$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9cx4SbzECN-4gWE8vH6Ixcs8zXg.roa File: 9cx4SbzECN-4gWE8vH6Ixcs8zXg.roa (raw, json) Hash identifier: FEACdTKEpVFDdaNzOGPfcd72TDcAag7G5Np/xed+npw= Subject key identifier: F5:CC:78:49:BC:C4:08:DF:B8:81:61:3C:BC:7E:88:C5:CB:3C:CD:78 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11A1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9cx4SbzECN-4gWE8vH6Ixcs8zXg.roa Signing time: Sun 01 Mar 2026 02:31:19 +0000 ROA not before: Sun 01 Mar 2026 02:31:19 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4513 (0x11a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:31:19 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=F5CC7849BCC408DFB881613CBC7E88C5CB3CCD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:59:d7:70:fa:35:74:71:bd:45:5d:7c:fb: b7:b1:bf:46:c3:38:49:96:dc:5a:cd:d8:8b:e0:13: d8:52:e8:45:cd:1f:3a:fe:f1:ea:b9:1a:55:94:73: ab:81:ca:90:b5:fa:c6:b0:b8:9d:15:c8:38:bd:19: ac:93:1c:90:0d:09:7f:a7:42:9c:0b:28:93:6a:c3: d8:f0:ad:0a:18:84:f4:e6:02:71:b0:bb:a9:ce:a6: 00:aa:3e:67:85:09:c9:d0:71:ee:b0:51:cc:a9:0f: b9:0c:74:3a:3e:ac:8e:e1:f1:e8:0e:b8:2f:5f:3e: 4e:d5:67:29:5d:6b:2a:79:b3:96:d6:e5:ae:d4:cc: b8:32:95:b4:b6:75:eb:01:92:6e:0a:fd:65:d3:8b: 50:ec:27:0f:d6:ce:f0:ad:68:1e:56:dd:fe:cd:f2: 29:91:65:e0:c5:a2:7a:89:47:e1:95:c2:ac:8f:ef: f4:d8:5e:af:a3:bf:99:6e:77:b0:01:29:19:a8:8e: 38:46:51:23:d1:31:e9:dd:b1:d0:c5:f2:f8:2f:07: 53:46:83:8e:ec:92:0a:2f:51:a1:42:7b:0d:46:1b: 14:6d:fc:56:1c:26:3d:37:93:41:f8:6d:d7:10:bd: ff:8a:da:1b:f3:b9:a2:89:3c:16:44:02:48:f8:1b: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CC:78:49:BC:C4:08:DF:B8:81:61:3C:BC:7E:88:C5:CB:3C:CD:78 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9cx4SbzECN-4gWE8vH6Ixcs8zXg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.72.0/22 Signature Algorithm: sha256WithRSAEncryption e1:a3:02:72:3c:41:bd:a2:99:ea:5c:3c:ca:eb:63:0b:4c:29: 89:32:49:93:a5:93:6f:5f:5a:a9:1a:ea:74:b0:6c:e2:d6:03: 11:89:19:c9:5a:28:99:51:f4:be:21:b7:e7:df:93:fc:ff:bc: 0b:6a:98:1d:96:08:2d:9b:2f:ef:17:f9:2b:27:5f:3e:80:7c: d6:da:2e:7d:bf:1e:cf:c4:2b:02:6d:3e:f4:3e:03:09:e1:b2: 2c:05:d0:08:d3:6e:cf:a8:a4:b3:e8:0c:8d:18:64:7b:ba:d2: bb:d3:07:37:75:09:1a:de:65:02:2f:d7:d4:34:d2:0c:fc:a3: e8:b5:7b:05:e1:8c:65:8b:40:49:22:88:b7:6b:67:19:d3:32: a6:bb:80:12:68:eb:20:44:4e:03:fb:d7:f2:c4:8c:e7:83:5f: a4:f1:5e:bd:6f:c5:0d:1c:1b:09:01:17:39:90:8c:56:28:ff: 34:bd:1c:71:11:af:ac:27:94:67:b1:33:e1:02:07:98:92:07: 7e:b2:89:07:bd:4a:21:18:a0:64:a9:14:61:f3:48:ea:5a:a8: ff:df:18:2d:48:8a:a5:80:0f:81:96:cd:bb:61:10:4e:a1:2c: 91:5a:91:dd:18:6f:45:38:7e:de:56:95:f7:a9:74:1d:60:b2: 60:86:cc:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjMxMTlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY1Q0M3ODQ5QkNDNDA4 REZCODgxNjEzQ0JDN0U4OEM1Q0IzQ0NENzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClj1nXcPo1dHG9RV18+7exv0bDOEmW3FrN2IvgE9hS6EXNHzr+ 8eq5GlWUc6uBypC1+sawuJ0VyDi9GayTHJANCX+nQpwLKJNqw9jwrQoYhPTmAnGw u6nOpgCqPmeFCcnQce6wUcypD7kMdDo+rI7h8egOuC9fPk7VZyldayp5s5bW5a7U zLgylbS2desBkm4K/WXTi1DsJw/WzvCtaB5W3f7N8imRZeDFonqJR+GVwqyP7/TY Xq+jv5lud7ABKRmojjhGUSPRMendsdDF8vgvB1NGg47skgovUaFCew1GGxRt/FYc Jj03k0H4bdcQvf+K2hvzuaKJPBZEAkj4G79RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9cx4SbzECN+4gWE8vH6Ixcs8zXgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzljeDRTYnpFQ04tNGdXRTh2SDZJeGNzOHpYZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTEgwDQYJKoZIhvcNAQELBQADggEBAOGjAnI8Qb2imepcPMrrYwtMKYky SZOlk29fWqka6nSwbOLWAxGJGclaKJlR9L4ht+ffk/z/vAtqmB2WCC2bL+8X+Ssn Xz6AfNbaLn2/Hs/EKwJtPvQ+AwnhsiwF0AjTbs+opLPoDI0YZHu60rvTBzd1CRre ZQIv19Q00gz8o+i1ewXhjGWLQEkiiLdrZxnTMqa7gBJo6yBETgP71/LEjOeDX6Tx Xr1vxQ0cGwkBFzmQjFYo/zS9HHERr6wnlGexM+ECB5iSB36yiQe9SiEYoGSpFGHz SOpaqP/fGC1IiqWAD4GWzbthEE6hLJFakd0Yb0U4ft5WlfepdB1gsmCGzOA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:55 2026 by rpki-client