$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ykjz84O40sjDUWvR5PqrG6D7mI0.roa File: ykjz84O40sjDUWvR5PqrG6D7mI0.roa (raw, json) Hash identifier: gOqR/LuTqc3pouRXrk4O0QJeU5Hnv7IG8csBshIgVVM= Subject key identifier: CA:48:F3:F3:83:B8:D2:C8:C3:51:6B:D1:E4:FA:AB:1B:A0:FB:98:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14C1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ykjz84O40sjDUWvR5PqrG6D7mI0.roa Signing time: Tue 31 Mar 2026 07:58:13 +0000 ROA not before: Tue 31 Mar 2026 07:58:13 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5313 (0x14c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=CA48F3F383B8D2C8C3516BD1E4FAAB1BA0FB988D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:7d:d0:38:4e:54:fd:31:f5:98:74:00:78: 15:ec:08:f9:54:84:ae:e0:aa:c9:44:49:ab:e3:b2: 15:a6:36:01:52:c1:60:bf:0f:0d:7e:86:5b:93:a7: 06:d9:88:63:8b:b4:e5:8d:8c:38:b9:d6:cb:20:f7: c3:b8:31:47:cd:49:4c:41:fd:10:cf:9c:15:e6:e9: 9d:e8:ab:50:09:3b:c5:d1:e6:05:08:4a:d8:92:e4: 8f:02:fd:95:37:22:ba:55:f6:1c:f1:1f:f0:b3:16: a0:2d:9c:2a:53:10:fb:56:fd:3e:f0:9b:5b:70:c0: 21:8b:c0:69:1f:b0:df:4f:85:8b:21:6a:ed:54:3f: c3:0b:29:c8:0e:f0:56:58:01:e4:19:1a:92:4d:5b: 37:8e:f0:6f:14:fa:f8:13:93:16:c3:82:7f:bf:cb: 47:3e:7a:9a:66:8e:30:3e:e0:41:0a:89:bc:4d:8f: 8a:18:f7:55:15:da:22:31:0f:e2:e2:6c:5c:c7:fe: 7a:de:67:61:23:7d:17:a8:12:09:d9:cc:47:66:a7: 12:47:62:f7:33:e9:c7:c2:75:c9:43:70:7a:75:37: 8d:1c:75:f9:34:5c:09:d8:1e:20:c7:49:0c:69:55: 50:c3:7d:0f:3f:fe:1c:96:13:29:7c:8a:49:73:a3: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:F3:F3:83:B8:D2:C8:C3:51:6B:D1:E4:FA:AB:1B:A0:FB:98:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ykjz84O40sjDUWvR5PqrG6D7mI0.roa sbgp-ipAddrBlock: critical IPv4: 1.79.28.0/23 Signature Algorithm: sha256WithRSAEncryption 40:48:6b:47:c4:0a:c6:ce:7a:1e:6e:8a:7d:ce:cf:63:d7:c1: d8:29:f1:20:66:2f:ab:66:3b:76:cf:80:b7:80:44:a4:de:b6: 85:1f:f7:11:87:ad:ae:15:4c:84:96:01:da:10:6b:cb:9f:02: 6f:4e:63:aa:96:a7:33:9a:9e:94:a1:ea:53:18:d2:35:8b:3a: f3:f5:bb:ca:e1:58:96:3f:83:78:94:92:4e:9b:52:8a:c2:3c: b1:79:07:8c:18:f2:00:8a:a1:b8:e3:bd:f1:a1:21:b1:c8:2b: 74:93:a2:ab:6c:ec:b2:c2:23:2b:8f:01:9b:9b:a5:25:a2:71: c1:7b:c0:46:61:47:8d:24:ae:51:75:08:f8:c4:0c:d4:a7:1c: ac:8e:96:d0:62:50:28:20:38:03:b3:7e:22:4c:3e:87:46:54: 90:78:e0:7e:57:d7:84:3c:89:9b:45:0f:10:b9:6e:75:cd:22: 8a:67:85:f6:59:91:f5:f0:89:d6:80:8d:e6:93:15:e0:e6:5b: 7f:d9:62:b0:10:f4:b0:9b:a2:d7:a0:56:9d:2a:7b:bc:83:17: 2b:bc:e7:4b:0e:65:d4:c3:5b:8f:de:62:72:94:70:f1:59:77: bc:39:cd:2b:db:fa:b2:71:12:f7:45:ab:39:06:56:64:7e:6b: e8:f6:8e:31 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBNDhGM0YzODNCOEQy QzhDMzUxNkJEMUU0RkFBQjFCQTBGQjk4OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpMX3QOE5U/TH1mHQAeBXsCPlUhK7gqslESavjshWmNgFSwWC/ Dw1+hluTpwbZiGOLtOWNjDi51ssg98O4MUfNSUxB/RDPnBXm6Z3oq1AJO8XR5gUI StiS5I8C/ZU3IrpV9hzxH/CzFqAtnCpTEPtW/T7wm1twwCGLwGkfsN9PhYshau1U P8MLKcgO8FZYAeQZGpJNWzeO8G8U+vgTkxbDgn+/y0c+eppmjjA+4EEKibxNj4oY 91UV2iIxD+LibFzH/nreZ2EjfReoEgnZzEdmpxJHYvcz6cfCdclDcHp1N40cdfk0 XAnYHiDHSQxpVVDDfQ8//hyWEyl8iklzowKpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUykjz84O40sjDUWvR5PqrG6D7mI0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L3lrano4NE80MHNqRFVXdlI1UHFyRzZEN21JMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBTxwwDQYJKoZIhvcNAQELBQADggEB AEBIa0fECsbOeh5uin3Oz2PXwdgp8SBmL6tmO3bPgLeARKTetoUf9xGHra4VTISW AdoQa8ufAm9OY6qWpzOanpSh6lMY0jWLOvP1u8rhWJY/g3iUkk6bUorCPLF5B4wY 8gCKobjjvfGhIbHIK3SToqts7LLCIyuPAZubpSWiccF7wEZhR40krlF1CPjEDNSn HKyOltBiUCggOAOzfiJMPodGVJB44H5X14Q8iZtFDxC5bnXNIopnhfZZkfXwidaA jeaTFeDmW3/ZYrAQ9LCbotegVp0qe7yDFyu850sOZdTDW4/eYnKUcPFZd7w5zSvb +rJxEvdFqzkGVmR+a+j2jjE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:57 2026 by rpki-client