$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0Ff5BQobXDhv5PI10T7bT8vMabQ.roa File: 0Ff5BQobXDhv5PI10T7bT8vMabQ.roa (raw, json) Hash identifier: ND5pNDsd71M62OCb1txeLdDRe7uQf29QceMTzZeNu9c= Subject key identifier: D0:57:F9:05:0A:1B:5C:38:6F:E4:F2:35:D1:3E:DB:4F:CB:CC:69:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1260 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0Ff5BQobXDhv5PI10T7bT8vMabQ.roa Signing time: Sun 01 Mar 2026 03:00:27 +0000 ROA not before: Sun 01 Mar 2026 03:00:27 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4704 (0x1260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:27 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D057F9050A1B5C386FE4F235D13EDB4FCBCC69B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:10:8f:9e:39:0f:c1:a9:c8:10:8d:6b:2d: 33:5e:96:0c:e0:73:04:f7:a2:de:59:24:ce:5a:44: e0:e3:53:29:07:a3:63:18:cc:c9:89:93:8f:cc:6f: 1b:81:c4:2e:64:6c:8a:b8:1b:88:74:a4:53:72:58: 18:27:9e:93:4b:e3:6d:06:7b:83:d0:75:f3:bd:36: fd:32:2f:73:51:a4:6b:f3:0d:a8:f1:fc:89:de:0b: 0a:c9:e5:7b:58:6c:8a:a4:21:52:3f:b2:50:51:0d: 46:a8:9b:31:5d:34:6b:b2:38:72:5d:f0:ad:20:e4: 52:59:0e:f5:d2:95:00:0e:97:5f:97:bc:f9:bd:82: 20:c8:43:58:27:89:ac:0f:9c:0c:7c:f0:23:a4:ce: b6:46:6e:48:77:31:8a:72:83:e8:62:13:79:b7:99: cb:16:f6:7f:ea:f3:f4:6e:1d:b6:08:dd:6d:9b:81: 3c:7b:ef:fc:b6:a3:0a:77:3b:0e:26:18:a8:f4:aa: f4:0d:ac:fb:0e:59:36:96:76:39:28:76:f8:8f:05: 39:9d:54:7d:f9:d8:10:87:b9:6f:25:c0:c2:3d:c7: be:39:16:c9:4d:50:72:bd:c9:b6:c8:11:51:5d:4d: 34:1b:86:46:ec:64:c7:3f:6c:8b:48:46:52:c9:04: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:57:F9:05:0A:1B:5C:38:6F:E4:F2:35:D1:3E:DB:4F:CB:CC:69:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0Ff5BQobXDhv5PI10T7bT8vMabQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.196.0/22 Signature Algorithm: sha256WithRSAEncryption d2:e9:d8:45:3f:27:ea:09:eb:1f:3a:d2:c8:d4:55:dc:24:14: 90:64:08:5d:b3:6e:68:63:21:32:64:32:3a:ef:2a:2a:36:5a: 13:64:12:ca:14:1b:8b:ef:6f:18:f9:a1:af:4b:c8:b0:4a:bb: 79:73:b6:18:6d:11:03:03:4b:25:a5:a6:cc:be:15:4e:c8:0a: 48:e8:ab:60:17:9c:90:8a:15:b9:ad:3f:40:ea:90:e9:3a:48: 6b:bb:e5:21:02:c3:69:b2:5e:b0:cb:2b:38:be:1e:bf:a5:f0: 09:ed:b3:9b:94:25:f5:d7:96:67:b4:98:0e:25:94:06:7e:5d: f9:2e:ec:9f:30:6c:0f:ce:32:87:37:2f:4f:57:24:06:28:a7: 79:19:05:de:36:ae:dc:02:b4:e3:19:2c:15:98:fb:e7:15:20: 84:42:2c:bf:52:5e:44:15:c3:a2:85:e3:4a:bd:18:ce:72:35: 72:c4:fb:e4:85:94:29:46:df:e8:b4:2c:e2:16:0a:0b:47:5d: 7c:ff:b3:ea:e7:1a:3a:de:73:1a:50:f2:03:b0:87:e7:36:01: 8e:fb:75:a9:92:9e:59:63:f8:5a:d1:7e:02:71:8d:5c:da:44: d4:21:87:c9:3f:d9:97:76:73:4b:08:ef:fc:97:7b:8d:e5:96: 0b:01:ec:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMjdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwNTdGOTA1MEExQjVD Mzg2RkU0RjIzNUQxM0VEQjRGQ0JDQzY5QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzshCPnjkPwanIEI1rLTNelgzgcwT3ot5ZJM5aRODjUykHo2MY zMmJk4/MbxuBxC5kbIq4G4h0pFNyWBgnnpNL420Ge4PQdfO9Nv0yL3NRpGvzDajx /IneCwrJ5XtYbIqkIVI/slBRDUaomzFdNGuyOHJd8K0g5FJZDvXSlQAOl1+XvPm9 giDIQ1gniawPnAx88COkzrZGbkh3MYpyg+hiE3m3mcsW9n/q8/RuHbYI3W2bgTx7 7/y2owp3Ow4mGKj0qvQNrPsOWTaWdjkodviPBTmdVH352BCHuW8lwMI9x745FslN UHK9ybbIEVFdTTQbhkbsZMc/bItIRlLJBPyRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0Ff5BQobXDhv5PI10T7bT8vMabQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBGZjVCUW9iWERodjVQSTEwVDdiVDh2TWFiUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS8QwDQYJKoZIhvcNAQELBQADggEBANLp2EU/J+oJ6x860sjUVdwkFJBk CF2zbmhjITJkMjrvKio2WhNkEsoUG4vvbxj5oa9LyLBKu3lzthhtEQMDSyWlpsy+ FU7ICkjoq2AXnJCKFbmtP0DqkOk6SGu75SECw2myXrDLKzi+Hr+l8Ants5uUJfXX lme0mA4llAZ+Xfku7J8wbA/OMoc3L09XJAYop3kZBd42rtwCtOMZLBWY++cVIIRC LL9SXkQVw6KF40q9GM5yNXLE++SFlClG3+i0LOIWCgtHXXz/s+rnGjrecxpQ8gOw h+c2AY77damSnllj+FrRfgJxjVzaRNQhh8k/2Zd2c0sI7/yXe43llgsB7F4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:49:58 2026 by rpki-client