$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/H2Q_oOm8-gvj-KG-WY-nCFAZy0s.roa File: H2Q_oOm8-gvj-KG-WY-nCFAZy0s.roa (raw, json) Hash identifier: M48qauumbwFp9qNQOBRHA9lGiY53Xh7/SBUiJCUItH0= Subject key identifier: 1F:64:3F:A0:E9:BC:FA:0B:E3:F8:A1:BE:59:8F:A7:08:50:19:CB:4B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11EC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H2Q_oOm8-gvj-KG-WY-nCFAZy0s.roa Signing time: Sun 01 Mar 2026 02:44:29 +0000 ROA not before: Sun 01 Mar 2026 02:44:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4588 (0x11ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:44:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1F643FA0E9BCFA0BE3F8A1BE598FA7085019CB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:1f:a4:b4:ab:26:00:be:b2:d6:b6:1e:a0: 6b:5a:c6:33:72:76:80:66:b5:e0:91:08:35:b6:a5: 79:71:a4:bb:d4:26:9a:2c:0b:f1:01:04:5e:bf:2e: 0e:58:7c:0d:94:7f:5c:dc:16:36:c0:14:b2:9e:01: c6:d0:02:38:e1:f9:d5:d2:5b:b9:10:24:0d:fe:96: e9:df:5b:a4:32:0f:05:38:b6:52:78:54:ce:b1:f1: 4e:dd:26:c8:f0:49:e9:cc:9c:43:23:4d:4e:57:47: 05:ea:e7:8a:01:43:d9:0e:d9:44:98:c8:c1:d9:45: 06:d7:47:50:b7:89:b9:00:b4:ba:ba:62:6f:23:a9: b4:2e:3b:a8:43:d3:54:22:a5:02:a5:5e:bb:37:71: db:92:c5:d9:2e:c9:ea:45:f8:ee:70:a0:7d:bf:09: d1:0b:ec:1e:65:a1:21:e5:09:29:78:c1:af:31:28: f6:32:6c:30:a7:f5:c4:b7:4a:89:63:95:be:a5:85: 10:b1:0e:88:59:9a:2e:06:77:37:45:96:59:09:6d: bc:df:81:30:31:e8:29:99:31:cd:1b:17:82:08:4a: 46:bf:7b:e7:f7:07:bb:0a:13:d6:cc:c4:dc:64:c1: d1:ca:74:c6:31:85:75:2c:37:73:01:97:19:6a:6a: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:64:3F:A0:E9:BC:FA:0B:E3:F8:A1:BE:59:8F:A7:08:50:19:CB:4B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H2Q_oOm8-gvj-KG-WY-nCFAZy0s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.7.0/24 Signature Algorithm: sha256WithRSAEncryption bf:43:c2:b1:5d:c1:3a:81:1f:b7:75:11:00:c9:b0:d3:9b:a4: bb:05:21:73:e3:07:a1:a8:81:69:99:ed:e0:e4:73:ee:d5:7c: 08:f0:3a:02:7b:85:12:dc:03:f5:4c:fd:5b:b0:35:17:c5:b1: e1:2c:5e:e0:53:2c:d7:b9:82:4e:ae:e6:4b:1a:85:e1:78:50: 89:4f:d6:f3:96:85:e6:c3:94:cc:46:d5:75:31:6c:d5:45:83: 50:12:65:06:15:c1:47:53:68:cc:af:6f:c3:95:fb:4d:da:d0: 1a:35:22:5e:a4:60:83:a9:21:be:2b:81:81:9e:45:79:4e:7c: aa:94:84:67:2c:8c:b8:2a:89:67:39:ca:ec:39:74:a6:3a:c5: a8:4d:0c:1a:85:cc:82:3e:8e:bd:43:92:94:ea:ad:ea:ca:00: 50:5d:08:0c:e8:fe:dd:26:e2:3c:d0:2b:2c:5f:f9:10:40:57: 10:b5:50:33:64:f1:2c:63:c6:c1:65:c2:9a:1b:07:14:c3:fe: d0:54:40:5a:1a:8d:2e:ca:ab:d3:c1:e5:1f:ce:75:ad:04:8a: 02:0f:70:8a:35:fa:f8:c2:15:6f:7f:ad:d6:03:c3:a8:2a:77: 88:52:8f:91:02:83:92:d1:8f:1d:c6:f4:47:88:d4:64:d0:0e: d2:22:2f:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ0MjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGNjQzRkEwRTlCQ0ZB MEJFM0Y4QTFCRTU5OEZBNzA4NTAxOUNCNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC84x+ktKsmAL6y1rYeoGtaxjNydoBmteCRCDW2pXlxpLvUJpos C/EBBF6/Lg5YfA2Uf1zcFjbAFLKeAcbQAjjh+dXSW7kQJA3+lunfW6QyDwU4tlJ4 VM6x8U7dJsjwSenMnEMjTU5XRwXq54oBQ9kO2USYyMHZRQbXR1C3ibkAtLq6Ym8j qbQuO6hD01QipQKlXrs3cduSxdkuyepF+O5woH2/CdEL7B5loSHlCSl4wa8xKPYy bDCn9cS3Soljlb6lhRCxDohZmi4GdzdFllkJbbzfgTAx6CmZMc0bF4IISka/e+f3 B7sKE9bMxNxkwdHKdMYxhXUsN3MBlxlqaoVfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUH2Q/oOm8+gvj+KG+WY+nCFAZy0swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0gyUV9vT204LWd2ai1LRy1XWS1uQ0ZBWnkwcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwcwDQYJKoZIhvcNAQELBQADggEBAL9DwrFdwTqBH7d1EQDJsNObpLsF IXPjB6GogWmZ7eDkc+7VfAjwOgJ7hRLcA/VM/VuwNRfFseEsXuBTLNe5gk6u5ksa heF4UIlP1vOWhebDlMxG1XUxbNVFg1ASZQYVwUdTaMyvb8OV+03a0Bo1Il6kYIOp Ib4rgYGeRXlOfKqUhGcsjLgqiWc5yuw5dKY6xahNDBqFzII+jr1DkpTqrerKAFBd CAzo/t0m4jzQKyxf+RBAVxC1UDNk8SxjxsFlwpobBxTD/tBUQFoajS7Kq9PB5R/O da0EigIPcIo1+vjCFW9/rdYDw6gqd4hSj5ECg5LRjx3G9EeI1GTQDtIiL68= -----END CERTIFICATE-----Generated at Mon Mar 2 08:56:43 2026 by rpki-client