$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/wNt0lN3E1iyr_7N02d9HC_ZP_mk.roa File: wNt0lN3E1iyr_7N02d9HC_ZP_mk.roa (raw, json) Hash identifier: 330ChhQdM9lkNDk1EliQhrCdUTvmRuAdxUs5s0+mHUU= Subject key identifier: C0:DB:74:94:DD:C4:D6:2C:AB:FF:B3:74:D9:DF:47:0B:F6:4F:FE:69 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 65 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/wNt0lN3E1iyr_7N02d9HC_ZP_mk.roa Signing time: Sun 01 Feb 2026 01:35:49 +0000 ROA not before: Sun 01 Feb 2026 01:35:49 +0000 ROA not after: Fri 15 Jan 2027 01:30:02 +0000 asID: 17698 IP address blocks: 117.18.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 00:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Feb 1 01:35:49 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=C0DB7494DDC4D62CABFFB374D9DF470BF64FFE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:46:7b:22:f8:8e:a3:17:3f:a4:7e:7a:d7: e1:8f:2a:ff:43:11:9d:9d:94:eb:c5:0b:71:04:35: 8a:c2:3e:78:5f:7b:42:f1:10:34:ac:d5:e6:5c:0f: c7:de:41:e4:58:6c:c4:83:c1:20:8e:8e:eb:c8:78: cb:51:05:4a:c1:f1:6e:68:30:31:9d:7c:d0:27:77: 44:64:63:8d:ab:e6:d6:72:40:a7:cd:5f:57:55:88: dd:d8:5e:db:2e:64:1d:0e:bc:6f:28:43:9a:91:84: 38:5d:6f:7c:65:3a:ff:e6:04:41:df:eb:27:a0:31: e7:be:8a:1c:8f:45:d2:d6:81:5d:11:02:e0:25:60: 25:42:1c:93:70:27:e3:34:4d:bb:1b:cd:ba:95:c0: 52:80:a9:5e:a0:76:d6:54:83:6f:cc:db:d7:49:37: 15:ef:57:da:c4:55:60:7e:fe:02:57:cb:a3:1c:0a: e1:04:17:23:9d:43:54:fc:2a:fe:2d:6f:b2:65:48: 76:47:17:74:fe:5a:4e:16:23:7d:51:c9:ad:bc:49: b5:da:c2:27:ce:3b:c8:ad:de:18:42:c7:ea:6b:ba: 93:cd:59:be:12:eb:c9:54:25:3d:7c:de:97:b9:29: 32:bd:44:48:2a:b5:bd:88:d7:2f:01:99:f8:63:00: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DB:74:94:DD:C4:D6:2C:AB:FF:B3:74:D9:DF:47:0B:F6:4F:FE:69 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/wNt0lN3E1iyr_7N02d9HC_ZP_mk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.18.208.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:67:15:bc:ca:02:a6:e7:13:1a:aa:9b:cc:3d:e2:74:5d:10: c9:34:bc:2d:79:6f:1d:61:be:d9:eb:ff:2d:bd:07:5d:16:22: 23:c9:f0:94:27:53:61:e1:39:78:52:c3:44:b5:a6:05:da:4e: 20:f9:4c:a8:6c:81:99:b1:f9:f9:ff:13:e8:a5:80:56:e9:20: b8:19:1b:c8:24:78:32:28:b1:23:cc:57:1b:70:24:bb:9c:f3: d1:8c:c6:ae:f9:bc:6f:40:04:a1:b4:5c:72:91:42:f1:cc:7e: d6:99:5f:d6:7d:1e:0a:ed:a7:a0:f2:24:4c:b3:92:57:72:c0: 8a:e3:72:fd:2b:a8:28:b3:d8:41:f5:e0:e5:e9:c0:ce:52:11: 9d:5a:45:17:78:04:4a:ba:43:e2:f8:e5:f8:97:83:d1:68:8d: ca:7d:a4:18:00:47:da:8e:a3:c0:e9:32:17:a4:9f:8f:3c:41: 03:db:57:52:ce:95:a3:d4:98:8a:a3:a3:fd:99:92:38:98:63: 9f:96:b5:72:94:cc:73:5d:b4:e9:7e:e2:b5:93:a3:b6:33:6b: 4f:2c:ad:cd:dd:ec:72:50:82:cc:53:e6:37:41:40:91:7c:28: 15:47:e6:b8:d1:70:13:a9:d1:ae:dd:2d:37:b7:b0:99:9e:80: 13:90:76:23 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx MzU0OVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoQzBEQjc0OTREREM0RDYy Q0FCRkZCMzc0RDlERjQ3MEJGNjRGRkU2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYlRnsi+I6jFz+kfnrX4Y8q/0MRnZ2U68ULcQQ1isI+eF97QvEQ NKzV5lwPx95B5FhsxIPBII6O68h4y1EFSsHxbmgwMZ180Cd3RGRjjavm1nJAp81f V1WI3dhe2y5kHQ68byhDmpGEOF1vfGU6/+YEQd/rJ6Ax576KHI9F0taBXREC4CVg JUIck3An4zRNuxvNupXAUoCpXqB21lSDb8zb10k3Fe9X2sRVYH7+AlfLoxwK4QQX I51DVPwq/i1vsmVIdkcXdP5aThYjfVHJrbxJtdrCJ847yK3eGELH6mu6k81ZvhLr yVQlPXzel7kpMr1ESCq1vYjXLwGZ+GMA4GkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTA23SU3cTWLKv/s3TZ30cL9k/+aTAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL3dOdDBsTjNFMWl5cl83TjAyZDlIQ19aUF9tay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAR1EtAwDQYJKoZIhvcNAQELBQADggEBAI1nFbzKAqbnExqqm8w94nRd EMk0vC15bx1hvtnr/y29B10WIiPJ8JQnU2HhOXhSw0S1pgXaTiD5TKhsgZmx+fn/ E+ilgFbpILgZG8gkeDIosSPMVxtwJLuc89GMxq75vG9ABKG0XHKRQvHMftaZX9Z9 Hgrtp6DyJEyzkldywIrjcv0rqCiz2EH14OXpwM5SEZ1aRRd4BEq6Q+L45fiXg9Fo jcp9pBgAR9qOo8DpMhekn488QQPbV1LOlaPUmIqjo/2ZkjiYY5+WtXKUzHNdtOl+ 4rWTo7Yza08src3d7HJQgsxT5jdBQJF8KBVH5rjRcBOp0a7dLTe3sJmegBOQdiM= -----END CERTIFICATE-----Generated at Tue Mar 3 02:27:39 2026 by rpki-client