$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7CdbkkD77G9trZLeUg2ZbRfZugQ.roa File: 7CdbkkD77G9trZLeUg2ZbRfZugQ.roa (raw, json) Hash identifier: A7FwMwyEGQtk6rEtGbrQbV2NEjMikIAoF3kRrD0v2QE= Subject key identifier: EC:27:5B:92:40:FB:EC:6F:6D:AD:92:DE:52:0D:99:6D:17:D9:BA:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11D3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7CdbkkD77G9trZLeUg2ZbRfZugQ.roa Signing time: Sun 01 Mar 2026 02:40:40 +0000 ROA not before: Sun 01 Mar 2026 02:40:40 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4563 (0x11d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:40:40 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=EC275B9240FBEC6F6DAD92DE520D996D17D9BA04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b7:1a:a7:10:f0:3b:b5:64:cb:85:18:de:84: b8:42:82:1d:35:7e:e1:10:12:96:d9:eb:b2:e5:29: 44:21:9d:19:8d:7d:1f:ed:ea:61:b7:cd:bc:ca:46: 23:66:71:9a:4d:07:48:bc:df:c8:67:b6:ff:31:5f: 9a:ee:b5:e7:1e:f6:0f:cc:c8:9f:cc:57:d6:09:a6: 23:9b:8e:10:68:89:75:ed:ff:3c:7a:8c:24:0c:cd: 4f:a4:f2:a2:90:27:67:c8:1f:e7:fc:27:ee:c3:ce: 6a:b4:b9:80:b8:e2:2f:35:8a:15:23:fc:01:f0:9a: 64:b2:c3:82:f6:c4:e5:27:cc:44:a3:92:98:97:2f: 3a:ae:d1:f5:f7:20:e0:ba:89:73:cf:9f:a7:d4:1f: ed:75:72:18:e1:cf:5e:3f:a4:ff:e5:5a:59:45:a3: 09:af:5d:2f:37:e7:a9:49:46:e3:f7:73:7b:96:c6: 83:37:61:d5:0a:27:e2:e0:74:69:1d:f5:d6:63:60: 89:60:23:bf:8c:12:5f:b4:2e:fb:42:35:59:da:d1: c1:92:6b:2a:a1:1e:ff:0b:eb:b2:a7:b4:d7:95:cc: b3:39:6b:5a:c9:84:81:c9:a2:91:58:c7:51:4a:76: d7:9d:d8:f5:04:fc:55:d5:d9:30:31:83:97:b1:4c: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:27:5B:92:40:FB:EC:6F:6D:AD:92:DE:52:0D:99:6D:17:D9:BA:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7CdbkkD77G9trZLeUg2ZbRfZugQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.28.0/24 Signature Algorithm: sha256WithRSAEncryption e4:94:19:c3:09:e4:ac:06:0b:88:9c:2d:22:ec:13:95:b8:72: 64:34:d6:d5:2a:0f:16:f9:dc:ad:78:86:41:bb:3f:66:45:60: fb:e2:26:17:db:01:e8:c4:61:98:a8:be:8a:80:d2:75:a4:2e: 71:72:37:fb:1e:1d:df:8a:70:0c:ae:84:5e:71:eb:21:78:ff: 02:a8:dc:fb:4f:ce:c8:79:8f:18:86:92:40:94:10:2b:ea:01: e6:ff:61:ca:43:74:2c:8a:01:ce:ff:bc:76:48:aa:16:1f:39: 27:dc:23:f2:c2:c5:a0:ff:af:87:17:d3:3a:1a:32:3f:6c:6c: 7e:bd:a2:94:db:fc:bd:77:3d:48:63:3c:98:05:a8:33:ea:a0: b9:b0:f4:c8:b0:ff:9a:70:0d:7d:5c:2a:57:98:2b:f9:f4:b2: 08:0a:c6:9e:67:95:e0:95:25:2b:60:e0:89:32:92:f2:05:ee: c8:8c:e8:81:6c:f2:88:9b:aa:9e:11:52:22:a9:2c:41:24:4a: fd:8e:35:45:8b:b1:ee:3f:c7:63:95:d0:d4:64:0c:87:42:29: 8d:34:55:43:5e:02:88:50:cd:12:aa:84:8f:8d:9d:6f:8c:ee: e3:c9:01:a9:5d:18:85:93:25:d8:e1:bd:27:7a:9d:1f:8b:82: 1c:09:e9:c7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQwNDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVDMjc1QjkyNDBGQkVD NkY2REFEOTJERTUyMEQ5OTZEMTdEOUJBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDztxqnEPA7tWTLhRjehLhCgh01fuEQEpbZ67LlKUQhnRmNfR/t 6mG3zbzKRiNmcZpNB0i838hntv8xX5rutece9g/MyJ/MV9YJpiObjhBoiXXt/zx6 jCQMzU+k8qKQJ2fIH+f8J+7Dzmq0uYC44i81ihUj/AHwmmSyw4L2xOUnzESjkpiX Lzqu0fX3IOC6iXPPn6fUH+11chjhz14/pP/lWllFowmvXS8356lJRuP3c3uWxoM3 YdUKJ+LgdGkd9dZjYIlgI7+MEl+0LvtCNVna0cGSayqhHv8L67KntNeVzLM5a1rJ hIHJopFYx1FKdted2PUE/FXV2TAxg5exTKWVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7CdbkkD77G9trZLeUg2ZbRfZugQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdDZGJra0Q3N0c5dHJaTGVVZzJaYlJmWnVnUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTxwwDQYJKoZIhvcNAQELBQADggEBAOSUGcMJ5KwGC4icLSLsE5W4cmQ0 1tUqDxb53K14hkG7P2ZFYPviJhfbAejEYZiovoqA0nWkLnFyN/seHd+KcAyuhF5x 6yF4/wKo3PtPzsh5jxiGkkCUECvqAeb/YcpDdCyKAc7/vHZIqhYfOSfcI/LCxaD/ r4cX0zoaMj9sbH69opTb/L13PUhjPJgFqDPqoLmw9Miw/5pwDX1cKleYK/n0sggK xp5nleCVJStg4IkykvIF7siM6IFs8oibqp4RUiKpLEEkSv2ONUWLse4/x2OV0NRk DIdCKY00VUNeAohQzRKqhI+NnW+M7uPJAaldGIWTJdjhvSd6nR+LghwJ6cc= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:54 2026 by rpki-client