$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0p_ZZ6l0VqDI5RtpwJ8B5uZicMY.roa File: 0p_ZZ6l0VqDI5RtpwJ8B5uZicMY.roa (raw, json) Hash identifier: I3hlUa93Io6LLkSrh9WOeqzHyWQ1Ro7KGmr1fHX7xrU= Subject key identifier: D2:9F:D9:67:A9:74:56:A0:C8:E5:1B:69:C0:9F:01:E6:E6:62:70:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 130F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0p_ZZ6l0VqDI5RtpwJ8B5uZicMY.roa Signing time: Sun 01 Mar 2026 03:32:28 +0000 ROA not before: Sun 01 Mar 2026 03:32:28 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4879 (0x130f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:32:28 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D29FD967A97456A0C8E51B69C09F01E6E66270C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:aa:11:83:1b:9b:61:b9:ce:06:f1:cf:41: c1:05:66:ec:66:6e:69:2d:f0:02:05:24:00:3e:9e: 01:91:e5:46:73:45:9b:bc:23:67:9d:38:56:92:0a: f8:83:46:ae:24:02:74:be:39:3c:bc:84:ba:fe:b2: dc:b3:00:22:ee:5c:ad:07:ed:cb:1e:70:68:9e:29: 9c:74:c7:3a:cd:36:50:04:38:c8:1c:6f:4a:9c:a0: 57:63:89:16:b5:ed:bf:d6:18:87:ca:df:50:65:a8: af:7e:b3:87:9f:ed:c4:2c:6b:a2:3d:38:a5:50:92: ee:49:d6:60:6d:88:42:c5:33:84:51:90:df:2e:e1: 4e:a4:80:95:65:f7:54:51:9b:5c:2c:b6:41:64:4c: 17:af:6c:fa:9e:5e:90:f0:ca:bf:25:98:75:b6:31: 68:5f:49:52:42:95:28:63:b7:dc:af:35:31:ce:22: 60:d5:1e:46:d9:78:f3:2b:40:91:13:e3:4e:54:a8: a6:02:55:34:66:1c:f1:39:fb:e2:1c:42:fa:fa:e5: 4b:24:ac:ac:8a:97:8c:77:42:01:31:59:a7:c3:f2: c7:f8:77:bd:70:6a:99:cd:8c:f3:7c:35:e0:6c:03: fb:da:bf:bd:ae:d8:4b:12:1f:82:9f:74:28:16:5d: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:D9:67:A9:74:56:A0:C8:E5:1B:69:C0:9F:01:E6:E6:62:70:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0p_ZZ6l0VqDI5RtpwJ8B5uZicMY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.232.0/23 Signature Algorithm: sha256WithRSAEncryption 04:b1:e8:cc:9a:bf:14:68:03:ec:d7:8f:31:07:a3:c5:35:ad: f2:c6:ca:85:53:50:e4:ab:e6:52:87:f3:29:8f:cd:9f:88:27: 4b:2d:93:cd:89:36:84:77:39:67:72:9a:43:63:60:d5:f7:c7: c2:58:19:14:53:08:06:c5:58:bb:2f:22:e9:54:fe:03:c6:57: fe:b5:ff:14:66:bf:d6:c6:16:54:11:c9:da:44:8d:02:ee:0b: 88:94:f5:21:33:f5:44:8a:1e:09:57:d9:85:9d:06:a2:cb:0e: 0d:8d:39:82:df:ac:4e:6b:49:05:ed:1d:7f:51:55:5c:f6:55: ae:99:db:69:9b:88:d1:87:9a:28:35:a6:93:48:07:71:a1:b3: be:89:b0:eb:6f:6c:bc:3c:cd:f9:25:e8:04:5f:db:c7:e8:ae: 80:13:ad:6d:80:b5:5d:fb:58:1a:28:bc:d1:8d:1b:35:93:78: 5a:bc:3a:57:ea:6e:da:e8:dd:0b:1b:27:7e:db:e1:26:37:27: af:33:99:90:63:b4:6f:a8:a7:83:d0:f8:cf:1f:16:cf:f3:67: 16:a6:6e:ca:1b:9a:74:e1:8f:10:20:8d:33:91:e4:d0:92:c9: 93:35:fe:ac:a4:07:88:8b:bb:31:d5:0d:f1:90:60:ee:60:4b: 9a:31:05:f8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzMyMjhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyOUZEOTY3QTk3NDU2 QTBDOEU1MUI2OUMwOUYwMUU2RTY2MjcwQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqpaoRgxubYbnOBvHPQcEFZuxmbmkt8AIFJAA+ngGR5UZzRZu8 I2edOFaSCviDRq4kAnS+OTy8hLr+styzACLuXK0H7csecGieKZx0xzrNNlAEOMgc b0qcoFdjiRa17b/WGIfK31BlqK9+s4ef7cQsa6I9OKVQku5J1mBtiELFM4RRkN8u 4U6kgJVl91RRm1wstkFkTBevbPqeXpDwyr8lmHW2MWhfSVJClShjt9yvNTHOImDV HkbZePMrQJET405UqKYCVTRmHPE5++IcQvr65UskrKyKl4x3QgExWafD8sf4d71w apnNjPN8NeBsA/vav72u2EsSH4KfdCgWXWTtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0p/ZZ6l0VqDI5RtpwJ8B5uZicMYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBwX1paNmwwVnFESTVSdHB3SjhCNXVaaWNNWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcn+gwDQYJKoZIhvcNAQELBQADggEBAASx6MyavxRoA+zXjzEHo8U1rfLG yoVTUOSr5lKH8ymPzZ+IJ0stk82JNoR3OWdymkNjYNX3x8JYGRRTCAbFWLsvIulU /gPGV/61/xRmv9bGFlQRydpEjQLuC4iU9SEz9USKHglX2YWdBqLLDg2NOYLfrE5r SQXtHX9RVVz2Va6Z22mbiNGHmig1ppNIB3Ghs76JsOtvbLw8zfkl6ARf28foroAT rW2AtV37WBoovNGNGzWTeFq8Olfqbtro3QsbJ37b4SY3J68zmZBjtG+op4PQ+M8f Fs/zZxambsobmnThjxAgjTOR5NCSyZM1/qykB4iLuzHVDfGQYO5gS5oxBfg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:29:40 2026 by rpki-client