$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/H0ae8RTgNl6YXONfNNs9bKLcGUA.roa File: H0ae8RTgNl6YXONfNNs9bKLcGUA.roa (raw, json) Hash identifier: OgLXChz+ba8cEDudb3Zz6BLQGJA0I82OWU7QwtnuNUk= Subject key identifier: 1F:46:9E:F1:14:E0:36:5E:98:5C:E3:5F:34:DB:3D:6C:A2:DC:19:40 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1265 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H0ae8RTgNl6YXONfNNs9bKLcGUA.roa Signing time: Sun 01 Mar 2026 03:00:30 +0000 ROA not before: Sun 01 Mar 2026 03:00:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4709 (0x1265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1F469EF114E0365E985CE35F34DB3D6CA2DC1940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:fb:c3:d6:f0:a9:88:03:47:66:3d:b5:e2: b6:69:22:7d:c4:d6:ad:3a:4f:91:c5:80:53:85:f3: 6d:a4:a8:79:b0:3d:b7:5e:00:d2:37:28:91:f2:3e: e8:58:a3:1b:d7:02:3e:32:5c:0d:c8:83:06:92:1c: 38:fd:9a:8e:e2:d7:3a:83:37:dc:17:25:aa:c5:32: 4b:3d:7e:98:17:be:e3:0b:6c:3a:6e:31:bc:6c:c0: 77:52:01:ec:3f:a6:2b:a7:a2:8a:b0:56:27:f8:94: e9:69:c2:53:fe:fc:3a:15:b3:b6:fd:3a:5e:38:93: 27:1a:96:e4:24:33:4a:e0:33:bb:2a:b2:4e:12:77: 95:2b:6c:ec:bc:5a:97:bb:1d:16:f1:db:ae:b7:e2: 2f:5e:e8:3a:77:0a:81:cb:52:86:ea:d5:2c:82:3f: 54:6e:b1:dc:95:92:78:0a:5d:31:2d:57:8b:85:26: 4e:fd:ac:a2:51:22:09:aa:c5:bf:85:51:d0:97:f6: f9:46:8e:c3:77:86:89:55:3e:9e:92:56:64:da:17: e8:26:c6:c4:f2:9a:11:fc:07:10:a3:f9:d5:bf:54: 83:7f:4e:4c:5c:ff:7c:77:1f:9e:2e:94:6b:50:a4: cc:06:f4:4f:21:82:28:4d:28:7f:12:62:18:59:d0: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:9E:F1:14:E0:36:5E:98:5C:E3:5F:34:DB:3D:6C:A2:DC:19:40 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H0ae8RTgNl6YXONfNNs9bKLcGUA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.20.0/24 Signature Algorithm: sha256WithRSAEncryption 55:55:47:d8:16:af:d5:62:a0:67:8a:6d:d1:7f:bc:d7:85:8d: 7f:8e:ba:00:03:c7:e8:05:68:f1:da:34:46:05:0c:3d:7b:5e: dd:c4:e8:e5:d9:1a:43:87:8f:6d:13:db:5c:4b:55:fd:b5:31: bd:1b:d5:ea:68:ca:0b:81:8c:54:43:46:40:41:03:9d:7c:2f: 34:3c:96:8f:ec:06:9d:b1:b7:5d:60:a2:29:67:ed:48:e0:72: c1:83:f8:98:77:fc:3a:07:f9:0f:97:3f:9a:cc:20:13:f5:38: 7a:54:36:b6:bd:a1:66:41:14:3f:76:1b:c9:00:d1:8a:cb:6d: e5:47:22:12:26:c9:34:af:46:d0:ae:51:14:70:5d:7e:b9:68: c4:03:4c:4f:77:59:56:8f:d6:27:8d:1a:95:e7:22:d7:86:07: db:54:6c:63:35:e6:01:0b:d3:7e:c4:1d:3a:83:b0:37:b3:f4: ce:b3:e8:60:13:8b:fb:3f:ba:af:d9:8d:20:ca:a4:9e:6e:80: a5:bc:7e:ae:8d:a4:0e:06:bb:3f:64:d6:0e:49:1a:82:8c:a7: 79:a4:d2:9f:63:cd:bf:89:91:39:b6:fa:b1:64:d0:19:18:06: 73:10:ea:7d:e5:35:86:0e:e1:bf:ce:cc:92:00:93:b9:f9:8d: b1:63:5c:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGNDY5RUYxMTRFMDM2 NUU5ODVDRTM1RjM0REIzRDZDQTJEQzE5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdJ/vD1vCpiANHZj214rZpIn3E1q06T5HFgFOF822kqHmwPbde ANI3KJHyPuhYoxvXAj4yXA3IgwaSHDj9mo7i1zqDN9wXJarFMks9fpgXvuMLbDpu MbxswHdSAew/piunooqwVif4lOlpwlP+/DoVs7b9Ol44kycaluQkM0rgM7sqsk4S d5UrbOy8Wpe7HRbx26634i9e6Dp3CoHLUobq1SyCP1RusdyVkngKXTEtV4uFJk79 rKJRIgmqxb+FUdCX9vlGjsN3holVPp6SVmTaF+gmxsTymhH8BxCj+dW/VIN/Tkxc /3x3H54ulGtQpMwG9E8hgihNKH8SYhhZ0EA/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUH0ae8RTgNl6YXONfNNs9bKLcGUAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0gwYWU4UlRnTmw2WVhPTmZOTnM5YktMY0dVQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTxQwDQYJKoZIhvcNAQELBQADggEBAFVVR9gWr9VioGeKbdF/vNeFjX+O ugADx+gFaPHaNEYFDD17Xt3E6OXZGkOHj20T21xLVf21Mb0b1epoyguBjFRDRkBB A518LzQ8lo/sBp2xt11goiln7UjgcsGD+Jh3/DoH+Q+XP5rMIBP1OHpUNra9oWZB FD92G8kA0YrLbeVHIhImyTSvRtCuURRwXX65aMQDTE93WVaP1ieNGpXnIteGB9tU bGM15gEL037EHTqDsDez9M6z6GATi/s/uq/ZjSDKpJ5ugKW8fq6NpA4Guz9k1g5J GoKMp3mk0p9jzb+JkTm2+rFk0BkYBnMQ6n3lNYYO4b/OzJIAk7n5jbFjXO8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:33 2026 by rpki-client