$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pd8gpsBd2h38N515e40l5zClhfQ.roa File: Pd8gpsBd2h38N515e40l5zClhfQ.roa (raw, json) Hash identifier: g4E++fRq/+EsYaw6BRAmxEQcpFFpGgkzx9uwHOp1dUU= Subject key identifier: 3D:DF:20:A6:C0:5D:DA:1D:FC:37:9D:79:7B:8D:25:E7:30:A5:85:F4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1103 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pd8gpsBd2h38N515e40l5zClhfQ.roa Signing time: Sun 01 Mar 2026 02:02:56 +0000 ROA not before: Sun 01 Mar 2026 02:02:56 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4355 (0x1103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:02:56 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3DDF20A6C05DDA1DFC379D797B8D25E730A585F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:25:fe:d6:06:83:a9:4e:76:93:c6:0c:93: 2f:2b:3d:bf:82:fa:e2:eb:6b:81:2b:08:1d:79:39: 77:f3:35:96:d8:54:05:72:b3:5f:94:47:8a:2c:27: 58:ad:ff:20:fe:7e:36:be:bf:57:21:5d:78:4d:eb: 9e:6d:85:3f:d3:ee:6c:d6:4e:21:ad:fa:36:51:0b: a1:4a:95:21:0e:d9:bf:dc:bb:22:7f:66:d6:dd:a1: 39:6a:a0:45:fe:83:55:40:cf:9b:b4:93:fb:96:12: 95:29:71:1d:45:fe:12:5b:e2:b9:4c:13:4d:96:28: 7c:58:d7:bd:a0:98:ac:0f:26:32:a3:ab:d4:2f:8b: a0:45:9a:26:75:a9:62:7c:44:9a:f8:48:4c:46:32: 07:02:6b:f9:d0:02:f6:80:22:79:80:5f:c5:08:9a: db:e7:6a:ed:cf:8c:20:73:cb:61:39:c5:ad:1a:0e: 2f:c8:ac:21:74:e0:bd:67:5b:e2:17:ba:2e:cd:cd: 9f:a5:42:c8:64:9f:8f:ab:1d:54:c9:35:ce:40:34: 7a:64:f0:f5:ab:a9:39:64:d6:71:3d:36:3a:93:8c: 02:6a:5e:27:df:36:2f:6b:2c:fd:20:13:0b:ad:0f: a4:1d:c0:45:84:ca:28:19:5f:44:fe:d2:ce:b4:5a: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:20:A6:C0:5D:DA:1D:FC:37:9D:79:7B:8D:25:E7:30:A5:85:F4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pd8gpsBd2h38N515e40l5zClhfQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.72.0/23 Signature Algorithm: sha256WithRSAEncryption cd:5d:c3:60:10:45:bd:23:83:72:8f:35:d6:57:b5:56:d1:30: 76:f5:c7:59:f1:e7:43:b2:da:35:8f:1c:78:75:ae:af:c4:9c: a9:d1:ed:4b:31:01:ac:27:33:87:45:8b:58:b9:b4:1a:8e:07: f6:a9:8f:5c:36:d8:be:dc:67:ef:a6:e6:ad:37:4f:b3:0a:65: 4d:2b:c8:d9:0e:93:a8:9f:37:82:83:f7:9a:39:3a:cb:8e:9f: 55:45:f3:6d:ae:88:e4:a0:00:70:60:63:e8:e4:57:d3:a8:f0: 82:b5:72:0e:39:26:1e:09:36:99:d4:b0:18:cf:d4:80:dd:4a: 41:d5:d1:51:55:4f:6d:ed:7e:c7:cd:9d:38:b8:74:38:6b:d7: c8:c6:c5:2d:f6:48:d3:01:9b:ae:15:2b:52:6c:79:76:e8:4a: e0:ab:cf:68:3f:91:e8:ae:9f:1c:f9:db:fc:3c:87:40:2c:3d: 51:67:cf:d6:98:e6:05:f2:ad:01:54:ee:d4:a3:82:fd:18:44: ee:8c:b3:ee:8e:e5:ea:60:01:4c:aa:de:c7:5a:78:f7:61:28: 77:fc:50:49:d7:5d:82:ce:d3:27:39:9a:59:53:1a:f6:b4:7d: 6e:8e:c6:97:98:5c:23:d4:70:24:1f:9d:13:0a:db:e2:0a:f8: f1:72:a0:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjAyNTZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNEREYyMEE2QzA1RERB MURGQzM3OUQ3OTdCOEQyNUU3MzBBNTg1RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEWiX+1gaDqU52k8YMky8rPb+C+uLra4ErCB15OXfzNZbYVAVy s1+UR4osJ1it/yD+fja+v1chXXhN655thT/T7mzWTiGt+jZRC6FKlSEO2b/cuyJ/ ZtbdoTlqoEX+g1VAz5u0k/uWEpUpcR1F/hJb4rlME02WKHxY172gmKwPJjKjq9Qv i6BFmiZ1qWJ8RJr4SExGMgcCa/nQAvaAInmAX8UImtvnau3PjCBzy2E5xa0aDi/I rCF04L1nW+IXui7NzZ+lQshkn4+rHVTJNc5ANHpk8PWrqTlk1nE9NjqTjAJqXiff Ni9rLP0gEwutD6QdwEWEyigZX0T+0s60WmcTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPd8gpsBd2h38N515e40l5zClhfQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BkOGdwc0JkMmgzOE41MTVlNDBsNXpDbGhmUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSUgwDQYJKoZIhvcNAQELBQADggEBAM1dw2AQRb0jg3KPNdZXtVbRMHb1 x1nx50Oy2jWPHHh1rq/EnKnR7UsxAawnM4dFi1i5tBqOB/apj1w22L7cZ++m5q03 T7MKZU0ryNkOk6ifN4KD95o5OsuOn1VF822uiOSgAHBgY+jkV9Oo8IK1cg45Jh4J NpnUsBjP1IDdSkHV0VFVT23tfsfNnTi4dDhr18jGxS32SNMBm64VK1JseXboSuCr z2g/keiunxz52/w8h0AsPVFnz9aY5gXyrQFU7tSjgv0YRO6Ms+6O5epgAUyq3sda ePdhKHf8UEnXXYLO0yc5mllTGva0fW6OxpeYXCPUcCQfnRMK2+IK+PFyoPI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:10:41 2026 by rpki-client