8d:63:81:ae:62:23:22:4b:e2: ec:2a:e7:4f:0b:1f:eb:93:77:bf:42:eb:0d:e9:d3:2c:73:d2: 3a:fc:93:92:01:31:e4:5d:c4:b6:e5:f2:0f:48:50:82:b0:0a: 24:95:c2:e0:55:37:39:95:b6:e3:22:4a:49:69:a4:1b:03:52: ad:28:4f:20:f7:89:ca:fb:d0:26:66:57:b2:76:d3:36:9a:18: f0:77:d5:59:a4:2c:e1:3c:da:72:89:b3:9f:7c:6f:db:99:c0: b2:97:61:82:7e:fa:c7:f0:4e:a5:da:2b:19:26:36:5f:16:6d: f7:cd:12:9f:dc:67:ba:5c:0e:a6:b7:fd:ef:d7:74:5e:8b:e9: 84:3f:fd:91:ba:6b:8d:d6:44:30:66:47:f1:e5:d0:12:e4:96: d9:88:00:f1:71:a6:38:9c:b5:a6:fe:83:a2:5d:0b:6a:10:07: 65:52:fe:6b:3d:38:43:f6:1a:cb:92:d2:b2:3d:cb:8e:be:6b: 7e:46:f0:4f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1OTRGQUYwMTUyQzQ4 MkE2NTkyQUEzOEJCOTQzRTlERUZBQTFCQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWSg5tVfNaH+C55uYn8NwdDJ1zVZKj+y2nGRCYPio0rQ8NMjza /tJ7k4pL4tUkIcZajdzIGST4SAGnXZnYGSGqTW42Lh5AqyiG8MLUSZgt8B6gBTdP EoVy5Q2DiSNH72v3pxVBLO1hHCQ4Hi1kF77er7Gp5tP4dJHIGkBvrZvYqao5mRpu SBndnSOuTq3GJ7nN8mKMTig77Rym7VUrNt3GoePzcT3fUtpRkBT8lsPQOqklsgdA NfHi5z5duXXzd/9G9m01zdfBbo1KNTTiTN9JNWdofFyn4ujBH1oFklzTi3XgLZN9 SNiN1pM+kdadt09BCWdx1lvYfjNX3fW9xng7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUxZT68BUsSCplkqo4u5Q+ne+qG6MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3haVDY4QlVzU0NwbGtxbzR1NVEtbmUtcUc2TS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBT1QwDQYJKoZIhvcNAQELBQADggEB AClYq44qszzt+5z94odvADEsukmHxhMBBzUN29HdkKlg7aadnq1Xgz3pNHSayMFn IFesNt/3/tqFqYN3zQ2+641jga5iIyJL4uwq508LH+uTd79C6w3p0yxz0jr8k5IB MeRdxLbl8g9IUIKwCiSVwuBVNzmVtuMiSklppBsDUq0oTyD3icr70CZmV7J20zaa GPB31VmkLOE82nKJs598b9uZwLKXYYJ++sfwTqXaKxkmNl8WbffNEp/cZ7pcDqa3 /e/XdF6L6YQ//ZG6a43WRDBmR/Hl0BLkltmIAPFxpjictab+g6JdC2oQB2VS/ms9 OEP2GsuS0rI9y46+a35G8E8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:58 2026 by rpki-client