$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ybB5FuwrL3xFtVFwqSVrVd86W50.roa File: ybB5FuwrL3xFtVFwqSVrVd86W50.roa (raw, json) Hash identifier: s1CG1CJ1QF/ikf8HTKGwTJ6AIKw7ChZj8Si7h/BW4FA= Subject key identifier: C9:B0:79:16:EC:2B:2F:7C:45:B5:51:70:A9:25:6B:55:DF:3A:5B:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14A7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ybB5FuwrL3xFtVFwqSVrVd86W50.roa Signing time: Tue 31 Mar 2026 07:57:58 +0000 ROA not before: Tue 31 Mar 2026 07:57:58 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5287 (0x14a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:58 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C9B07916EC2B2F7C45B55170A9256B55DF3A5B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:1e:f3:d8:7a:45:dd:28:7f:a2:4b:69:56: 0c:87:f7:83:4e:51:27:d4:df:72:93:a7:06:34:83: 23:7a:09:a0:83:b9:17:07:5e:a9:ba:ae:23:7e:53: c7:95:74:49:c7:21:ef:c2:61:57:0d:17:0f:d4:90: d4:4b:72:a3:e8:bb:95:82:20:e4:4f:e0:b8:6c:cf: eb:ce:96:96:4f:48:fb:d9:7e:02:ec:4d:a2:c0:8b: 45:a7:b5:54:db:f5:1b:96:4d:70:33:b8:a2:2f:02: 48:5a:43:0f:f7:09:91:9f:9a:2a:bd:00:36:89:c2: 29:8f:46:ef:8a:19:f2:02:d5:34:b6:8b:da:7a:dc: e1:f4:a4:41:09:36:59:be:05:e0:88:ea:14:be:c7: cd:80:d1:5d:1c:3a:6e:9f:8f:17:f7:58:a3:dd:62: 14:37:2e:79:c6:64:5c:bb:d9:cf:f9:7c:e6:24:32: 43:ca:b1:64:96:f0:be:d0:4f:64:48:fe:9d:cf:52: 52:2a:fc:76:30:30:f0:84:f9:38:f4:aa:f2:c2:96: e6:e5:08:60:9e:af:3f:6f:f2:e1:90:9f:41:c8:dc: 91:88:70:f8:70:09:a4:e0:35:5b:ae:b4:4b:6e:19: 94:9e:f2:17:a8:67:35:6e:13:35:39:b4:2f:bb:e7: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:79:16:EC:2B:2F:7C:45:B5:51:70:A9:25:6B:55:DF:3A:5B:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ybB5FuwrL3xFtVFwqSVrVd86W50.roa sbgp-ipAddrBlock: critical IPv4: 1.78.30.0/23 Signature Algorithm: sha256WithRSAEncryption cd:a2:8f:19:13:25:08:53:0a:15:3a:ad:0f:4e:f0:98:7e:ee: 32:7d:3f:a8:83:99:52:9f:ec:11:83:fa:e2:1b:26:c6:9f:1c: 01:d8:69:bb:e2:b2:6b:d6:62:e5:14:75:08:7b:d9:0a:3f:ba: 6f:f7:00:3d:25:4a:2d:81:f1:a3:2e:43:12:9e:3e:be:38:94: 08:eb:b9:86:d8:2d:a7:ff:4e:38:7b:9e:49:1e:b8:1d:dc:9d: 6b:6f:49:36:b2:ea:0c:c8:dc:1b:ec:2d:ec:4f:f4:66:81:92: 38:fb:d0:28:22:ee:5f:af:73:aa:9c:fe:ea:d5:7c:f8:8f:65: bf:ce:4f:72:e9:8d:18:75:7a:50:08:09:0c:85:49:8c:bd:f1: a0:1a:99:a3:f4:d7:38:e8:49:21:9a:ee:24:1f:f3:1c:4f:89: 78:9d:50:6f:02:7a:13:17:b2:7d:80:0b:c1:58:0e:87:06:ba: cc:dd:21:b5:81:f3:6e:3f:71:47:9c:25:b4:3f:31:11:1a:7a: 5b:0b:6a:d5:45:6d:11:bf:b2:92:eb:e8:f9:ea:af:49:0e:2b: 76:fb:3a:d6:a2:fc:5c:5e:b1:a6:4d:fa:54:fb:b8:8b:19:c8: ec:ee:83:78:e8:a8:e9:7c:a7:c1:c6:d5:80:44:cb:e4:09:7e: 1f:17:8c:69 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5QjA3OTE2RUMyQjJG N0M0NUI1NTE3MEE5MjU2QjU1REYzQTVCOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd0R7z2HpF3Sh/oktpVgyH94NOUSfU33KTpwY0gyN6CaCDuRcH Xqm6riN+U8eVdEnHIe/CYVcNFw/UkNRLcqPou5WCIORP4Lhsz+vOlpZPSPvZfgLs TaLAi0WntVTb9RuWTXAzuKIvAkhaQw/3CZGfmiq9ADaJwimPRu+KGfIC1TS2i9p6 3OH0pEEJNlm+BeCI6hS+x82A0V0cOm6fjxf3WKPdYhQ3LnnGZFy72c/5fOYkMkPK sWSW8L7QT2RI/p3PUlIq/HYwMPCE+Tj0qvLClublCGCerz9v8uGQn0HI3JGIcPhw CaTgNVuutEtuGZSe8heoZzVuEzU5tC+757N5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUybB5FuwrL3xFtVFwqSVrVd86W50wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3liQjVGdXdyTDN4RnRWRndxU1ZyVmQ4Nlc1MC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTh4wDQYJKoZIhvcNAQELBQADggEB AM2ijxkTJQhTChU6rQ9O8Jh+7jJ9P6iDmVKf7BGD+uIbJsafHAHYabvismvWYuUU dQh72Qo/um/3AD0lSi2B8aMuQxKePr44lAjruYbYLaf/Tjh7nkkeuB3cnWtvSTay 6gzI3BvsLexP9GaBkjj70Cgi7l+vc6qc/urVfPiPZb/OT3LpjRh1elAICQyFSYy9 8aAamaP01zjoSSGa7iQf8xxPiXidUG8CehMXsn2AC8FYDocGuszdIbWB824/cUec JbQ/MREaelsLatVFbRG/spLr6Pnqr0kOK3b7Otai/FxesaZN+lT7uIsZyOzug3jo qOl8p8HG1YBEy+QJfh8XjGk= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:57 2026 by rpki-client