$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/H3eQTV_xgJ3ZRvycnK1FTT6eWx8.roa File: H3eQTV_xgJ3ZRvycnK1FTT6eWx8.roa (raw, json) Hash identifier: ch5GBHmtMYCe391xF2Q1dFAqxbTWnRZhLbauDx5pBXY= Subject key identifier: 1F:77:90:4D:5F:F1:80:9D:D9:46:FC:9C:9C:AD:45:4D:3E:9E:5B:1F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1245 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H3eQTV_xgJ3ZRvycnK1FTT6eWx8.roa Signing time: Sun 01 Mar 2026 02:56:35 +0000 ROA not before: Sun 01 Mar 2026 02:56:35 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4677 (0x1245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:56:35 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1F77904D5FF1809DD946FC9C9CAD454D3E9E5B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:14:a8:1b:98:4b:6b:d7:cf:8f:b5:f6:06: 00:28:63:ee:7e:e5:13:2a:df:a2:36:b4:68:9b:f2: f1:89:12:37:6a:14:9a:96:9e:a1:37:d4:dc:8e:a8: 9b:85:5f:c5:82:b0:19:01:19:90:3b:c1:58:1d:26: 43:c2:7a:66:f1:d9:8d:76:ea:3a:e0:7c:d5:23:74: 19:c5:7f:84:9d:91:26:26:61:90:19:89:91:09:b6: 47:c3:63:55:01:49:b5:83:8f:f0:ab:60:85:19:6d: c6:6c:7e:85:08:6e:d9:1f:c5:d0:b0:d9:14:63:82: f9:02:2b:4a:3e:e1:cb:a0:43:ad:15:32:3e:dc:27: 2f:cb:b1:e8:2d:2d:67:3b:57:2d:85:52:62:fc:cb: 47:c9:40:eb:42:bb:be:0e:00:cd:95:6a:ab:d8:19: a3:36:a6:22:dd:89:bc:b8:e7:02:75:0b:cb:13:b2: 05:bf:ef:f0:63:17:f6:8d:f8:2e:06:a0:3b:8a:7e: d7:78:cf:0b:af:31:24:c0:56:0e:8a:54:72:75:3b: b5:90:5a:6d:02:ee:fa:20:55:36:05:b9:1e:64:03: 0c:85:f6:e3:c4:e4:32:27:7c:3c:5f:bd:85:bd:7c: fd:b2:1e:64:d4:e7:33:64:fd:54:49:29:9a:06:b6: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:90:4D:5F:F1:80:9D:D9:46:FC:9C:9C:AD:45:4D:3E:9E:5B:1F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H3eQTV_xgJ3ZRvycnK1FTT6eWx8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.48.0/20 Signature Algorithm: sha256WithRSAEncryption 5b:29:b3:9f:97:2a:5b:69:0e:36:6c:c1:b7:c0:09:df:24:62: bb:af:4d:c5:96:ca:c3:cb:bc:68:3d:d5:bc:2b:48:c0:52:ab: 87:54:94:fc:9f:27:8b:4e:fe:1a:ac:7f:99:7a:b6:1f:7a:17: a3:9a:a6:96:de:a6:a4:cc:24:65:a2:63:d8:1a:34:c5:34:af: b7:60:9e:68:06:a7:79:33:bb:fc:b9:24:75:b7:4e:a2:38:0b: c6:c1:55:9c:af:69:be:e1:20:77:df:4a:48:1e:04:f3:df:17: 21:dc:14:8a:96:d3:6f:bd:37:b4:ac:7b:33:8e:61:9a:f2:7b: 96:68:af:8c:57:45:63:d0:de:bc:74:b6:fa:b1:e1:38:6c:07: f8:df:d7:d7:ce:e8:82:78:44:dd:f3:84:30:56:f3:dc:87:d8: 0e:fe:9f:23:ef:02:bb:95:a1:58:5f:dc:cc:1f:54:46:d4:46: c4:46:f6:32:9a:40:13:84:b0:4d:fd:a0:19:00:38:43:a7:d7: ad:a2:b5:62:b4:8b:b9:a2:7d:e8:cb:c4:ce:17:88:72:ed:30: 52:a6:15:c9:e1:8d:5d:f5:47:b0:42:81:b7:6b:45:25:42:1b: db:e2:8f:56:a6:0a:b3:b9:6d:2e:62:97:23:eb:59:b1:ab:34: 08:69:3b:87 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjU2MzVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGNzc5MDRENUZGMTgw OUREOTQ2RkM5QzlDQUQ0NTREM0U5RTVCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHyxSoG5hLa9fPj7X2BgAoY+5+5RMq36I2tGib8vGJEjdqFJqW nqE31NyOqJuFX8WCsBkBGZA7wVgdJkPCembx2Y126jrgfNUjdBnFf4SdkSYmYZAZ iZEJtkfDY1UBSbWDj/CrYIUZbcZsfoUIbtkfxdCw2RRjgvkCK0o+4cugQ60VMj7c Jy/LsegtLWc7Vy2FUmL8y0fJQOtCu74OAM2VaqvYGaM2piLdiby45wJ1C8sTsgW/ 7/BjF/aN+C4GoDuKftd4zwuvMSTAVg6KVHJ1O7WQWm0C7vogVTYFuR5kAwyF9uPE 5DInfDxfvYW9fP2yHmTU5zNk/VRJKZoGtjw3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUH3eQTV/xgJ3ZRvycnK1FTT6eWx8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0gzZVFUVl94Z0ozWlJ2eWNuSzFGVFQ2ZVd4OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTjAwDQYJKoZIhvcNAQELBQADggEBAFsps5+XKltpDjZswbfACd8kYruv TcWWysPLvGg91bwrSMBSq4dUlPyfJ4tO/hqsf5l6th96F6OappbepqTMJGWiY9ga NMU0r7dgnmgGp3kzu/y5JHW3TqI4C8bBVZyvab7hIHffSkgeBPPfFyHcFIqW02+9 N7SsezOOYZrye5Zor4xXRWPQ3rx0tvqx4ThsB/jf19fO6IJ4RN3zhDBW89yH2A7+ nyPvAruVoVhf3MwfVEbURsRG9jKaQBOEsE39oBkAOEOn162itWK0i7mifejLxM4X iHLtMFKmFcnhjV31R7BCgbdrRSVCG9vij1amCrO5bS5ilyPrWbGrNAhpO4c= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:33 2026 by rpki-client