$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/3QfeH5vjhU0ObszjgEkXFKHyUMM.roa File: 3QfeH5vjhU0ObszjgEkXFKHyUMM.roa (raw, json) Hash identifier: iUfGhdpDBcXzD4sZOxqguATBvfnRCznyfLtsbK7l0HY= Subject key identifier: DD:07:DE:1F:9B:E3:85:4D:0E:6E:CC:E3:80:49:17:14:A1:F2:50:C3 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 76 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/3QfeH5vjhU0ObszjgEkXFKHyUMM.roa Signing time: Sun 01 Feb 2026 01:35:59 +0000 ROA not before: Sun 01 Feb 2026 01:35:59 +0000 ROA not after: Fri 15 Jan 2027 01:30:02 +0000 asID: 17698 IP address blocks: 220.208.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Feb 1 01:35:59 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=DD07DE1F9BE3854D0E6ECCE380491714A1F250C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:04:f4:cb:b0:38:05:c0:b6:b9:b6:c9:25: 57:d7:6a:cd:d0:c1:73:c8:cf:ee:b4:c1:ab:3e:72: 93:76:46:82:cc:fa:31:34:67:86:7b:b2:c5:41:ff: a2:42:ed:8f:08:c1:a6:f8:fb:9f:ca:90:5a:a0:01: 26:96:66:9e:61:08:0d:d8:ca:03:60:74:e2:83:e1: ab:99:46:d1:b6:b9:a6:f1:e2:91:fa:1b:82:b2:5a: e2:20:11:eb:a5:e2:32:d3:62:55:dd:a4:32:99:80: e2:04:21:61:f3:ea:bb:8c:83:16:48:5a:77:6e:98: 8a:2c:92:e7:d8:6f:a3:83:42:32:68:11:21:30:6a: 8d:cc:f6:3f:ae:a6:80:4a:cf:11:a1:8e:e2:60:e5: 0e:ea:43:f9:33:13:19:e2:24:86:af:d2:23:ea:c3: 9f:cd:bb:ea:15:fd:35:83:d6:a0:e7:a0:ed:cd:1a: 60:83:49:96:c3:36:ad:90:64:a9:21:bc:0c:07:ee: ca:2a:34:9e:9b:ef:f3:ec:5f:8b:51:97:ed:a0:a1: 21:85:3f:bd:2d:e1:af:3c:69:c4:b5:fd:9b:bc:e5: 88:1a:51:b8:d0:88:92:c3:1c:70:28:05:f5:24:9d: fb:2d:1f:fe:4c:8b:bf:0f:f3:e4:a6:1b:09:b8:4e: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:07:DE:1F:9B:E3:85:4D:0E:6E:CC:E3:80:49:17:14:A1:F2:50:C3 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/3QfeH5vjhU0ObszjgEkXFKHyUMM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.208.224.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:e3:1b:ca:63:f8:dc:f6:a3:9b:40:14:00:22:4f:e0:f1:c3: 80:e8:ef:c3:cb:b0:ce:9a:1b:f4:15:f5:44:51:68:0f:12:93: 7e:7d:e1:8c:98:88:60:7f:71:92:0a:c7:48:25:0d:2f:b5:35: fe:77:f5:15:ae:12:b6:4b:09:6b:7c:1c:2b:f3:5d:47:f9:6d: b2:45:a0:7e:60:52:c1:a4:e4:d8:18:3d:6e:bb:b6:ed:e2:37: f4:c9:b6:22:10:d6:2e:d7:24:96:31:b9:20:c3:30:48:13:d3: 82:28:98:a0:96:93:64:d1:7b:76:1b:47:7c:db:0b:f6:ac:2d: c5:47:f5:c6:91:9b:79:8d:c8:26:fc:6d:dc:12:41:ee:df:34: 47:7a:35:b1:84:48:f5:f3:8c:16:51:72:37:72:d6:75:b7:be: 5d:e8:53:fe:a4:7c:a8:ea:12:dc:77:0c:01:ad:df:12:82:85: 0b:02:82:54:7e:19:e8:46:80:5b:26:19:07:4a:ff:b1:72:20: d5:d2:65:ff:de:55:a7:7c:2d:dc:69:5d:5d:9b:9e:8a:e1:51: 6c:ba:ba:d5:55:d4:9c:21:00:e1:fa:d5:f7:b9:ee:6f:8f:44: b1:cc:eb:49:33:43:d8:6b:27:6d:24:ef:1a:af:3e:82:c4:a5: 30:7d:a6:89 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx MzU1OVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoREQwN0RFMUY5QkUzODU0 RDBFNkVDQ0UzODA0OTE3MTRBMUYyNTBDMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANmoBPTLsDgFwLa5tsklV9dqzdDBc8jP7rTBqz5yk3ZGgsz6MTRn hnuyxUH/okLtjwjBpvj7n8qQWqABJpZmnmEIDdjKA2B04oPhq5lG0ba5pvHikfob grJa4iAR66XiMtNiVd2kMpmA4gQhYfPqu4yDFkhad26YiiyS59hvo4NCMmgRITBq jcz2P66mgErPEaGO4mDlDupD+TMTGeIkhq/SI+rDn8276hX9NYPWoOeg7c0aYINJ lsM2rZBkqSG8DAfuyio0npvv8+xfi1GX7aChIYU/vS3hrzxpxLX9m7zliBpRuNCI ksMccCgF9SSd+y0f/kyLvw/z5KYbCbhOSecCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTdB94fm+OFTQ5uzOOASRcUofJQwzAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyLzNRZmVINXZqaFUwT2JzempnRWtYRktIeVVNTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAXc0OAwDQYJKoZIhvcNAQELBQADggEBABzjG8pj+Nz2o5tAFAAiT+Dx w4Do78PLsM6aG/QV9URRaA8Sk3594YyYiGB/cZIKx0glDS+1Nf539RWuErZLCWt8 HCvzXUf5bbJFoH5gUsGk5NgYPW67tu3iN/TJtiIQ1i7XJJYxuSDDMEgT04IomKCW k2TRe3YbR3zbC/asLcVH9caRm3mNyCb8bdwSQe7fNEd6NbGESPXzjBZRcjdy1nW3 vl3oU/6kfKjqEtx3DAGt3xKChQsCglR+GehGgFsmGQdK/7FyINXSZf/eVad8Ldxp XV2bnorhUWy6utVV1JwhAOH61fe57m+PRLHM60kzQ9hrJ20k7xqvPoLEpTB9pok= -----END CERTIFICATE-----Generated at Mon Mar 2 23:20:51 2026 by rpki-client