$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ARp5d1eqHcyAvRRk1pAcvlPOWk.roa File: 2ARp5d1eqHcyAvRRk1pAcvlPOWk.roa (raw, json) Hash identifier: Nh2sq0A1QUu3u6amYvy83C9WrFE04x+w5eAZ7uzJaJY= Subject key identifier: D8:04:69:E5:DD:5E:A8:77:32:02:F4:51:93:5A:40:72:F9:4F:39:69 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1333 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ARp5d1eqHcyAvRRk1pAcvlPOWk.roa Signing time: Sun 01 Mar 2026 03:36:25 +0000 ROA not before: Sun 01 Mar 2026 03:36:25 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4915 (0x1333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:36:25 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D80469E5DD5EA8773202F451935A4072F94F3969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:2d:b7:3b:66:0f:86:d7:63:e2:cd:6e:eb: ce:b3:e5:44:18:ae:e0:0e:19:53:ed:da:42:a7:9a: 97:af:55:58:79:2c:29:8d:87:8d:d9:18:12:27:33: 5a:e7:c5:ca:68:ec:29:b2:64:d7:86:80:38:e8:cd: e7:3d:39:69:4f:cc:27:fa:0a:db:2f:aa:b4:90:73: d6:71:f0:48:0a:c9:04:8d:b6:9b:2b:6f:8f:3f:b2: 99:05:80:59:9b:b3:4e:ba:64:9a:6b:89:5e:d9:7c: 60:19:1b:73:d3:34:73:a9:bf:63:11:11:7d:b3:2d: 16:8c:c2:b1:1a:41:77:0e:6c:f9:0e:ae:aa:bd:53: 1e:41:89:78:0c:0e:b7:f3:ce:09:9d:97:71:f8:27: b8:61:d9:97:ef:df:e6:c9:d6:93:56:df:cf:e7:1d: 27:34:dd:9e:d3:1e:c3:4c:52:3d:ec:44:f5:0f:06: 4b:c2:71:5c:27:43:12:18:5e:af:3a:99:74:1f:14: 4e:5c:bc:81:62:11:38:39:3c:d2:64:9e:8a:b9:cd: 72:ab:08:b9:04:79:2b:bf:03:91:60:b4:12:a3:34: 40:e8:e7:50:28:ed:76:73:73:31:59:76:ec:01:b2: 43:8b:05:b7:15:c4:11:b3:68:be:9f:30:a2:b0:28: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:69:E5:DD:5E:A8:77:32:02:F4:51:93:5A:40:72:F9:4F:39:69 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ARp5d1eqHcyAvRRk1pAcvlPOWk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.108.0/22 Signature Algorithm: sha256WithRSAEncryption 51:57:a3:5f:84:1c:9f:68:2b:f2:7e:f6:9a:66:28:b7:f0:f3: b1:b3:3e:d1:77:b8:9b:24:7f:ab:8a:cb:03:8d:71:c2:9d:45: 3e:5e:59:eb:48:4f:5c:ad:f5:fa:0a:77:85:38:42:86:44:bb: 50:0c:d7:9a:a9:19:ec:4a:af:ab:fc:b9:63:98:8a:c0:1e:df: 72:69:c6:82:66:05:b6:5e:05:59:12:e7:be:b9:91:eb:6d:87: 2d:b8:b1:c5:e0:c7:3c:83:8f:b3:2f:55:82:c1:38:fa:a2:bb: 8f:46:c3:4f:f5:23:27:15:94:05:b9:63:54:e1:48:77:a7:d5: 67:3c:af:eb:c3:23:3c:d2:cf:68:bf:a8:47:1f:27:2b:89:b3: fa:33:9a:87:f4:45:57:50:01:ce:7e:d8:41:1e:2f:42:10:19: 00:2c:47:61:7a:59:e4:fa:4c:cc:3d:6f:e4:4f:e0:69:c7:6a: 3e:43:19:96:e9:74:82:43:8a:41:78:bf:dc:98:ec:ec:c4:bf: f5:a6:ff:ab:7b:4a:fb:0f:41:96:2e:b4:f2:ad:5d:02:fd:e4: 9c:ef:da:cb:c0:10:78:39:04:62:5f:99:ca:bc:6f:9b:ab:cf: c2:d3:94:03:3e:e9:47:33:f4:fd:81:46:a4:85:d9:b5:de:f2: 1b:2f:33:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzM2MjVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4MDQ2OUU1REQ1RUE4 NzczMjAyRjQ1MTkzNUE0MDcyRjk0RjM5NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCosS23O2YPhtdj4s1u686z5UQYruAOGVPt2kKnmpevVVh5LCmN h43ZGBInM1rnxcpo7CmyZNeGgDjozec9OWlPzCf6CtsvqrSQc9Zx8EgKyQSNtpsr b48/spkFgFmbs066ZJpriV7ZfGAZG3PTNHOpv2MREX2zLRaMwrEaQXcObPkOrqq9 Ux5BiXgMDrfzzgmdl3H4J7hh2Zfv3+bJ1pNW38/nHSc03Z7THsNMUj3sRPUPBkvC cVwnQxIYXq86mXQfFE5cvIFiETg5PNJknoq5zXKrCLkEeSu/A5FgtBKjNEDo51Ao 7XZzczFZduwBskOLBbcVxBGzaL6fMKKwKFN3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2ARp5d1eqHcyAvRRk1pAcvlPOWkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJBUnA1ZDFlcUhjeUF2UlJrMXBBY3ZsUE9Xay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQmwwDQYJKoZIhvcNAQELBQADggEBAFFXo1+EHJ9oK/J+9ppmKLfw87Gz PtF3uJskf6uKywONccKdRT5eWetIT1yt9foKd4U4QoZEu1AM15qpGexKr6v8uWOY isAe33JpxoJmBbZeBVkS5765ketthy24scXgxzyDj7MvVYLBOPqiu49Gw0/1IycV lAW5Y1ThSHen1Wc8r+vDIzzSz2i/qEcfJyuJs/ozmof0RVdQAc5+2EEeL0IQGQAs R2F6WeT6TMw9b+RP4GnHaj5DGZbpdIJDikF4v9yY7OzEv/Wm/6t7SvsPQZYutPKt XQL95Jzv2svAEHg5BGJfmcq8b5urz8LTlAM+6Ucz9P2BRqSF2bXe8hsvM+A= -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:28 2026 by rpki-client