$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cb9M9-2Cats9wlcA4qdZodqoZEc.roa File: Cb9M9-2Cats9wlcA4qdZodqoZEc.roa (raw, json) Hash identifier: NjeH8/YgFLa+5pPMctfw4BJpgGIaqb65o6ZFnGkb6Xc= Subject key identifier: 09:BF:4C:F7:ED:82:6A:DB:3D:C2:57:00:E2:A7:59:A1:DA:A8:64:47 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 115D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cb9M9-2Cats9wlcA4qdZodqoZEc.roa Signing time: Sun 01 Mar 2026 02:17:01 +0000 ROA not before: Sun 01 Mar 2026 02:17:01 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4445 (0x115d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:17:01 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=09BF4CF7ED826ADB3DC25700E2A759A1DAA86447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:72:69:7c:e3:6f:9c:7b:11:53:f8:89:7c: 65:2d:72:c5:23:dc:a3:22:e0:b6:5b:92:dc:e0:d3: cc:ef:19:37:a7:8d:35:9f:f1:66:ba:6d:d9:20:ed: 08:cd:88:56:8d:74:6a:0e:65:8b:c8:55:11:35:d6: b4:56:03:99:5a:de:ce:bc:d1:ab:7f:e0:27:c2:11: 89:56:45:71:a2:cb:47:e9:fb:a6:e9:b4:5b:33:6d: 60:83:f1:c7:e0:64:03:1e:6f:d3:1e:e2:7c:46:f3: e1:a0:01:85:8a:70:2e:41:85:f0:00:56:32:56:a6: 09:d4:ef:39:5a:79:e8:d1:4a:a7:b6:c4:4e:b5:a7: 6e:a3:4f:88:52:29:8b:74:ac:9b:09:cc:4c:09:9d: 7a:45:6c:48:d8:d3:19:2e:2a:ad:da:3f:8b:ea:6a: 8f:70:20:e3:2c:e0:4b:7b:73:43:24:fa:94:b6:b7: 30:c4:79:d4:ff:69:44:23:61:06:e9:54:6b:4d:84: 61:b5:a8:62:7c:3e:e3:bc:62:1a:20:7e:14:6c:e1: bd:27:73:cb:e5:5f:db:98:87:1c:0b:e3:70:03:65: 18:49:34:28:2d:3a:9d:60:cc:e3:3a:80:72:24:0e: 6f:95:65:04:5e:d5:c1:d9:41:a8:a1:ba:c5:ca:7f: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:4C:F7:ED:82:6A:DB:3D:C2:57:00:E2:A7:59:A1:DA:A8:64:47 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cb9M9-2Cats9wlcA4qdZodqoZEc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.38.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:fe:66:dc:e5:45:9e:66:4b:0f:75:55:0c:df:e1:44:b0:ec: 2b:6b:c4:94:c3:dc:ce:b3:07:53:c2:b5:d8:26:df:d0:e1:84: 8f:83:33:a9:c1:4d:4a:5f:4f:1b:18:02:a9:8f:67:ed:b6:d8: 4a:9f:3e:ca:2a:7c:f2:25:2e:a1:2a:be:07:1d:a8:da:0c:da: ef:84:23:aa:1d:8c:7e:97:3c:6d:86:15:a2:36:d5:26:d1:b2: 66:57:f6:bd:f2:6a:13:33:9e:b3:58:6f:2b:98:16:9b:31:88: 09:4f:f5:03:5b:28:b3:ee:a0:33:4f:07:22:55:a6:5d:3e:49: ce:a7:bf:9c:9a:86:09:27:6a:1a:a8:d4:fd:54:41:7c:a7:10: 29:3f:f2:2d:55:37:84:08:5d:0e:bb:ae:b5:29:5f:c6:3b:3b: 59:02:72:99:0a:79:2a:6c:7a:70:65:5c:4f:b2:88:ef:f0:e9: 03:cd:61:d0:46:ac:fa:4c:a1:b6:0b:2e:b2:2d:57:ae:10:8e: 08:76:25:60:34:b3:9c:ea:a6:11:69:95:a5:5d:6a:92:e5:42: 5a:b0:e9:b8:22:c9:11:d2:03:d9:b1:b8:74:5e:85:e8:12:e8: 6e:29:cf:6e:a1:b3:76:2f:a1:dc:15:73:a2:86:37:17:69:5c: 44:09:3e:cd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjE3MDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5QkY0Q0Y3RUQ4MjZB REIzREMyNTcwMEUyQTc1OUExREFBODY0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPjnJpfONvnHsRU/iJfGUtcsUj3KMi4LZbktzg08zvGTenjTWf 8Wa6bdkg7QjNiFaNdGoOZYvIVRE11rRWA5la3s680at/4CfCEYlWRXGiy0fp+6bp tFszbWCD8cfgZAMeb9Me4nxG8+GgAYWKcC5BhfAAVjJWpgnU7zlaeejRSqe2xE61 p26jT4hSKYt0rJsJzEwJnXpFbEjY0xkuKq3aP4vqao9wIOMs4Et7c0Mk+pS2tzDE edT/aUQjYQbpVGtNhGG1qGJ8PuO8YhogfhRs4b0nc8vlX9uYhxwL43ADZRhJNCgt Op1gzOM6gHIkDm+VZQRe1cHZQaihusXKf0+DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCb9M9+2Cats9wlcA4qdZodqoZEcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NiOU05LTJDYXRzOXdsY0E0cWRab2Rxb1pFYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTiYwDQYJKoZIhvcNAQELBQADggEBAAv+ZtzlRZ5mSw91VQzf4USw7Ctr xJTD3M6zB1PCtdgm39DhhI+DM6nBTUpfTxsYAqmPZ+222EqfPsoqfPIlLqEqvgcd qNoM2u+EI6odjH6XPG2GFaI21SbRsmZX9r3yahMznrNYbyuYFpsxiAlP9QNbKLPu oDNPByJVpl0+Sc6nv5yahgknahqo1P1UQXynECk/8i1VN4QIXQ67rrUpX8Y7O1kC cpkKeSpsenBlXE+yiO/w6QPNYdBGrPpMobYLLrItV64Qjgh2JWA0s5zqphFplaVd apLlQlqw6bgiyRHSA9mxuHRehegS6G4pz26hs3YvodwVc6KGNxdpXEQJPs0= -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:36 2026 by rpki-client