$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OqxbouhA0x6kb4e89ckVgGVuodo.roa File: OqxbouhA0x6kb4e89ckVgGVuodo.roa (raw, json) Hash identifier: wfefqSR7R1iLpzdK5gC+LM94OsURNur9NKD4z8hS5MQ= Subject key identifier: 3A:AC:5B:A2:E8:40:D3:1E:A4:6F:87:BC:F5:C9:15:80:65:6E:A1:DA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12BE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OqxbouhA0x6kb4e89ckVgGVuodo.roa Signing time: Sun 01 Mar 2026 03:12:40 +0000 ROA not before: Sun 01 Mar 2026 03:12:40 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4798 (0x12be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:40 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3AAC5BA2E840D31EA46F87BCF5C91580656EA1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:bb:66:0c:25:4e:30:16:3e:46:b0:f1:ac: 95:eb:45:c8:62:90:03:ed:e5:1f:d9:5c:66:e5:7c: 24:8c:da:f9:b4:bb:3d:44:f2:2b:25:04:1e:89:45: c4:16:bf:a4:f0:ec:5c:da:5f:30:f1:f0:d4:18:c7: 81:e2:f3:f9:dd:66:18:fc:5f:b8:64:ca:7f:c9:39: 14:42:3f:d2:b7:c4:66:27:ac:08:89:93:9b:a9:4b: 01:2e:f5:12:4c:e4:86:5a:6e:a1:c6:44:17:b0:c5: 8c:d5:d6:51:0a:86:f4:94:34:a0:ee:3e:75:43:51: f7:72:ec:e7:d2:e2:50:2b:f4:e5:04:c6:46:a2:85: 3e:e1:00:b4:83:57:2e:2a:8f:db:e2:04:9f:41:07: f7:77:59:ad:0c:09:25:4c:1c:dc:d9:02:e0:76:a4: be:a1:dc:ec:ab:e6:6f:e7:81:5d:75:5e:57:58:1c: ef:2e:ce:64:7d:e7:ac:89:27:82:fd:df:f5:dc:57: bd:29:d2:ce:56:c6:03:f7:7f:08:f1:70:ba:75:f0: d6:3e:ec:c0:ba:bd:00:73:3e:13:74:1a:ce:24:d3: 0e:aa:1e:61:fb:9a:08:55:3d:4b:9a:4d:53:e0:9b: cc:3a:b8:fe:3b:dc:ed:7e:6e:fa:27:a1:54:03:54: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:5B:A2:E8:40:D3:1E:A4:6F:87:BC:F5:C9:15:80:65:6E:A1:DA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OqxbouhA0x6kb4e89ckVgGVuodo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.38.0/23 Signature Algorithm: sha256WithRSAEncryption cc:25:15:47:74:70:35:74:89:c5:c7:91:c7:51:ff:f8:7f:75: ca:f7:e6:f4:ad:1e:2d:7d:e7:7a:50:5d:0b:d3:c1:74:42:b6: d1:49:8a:db:79:19:15:e8:16:9c:3d:b7:ed:07:74:c6:c0:83: 4c:44:c6:c6:26:1a:09:f0:e9:c5:e2:29:ed:90:79:f6:fa:2f: 98:fc:c1:f0:c5:73:0e:f3:63:d3:64:7f:dd:25:2f:19:7b:d2: 7a:c2:d9:87:2f:56:a7:21:39:4f:16:fb:82:47:6f:01:c9:c3: 33:81:40:fd:34:2a:6b:f7:98:ef:3a:53:e9:a0:33:18:16:61: 72:6d:53:46:77:c8:ac:2a:a3:75:42:a6:e1:15:ef:16:dd:be: 61:a4:88:16:9f:44:20:0f:31:d7:4a:af:30:fd:1c:3f:88:8f: 3c:56:52:a1:d1:73:15:60:18:36:bf:6f:21:03:96:d9:b9:57: d8:c4:01:3b:c1:e8:76:8b:ac:b4:8f:bf:c2:cd:13:68:db:c6: a7:fa:74:d3:a5:c1:8b:a9:56:69:76:cb:e4:01:f5:0a:45:f8: b5:5d:1c:63:2c:bc:ae:23:46:0a:80:26:d9:4b:f3:5f:50:4f: d9:41:15:53:c8:25:c5:b2:f5:24:ca:e0:1f:13:1b:d3:17:b7: cb:52:6d:7e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyNDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBQUM1QkEyRTg0MEQz MUVBNDZGODdCQ0Y1QzkxNTgwNjU2RUExREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCplrtmDCVOMBY+RrDxrJXrRchikAPt5R/ZXGblfCSM2vm0uz1E 8islBB6JRcQWv6Tw7FzaXzDx8NQYx4Hi8/ndZhj8X7hkyn/JORRCP9K3xGYnrAiJ k5upSwEu9RJM5IZabqHGRBewxYzV1lEKhvSUNKDuPnVDUfdy7OfS4lAr9OUExkai hT7hALSDVy4qj9viBJ9BB/d3Wa0MCSVMHNzZAuB2pL6h3Oyr5m/ngV11XldYHO8u zmR956yJJ4L93/XcV70p0s5WxgP3fwjxcLp18NY+7MC6vQBzPhN0Gs4k0w6qHmH7 mghVPUuaTVPgm8w6uP473O1+bvonoVQDVChdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOqxbouhA0x6kb4e89ckVgGVuodowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09xeGJvdWhBMHg2a2I0ZTg5Y2tWZ0dWdW9kby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTyYwDQYJKoZIhvcNAQELBQADggEBAMwlFUd0cDV0icXHkcdR//h/dcr3 5vStHi1953pQXQvTwXRCttFJitt5GRXoFpw9t+0HdMbAg0xExsYmGgnw6cXiKe2Q efb6L5j8wfDFcw7zY9Nkf90lLxl70nrC2YcvVqchOU8W+4JHbwHJwzOBQP00Kmv3 mO86U+mgMxgWYXJtU0Z3yKwqo3VCpuEV7xbdvmGkiBafRCAPMddKrzD9HD+IjzxW UqHRcxVgGDa/byEDltm5V9jEATvB6HaLrLSPv8LNE2jbxqf6dNOlwYupVml2y+QB 9QpF+LVdHGMsvK4jRgqAJtlL819QT9lBFVPIJcWy9STK4B8TG9MXt8tSbX4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:02 2026 by rpki-client