$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pnzs1FIeDgee0OS53W555ZtyQTs.roa File: Pnzs1FIeDgee0OS53W555ZtyQTs.roa (raw, json) Hash identifier: ppz0166rI/rHE6Eh8vJBHFWDrwFGTcEXm9Q/YzjmaRY= Subject key identifier: 3E:7C:EC:D4:52:1E:0E:07:9E:D0:E4:B9:DD:6E:79:E5:9B:72:41:3B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1119 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pnzs1FIeDgee0OS53W555ZtyQTs.roa Signing time: Sun 01 Mar 2026 02:07:29 +0000 ROA not before: Sun 01 Mar 2026 02:07:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4377 (0x1119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:07:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3E7CECD4521E0E079ED0E4B9DD6E79E59B72413B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:6a:0d:32:c6:85:6c:5a:96:15:99:75:f6: be:27:a1:41:41:32:a7:58:21:29:0c:ee:1c:38:2b: 0b:5e:91:66:d7:1d:60:cc:ec:7d:6c:d2:c9:3f:16: 37:e5:c1:ae:33:87:ce:f7:5a:95:a8:36:08:83:8f: 41:ea:b7:34:85:95:33:c0:44:9f:31:39:6e:65:6e: c3:50:66:74:29:f3:c7:57:55:0c:94:68:b2:e5:d4: a1:87:f8:39:e8:9a:8e:cc:c2:98:74:b9:ce:4a:03: 58:0f:bf:3b:8f:f4:b6:f8:42:fc:0d:31:a3:fd:46: 53:94:7d:d3:3c:44:37:4a:0e:99:32:4a:88:65:71: af:59:e7:d9:86:1e:5d:4f:9b:95:b1:01:5c:ca:3b: fc:51:40:0d:26:1c:67:39:ee:b6:af:39:77:da:53: e3:45:2f:15:97:d0:61:6f:72:9d:a2:37:3d:7d:c9: 09:d8:44:81:53:a5:d4:cb:2f:04:a1:03:b9:ff:d3: 2b:c3:0c:76:62:ed:b3:ce:bc:00:de:c9:79:2d:f6: dd:08:ef:7c:50:b3:e3:f4:d5:d7:8d:9f:47:22:ab: 99:e6:35:1c:33:b2:b5:65:d4:18:69:20:b3:4c:d5: 37:9a:e2:63:d0:55:ee:2f:57:1c:74:03:89:19:ea: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7C:EC:D4:52:1E:0E:07:9E:D0:E4:B9:DD:6E:79:E5:9B:72:41:3B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pnzs1FIeDgee0OS53W555ZtyQTs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.88.0/22 Signature Algorithm: sha256WithRSAEncryption 32:ca:8b:49:02:43:44:cd:f2:a6:28:1a:a7:ec:d7:00:b9:ae: 1a:23:04:32:ee:9f:4c:18:16:2d:28:8f:d6:9d:d0:d5:3c:3c: 8a:b4:46:89:b3:34:21:20:0f:44:a0:c9:fc:8a:68:16:54:1b: 5d:bd:bc:8c:ab:08:e9:87:80:95:c0:a6:e0:d5:bd:92:e2:0f: b6:ef:9d:a8:12:cd:35:94:99:75:fd:d9:ee:38:53:de:9f:c8: 01:d9:93:7f:5a:ef:57:e1:40:a6:24:f0:42:d0:4a:91:97:2a: 65:d4:05:da:c0:6a:bd:7a:d7:c4:c1:72:f4:90:ba:b3:58:98: c2:9d:49:a7:50:1b:21:89:8f:c4:0b:6d:eb:65:9f:d0:12:62: e6:17:d3:4f:87:3f:19:2c:1a:86:f8:27:e3:48:3e:f2:a9:fc: 8a:1e:e8:72:4c:ca:34:9c:c0:7c:15:03:74:7a:63:0d:a6:bb: 7c:79:4b:27:37:ec:c5:e6:ec:05:f8:70:9e:61:c9:b9:c5:3e: 85:fe:94:ff:92:45:f5:59:12:40:3b:ff:cc:12:34:e1:67:c4: e6:41:30:64:5b:e6:48:b4:65:03:ce:b3:2b:54:4f:b2:39:f4: f9:97:80:7b:ee:e5:f5:f7:62:11:48:8c:a9:4c:29:e1:71:cb: 9b:ac:98:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICERkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjA3MjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNFN0NFQ0Q0NTIxRTBF MDc5RUQwRTRCOURENkU3OUU1OUI3MjQxM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9HWoNMsaFbFqWFZl19r4noUFBMqdYISkM7hw4KwtekWbXHWDM 7H1s0sk/Fjflwa4zh873WpWoNgiDj0HqtzSFlTPARJ8xOW5lbsNQZnQp88dXVQyU aLLl1KGH+Dnomo7Mwph0uc5KA1gPvzuP9Lb4QvwNMaP9RlOUfdM8RDdKDpkySohl ca9Z59mGHl1Pm5WxAVzKO/xRQA0mHGc57ravOXfaU+NFLxWX0GFvcp2iNz19yQnY RIFTpdTLLwShA7n/0yvDDHZi7bPOvADeyXkt9t0I73xQs+P01deNn0ciq5nmNRwz srVl1BhpILNM1Tea4mPQVe4vVxx0A4kZ6pShAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPnzs1FIeDgee0OS53W555ZtyQTswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BuenMxRkllRGdlZTBPUzUzVzU1NVp0eVFUcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALTDlgwDQYJKoZIhvcNAQELBQADggEBADLKi0kCQ0TN8qYoGqfs1wC5rhoj BDLun0wYFi0oj9ad0NU8PIq0RomzNCEgD0SgyfyKaBZUG129vIyrCOmHgJXApuDV vZLiD7bvnagSzTWUmXX92e44U96fyAHZk39a71fhQKYk8ELQSpGXKmXUBdrAar16 18TBcvSQurNYmMKdSadQGyGJj8QLbetln9ASYuYX00+HPxksGob4J+NIPvKp/Ioe 6HJMyjScwHwVA3R6Yw2mu3x5Syc37MXm7AX4cJ5hybnFPoX+lP+SRfVZEkA7/8wS NOFnxOZBMGRb5ki0ZQPOsytUT7I59PmXgHvu5fX3YhFIjKlMKeFxy5usmLg= -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:05 2026 by rpki-client