$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4kJ4gDruxmzxxwSCg7HkcPeff4o.roa File: 4kJ4gDruxmzxxwSCg7HkcPeff4o.roa (raw, json) Hash identifier: vu6RKf8wXowrpOEMmQXXo4GAlpgxl8X2GHTqiHBUMOo= Subject key identifier: E2:42:78:80:3A:EE:C6:6C:F1:C7:04:82:83:B1:E4:70:F7:9F:7F:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1264 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4kJ4gDruxmzxxwSCg7HkcPeff4o.roa Signing time: Sun 01 Mar 2026 03:00:30 +0000 ROA not before: Sun 01 Mar 2026 03:00:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4708 (0x1264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=E24278803AEEC66CF1C7048283B1E470F79F7F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:36:42:13:3c:84:d1:c4:ef:65:f5:76:bd: df:d8:3f:dc:66:c0:9c:cf:ba:56:a4:eb:26:e8:60: 95:12:ec:c7:4c:79:26:79:50:31:c3:9e:54:77:3c: 45:47:c5:28:11:b6:fc:53:65:b3:d5:64:43:68:fd: 55:14:fc:13:2f:0b:97:21:d9:36:3d:e8:ed:0c:9f: 83:98:5d:28:a8:81:68:fa:5a:f4:86:5b:6f:dd:cd: fe:86:fd:6d:28:5e:9f:a8:82:6f:68:27:09:98:fd: 74:b0:76:56:29:9d:ec:b8:e3:cb:ea:2b:64:c8:20: 5a:cc:e0:19:7f:d9:c3:3b:f3:91:dd:d7:21:4e:bf: 53:67:85:e2:6e:06:1e:b2:1e:1f:61:73:d9:3c:be: 41:f3:a3:f9:9e:c2:33:57:85:1c:fc:22:7a:68:2c: d4:d0:e1:fe:2f:d4:a2:bb:65:bb:4f:6a:4f:c6:a7: a3:a3:09:fa:54:67:d7:f8:24:a6:24:c0:8d:51:45: 3a:46:ee:aa:2b:59:95:2d:b5:b2:04:9b:06:df:18: 22:e3:e1:42:8f:a8:dd:ba:38:92:a6:1a:07:b2:3e: f5:70:ec:31:e6:d6:a6:64:03:f0:e2:80:90:12:f2: 6c:f2:d4:6e:19:3b:45:88:44:5b:91:01:01:6a:31: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:42:78:80:3A:EE:C6:6C:F1:C7:04:82:83:B1:E4:70:F7:9F:7F:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4kJ4gDruxmzxxwSCg7HkcPeff4o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.106.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:bb:69:2c:56:2f:43:ab:3f:bc:de:a8:c6:e9:44:3c:db:77: bc:43:8d:cb:1b:8f:00:8f:2a:11:c7:33:17:97:50:08:00:92: 25:e4:6a:d4:91:96:e9:c4:23:1c:83:d7:2d:25:1f:bf:e2:13: 11:dc:a9:fb:0c:b2:91:6f:90:5a:01:63:8a:87:f8:da:37:9a: 3c:dc:55:29:46:e5:6d:62:45:be:cc:4e:4d:a3:d2:96:75:62: 00:6e:21:52:c1:dc:1d:42:dc:57:da:54:1c:73:24:88:f2:b0: b4:5f:2f:b5:a9:31:43:5b:09:32:a5:47:6a:b9:15:25:9f:cd: 97:83:11:4a:6e:7e:d1:ac:b8:59:67:46:59:e5:53:7d:10:22: 1c:a3:48:31:e2:68:92:7e:4f:8d:ff:93:71:24:76:c8:d6:7a: 41:22:06:1a:cd:b7:de:6d:dc:1f:67:6b:0a:90:11:4b:d2:eb: e3:3d:72:a1:9f:3f:bd:e4:c0:e2:89:58:8e:aa:30:40:3d:2b: d6:0a:d7:7d:8d:6b:2e:c5:b2:3f:c7:b7:20:28:34:22:f4:3a: 57:8e:e8:2a:bb:d8:35:56:9c:b5:dd:17:58:f7:b8:b1:c2:74: ab:13:c4:20:8c:eb:79:30:0e:a3:4c:1f:9d:a7:38:ea:2b:03: 51:0c:df:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUyNDI3ODgwM0FFRUM2 NkNGMUM3MDQ4MjgzQjFFNDcwRjc5RjdGOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyZzZCEzyE0cTvZfV2vd/YP9xmwJzPulak6yboYJUS7MdMeSZ5 UDHDnlR3PEVHxSgRtvxTZbPVZENo/VUU/BMvC5ch2TY96O0Mn4OYXSiogWj6WvSG W2/dzf6G/W0oXp+ogm9oJwmY/XSwdlYpney448vqK2TIIFrM4Bl/2cM785Hd1yFO v1NnheJuBh6yHh9hc9k8vkHzo/mewjNXhRz8InpoLNTQ4f4v1KK7ZbtPak/Gp6Oj CfpUZ9f4JKYkwI1RRTpG7qorWZUttbIEmwbfGCLj4UKPqN26OJKmGgeyPvVw7DHm 1qZkA/DigJAS8mzy1G4ZO0WIRFuRAQFqMe4LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4kJ4gDruxmzxxwSCg7HkcPeff4owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRrSjRnRHJ1eG16eHh3U0NnN0hrY1BlZmY0by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQmowDQYJKoZIhvcNAQELBQADggEBAJu7aSxWL0OrP7zeqMbpRDzbd7xD jcsbjwCPKhHHMxeXUAgAkiXkatSRlunEIxyD1y0lH7/iExHcqfsMspFvkFoBY4qH +No3mjzcVSlG5W1iRb7MTk2j0pZ1YgBuIVLB3B1C3FfaVBxzJIjysLRfL7WpMUNb CTKlR2q5FSWfzZeDEUpuftGsuFlnRlnlU30QIhyjSDHiaJJ+T43/k3EkdsjWekEi BhrNt95t3B9nawqQEUvS6+M9cqGfP73kwOKJWI6qMEA9K9YK132Nay7Fsj/HtyAo NCL0OleO6Cq72DVWnLXdF1j3uLHCdKsTxCCM63kwDqNMH52nOOorA1EM35A= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:39 2026 by rpki-client