$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KrI-ZbOZ_TcJrlI0WYtJzpKXeL8.roa File: KrI-ZbOZ_TcJrlI0WYtJzpKXeL8.roa (raw, json) Hash identifier: 3w1EBwnwxqZIsaniGP9wNFfgRoK8T7fsY4y8Q3Pj0ls= Subject key identifier: 2A:B2:3E:65:B3:99:FD:37:09:AE:52:34:59:8B:49:CE:92:97:78:BF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1063 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KrI-ZbOZ_TcJrlI0WYtJzpKXeL8.roa Signing time: Sun 01 Mar 2026 01:34:13 +0000 ROA not before: Sun 01 Mar 2026 01:34:13 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4195 (0x1063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:34:13 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=2AB23E65B399FD3709AE5234598B49CE929778BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:8b:69:f7:9f:4b:ac:06:53:e7:92:25:03: 64:08:9c:fa:07:34:03:72:3b:23:c1:b9:fe:92:b8: 54:c3:86:a5:21:46:cf:e0:bf:0c:86:56:9a:f2:46: d7:d4:79:c5:5f:e8:3d:3f:62:b8:f1:df:77:ac:7c: d4:f9:68:d9:32:bc:7d:6f:51:81:6a:f8:b0:6c:e2: 77:98:90:86:af:03:f4:ce:61:b9:6e:ab:ef:f5:5c: 8b:5f:43:0d:0d:4a:3c:50:01:f8:6f:cb:d4:08:56: 4d:b5:07:66:2a:4d:af:af:4a:d3:00:ce:f2:c0:77: fe:ac:e8:8f:f5:13:55:dd:cd:ec:df:2c:29:17:e8: ce:aa:c5:67:59:28:30:cc:ba:14:66:96:eb:44:0b: c0:37:c2:26:d0:22:a6:a5:94:55:ad:9c:db:1d:9e: a4:f7:34:26:7a:85:22:9d:d1:c1:e6:f7:a6:47:f3: 2a:9b:06:ae:96:c1:79:dc:15:01:e0:f1:38:ba:2d: 31:fe:01:c9:7c:3d:80:f0:32:a6:bd:55:2e:85:6d: 65:bd:50:84:2c:d0:ad:9e:6a:c2:fd:aa:d5:7e:66: 67:4f:00:df:75:09:92:fc:12:e5:9c:a6:bb:02:ad: 9a:ae:55:e6:35:56:9e:5e:c5:dc:00:dd:58:16:dd: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:3E:65:B3:99:FD:37:09:AE:52:34:59:8B:49:CE:92:97:78:BF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KrI-ZbOZ_TcJrlI0WYtJzpKXeL8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.176.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:3c:d1:9a:78:a4:a1:4e:0e:47:32:7c:4c:06:d4:6b:ae:4b: d2:64:4d:f3:cc:74:2b:1f:20:c2:55:f8:c5:d6:d1:5b:37:6c: c9:30:55:7a:a9:b2:4e:5f:95:59:0a:24:f3:81:4f:d7:de:01: e9:95:d6:c2:43:73:97:42:15:45:61:35:ac:ce:8a:77:05:b4: 0d:fb:aa:77:8f:eb:84:32:fc:e1:fb:26:69:31:7d:13:8e:40: 6e:9b:82:03:00:00:a1:45:11:a3:be:f0:3a:79:27:55:0a:5d: f5:a6:c5:c6:51:61:94:2b:27:7e:c9:31:4e:6e:13:5a:cc:95: 14:a3:73:0e:86:b2:db:40:75:0d:f2:b1:c8:d6:3b:a1:d0:13: 45:0f:12:72:63:64:50:d3:f1:42:aa:f0:a5:44:de:df:52:69: 45:8e:09:15:49:bf:ff:3f:a5:b0:0f:4d:14:66:04:4d:83:24: b5:34:9b:79:01:6a:71:0a:56:74:cd:f2:90:15:7a:6a:8c:b6: 54:8b:9c:7d:47:4a:c6:d5:72:2e:eb:bc:e4:22:a4:37:24:03: 0f:66:1f:2c:50:18:82:76:b4:be:79:29:61:b9:28:28:35:1f: 96:ad:d0:ae:63:12:2d:c1:b0:8c:b7:f5:0a:72:ab:7e:ac:e6: 9b:3d:66:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTM0MTNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBQjIzRTY1QjM5OUZE MzcwOUFFNTIzNDU5OEI0OUNFOTI5Nzc4QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwVYtp959LrAZT55IlA2QInPoHNANyOyPBuf6SuFTDhqUhRs/g vwyGVpryRtfUecVf6D0/Yrjx33esfNT5aNkyvH1vUYFq+LBs4neYkIavA/TOYblu q+/1XItfQw0NSjxQAfhvy9QIVk21B2YqTa+vStMAzvLAd/6s6I/1E1XdzezfLCkX 6M6qxWdZKDDMuhRmlutEC8A3wibQIqallFWtnNsdnqT3NCZ6hSKd0cHm96ZH8yqb Bq6WwXncFQHg8Ti6LTH+Acl8PYDwMqa9VS6FbWW9UIQs0K2easL9qtV+ZmdPAN91 CZL8EuWcprsCrZquVeY1Vp5exdwA3VgW3WkPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKrI+ZbOZ/TcJrlI0WYtJzpKXeL8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tySS1aYk9aX1RjSnJsSTBXWXRKenBLWGVMOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBS7AwDQYJKoZIhvcNAQELBQADggEBABs80Zp4pKFODkcyfEwG1GuuS9Jk TfPMdCsfIMJV+MXW0Vs3bMkwVXqpsk5flVkKJPOBT9feAemV1sJDc5dCFUVhNazO incFtA37qneP64Qy/OH7JmkxfROOQG6bggMAAKFFEaO+8Dp5J1UKXfWmxcZRYZQr J37JMU5uE1rMlRSjcw6GsttAdQ3yscjWO6HQE0UPEnJjZFDT8UKq8KVE3t9SaUWO CRVJv/8/pbAPTRRmBE2DJLU0m3kBanEKVnTN8pAVemqMtlSLnH1HSsbVci7rvOQi pDckAw9mHyxQGIJ2tL55KWG5KCg1H5at0K5jEi3BsIy39Qpyq36s5ps9Zhw= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:49 2026 by rpki-client