$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8KrdVo24wusrgpMN3ycARtZWozA.roa File: 8KrdVo24wusrgpMN3ycARtZWozA.roa (raw, json) Hash identifier: wCnaWIQT/ZF9dO8ERUvE7xwMBF+CjKppipvJAoS309w= Subject key identifier: F0:AA:DD:56:8D:B8:C2:EB:2B:82:93:0D:DF:27:00:46:D6:56:A3:30 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 115C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8KrdVo24wusrgpMN3ycARtZWozA.roa Signing time: Sun 01 Mar 2026 02:17:00 +0000 ROA not before: Sun 01 Mar 2026 02:17:00 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4444 (0x115c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:17:00 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=F0AADD568DB8C2EB2B82930DDF270046D656A330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:ad:92:60:43:c3:0f:41:6e:a8:ae:03:67: b8:20:59:fd:e6:b4:31:a2:46:4c:22:27:95:56:e2: a0:73:1c:ab:ad:fa:16:c4:89:7f:61:b3:fa:9d:42: d6:b7:29:77:0d:0a:f5:bc:7d:3c:a7:d4:e7:39:f2: ac:7a:5d:8f:54:73:6c:8a:f9:9a:fa:cb:2c:f7:62: e4:dd:cf:0e:e0:b2:5c:f0:23:b9:1b:d2:bb:65:57: 0d:58:bc:4d:41:54:56:08:eb:3b:e0:11:46:0c:e8: dc:86:3a:99:e1:19:e6:0d:cb:8b:8b:0c:a4:ba:6a: 1f:46:02:01:b1:d3:7d:e9:ce:ef:55:b8:45:20:eb: 91:1f:08:31:f7:3b:25:ed:43:b4:8b:37:65:7a:52: 87:fd:4c:63:22:1f:f9:2d:77:66:41:ba:73:98:62: 55:ba:35:a9:bc:ce:a6:20:d5:54:f7:3a:13:d2:39: 82:05:e4:be:3e:7f:7c:54:58:d8:73:9d:30:86:0d: 12:be:94:76:19:5e:90:17:3d:6a:6f:d9:9a:33:f6: f2:b0:56:b4:10:fa:a4:8d:1c:b9:34:a8:fc:e5:29: 2f:28:55:6b:ae:50:61:3f:14:db:a7:f2:90:de:9f: 1e:8c:23:17:ec:2b:33:5c:ef:92:be:b4:b7:73:f8: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AA:DD:56:8D:B8:C2:EB:2B:82:93:0D:DF:27:00:46:D6:56:A3:30 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8KrdVo24wusrgpMN3ycARtZWozA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.56.0/24 Signature Algorithm: sha256WithRSAEncryption 32:5e:76:4f:fc:3c:23:e6:1e:c6:2e:57:be:54:14:01:d3:e2: 11:d1:57:79:83:41:f9:ff:39:cc:9f:e5:a7:51:bd:47:9e:8b: 39:40:1b:91:3a:5c:70:6e:c2:4e:60:45:ae:c2:03:0d:61:08: 6d:5d:47:a9:f2:a2:51:9e:04:4f:eb:f3:79:1c:80:7f:d6:db: 2c:81:77:4f:b5:a0:30:1a:f5:f5:cd:24:1d:a0:d3:06:08:2f: 02:49:62:b3:9b:77:9d:2e:26:81:6b:4e:a6:b4:10:a7:f5:26: 08:d8:be:94:81:fd:91:bf:c1:51:c8:5d:de:46:a0:45:cb:54: 89:25:94:0c:c6:08:82:be:68:bc:87:17:25:a6:b8:3e:7f:40: d4:7e:ca:66:c2:a0:10:07:e0:04:0c:cc:f0:a9:38:08:56:61: 2e:d4:a9:d5:8a:6a:81:eb:bb:de:d9:30:bf:fd:f5:dd:bf:dc: 03:62:8d:29:88:1a:94:d0:08:b0:5b:4d:65:7b:08:aa:7c:21: f2:6f:0d:2e:e1:a2:25:32:3e:87:34:27:cb:55:ad:fb:4b:86: b1:09:5f:6f:96:4a:78:02:1b:f7:a5:13:2a:ec:85:82:9c:c1: 43:f4:b6:1d:d2:8d:4a:d0:a1:cd:2f:20:5d:2c:4f:ce:f1:e6: 68:f3:df:20 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjE3MDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwQUFERDU2OERCOEMy RUIyQjgyOTMwRERGMjcwMDQ2RDY1NkEzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9/K2SYEPDD0FuqK4DZ7ggWf3mtDGiRkwiJ5VW4qBzHKut+hbE iX9hs/qdQta3KXcNCvW8fTyn1Oc58qx6XY9Uc2yK+Zr6yyz3YuTdzw7gslzwI7kb 0rtlVw1YvE1BVFYI6zvgEUYM6NyGOpnhGeYNy4uLDKS6ah9GAgGx033pzu9VuEUg 65EfCDH3OyXtQ7SLN2V6Uof9TGMiH/ktd2ZBunOYYlW6Nam8zqYg1VT3OhPSOYIF 5L4+f3xUWNhznTCGDRK+lHYZXpAXPWpv2Zoz9vKwVrQQ+qSNHLk0qPzlKS8oVWuu UGE/FNun8pDenx6MIxfsKzNc75K+tLdz+IQzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8KrdVo24wusrgpMN3ycARtZWozAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhLcmRWbzI0d3VzcmdwTU4zeWNBUnRaV296QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcnzgwDQYJKoZIhvcNAQELBQADggEBADJedk/8PCPmHsYuV75UFAHT4hHR V3mDQfn/Ocyf5adRvUeeizlAG5E6XHBuwk5gRa7CAw1hCG1dR6nyolGeBE/r83kc gH/W2yyBd0+1oDAa9fXNJB2g0wYILwJJYrObd50uJoFrTqa0EKf1JgjYvpSB/ZG/ wVHIXd5GoEXLVIkllAzGCIK+aLyHFyWmuD5/QNR+ymbCoBAH4AQMzPCpOAhWYS7U qdWKaoHru97ZML/99d2/3ANijSmIGpTQCLBbTWV7CKp8IfJvDS7hoiUyPoc0J8tV rftLhrEJX2+WSngCG/elEyrshYKcwUP0th3SjUrQoc0vIF0sT87x5mjz3yA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:10 2026 by rpki-client