$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KshimIiOzBMSp7KAir5F9BbRms0.roa File: KshimIiOzBMSp7KAir5F9BbRms0.roa (raw, json) Hash identifier: D5QwM2ZLlyIBoH2z9tsvaRxt/n9qWPa3+uY4katNj8k= Subject key identifier: 2A:C8:62:98:88:8E:CC:13:12:A7:B2:80:8A:BE:45:F4:16:D1:9A:CD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11A0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KshimIiOzBMSp7KAir5F9BbRms0.roa Signing time: Sun 01 Mar 2026 02:31:18 +0000 ROA not before: Sun 01 Mar 2026 02:31:18 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4512 (0x11a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:31:18 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=2AC86298888ECC1312A7B2808ABE45F416D19ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:21:ed:8a:27:24:66:8e:d4:08:d9:b8:91: 2a:7e:7b:ba:cb:4a:e6:40:f5:c0:82:65:36:3d:2e: 44:07:9c:f4:9b:73:31:ab:42:c2:6a:26:c5:8c:2b: 3a:02:dd:1d:77:2c:66:07:78:1c:e2:cb:49:f3:af: 42:3a:18:3f:ec:68:d1:dd:a1:e4:64:77:2d:a1:c6: 00:5c:3a:58:6a:db:5b:ca:e3:4c:67:08:99:03:5f: 6e:74:ab:06:86:8f:cb:4e:7d:38:1f:7a:76:c8:38: 5e:0d:6d:d3:15:5e:33:05:5e:6c:69:ae:f0:31:e4: 16:f2:60:29:c4:91:0c:3d:5d:e3:6d:3b:bc:32:bd: ae:e6:7b:f7:f2:ed:1a:f8:7b:a9:f9:37:20:c3:a1: 24:a6:1d:3f:15:6e:80:c7:40:14:08:3c:69:02:65: 6a:e8:02:d8:4b:de:22:28:66:4d:b6:70:73:e1:44: 09:93:43:09:83:05:bd:de:29:df:8d:84:e0:41:8f: 6f:ee:be:2a:7a:34:f2:62:14:da:54:d6:80:3e:40: df:f1:2a:13:58:89:40:10:ec:a1:6c:3f:8c:25:ca: d5:c9:20:90:de:7f:49:d3:dd:32:d4:c1:a4:5c:58: 33:92:58:27:6e:8b:31:4f:42:d3:9c:0a:54:fc:09: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C8:62:98:88:8E:CC:13:12:A7:B2:80:8A:BE:45:F4:16:D1:9A:CD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KshimIiOzBMSp7KAir5F9BbRms0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.22.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:f3:77:94:9f:19:9b:9f:88:f9:4f:34:17:c9:ea:1b:39:c3: 24:52:2b:bf:59:22:02:f6:7e:dc:f1:47:87:46:10:f2:1d:a2: e2:82:7a:81:fa:a2:47:44:22:6e:b0:c9:97:39:57:66:46:cc: 91:c8:fe:d3:d5:64:a0:ad:2e:be:46:89:52:59:5e:ba:1f:c9: eb:31:38:6e:95:69:c1:6b:be:6d:22:e2:48:53:aa:04:bd:9a: 99:e8:c8:de:74:62:0c:77:fc:37:6f:41:17:ab:3d:c5:bf:06: bb:60:f4:52:72:15:cc:bf:d0:00:83:7c:56:ad:62:52:3c:6b: 06:04:22:15:85:d3:6f:8f:de:93:0a:a4:ff:ee:78:25:42:f2: 04:ca:fb:16:9b:d4:41:5e:e0:65:a4:19:43:f8:18:80:5a:46: ee:53:b7:88:7d:c3:67:b7:ce:68:d5:b9:bd:d3:dc:bf:92:79: e5:f0:42:94:7e:03:56:a3:bc:3e:e0:26:f0:79:3a:a8:9b:77: 3d:6a:1f:85:44:4a:52:c9:98:67:c5:a7:33:a3:b5:89:4b:8f: ee:81:97:36:88:49:9d:a0:33:61:43:ce:7e:e4:f8:5b:f0:1b: 48:fd:a6:3e:b8:e3:a3:bf:57:4d:cb:50:36:6e:57:bf:c6:51: 02:49:d3:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjMxMThaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBQzg2Mjk4ODg4RUND MTMxMkE3QjI4MDhBQkU0NUY0MTZEMTlBQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtPyHtiickZo7UCNm4kSp+e7rLSuZA9cCCZTY9LkQHnPSbczGr QsJqJsWMKzoC3R13LGYHeBziy0nzr0I6GD/saNHdoeRkdy2hxgBcOlhq21vK40xn CJkDX250qwaGj8tOfTgfenbIOF4NbdMVXjMFXmxprvAx5BbyYCnEkQw9XeNtO7wy va7me/fy7Rr4e6n5NyDDoSSmHT8VboDHQBQIPGkCZWroAthL3iIoZk22cHPhRAmT QwmDBb3eKd+NhOBBj2/uvip6NPJiFNpU1oA+QN/xKhNYiUAQ7KFsP4wlytXJIJDe f0nT3TLUwaRcWDOSWCduizFPQtOcClT8CZelAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKshimIiOzBMSp7KAir5F9BbRms0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tzaGltSWlPekJNU3A3S0FpcjVGOUJiUm1zMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTxYwDQYJKoZIhvcNAQELBQADggEBAFzzd5SfGZufiPlPNBfJ6hs5wyRS K79ZIgL2ftzxR4dGEPIdouKCeoH6okdEIm6wyZc5V2ZGzJHI/tPVZKCtLr5GiVJZ XrofyesxOG6VacFrvm0i4khTqgS9mpnoyN50Ygx3/DdvQRerPcW/Brtg9FJyFcy/ 0ACDfFatYlI8awYEIhWF02+P3pMKpP/ueCVC8gTK+xab1EFe4GWkGUP4GIBaRu5T t4h9w2e3zmjVub3T3L+SeeXwQpR+A1ajvD7gJvB5Oqibdz1qH4VESlLJmGfFpzOj tYlLj+6BlzaISZ2gM2FDzn7k+FvwG0j9pj6446O/V03LUDZuV7/GUQJJ094= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:49 2026 by rpki-client