$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPiHGPB6QQN9RE11Difq6gjjmOM.roa File: KPiHGPB6QQN9RE11Difq6gjjmOM.roa (raw, json) Hash identifier: 64kIxk3kaBPWzohnO9AknvzkX8ZeW9k+mNhGJRYH8Zw= Subject key identifier: 28:F8:87:18:F0:7A:41:03:7D:44:4D:75:0E:27:EA:EA:08:E3:98:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 119F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPiHGPB6QQN9RE11Difq6gjjmOM.roa Signing time: Sun 01 Mar 2026 02:31:16 +0000 ROA not before: Sun 01 Mar 2026 02:31:16 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4511 (0x119f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:31:16 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=28F88718F07A41037D444D750E27EAEA08E398E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:ce:d9:2f:ee:27:d3:94:3b:72:08:aa:4d: 22:08:41:59:b5:07:73:c7:f9:8b:4b:4a:14:d9:c4: ac:d6:2f:d5:4d:8e:ba:90:6c:26:ab:b1:80:e7:f1: 73:2c:20:80:07:f5:0e:91:ea:52:f5:ac:70:55:67: 9a:c3:6f:3d:3b:d8:87:5c:19:58:ab:61:90:e1:5a: bf:ab:fe:5e:3c:c1:a5:d5:00:5f:d8:4f:79:c7:4a: 01:35:95:7a:7a:a0:9c:c8:a3:03:08:0e:b2:7a:cd: d5:94:68:0f:ee:ee:95:c8:f9:22:23:5a:6c:08:be: 27:66:91:21:d4:59:0c:43:66:9a:18:c5:ea:09:af: 2c:76:42:11:c8:2f:40:a4:2b:46:19:39:6d:65:98: 6a:60:ab:37:ea:77:11:15:ad:b2:de:36:3c:ea:76: 4d:81:35:e5:b9:17:9a:aa:90:54:4d:64:1c:97:3f: 53:80:33:41:21:39:4a:1f:37:86:1e:05:55:7b:29: d1:9b:49:5f:ba:03:de:dc:55:54:89:6d:3f:d8:b8: c3:08:2b:5e:ce:7b:df:b9:ca:1e:1a:07:4f:26:ea: 15:47:14:c3:db:30:22:76:ed:42:5d:2d:13:a3:ee: 27:ec:04:8c:65:2d:6c:d5:55:35:bc:79:31:f7:da: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F8:87:18:F0:7A:41:03:7D:44:4D:75:0E:27:EA:EA:08:E3:98:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KPiHGPB6QQN9RE11Difq6gjjmOM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.234.0/23 Signature Algorithm: sha256WithRSAEncryption cd:c2:9f:77:20:98:88:9e:55:c9:19:c0:85:95:81:68:2f:0f: 05:30:18:a6:18:82:f8:2a:ab:db:99:35:48:6a:fd:46:38:1a: fb:9b:ed:72:57:14:04:f7:7f:40:00:4d:1a:d9:e9:39:74:af: 6b:f6:53:8f:ff:18:89:6a:2d:09:79:46:08:7f:6d:03:c2:df: 28:4e:28:37:da:93:e9:1c:ee:93:89:41:0b:0a:b4:07:d6:0c: 1c:df:8a:9b:77:d4:dc:b6:96:f4:fd:01:1b:fa:77:aa:68:b4: 08:c7:56:a2:90:5e:6c:f3:10:37:6b:22:fb:df:aa:38:73:96: 0e:84:9b:b1:2b:95:fe:a7:c8:70:d4:68:17:3d:4c:a0:8e:05: 04:e5:15:af:0f:ee:fa:1c:cf:6d:76:5c:2e:53:3c:b9:de:62: fc:99:ae:89:ac:4d:f1:de:6c:d7:08:17:81:dc:8f:bf:1a:3e: c5:97:dc:72:8e:99:31:87:e9:71:31:49:a1:9a:24:64:68:f3: cc:5c:83:36:ff:b3:ac:b5:dc:65:72:b7:21:30:85:6a:aa:c1: 8c:cd:1f:2a:51:cb:c4:21:ba:16:af:28:d6:54:84:04:dd:25: b6:ae:a0:6b:b8:2f:be:e5:a7:17:86:af:62:7f:41:4e:c2:23: f2:e5:f9:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjMxMTZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4Rjg4NzE4RjA3QTQx MDM3RDQ0NEQ3NTBFMjdFQUVBMDhFMzk4RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDROM7ZL+4n05Q7cgiqTSIIQVm1B3PH+YtLShTZxKzWL9VNjrqQ bCarsYDn8XMsIIAH9Q6R6lL1rHBVZ5rDbz072IdcGVirYZDhWr+r/l48waXVAF/Y T3nHSgE1lXp6oJzIowMIDrJ6zdWUaA/u7pXI+SIjWmwIvidmkSHUWQxDZpoYxeoJ ryx2QhHIL0CkK0YZOW1lmGpgqzfqdxEVrbLeNjzqdk2BNeW5F5qqkFRNZByXP1OA M0EhOUofN4YeBVV7KdGbSV+6A97cVVSJbT/YuMMIK17Oe9+5yh4aB08m6hVHFMPb MCJ27UJdLROj7ifsBIxlLWzVVTW8eTH32rfpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKPiHGPB6QQN9RE11Difq6gjjmOMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tQaUhHUEI2UVFOOVJFMTFEaWZxNmdqam1PTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS+owDQYJKoZIhvcNAQELBQADggEBAM3Cn3cgmIieVckZwIWVgWgvDwUw GKYYgvgqq9uZNUhq/UY4Gvub7XJXFAT3f0AATRrZ6Tl0r2v2U4//GIlqLQl5Rgh/ bQPC3yhOKDfak+kc7pOJQQsKtAfWDBzfipt31Ny2lvT9ARv6d6potAjHVqKQXmzz EDdrIvvfqjhzlg6Em7Erlf6nyHDUaBc9TKCOBQTlFa8P7vocz212XC5TPLneYvyZ romsTfHebNcIF4Hcj78aPsWX3HKOmTGH6XExSaGaJGRo88xcgzb/s6y13GVytyEw hWqqwYzNHypRy8QhuhavKNZUhATdJbauoGu4L77lpxeGr2J/QU7CI/Ll+Uc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:17 2026 by rpki-client