$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ID1H2LCixMjzWVqe0SINnoSm9JU.roa File: ID1H2LCixMjzWVqe0SINnoSm9JU.roa (raw, json) Hash identifier: Vv3FgX+r+z7+urRwDx9l+i4Lrc4JYQkoaBJJMLDCe8w= Subject key identifier: 20:3D:47:D8:B0:A2:C4:C8:F3:59:5A:9E:D1:22:0D:9E:84:A6:F4:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1248 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ID1H2LCixMjzWVqe0SINnoSm9JU.roa Signing time: Sun 01 Mar 2026 02:56:37 +0000 ROA not before: Sun 01 Mar 2026 02:56:37 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4680 (0x1248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:56:37 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=203D47D8B0A2C4C8F3595A9ED1220D9E84A6F495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:ab:b6:0c:11:7a:0a:01:cc:a9:a2:74:fb: b0:af:05:aa:09:91:28:ab:45:ae:44:0c:b5:8e:8f: 6e:61:80:d9:dd:0a:7f:f8:4e:d9:b7:59:f4:d6:d7: 5d:b5:7e:f0:7f:d6:c5:ed:0d:26:1c:02:8a:96:20: 47:84:d0:a2:e5:68:f4:a2:53:7a:e1:f8:07:9c:9f: 38:b4:f7:12:d8:3a:c6:dc:b7:85:d5:fa:35:d7:1e: 86:26:cf:a4:03:b2:cd:af:3d:f8:23:45:90:25:91: 3c:8e:b2:29:f7:82:a1:3b:66:f9:b3:d4:8d:a7:af: 5e:6a:ac:cd:e0:1c:41:37:e9:ae:9c:e7:ff:1b:99: 50:92:53:95:7c:b3:9f:32:52:9f:de:b4:b4:38:b5: 0a:cb:33:b4:11:f5:9f:e9:06:19:9e:59:11:32:ae: 48:a3:7f:b8:7d:4e:5d:0f:f4:cd:e0:d0:be:04:be: ce:f0:7e:f8:0f:b6:79:f6:16:e6:79:19:71:46:f2: 9f:f9:36:0d:c4:1b:6a:22:08:69:5c:3d:c9:d8:4f: c4:45:c2:4a:66:a9:ed:6d:cd:6d:68:61:20:87:50: 32:fa:86:a9:5d:cf:f2:c7:9a:c7:42:14:c3:de:32: d1:a8:bd:99:7d:01:13:fb:98:a4:58:81:f4:71:56: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3D:47:D8:B0:A2:C4:C8:F3:59:5A:9E:D1:22:0D:9E:84:A6:F4:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ID1H2LCixMjzWVqe0SINnoSm9JU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.67.0/24 Signature Algorithm: sha256WithRSAEncryption a3:e9:bf:73:3b:42:42:e8:87:83:cb:e6:d0:6c:2e:ba:1d:e0: 2a:93:f7:3c:34:91:56:7d:9c:ab:0e:fd:4f:8c:ee:5e:e1:b4: 8a:13:06:d6:48:76:9d:f2:d3:0f:11:54:27:36:1a:02:e3:0d: 73:d4:f7:6e:21:04:0f:d6:b0:bd:3d:05:b3:b1:64:57:49:d4: 5d:b2:3c:8f:95:c4:bd:a2:23:2b:5c:f5:fd:1a:88:95:55:0a: 8e:e2:ca:cd:db:dc:97:60:cd:61:be:2c:18:4d:0f:4f:60:e6: 76:ab:bf:7a:91:26:24:82:7c:07:42:51:6d:e6:c4:17:4c:6b: bd:26:c9:39:57:42:8d:fc:9a:a6:87:c0:18:07:43:49:8e:8f: 04:ac:f7:e2:4b:4a:51:ea:4f:bd:35:a8:94:26:68:36:4d:b9: 93:ce:32:d7:11:ee:f2:9e:12:d9:81:14:ca:1d:70:e4:41:81: 9e:f2:04:65:c3:e9:d7:73:90:88:e8:22:aa:c0:07:5c:b7:69: ad:70:2c:a7:25:b3:11:a1:cb:81:f0:47:42:43:0e:68:d9:c6: 0c:cb:88:f3:07:2a:12:e4:9b:44:ad:e9:1f:a9:4d:97:c7:d2: e2:89:ff:b4:f2:aa:eb:f1:23:b7:78:b8:35:79:12:3d:ee:da: 7a:a7:22:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjU2MzdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwM0Q0N0Q4QjBBMkM0 QzhGMzU5NUE5RUQxMjIwRDlFODRBNkY0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwSKu2DBF6CgHMqaJ0+7CvBaoJkSirRa5EDLWOj25hgNndCn/4 Ttm3WfTW1121fvB/1sXtDSYcAoqWIEeE0KLlaPSiU3rh+Aecnzi09xLYOsbct4XV +jXXHoYmz6QDss2vPfgjRZAlkTyOsin3gqE7Zvmz1I2nr15qrM3gHEE36a6c5/8b mVCSU5V8s58yUp/etLQ4tQrLM7QR9Z/pBhmeWREyrkijf7h9Tl0P9M3g0L4Evs7w fvgPtnn2FuZ5GXFG8p/5Ng3EG2oiCGlcPcnYT8RFwkpmqe1tzW1oYSCHUDL6hqld z/LHmsdCFMPeMtGovZl9ARP7mKRYgfRxVkjVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUID1H2LCixMjzWVqe0SINnoSm9JUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lEMUgyTENpeE1qeldWcWUwU0lObm9TbTlKVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT0MwDQYJKoZIhvcNAQELBQADggEBAKPpv3M7QkLoh4PL5tBsLrod4CqT 9zw0kVZ9nKsO/U+M7l7htIoTBtZIdp3y0w8RVCc2GgLjDXPU924hBA/WsL09BbOx ZFdJ1F2yPI+VxL2iIytc9f0aiJVVCo7iys3b3JdgzWG+LBhND09g5narv3qRJiSC fAdCUW3mxBdMa70myTlXQo38mqaHwBgHQ0mOjwSs9+JLSlHqT701qJQmaDZNuZPO MtcR7vKeEtmBFModcORBgZ7yBGXD6ddzkIjoIqrAB1y3aa1wLKclsxGhy4HwR0JD DmjZxgzLiPMHKhLkm0St6R+pTZfH0uKJ/7TyquvxI7d4uDV5Ej3u2nqnIjY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:45 2026 by rpki-client